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", 0x1000}, {&(0x7f0000000a40)="6c0804e060eaec722b002a67fb4a597fe6550efa9628a16ec64c23eb2cb73c4c213fdb9416f1d68c463604a4b4a083d06929a7e3fa98fe0c86cccc25ecbe0052ad7a62e5bdeeada40e429f81eb371caffe9ed8ff3a22395f4a7c4969d78900739cf3cbcaf3a50b436e96c519f73b0650501f74e45c9949982de392b8310f2b650ddf89375723c16c", 0x88}, {&(0x7f0000000380)="c998eb03645617831ec9d0e48eee130c5e8c9a5fee2a73424a99b859eb373ff01a23efe9c77532b5685e5d25", 0x2c}, {&(0x7f00000003c0)="f03b0964bc355e0d89bc82c3922cbb429d96cb8a904b123b005f", 0x1a}, {&(0x7f0000000b00)="29a0afaf9eafae916ba1a9df67955ec14024ca46922646b1cd67975474c90302a550f55fa0138ce778ec707681ac78c92bd086bb64873426", 0x38}, {&(0x7f0000000b40)="b07ab3df37b0e7500b", 0x9}, {&(0x7f0000000b80)="74cd47cbf25d76d3889703f018c601ff5d874cdde7cf398d1f71a39d3ebe26fb68b59aea8d17d05b42607e10df3ff499dcd40b52a1820454836b3f765d3474ca9dee4873bc07fb2f1d61f6d2ecbedeaff19495321b39938a14c846dcceb7abeeac5fb0dd5ecc07f72714f3d3454b3fcb5e8a27b6e8903ff24d1eeacd642ff743580f770955e47839619e2baacb9d27956394ad30feec964636c34306049f219db79e1df4ff26ba3510a4165e53a9ec5b46e95c2e656e3904f491542e3233280fbea30f2ca68555022bcfc4ac39b4ae59685be81091f5a524cc08124382e3f0fff44995", 0xe3}, {&(0x7f0000000c80)="a0abdf64ccb1597ba55e0f60fd8d819deba75eb575a6115a599c53969c89f3e298c181fc711a2e13bfbc6c2737f5252095f3ba8cae4d5a5759194a8b4dbd3ad12a5a84c1612477964e21337b8f06c9a32308ddfdaab5fb95a3182249dc0f33026df0c7ae6b69de597ece498444566d53309d9ee4ae1abe19751afb13d470c6322a69175afe4a8182572ebf168958c158640504aee0bff93109401e0c048a9ba67fed965b61894e4f6613f256ae4f088f06b198ab1a7513a2262808008879faf191a289a459081ffbda28ee08be92d85bc003", 0xd2}, {&(0x7f0000000d80)="a91785b918c154c8e666bc92fa70ebb081f7ca1e2c7314ba924a6f553a911ae2d10bc64f0e4792cf2b5b2aaefe0f0447035da6d2d9c7697c4b65dc2fc5faa17fbdec63e062936e6e874a03607dd41af8133cdde5eae866d29ce93e3dd0ea21ac21b8ddc150270dd1175dbb7e5633df57f5df809e0be7b122a23203d42c00d4b7c0c58b23359920", 0x87}], 0x9)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={&(0x7f0000000280)="ba3f1bb86dea873b7a66b0534bf58428b4430793225b35bdf23f8149e0ea94fbb78e802dfc896c09e2b9f4d1556c7fbaf67571443bac940a86ad64a2462c14b8c0c87653acb53cf9a11c41be7763db1292c170753ef937271772cdcb9469a5e485408202540902b679600b216ae030541ae806019e503b67952ad58b9c6dd4acd90494a2662cfeb322e09d18e74491e16c8d4aaf2884fa0955e43cba", &(0x7f0000000180)=""/25, &(0x7f0000000880)="f7211bed1e9355f529020d2d10b65b77bbf5820c927cfc1956104f5673afae0ea1f70877337938aaafa118cd7a54edcc5ef7f6d1885112488a09345d05fd0cd31e8d18b7ad215db38a2fd9c4b95adeca6d27b5cdf6a594e1753f313fa1a430b29be1b6f4ab2ad939c7f3b05b6e954915eae8a93692c9eaa4e75890102d87a5f6018a0e0cd5a7dc700c43d00a2801a787141902927a1b0fd3d2f7f7db61c72bd84e61f8f47d85f25c721f921f", &(0x7f0000000940)="baafda3ce945f61c7400f060504d9c55a2356406662a86a552882a4943d957c763a178c63fe354a8c915b48e5f9720a85d5d5ab4cee5fe6ffd081054cb83c23a2cfc23f2785d12007b44b2da1240504d314cc784744b3b582190619a344c849fac329b20064c51fff5f539a92cffb62b3ba65fbc32efba407a244c5c485fe8a07f11a7f58449ac7817c52026b2fe709d6718d5392fc7906edefaa3d08269af0b43e41cd63d3bf4768202b99a9dd805d193949edd2ea38c2d6ea62423242851104f4896832fb59f1a3859af8a47ab92f1a5cf98a5ca6182b927c86660f3e640d5b67f1261468fd17be3b6f8d1f1ad219b", 0x3, r4, 0x4}, 0x38)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, 0x3, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={0xffffffffffffffff, 0x0, &(0x7f00000021c0)=""/4089}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102400}, 0x20)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001040)={&(0x7f0000001000)='./file0\x00'}, 0x10)

00:23:20 executing program 1:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0)

[  308.666389][T22924] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
00:23:20 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0)

00:23:20 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0)

[  308.740630][T22933] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
00:23:20 executing program 1:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0)

00:23:20 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0)

[  308.803730][T22941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
00:23:21 executing program 4:
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xaa495, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9c64}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0xaad57c81b7a27570, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53)

00:23:21 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48)

00:23:21 executing program 3:
syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB='lazytime'])

00:23:21 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0)

00:23:21 executing program 1:
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x0, 0x0)
ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x3)

00:23:21 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0)

00:23:21 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48)

00:23:21 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0)

00:23:21 executing program 1:
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xaa495, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9c64}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0xaad57c81b7a27570, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53)

00:23:21 executing program 3:
unshare(0x20400)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
lseek(r0, 0xfffffffffffffffd, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
sendfile(r0, r1, 0x0, 0x0)

00:23:21 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_getaddr={0xbc, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14}, @IFA_FLAGS={0x8}, @IFA_CACHEINFO={0x14}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0xffffff58, 0x2, @local}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_ADDRESS={0x14, 0x1, @private1}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8}]}, 0xbc}}, 0x0)

00:23:21 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48)

00:23:22 executing program 4:
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xaa495, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9c64}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0xaad57c81b7a27570, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53)

00:23:22 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_getaddr={0xbc, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14}, @IFA_FLAGS={0x8}, @IFA_CACHEINFO={0x14}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0xffffff58, 0x2, @local}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_ADDRESS={0x14, 0x1, @private1}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8}]}, 0xbc}}, 0x0)

00:23:22 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48)

00:23:22 executing program 3:
unshare(0x20400)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
lseek(r0, 0xfffffffffffffffd, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
sendfile(r0, r1, 0x0, 0x0)

00:23:22 executing program 0:
unshare(0x20400)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
lseek(r0, 0xfffffffffffffffd, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
sendfile(r0, r1, 0x0, 0x0)

00:23:22 executing program 2:
syz_emit_ethernet(0x52, &(0x7f0000000000)={@broadcast, @random="fe581bff7c8e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4af08", 0x1c, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}}}, 0x0)

00:23:22 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_getaddr={0xbc, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14}, @IFA_FLAGS={0x8}, @IFA_CACHEINFO={0x14}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0xffffff58, 0x2, @local}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_ADDRESS={0x14, 0x1, @private1}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8}]}, 0xbc}}, 0x0)

00:23:22 executing program 3:
unshare(0x20400)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
lseek(r0, 0xfffffffffffffffd, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
sendfile(r0, r1, 0x0, 0x0)

00:23:22 executing program 1:
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xaa495, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9c64}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0xaad57c81b7a27570, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53)

00:23:22 executing program 0:
unshare(0x20400)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
lseek(r0, 0xfffffffffffffffd, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
sendfile(r0, r1, 0x0, 0x0)

00:23:22 executing program 2:
syz_emit_ethernet(0x52, &(0x7f0000000000)={@broadcast, @random="fe581bff7c8e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4af08", 0x1c, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}}}, 0x0)

00:23:22 executing program 0:
unshare(0x20400)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
lseek(r0, 0xfffffffffffffffd, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
sendfile(r0, r1, 0x0, 0x0)

[  310.541971][ T3245] ieee802154 phy0 wpan0: encryption failed: -22
[  310.548313][ T3245] ieee802154 phy1 wpan1: encryption failed: -22
00:23:23 executing program 4:
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xaa495, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9c64}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0xaad57c81b7a27570, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53)

00:23:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_getaddr={0xbc, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14}, @IFA_FLAGS={0x8}, @IFA_CACHEINFO={0x14}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0xffffff58, 0x2, @local}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_ADDRESS={0x14, 0x1, @private1}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8}]}, 0xbc}}, 0x0)

00:23:23 executing program 0:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018", 0x5d}], 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69)
connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f)
getpeername(r0, 0x0, &(0x7f0000000000))

00:23:23 executing program 3:
unshare(0x20400)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
lseek(r0, 0xfffffffffffffffd, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
sendfile(r0, r1, 0x0, 0x0)

00:23:23 executing program 2:
syz_emit_ethernet(0x52, &(0x7f0000000000)={@broadcast, @random="fe581bff7c8e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4af08", 0x1c, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}}}, 0x0)

00:23:23 executing program 0:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018", 0x5d}], 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69)
connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f)
getpeername(r0, 0x0, &(0x7f0000000000))

00:23:23 executing program 2:
syz_emit_ethernet(0x52, &(0x7f0000000000)={@broadcast, @random="fe581bff7c8e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4af08", 0x1c, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}}}, 0x0)

00:23:23 executing program 3:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018", 0x5d}], 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69)
connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f)
getpeername(r0, 0x0, &(0x7f0000000000))

[  311.286013][T23066] __nla_validate_parse: 9 callbacks suppressed
[  311.286027][T23066] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.5'.
00:23:23 executing program 1:
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xaa495, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9c64}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0xaad57c81b7a27570, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53)

00:23:23 executing program 5:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = fcntl$dupfd(r0, 0x0, r1)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0)=0x5f1157b5, 0x4)
dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)

00:23:23 executing program 0:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018", 0x5d}], 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69)
connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f)
getpeername(r0, 0x0, &(0x7f0000000000))

00:23:23 executing program 3:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018", 0x5d}], 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69)
connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f)
getpeername(r0, 0x0, &(0x7f0000000000))

00:23:24 executing program 3:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018", 0x5d}], 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69)
connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f)
getpeername(r0, 0x0, &(0x7f0000000000))

00:23:24 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500)='NLBL_MGMT\x00', r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0xf0, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_MGMT_A_DOMAIN={0xd9, 0x1, '&\x00\x00\xe7\xfb\xf1\xd1c\xb5\xc6j\xae\x1f\x83\xae\x15)\x8a\xbeQQ94[\x9e\xa4\xcb\xc4\xd7\x1f\xc4\xc2\xf7\xd4$Lj~\x92r\xbd,\b\xbf\xb5\xa7l\xe5_\xbb\xec$\x8cIz\xab\xd3\x91\x8b\xdfk\xdc\xf0\xb7%\x00\xf1\x9c\xfa\xc6\xa9\x01\rA\xf7U\xd2\xd3\xf66\x98\x81I\x16\xa6\xcepc\x9a\x90\xc2/\xb8\xd3\xd9\x9e\x1e\xa9\x90\x12\"\xe5\xed\x13\xddf\xbfkxe\x03\xd2\xaf\xdf\x94\x91\x11\xa5\xd0^\x96\x8e,\xb2?yR1\v\xc9Z\xd1+\x1f\xff\xe8\xae\x90%\xa5/\xc8M9}Lp\xc7\xa0Y\xc5\x9e?\x99\xb1\xb5\xe0l\xb5*\xfd\vq\x8b\x1a-r\x1a\xda\xcc]\xf7\x1a0\xa0F\nqI\x98]\xf8tzqD\xfb\x11h\xf3\xbe\x9e\x87\x9eV\x15\xb8\xfdc\xbf`b\xcbp\xe9\xb6\xeb\x86@\xbb\x84P\xa0'}]}, 0xf0}}, 0x0)

00:23:24 executing program 5:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = fcntl$dupfd(r0, 0x0, r1)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0)=0x5f1157b5, 0x4)
dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)

00:23:24 executing program 0:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018", 0x5d}], 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69)
connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f)
getpeername(r0, 0x0, &(0x7f0000000000))

00:23:24 executing program 4:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
sync_file_range(r0, 0x0, 0x0, 0x0)

00:23:24 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500)='NLBL_MGMT\x00', r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0xf0, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_MGMT_A_DOMAIN={0xd9, 0x1, '&\x00\x00\xe7\xfb\xf1\xd1c\xb5\xc6j\xae\x1f\x83\xae\x15)\x8a\xbeQQ94[\x9e\xa4\xcb\xc4\xd7\x1f\xc4\xc2\xf7\xd4$Lj~\x92r\xbd,\b\xbf\xb5\xa7l\xe5_\xbb\xec$\x8cIz\xab\xd3\x91\x8b\xdfk\xdc\xf0\xb7%\x00\xf1\x9c\xfa\xc6\xa9\x01\rA\xf7U\xd2\xd3\xf66\x98\x81I\x16\xa6\xcepc\x9a\x90\xc2/\xb8\xd3\xd9\x9e\x1e\xa9\x90\x12\"\xe5\xed\x13\xddf\xbfkxe\x03\xd2\xaf\xdf\x94\x91\x11\xa5\xd0^\x96\x8e,\xb2?yR1\v\xc9Z\xd1+\x1f\xff\xe8\xae\x90%\xa5/\xc8M9}Lp\xc7\xa0Y\xc5\x9e?\x99\xb1\xb5\xe0l\xb5*\xfd\vq\x8b\x1a-r\x1a\xda\xcc]\xf7\x1a0\xa0F\nqI\x98]\xf8tzqD\xfb\x11h\xf3\xbe\x9e\x87\x9eV\x15\xb8\xfdc\xbf`b\xcbp\xe9\xb6\xeb\x86@\xbb\x84P\xa0'}]}, 0xf0}}, 0x0)

00:23:24 executing program 0:
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000340)="b2c77553ebbf215c065fb882248906d83bf31e7269c406872cda6e15c7b3b60b4c580a523e15056449ed60ade3fd14a5bc895d7ac3ac707cf6758d98796fe1e0550dc6f60cd5673378319a051c74549bb4d1d356041f2f4d7cbb2f8d9e8819d27d42a367fd66b0a74c54f54800a2d31a2c8549220f3755a84ccb0b72f9c96afbd196f623b4ee2623e5a2f2428c5103ef477b0624e3afad3107ba8c5d649c6170e5c8807915ca277c0a99f0acfad235d7a9b5e86a8e0654ac02fad857df8b5ddf9d2f1c0fadeb28e0")
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x464, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000006900)=""/92, 0x5c}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00')
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000300)='wg1\x00', 0x10)
preadv(r0, &(0x7f00000017c0), 0x2cb, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080))

00:23:24 executing program 4:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
sync_file_range(r0, 0x0, 0x0, 0x0)

00:23:24 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0800000706ffff162900fafff604100000a2260c00010006"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x208002, 0x0)

00:23:24 executing program 5:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = fcntl$dupfd(r0, 0x0, r1)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0)=0x5f1157b5, 0x4)
dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)

00:23:24 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4623, 0x0, @ipv4={[], [], @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dontfrag={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @remote}, r3}}}], 0x40}}], 0x1, 0x0)

00:23:24 executing program 4:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
sync_file_range(r0, 0x0, 0x0, 0x0)

00:23:24 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500)='NLBL_MGMT\x00', r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0xf0, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_MGMT_A_DOMAIN={0xd9, 0x1, '&\x00\x00\xe7\xfb\xf1\xd1c\xb5\xc6j\xae\x1f\x83\xae\x15)\x8a\xbeQQ94[\x9e\xa4\xcb\xc4\xd7\x1f\xc4\xc2\xf7\xd4$Lj~\x92r\xbd,\b\xbf\xb5\xa7l\xe5_\xbb\xec$\x8cIz\xab\xd3\x91\x8b\xdfk\xdc\xf0\xb7%\x00\xf1\x9c\xfa\xc6\xa9\x01\rA\xf7U\xd2\xd3\xf66\x98\x81I\x16\xa6\xcepc\x9a\x90\xc2/\xb8\xd3\xd9\x9e\x1e\xa9\x90\x12\"\xe5\xed\x13\xddf\xbfkxe\x03\xd2\xaf\xdf\x94\x91\x11\xa5\xd0^\x96\x8e,\xb2?yR1\v\xc9Z\xd1+\x1f\xff\xe8\xae\x90%\xa5/\xc8M9}Lp\xc7\xa0Y\xc5\x9e?\x99\xb1\xb5\xe0l\xb5*\xfd\vq\x8b\x1a-r\x1a\xda\xcc]\xf7\x1a0\xa0F\nqI\x98]\xf8tzqD\xfb\x11h\xf3\xbe\x9e\x87\x9eV\x15\xb8\xfdc\xbf`b\xcbp\xe9\xb6\xeb\x86@\xbb\x84P\xa0'}]}, 0xf0}}, 0x0)

00:23:24 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x20002)
readv(r0, &(0x7f0000001180)=[{&(0x7f00008ec000)=""/219, 0xdb}], 0x1)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/133, 0x85}, {&(0x7f0000000100)=""/180, 0xb4}, {&(0x7f00000001c0)=""/147, 0x93}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/249, 0xf9}], 0x5)
write$evdev(r0, &(0x7f000004d000)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x79)

00:23:24 executing program 5:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = fcntl$dupfd(r0, 0x0, r1)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0)=0x5f1157b5, 0x4)
dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)

00:23:24 executing program 4:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
sync_file_range(r0, 0x0, 0x0, 0x0)

00:23:24 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4623, 0x0, @ipv4={[], [], @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dontfrag={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @remote}, r3}}}], 0x40}}], 0x1, 0x0)

00:23:24 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500)='NLBL_MGMT\x00', r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0xf0, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_MGMT_A_DOMAIN={0xd9, 0x1, '&\x00\x00\xe7\xfb\xf1\xd1c\xb5\xc6j\xae\x1f\x83\xae\x15)\x8a\xbeQQ94[\x9e\xa4\xcb\xc4\xd7\x1f\xc4\xc2\xf7\xd4$Lj~\x92r\xbd,\b\xbf\xb5\xa7l\xe5_\xbb\xec$\x8cIz\xab\xd3\x91\x8b\xdfk\xdc\xf0\xb7%\x00\xf1\x9c\xfa\xc6\xa9\x01\rA\xf7U\xd2\xd3\xf66\x98\x81I\x16\xa6\xcepc\x9a\x90\xc2/\xb8\xd3\xd9\x9e\x1e\xa9\x90\x12\"\xe5\xed\x13\xddf\xbfkxe\x03\xd2\xaf\xdf\x94\x91\x11\xa5\xd0^\x96\x8e,\xb2?yR1\v\xc9Z\xd1+\x1f\xff\xe8\xae\x90%\xa5/\xc8M9}Lp\xc7\xa0Y\xc5\x9e?\x99\xb1\xb5\xe0l\xb5*\xfd\vq\x8b\x1a-r\x1a\xda\xcc]\xf7\x1a0\xa0F\nqI\x98]\xf8tzqD\xfb\x11h\xf3\xbe\x9e\x87\x9eV\x15\xb8\xfdc\xbf`b\xcbp\xe9\xb6\xeb\x86@\xbb\x84P\xa0'}]}, 0xf0}}, 0x0)

00:23:24 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}, {0xfff2, 0xffff}}}, 0x24}}, 0x0)

[  312.451823][T23128] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  312.481493][T23128] netlink: 2076 bytes leftover after parsing attributes in process `syz-executor.3'.
00:23:24 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0)

[  312.512628][T23128] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  312.564404][T23139] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  312.601009][T23141] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  312.623505][T23149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
00:23:25 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0800000706ffff162900fafff604100000a2260c00010006"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x208002, 0x0)

00:23:25 executing program 4:
sync()
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)

00:23:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0)

00:23:25 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4623, 0x0, @ipv4={[], [], @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dontfrag={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @remote}, r3}}}], 0x40}}], 0x1, 0x0)

00:23:25 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}, {0xfff2, 0xffff}}}, 0x24}}, 0x0)

00:23:25 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f000000b400)={0x0, 0x0, &(0x7f000000b3c0)={&(0x7f0000000400)=@newtaction={0x4c, 0x1e, 0xa01, 0x0, 0x0, {}, [{0x38, 0x1, [@m_sample={0x34, 0x0, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x4}, {0x6, 0x6, "a66d"}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0)

00:23:25 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4623, 0x0, @ipv4={[], [], @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dontfrag={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @remote}, r3}}}], 0x40}}], 0x1, 0x0)

00:23:25 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995478992ea5400c2", 0x10)

00:23:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0)

[  313.275280][T23161] netlink: 'syz-executor.2': attribute type 7 has an invalid length.
[  313.286594][T23166] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  313.307009][T23161] netlink: 'syz-executor.2': attribute type 8 has an invalid length.
[  313.355907][T23164] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  313.374199][T23174] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  313.374808][T23175] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
00:23:25 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f000000b400)={0x0, 0x0, &(0x7f000000b3c0)={&(0x7f0000000400)=@newtaction={0x4c, 0x1e, 0xa01, 0x0, 0x0, {}, [{0x38, 0x1, [@m_sample={0x34, 0x0, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x4}, {0x6, 0x6, "a66d"}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0)

00:23:25 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x3c}}, 0x0)

00:23:25 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995478992ea5400c2", 0x10)

[  313.397043][T23175] netlink: 2076 bytes leftover after parsing attributes in process `syz-executor.3'.
[  313.423806][T23175] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  313.478079][T23191] netlink: 'syz-executor.2': attribute type 7 has an invalid length.
00:23:26 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0800000706ffff162900fafff604100000a2260c00010006"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x208002, 0x0)

00:23:26 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0)

00:23:26 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}, {0xfff2, 0xffff}}}, 0x24}}, 0x0)

00:23:26 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x3c}}, 0x0)

00:23:26 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995478992ea5400c2", 0x10)

00:23:26 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f000000b400)={0x0, 0x0, &(0x7f000000b3c0)={&(0x7f0000000400)=@newtaction={0x4c, 0x1e, 0xa01, 0x0, 0x0, {}, [{0x38, 0x1, [@m_sample={0x34, 0x0, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x4}, {0x6, 0x6, "a66d"}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0)

00:23:26 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995478992ea5400c2", 0x10)

00:23:26 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x3c}}, 0x0)

00:23:26 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x8e, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

00:23:26 executing program 0:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001180)={0x18, 0x1407, 0xa23, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)

00:23:26 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f000000b400)={0x0, 0x0, &(0x7f000000b3c0)={&(0x7f0000000400)=@newtaction={0x4c, 0x1e, 0xa01, 0x0, 0x0, {}, [{0x38, 0x1, [@m_sample={0x34, 0x0, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x4}, {0x6, 0x6, "a66d"}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0)

[  314.208730][T23212] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  314.246296][T23214] netlink: 2076 bytes leftover after parsing attributes in process `syz-executor.3'.
00:23:26 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}, {0xfff2, 0xffff}}}, 0x24}}, 0x0)

[  314.335920][T23231] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
00:23:26 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0800000706ffff162900fafff604100000a2260c00010006"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x208002, 0x0)

00:23:26 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x8e, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

00:23:26 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x3c}}, 0x0)

00:23:26 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x8e, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

00:23:26 executing program 2:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r5=>0x0})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00')
read$alg(r6, &(0x7f0000000300)=""/146, 0x92)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
accept4$alg(r2, 0x0, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
fork()
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x5, 0xc501, 0x9})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, "10c76aa6d918f35d0afe0a228a566b3ff2d6e4"})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0xfffffaa5, 0xca13, 0x0, "607bf0955f293afc3cf2ab93a48e51d58ce0bd"})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)

00:23:26 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0)
epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

00:23:27 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x8e, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

00:23:27 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0)
epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

00:23:27 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0)
epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

00:23:27 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x8e, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

00:23:27 executing program 2:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r5=>0x0})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00')
read$alg(r6, &(0x7f0000000300)=""/146, 0x92)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
accept4$alg(r2, 0x0, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
fork()
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x5, 0xc501, 0x9})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, "10c76aa6d918f35d0afe0a228a566b3ff2d6e4"})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0xfffffaa5, 0xca13, 0x0, "607bf0955f293afc3cf2ab93a48e51d58ce0bd"})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)

00:23:27 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0)
epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

[  315.174750][T23271] netlink: 2076 bytes leftover after parsing attributes in process `syz-executor.3'.
00:23:27 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x8e, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

00:23:27 executing program 4:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r5=>0x0})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00')
read$alg(r6, &(0x7f0000000300)=""/146, 0x92)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
accept4$alg(r2, 0x0, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
fork()
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x5, 0xc501, 0x9})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, "10c76aa6d918f35d0afe0a228a566b3ff2d6e4"})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0xfffffaa5, 0xca13, 0x0, "607bf0955f293afc3cf2ab93a48e51d58ce0bd"})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)

00:23:27 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0)
epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

00:23:27 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0)
epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

00:23:27 executing program 2:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r5=>0x0})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00')
read$alg(r6, &(0x7f0000000300)=""/146, 0x92)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
accept4$alg(r2, 0x0, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
fork()
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x5, 0xc501, 0x9})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, "10c76aa6d918f35d0afe0a228a566b3ff2d6e4"})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0xfffffaa5, 0xca13, 0x0, "607bf0955f293afc3cf2ab93a48e51d58ce0bd"})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)

00:23:27 executing program 3:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r5=>0x0})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00')
read$alg(r6, &(0x7f0000000300)=""/146, 0x92)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
accept4$alg(r2, 0x0, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
fork()
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x5, 0xc501, 0x9})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, "10c76aa6d918f35d0afe0a228a566b3ff2d6e4"})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0xfffffaa5, 0xca13, 0x0, "607bf0955f293afc3cf2ab93a48e51d58ce0bd"})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)

00:23:27 executing program 1:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r5=>0x0})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00')
read$alg(r6, &(0x7f0000000300)=""/146, 0x92)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
accept4$alg(r2, 0x0, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
fork()
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x5, 0xc501, 0x9})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, "10c76aa6d918f35d0afe0a228a566b3ff2d6e4"})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0xfffffaa5, 0xca13, 0x0, "607bf0955f293afc3cf2ab93a48e51d58ce0bd"})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)

00:23:27 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0)
epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

00:23:27 executing program 2:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r5=>0x0})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00')
read$alg(r6, &(0x7f0000000300)=""/146, 0x92)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
accept4$alg(r2, 0x0, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
fork()
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x5, 0xc501, 0x9})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, "10c76aa6d918f35d0afe0a228a566b3ff2d6e4"})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0xfffffaa5, 0xca13, 0x0, "607bf0955f293afc3cf2ab93a48e51d58ce0bd"})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)

00:23:28 executing program 4:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r5=>0x0})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00')
read$alg(r6, &(0x7f0000000300)=""/146, 0x92)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
accept4$alg(r2, 0x0, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
fork()
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x5, 0xc501, 0x9})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, "10c76aa6d918f35d0afe0a228a566b3ff2d6e4"})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0xfffffaa5, 0xca13, 0x0, "607bf0955f293afc3cf2ab93a48e51d58ce0bd"})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)

00:23:28 executing program 3:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r5=>0x0})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00')
read$alg(r6, &(0x7f0000000300)=""/146, 0x92)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
accept4$alg(r2, 0x0, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
fork()
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x5, 0xc501, 0x9})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, "10c76aa6d918f35d0afe0a228a566b3ff2d6e4"})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0xfffffaa5, 0xca13, 0x0, "607bf0955f293afc3cf2ab93a48e51d58ce0bd"})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)

00:23:28 executing program 5:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fallocate(r0, 0x8, 0x100000000, 0xfffffffffffffeff)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x4, 0x5, 0x6, 0x52, @ipv4={[], [], @remote}, @loopback, 0x8, 0x40, 0x3f, 0xffffffe1}})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf25060000004400018014000200767863616e31000000000000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="ea00011f0000000000000000000001000000009d0100e04123add8dd8c30a5bc5be609c905a30b7718913b7b0cc0c1c9b116913d0bc64e8147be55f9c394b9ad2a2ed0c5fde9a35362b4a0b436df762fefa4ded6569249ac525242c3973833c694a28ee2d21742d52708327d416181a523bc7634a9aa8a5208e9d26dc8e474a6067fc128b150994ac3b6d8e6021a54eaa7d06d621597777a06f0275a1f36e1e24f84ef929d556d5e1019cffd00769e2992fd32018d687dbd0df231", @ANYRES32=r3, @ANYBLOB="14000180080003000200000008000100", @ANYRES32, @ANYBLOB="73d9662680afa4ab2fd726905036e610c1151a74588135c05a4866993977f3e9d00a4303f0013b45a20d1c82567da50cb38d72082db2af8a3f81f65b0bfc677a90d8fca808405d8039ebba720706bec64d740b7c5b8718dd253230b89e586dd1faa851b104210cf6771f377d8a2d615dd6a1db092ab3a2f30964dd8abe8bcc6c5b7fd243a9e840fffb60b041f1"], 0x6c}, 0x1, 0x0, 0x0, 0x20040054}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={[0x0, 0x4], [], @loopback}, 0x7d, r3})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="acb559831000010428bd70c91c38f449605d6dcb22000000000000000000", @ANYRES32=0x0, @ANYBLOB="02080400000000001c0010800c0001006d6163766c616e000c000580080001003b090000000000000014001400657273706100"/60, @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
sendmmsg(r8, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0)
sendto$packet(r1, &(0x7f0000000000)="d127411019", 0x5, 0x4000, &(0x7f0000000040)={0x11, 0xf6, r3, 0x1, 0x3f, 0x6, @multicast}, 0x14)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000000080))

00:23:28 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x8e, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

00:23:28 executing program 1:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r5=>0x0})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00')
read$alg(r6, &(0x7f0000000300)=""/146, 0x92)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
accept4$alg(r2, 0x0, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
fork()
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x5, 0xc501, 0x9})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, "10c76aa6d918f35d0afe0a228a566b3ff2d6e4"})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0xfffffaa5, 0xca13, 0x0, "607bf0955f293afc3cf2ab93a48e51d58ce0bd"})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)

00:23:28 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000001b40)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080))

00:23:28 executing program 4:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r5=>0x0})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00')
read$alg(r6, &(0x7f0000000300)=""/146, 0x92)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
accept4$alg(r2, 0x0, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
fork()
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x5, 0xc501, 0x9})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, "10c76aa6d918f35d0afe0a228a566b3ff2d6e4"})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0xfffffaa5, 0xca13, 0x0, "607bf0955f293afc3cf2ab93a48e51d58ce0bd"})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)

00:23:28 executing program 3:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r5=>0x0})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00')
read$alg(r6, &(0x7f0000000300)=""/146, 0x92)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
accept4$alg(r2, 0x0, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
fork()
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x5, 0xc501, 0x9})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, "10c76aa6d918f35d0afe0a228a566b3ff2d6e4"})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0xfffffaa5, 0xca13, 0x0, "607bf0955f293afc3cf2ab93a48e51d58ce0bd"})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)

00:23:28 executing program 5:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fallocate(r0, 0x8, 0x100000000, 0xfffffffffffffeff)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x4, 0x5, 0x6, 0x52, @ipv4={[], [], @remote}, @loopback, 0x8, 0x40, 0x3f, 0xffffffe1}})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf25060000004400018014000200767863616e31000000000000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="ea00011f0000000000000000000001000000009d0100e04123add8dd8c30a5bc5be609c905a30b7718913b7b0cc0c1c9b116913d0bc64e8147be55f9c394b9ad2a2ed0c5fde9a35362b4a0b436df762fefa4ded6569249ac525242c3973833c694a28ee2d21742d52708327d416181a523bc7634a9aa8a5208e9d26dc8e474a6067fc128b150994ac3b6d8e6021a54eaa7d06d621597777a06f0275a1f36e1e24f84ef929d556d5e1019cffd00769e2992fd32018d687dbd0df231", @ANYRES32=r3, @ANYBLOB="14000180080003000200000008000100", @ANYRES32, @ANYBLOB="73d9662680afa4ab2fd726905036e610c1151a74588135c05a4866993977f3e9d00a4303f0013b45a20d1c82567da50cb38d72082db2af8a3f81f65b0bfc677a90d8fca808405d8039ebba720706bec64d740b7c5b8718dd253230b89e586dd1faa851b104210cf6771f377d8a2d615dd6a1db092ab3a2f30964dd8abe8bcc6c5b7fd243a9e840fffb60b041f1"], 0x6c}, 0x1, 0x0, 0x0, 0x20040054}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={[0x0, 0x4], [], @loopback}, 0x7d, r3})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="acb559831000010428bd70c91c38f449605d6dcb22000000000000000000", @ANYRES32=0x0, @ANYBLOB="02080400000000001c0010800c0001006d6163766c616e000c000580080001003b090000000000000014001400657273706100"/60, @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
sendmmsg(r8, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0)
sendto$packet(r1, &(0x7f0000000000)="d127411019", 0x5, 0x4000, &(0x7f0000000040)={0x11, 0xf6, r3, 0x1, 0x3f, 0x6, @multicast}, 0x14)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000000080))

00:23:28 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fallocate(r0, 0x8, 0x100000000, 0xfffffffffffffeff)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x4, 0x5, 0x6, 0x52, @ipv4={[], [], @remote}, @loopback, 0x8, 0x40, 0x3f, 0xffffffe1}})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf25060000004400018014000200767863616e31000000000000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="ea00011f0000000000000000000001000000009d0100e04123add8dd8c30a5bc5be609c905a30b7718913b7b0cc0c1c9b116913d0bc64e8147be55f9c394b9ad2a2ed0c5fde9a35362b4a0b436df762fefa4ded6569249ac525242c3973833c694a28ee2d21742d52708327d416181a523bc7634a9aa8a5208e9d26dc8e474a6067fc128b150994ac3b6d8e6021a54eaa7d06d621597777a06f0275a1f36e1e24f84ef929d556d5e1019cffd00769e2992fd32018d687dbd0df231", @ANYRES32=r3, @ANYBLOB="14000180080003000200000008000100", @ANYRES32, @ANYBLOB="73d9662680afa4ab2fd726905036e610c1151a74588135c05a4866993977f3e9d00a4303f0013b45a20d1c82567da50cb38d72082db2af8a3f81f65b0bfc677a90d8fca808405d8039ebba720706bec64d740b7c5b8718dd253230b89e586dd1faa851b104210cf6771f377d8a2d615dd6a1db092ab3a2f30964dd8abe8bcc6c5b7fd243a9e840fffb60b041f1"], 0x6c}, 0x1, 0x0, 0x0, 0x20040054}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={[0x0, 0x4], [], @loopback}, 0x7d, r3})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="acb559831000010428bd70c91c38f449605d6dcb22000000000000000000", @ANYRES32=0x0, @ANYBLOB="02080400000000001c0010800c0001006d6163766c616e000c000580080001003b090000000000000014001400657273706100"/60, @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
sendmmsg(r8, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0)
sendto$packet(r1, &(0x7f0000000000)="d127411019", 0x5, 0x4000, &(0x7f0000000040)={0x11, 0xf6, r3, 0x1, 0x3f, 0x6, @multicast}, 0x14)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000000080))

00:23:28 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000001b40)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080))

00:23:28 executing program 1:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r5=>0x0})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00')
read$alg(r6, &(0x7f0000000300)=""/146, 0x92)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
accept4$alg(r2, 0x0, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
fork()
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x5, 0xc501, 0x9})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, "10c76aa6d918f35d0afe0a228a566b3ff2d6e4"})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0xfffffaa5, 0xca13, 0x0, "607bf0955f293afc3cf2ab93a48e51d58ce0bd"})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)

00:23:28 executing program 5:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fallocate(r0, 0x8, 0x100000000, 0xfffffffffffffeff)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x4, 0x5, 0x6, 0x52, @ipv4={[], [], @remote}, @loopback, 0x8, 0x40, 0x3f, 0xffffffe1}})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf25060000004400018014000200767863616e31000000000000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="ea00011f0000000000000000000001000000009d0100e04123add8dd8c30a5bc5be609c905a30b7718913b7b0cc0c1c9b116913d0bc64e8147be55f9c394b9ad2a2ed0c5fde9a35362b4a0b436df762fefa4ded6569249ac525242c3973833c694a28ee2d21742d52708327d416181a523bc7634a9aa8a5208e9d26dc8e474a6067fc128b150994ac3b6d8e6021a54eaa7d06d621597777a06f0275a1f36e1e24f84ef929d556d5e1019cffd00769e2992fd32018d687dbd0df231", @ANYRES32=r3, @ANYBLOB="14000180080003000200000008000100", @ANYRES32, @ANYBLOB="73d9662680afa4ab2fd726905036e610c1151a74588135c05a4866993977f3e9d00a4303f0013b45a20d1c82567da50cb38d72082db2af8a3f81f65b0bfc677a90d8fca808405d8039ebba720706bec64d740b7c5b8718dd253230b89e586dd1faa851b104210cf6771f377d8a2d615dd6a1db092ab3a2f30964dd8abe8bcc6c5b7fd243a9e840fffb60b041f1"], 0x6c}, 0x1, 0x0, 0x0, 0x20040054}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={[0x0, 0x4], [], @loopback}, 0x7d, r3})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="acb559831000010428bd70c91c38f449605d6dcb22000000000000000000", @ANYRES32=0x0, @ANYBLOB="02080400000000001c0010800c0001006d6163766c616e000c000580080001003b090000000000000014001400657273706100"/60, @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
sendmmsg(r8, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0)
sendto$packet(r1, &(0x7f0000000000)="d127411019", 0x5, 0x4000, &(0x7f0000000040)={0x11, 0xf6, r3, 0x1, 0x3f, 0x6, @multicast}, 0x14)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000000080))

00:23:28 executing program 4:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fallocate(r0, 0x8, 0x100000000, 0xfffffffffffffeff)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x4, 0x5, 0x6, 0x52, @ipv4={[], [], @remote}, @loopback, 0x8, 0x40, 0x3f, 0xffffffe1}})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf25060000004400018014000200767863616e31000000000000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="ea00011f0000000000000000000001000000009d0100e04123add8dd8c30a5bc5be609c905a30b7718913b7b0cc0c1c9b116913d0bc64e8147be55f9c394b9ad2a2ed0c5fde9a35362b4a0b436df762fefa4ded6569249ac525242c3973833c694a28ee2d21742d52708327d416181a523bc7634a9aa8a5208e9d26dc8e474a6067fc128b150994ac3b6d8e6021a54eaa7d06d621597777a06f0275a1f36e1e24f84ef929d556d5e1019cffd00769e2992fd32018d687dbd0df231", @ANYRES32=r3, @ANYBLOB="14000180080003000200000008000100", @ANYRES32, @ANYBLOB="73d9662680afa4ab2fd726905036e610c1151a74588135c05a4866993977f3e9d00a4303f0013b45a20d1c82567da50cb38d72082db2af8a3f81f65b0bfc677a90d8fca808405d8039ebba720706bec64d740b7c5b8718dd253230b89e586dd1faa851b104210cf6771f377d8a2d615dd6a1db092ab3a2f30964dd8abe8bcc6c5b7fd243a9e840fffb60b041f1"], 0x6c}, 0x1, 0x0, 0x0, 0x20040054}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={[0x0, 0x4], [], @loopback}, 0x7d, r3})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="acb559831000010428bd70c91c38f449605d6dcb22000000000000000000", @ANYRES32=0x0, @ANYBLOB="02080400000000001c0010800c0001006d6163766c616e000c000580080001003b090000000000000014001400657273706100"/60, @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
sendmmsg(r8, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0)
sendto$packet(r1, &(0x7f0000000000)="d127411019", 0x5, 0x4000, &(0x7f0000000040)={0x11, 0xf6, r3, 0x1, 0x3f, 0x6, @multicast}, 0x14)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000000080))

00:23:29 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000001b40)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080))

00:23:29 executing program 0:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
fstatfs(r0, &(0x7f0000000140)=""/6)

00:23:29 executing program 4:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fallocate(r0, 0x8, 0x100000000, 0xfffffffffffffeff)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x4, 0x5, 0x6, 0x52, @ipv4={[], [], @remote}, @loopback, 0x8, 0x40, 0x3f, 0xffffffe1}})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf25060000004400018014000200767863616e31000000000000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="ea00011f0000000000000000000001000000009d0100e04123add8dd8c30a5bc5be609c905a30b7718913b7b0cc0c1c9b116913d0bc64e8147be55f9c394b9ad2a2ed0c5fde9a35362b4a0b436df762fefa4ded6569249ac525242c3973833c694a28ee2d21742d52708327d416181a523bc7634a9aa8a5208e9d26dc8e474a6067fc128b150994ac3b6d8e6021a54eaa7d06d621597777a06f0275a1f36e1e24f84ef929d556d5e1019cffd00769e2992fd32018d687dbd0df231", @ANYRES32=r3, @ANYBLOB="14000180080003000200000008000100", @ANYRES32, @ANYBLOB="73d9662680afa4ab2fd726905036e610c1151a74588135c05a4866993977f3e9d00a4303f0013b45a20d1c82567da50cb38d72082db2af8a3f81f65b0bfc677a90d8fca808405d8039ebba720706bec64d740b7c5b8718dd253230b89e586dd1faa851b104210cf6771f377d8a2d615dd6a1db092ab3a2f30964dd8abe8bcc6c5b7fd243a9e840fffb60b041f1"], 0x6c}, 0x1, 0x0, 0x0, 0x20040054}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={[0x0, 0x4], [], @loopback}, 0x7d, r3})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="acb559831000010428bd70c91c38f449605d6dcb22000000000000000000", @ANYRES32=0x0, @ANYBLOB="02080400000000001c0010800c0001006d6163766c616e000c000580080001003b090000000000000014001400657273706100"/60, @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
sendmmsg(r8, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0)
sendto$packet(r1, &(0x7f0000000000)="d127411019", 0x5, 0x4000, &(0x7f0000000040)={0x11, 0xf6, r3, 0x1, 0x3f, 0x6, @multicast}, 0x14)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000000080))

00:23:29 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fallocate(r0, 0x8, 0x100000000, 0xfffffffffffffeff)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x4, 0x5, 0x6, 0x52, @ipv4={[], [], @remote}, @loopback, 0x8, 0x40, 0x3f, 0xffffffe1}})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf25060000004400018014000200767863616e31000000000000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="ea00011f0000000000000000000001000000009d0100e04123add8dd8c30a5bc5be609c905a30b7718913b7b0cc0c1c9b116913d0bc64e8147be55f9c394b9ad2a2ed0c5fde9a35362b4a0b436df762fefa4ded6569249ac525242c3973833c694a28ee2d21742d52708327d416181a523bc7634a9aa8a5208e9d26dc8e474a6067fc128b150994ac3b6d8e6021a54eaa7d06d621597777a06f0275a1f36e1e24f84ef929d556d5e1019cffd00769e2992fd32018d687dbd0df231", @ANYRES32=r3, @ANYBLOB="14000180080003000200000008000100", @ANYRES32, @ANYBLOB="73d9662680afa4ab2fd726905036e610c1151a74588135c05a4866993977f3e9d00a4303f0013b45a20d1c82567da50cb38d72082db2af8a3f81f65b0bfc677a90d8fca808405d8039ebba720706bec64d740b7c5b8718dd253230b89e586dd1faa851b104210cf6771f377d8a2d615dd6a1db092ab3a2f30964dd8abe8bcc6c5b7fd243a9e840fffb60b041f1"], 0x6c}, 0x1, 0x0, 0x0, 0x20040054}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={[0x0, 0x4], [], @loopback}, 0x7d, r3})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="acb559831000010428bd70c91c38f449605d6dcb22000000000000000000", @ANYRES32=0x0, @ANYBLOB="02080400000000001c0010800c0001006d6163766c616e000c000580080001003b090000000000000014001400657273706100"/60, @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
sendmmsg(r8, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0)
sendto$packet(r1, &(0x7f0000000000)="d127411019", 0x5, 0x4000, &(0x7f0000000040)={0x11, 0xf6, r3, 0x1, 0x3f, 0x6, @multicast}, 0x14)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000000080))

00:23:29 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fallocate(r0, 0x8, 0x100000000, 0xfffffffffffffeff)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x4, 0x5, 0x6, 0x52, @ipv4={[], [], @remote}, @loopback, 0x8, 0x40, 0x3f, 0xffffffe1}})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf25060000004400018014000200767863616e31000000000000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="ea00011f0000000000000000000001000000009d0100e04123add8dd8c30a5bc5be609c905a30b7718913b7b0cc0c1c9b116913d0bc64e8147be55f9c394b9ad2a2ed0c5fde9a35362b4a0b436df762fefa4ded6569249ac525242c3973833c694a28ee2d21742d52708327d416181a523bc7634a9aa8a5208e9d26dc8e474a6067fc128b150994ac3b6d8e6021a54eaa7d06d621597777a06f0275a1f36e1e24f84ef929d556d5e1019cffd00769e2992fd32018d687dbd0df231", @ANYRES32=r3, @ANYBLOB="14000180080003000200000008000100", @ANYRES32, @ANYBLOB="73d9662680afa4ab2fd726905036e610c1151a74588135c05a4866993977f3e9d00a4303f0013b45a20d1c82567da50cb38d72082db2af8a3f81f65b0bfc677a90d8fca808405d8039ebba720706bec64d740b7c5b8718dd253230b89e586dd1faa851b104210cf6771f377d8a2d615dd6a1db092ab3a2f30964dd8abe8bcc6c5b7fd243a9e840fffb60b041f1"], 0x6c}, 0x1, 0x0, 0x0, 0x20040054}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={[0x0, 0x4], [], @loopback}, 0x7d, r3})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="acb559831000010428bd70c91c38f449605d6dcb22000000000000000000", @ANYRES32=0x0, @ANYBLOB="02080400000000001c0010800c0001006d6163766c616e000c000580080001003b090000000000000014001400657273706100"/60, @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
sendmmsg(r8, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0)
sendto$packet(r1, &(0x7f0000000000)="d127411019", 0x5, 0x4000, &(0x7f0000000040)={0x11, 0xf6, r3, 0x1, 0x3f, 0x6, @multicast}, 0x14)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000000080))

00:23:29 executing program 5:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fallocate(r0, 0x8, 0x100000000, 0xfffffffffffffeff)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x4, 0x5, 0x6, 0x52, @ipv4={[], [], @remote}, @loopback, 0x8, 0x40, 0x3f, 0xffffffe1}})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf25060000004400018014000200767863616e31000000000000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="ea00011f0000000000000000000001000000009d0100e04123add8dd8c30a5bc5be609c905a30b7718913b7b0cc0c1c9b116913d0bc64e8147be55f9c394b9ad2a2ed0c5fde9a35362b4a0b436df762fefa4ded6569249ac525242c3973833c694a28ee2d21742d52708327d416181a523bc7634a9aa8a5208e9d26dc8e474a6067fc128b150994ac3b6d8e6021a54eaa7d06d621597777a06f0275a1f36e1e24f84ef929d556d5e1019cffd00769e2992fd32018d687dbd0df231", @ANYRES32=r3, @ANYBLOB="14000180080003000200000008000100", @ANYRES32, @ANYBLOB="73d9662680afa4ab2fd726905036e610c1151a74588135c05a4866993977f3e9d00a4303f0013b45a20d1c82567da50cb38d72082db2af8a3f81f65b0bfc677a90d8fca808405d8039ebba720706bec64d740b7c5b8718dd253230b89e586dd1faa851b104210cf6771f377d8a2d615dd6a1db092ab3a2f30964dd8abe8bcc6c5b7fd243a9e840fffb60b041f1"], 0x6c}, 0x1, 0x0, 0x0, 0x20040054}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={[0x0, 0x4], [], @loopback}, 0x7d, r3})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="acb559831000010428bd70c91c38f449605d6dcb22000000000000000000", @ANYRES32=0x0, @ANYBLOB="02080400000000001c0010800c0001006d6163766c616e000c000580080001003b090000000000000014001400657273706100"/60, @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
sendmmsg(r8, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0)
sendto$packet(r1, &(0x7f0000000000)="d127411019", 0x5, 0x4000, &(0x7f0000000040)={0x11, 0xf6, r3, 0x1, 0x3f, 0x6, @multicast}, 0x14)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000000080))

00:23:29 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000001b40)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080))

00:23:29 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x2d}]})

00:23:29 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe7, &(0x7f0000002ac0)="c4c691019919da078a0098d1e0a593b040f762914000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b363de4fb357baa17dacdcfac32957dc8bb44e203c4b1bc83d8c0b275bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66472419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399ef71d1fa7b32513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf48"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0xfffffffffffffef2}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x17)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
tkill(r2, 0x40)

00:23:29 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fallocate(r0, 0x8, 0x100000000, 0xfffffffffffffeff)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x4, 0x5, 0x6, 0x52, @ipv4={[], [], @remote}, @loopback, 0x8, 0x40, 0x3f, 0xffffffe1}})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf25060000004400018014000200767863616e31000000000000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="ea00011f0000000000000000000001000000009d0100e04123add8dd8c30a5bc5be609c905a30b7718913b7b0cc0c1c9b116913d0bc64e8147be55f9c394b9ad2a2ed0c5fde9a35362b4a0b436df762fefa4ded6569249ac525242c3973833c694a28ee2d21742d52708327d416181a523bc7634a9aa8a5208e9d26dc8e474a6067fc128b150994ac3b6d8e6021a54eaa7d06d621597777a06f0275a1f36e1e24f84ef929d556d5e1019cffd00769e2992fd32018d687dbd0df231", @ANYRES32=r3, @ANYBLOB="14000180080003000200000008000100", @ANYRES32, @ANYBLOB="73d9662680afa4ab2fd726905036e610c1151a74588135c05a4866993977f3e9d00a4303f0013b45a20d1c82567da50cb38d72082db2af8a3f81f65b0bfc677a90d8fca808405d8039ebba720706bec64d740b7c5b8718dd253230b89e586dd1faa851b104210cf6771f377d8a2d615dd6a1db092ab3a2f30964dd8abe8bcc6c5b7fd243a9e840fffb60b041f1"], 0x6c}, 0x1, 0x0, 0x0, 0x20040054}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={[0x0, 0x4], [], @loopback}, 0x7d, r3})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="acb559831000010428bd70c91c38f449605d6dcb22000000000000000000", @ANYRES32=0x0, @ANYBLOB="02080400000000001c0010800c0001006d6163766c616e000c000580080001003b090000000000000014001400657273706100"/60, @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
sendmmsg(r8, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0)
sendto$packet(r1, &(0x7f0000000000)="d127411019", 0x5, 0x4000, &(0x7f0000000040)={0x11, 0xf6, r3, 0x1, 0x3f, 0x6, @multicast}, 0x14)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000000080))

00:23:29 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fallocate(r0, 0x8, 0x100000000, 0xfffffffffffffeff)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x4, 0x5, 0x6, 0x52, @ipv4={[], [], @remote}, @loopback, 0x8, 0x40, 0x3f, 0xffffffe1}})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf25060000004400018014000200767863616e31000000000000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="ea00011f0000000000000000000001000000009d0100e04123add8dd8c30a5bc5be609c905a30b7718913b7b0cc0c1c9b116913d0bc64e8147be55f9c394b9ad2a2ed0c5fde9a35362b4a0b436df762fefa4ded6569249ac525242c3973833c694a28ee2d21742d52708327d416181a523bc7634a9aa8a5208e9d26dc8e474a6067fc128b150994ac3b6d8e6021a54eaa7d06d621597777a06f0275a1f36e1e24f84ef929d556d5e1019cffd00769e2992fd32018d687dbd0df231", @ANYRES32=r3, @ANYBLOB="14000180080003000200000008000100", @ANYRES32, @ANYBLOB="73d9662680afa4ab2fd726905036e610c1151a74588135c05a4866993977f3e9d00a4303f0013b45a20d1c82567da50cb38d72082db2af8a3f81f65b0bfc677a90d8fca808405d8039ebba720706bec64d740b7c5b8718dd253230b89e586dd1faa851b104210cf6771f377d8a2d615dd6a1db092ab3a2f30964dd8abe8bcc6c5b7fd243a9e840fffb60b041f1"], 0x6c}, 0x1, 0x0, 0x0, 0x20040054}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={[0x0, 0x4], [], @loopback}, 0x7d, r3})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="acb559831000010428bd70c91c38f449605d6dcb22000000000000000000", @ANYRES32=0x0, @ANYBLOB="02080400000000001c0010800c0001006d6163766c616e000c000580080001003b090000000000000014001400657273706100"/60, @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
sendmmsg(r8, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0)
sendto$packet(r1, &(0x7f0000000000)="d127411019", 0x5, 0x4000, &(0x7f0000000040)={0x11, 0xf6, r3, 0x1, 0x3f, 0x6, @multicast}, 0x14)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000000080))

00:23:29 executing program 4:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fallocate(r0, 0x8, 0x100000000, 0xfffffffffffffeff)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x4, 0x5, 0x6, 0x52, @ipv4={[], [], @remote}, @loopback, 0x8, 0x40, 0x3f, 0xffffffe1}})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf25060000004400018014000200767863616e31000000000000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="ea00011f0000000000000000000001000000009d0100e04123add8dd8c30a5bc5be609c905a30b7718913b7b0cc0c1c9b116913d0bc64e8147be55f9c394b9ad2a2ed0c5fde9a35362b4a0b436df762fefa4ded6569249ac525242c3973833c694a28ee2d21742d52708327d416181a523bc7634a9aa8a5208e9d26dc8e474a6067fc128b150994ac3b6d8e6021a54eaa7d06d621597777a06f0275a1f36e1e24f84ef929d556d5e1019cffd00769e2992fd32018d687dbd0df231", @ANYRES32=r3, @ANYBLOB="14000180080003000200000008000100", @ANYRES32, @ANYBLOB="73d9662680afa4ab2fd726905036e610c1151a74588135c05a4866993977f3e9d00a4303f0013b45a20d1c82567da50cb38d72082db2af8a3f81f65b0bfc677a90d8fca808405d8039ebba720706bec64d740b7c5b8718dd253230b89e586dd1faa851b104210cf6771f377d8a2d615dd6a1db092ab3a2f30964dd8abe8bcc6c5b7fd243a9e840fffb60b041f1"], 0x6c}, 0x1, 0x0, 0x0, 0x20040054}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={[0x0, 0x4], [], @loopback}, 0x7d, r3})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="acb559831000010428bd70c91c38f449605d6dcb22000000000000000000", @ANYRES32=0x0, @ANYBLOB="02080400000000001c0010800c0001006d6163766c616e000c000580080001003b090000000000000014001400657273706100"/60, @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
sendmmsg(r8, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0)
sendto$packet(r1, &(0x7f0000000000)="d127411019", 0x5, 0x4000, &(0x7f0000000040)={0x11, 0xf6, r3, 0x1, 0x3f, 0x6, @multicast}, 0x14)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000000080))

00:23:29 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000200))

00:23:29 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe7, &(0x7f0000002ac0)="c4c691019919da078a0098d1e0a593b040f762914000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b363de4fb357baa17dacdcfac32957dc8bb44e203c4b1bc83d8c0b275bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66472419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399ef71d1fa7b32513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf48"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0xfffffffffffffef2}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x17)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
tkill(r2, 0x40)

00:23:29 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x2d}]})

00:23:29 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x2d}]})

00:23:29 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4860332", @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x7a, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000180)=0x90)

00:23:30 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fallocate(r0, 0x8, 0x100000000, 0xfffffffffffffeff)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x4, 0x5, 0x6, 0x52, @ipv4={[], [], @remote}, @loopback, 0x8, 0x40, 0x3f, 0xffffffe1}})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf25060000004400018014000200767863616e31000000000000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="ea00011f0000000000000000000001000000009d0100e04123add8dd8c30a5bc5be609c905a30b7718913b7b0cc0c1c9b116913d0bc64e8147be55f9c394b9ad2a2ed0c5fde9a35362b4a0b436df762fefa4ded6569249ac525242c3973833c694a28ee2d21742d52708327d416181a523bc7634a9aa8a5208e9d26dc8e474a6067fc128b150994ac3b6d8e6021a54eaa7d06d621597777a06f0275a1f36e1e24f84ef929d556d5e1019cffd00769e2992fd32018d687dbd0df231", @ANYRES32=r3, @ANYBLOB="14000180080003000200000008000100", @ANYRES32, @ANYBLOB="73d9662680afa4ab2fd726905036e610c1151a74588135c05a4866993977f3e9d00a4303f0013b45a20d1c82567da50cb38d72082db2af8a3f81f65b0bfc677a90d8fca808405d8039ebba720706bec64d740b7c5b8718dd253230b89e586dd1faa851b104210cf6771f377d8a2d615dd6a1db092ab3a2f30964dd8abe8bcc6c5b7fd243a9e840fffb60b041f1"], 0x6c}, 0x1, 0x0, 0x0, 0x20040054}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={[0x0, 0x4], [], @loopback}, 0x7d, r3})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="acb559831000010428bd70c91c38f449605d6dcb22000000000000000000", @ANYRES32=0x0, @ANYBLOB="02080400000000001c0010800c0001006d6163766c616e000c000580080001003b090000000000000014001400657273706100"/60, @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
sendmmsg(r8, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0)
sendto$packet(r1, &(0x7f0000000000)="d127411019", 0x5, 0x4000, &(0x7f0000000040)={0x11, 0xf6, r3, 0x1, 0x3f, 0x6, @multicast}, 0x14)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000000080))

00:23:30 executing program 4:
syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x1200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8400effffffa)

00:23:30 executing program 3:
set_mempolicy(0x2, &(0x7f00000000c0)=0x8000000000002, 0xb)
syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f0000000100)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, ',-]'}}]})

00:23:30 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe7, &(0x7f0000002ac0)="c4c691019919da078a0098d1e0a593b040f762914000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b363de4fb357baa17dacdcfac32957dc8bb44e203c4b1bc83d8c0b275bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66472419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399ef71d1fa7b32513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf48"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0xfffffffffffffef2}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x17)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
tkill(r2, 0x40)

00:23:30 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x2d}]})

[  318.117952][T23435] loop4: detected capacity change from 0 to 264192
00:23:30 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe7, &(0x7f0000002ac0)="c4c691019919da078a0098d1e0a593b040f762914000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b363de4fb357baa17dacdcfac32957dc8bb44e203c4b1bc83d8c0b275bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66472419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399ef71d1fa7b32513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf48"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0xfffffffffffffef2}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x17)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
tkill(r2, 0x40)

[  318.172920][T23435] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
00:23:30 executing program 1:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./bus\x00', 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x10, 0xffffffffffffffff, 0xd75e8000)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0)
mount$overlay(0x400002, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,nfs_export=on,index=on'])
mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2228e66a9160b6602f73723000"], &(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='befs\x00', 0x0, &(0x7f0000000600)='overlay\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x1, 0xc0000000, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x20a8862, 0x0)
rmdir(&(0x7f0000000080)='./bus/file0\x00')

00:23:30 executing program 2:
syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
statfs(&(0x7f0000000140)='./bus\x00', &(0x7f0000000300)=""/146)

[  318.278852][   T36] kauditd_printk_skb: 36 callbacks suppressed
[  318.278866][   T36] audit: type=1804 audit(1615595010.220:194): pid=23454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir297863628/syzkaller.KCo0yb/439/file0/bus" dev="sda1" ino=14545 res=1 errno=0
[  318.404506][T23464] loop2: detected capacity change from 0 to 264192
[  318.421489][T23464] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
00:23:30 executing program 5:
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x140042, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

00:23:30 executing program 1:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./bus\x00', 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x10, 0xffffffffffffffff, 0xd75e8000)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0)
mount$overlay(0x400002, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,nfs_export=on,index=on'])
mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2228e66a9160b6602f73723000"], &(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='befs\x00', 0x0, &(0x7f0000000600)='overlay\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x1, 0xc0000000, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x20a8862, 0x0)
rmdir(&(0x7f0000000080)='./bus/file0\x00')

00:23:30 executing program 2:
syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
statfs(&(0x7f0000000140)='./bus\x00', &(0x7f0000000300)=""/146)

[  318.556504][ T2987] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  318.625047][T23477] 9pnet: Insufficient options for proto=fd
00:23:30 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4860332", @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x7a, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000180)=0x90)

00:23:30 executing program 3:
set_mempolicy(0x2, &(0x7f00000000c0)=0x8000000000002, 0xb)
syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f0000000100)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, ',-]'}}]})

[  318.955075][   T36] audit: type=1804 audit(1615595010.900:195): pid=23454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir297863628/syzkaller.KCo0yb/439/file0/bus" dev="sda1" ino=14545 res=1 errno=0
00:23:31 executing program 4:
syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x1200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8400effffffa)

00:23:31 executing program 5:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000000120001"], 0x34}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

00:23:31 executing program 2:
syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
statfs(&(0x7f0000000140)='./bus\x00', &(0x7f0000000300)=""/146)

00:23:31 executing program 1:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./bus\x00', 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x10, 0xffffffffffffffff, 0xd75e8000)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0)
mount$overlay(0x400002, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,nfs_export=on,index=on'])
mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2228e66a9160b6602f73723000"], &(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='befs\x00', 0x0, &(0x7f0000000600)='overlay\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x1, 0xc0000000, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x20a8862, 0x0)
rmdir(&(0x7f0000000080)='./bus/file0\x00')

00:23:31 executing program 3:
set_mempolicy(0x2, &(0x7f00000000c0)=0x8000000000002, 0xb)
syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f0000000100)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, ',-]'}}]})

[  319.024798][   T36] audit: type=1804 audit(1615595010.930:196): pid=23454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir297863628/syzkaller.KCo0yb/439/file0/bus" dev="sda1" ino=14545 res=1 errno=0
[  319.110245][T23497] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  319.120123][T23496] loop2: detected capacity change from 0 to 264192
[  319.147730][T23496] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
00:23:31 executing program 3:
set_mempolicy(0x2, &(0x7f00000000c0)=0x8000000000002, 0xb)
syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f0000000100)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, ',-]'}}]})

00:23:31 executing program 2:
syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
statfs(&(0x7f0000000140)='./bus\x00', &(0x7f0000000300)=""/146)

[  319.166450][T23504] loop4: detected capacity change from 0 to 264192
[  319.179816][T23506] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  319.205771][ T2987] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  319.237123][T23504] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  319.268439][   T36] audit: type=1804 audit(1615595011.210:197): pid=23511 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir297863628/syzkaller.KCo0yb/440/file0/bus" dev="sda1" ino=13989 res=1 errno=0
00:23:31 executing program 5:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000000120001"], 0x34}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

00:23:31 executing program 1:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./bus\x00', 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x10, 0xffffffffffffffff, 0xd75e8000)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0)
mount$overlay(0x400002, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,nfs_export=on,index=on'])
mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2228e66a9160b6602f73723000"], &(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='befs\x00', 0x0, &(0x7f0000000600)='overlay\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x1, 0xc0000000, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x20a8862, 0x0)
rmdir(&(0x7f0000000080)='./bus/file0\x00')

00:23:31 executing program 3:
syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @remote, @val={@val={0x8100}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @rand_addr, @rand_addr, {[@routing={0x0, 0x0, 0x1, 0x2, 0x2}]}}}}}, 0x0)

[  319.378275][T23519] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  319.464461][T23516] loop2: detected capacity change from 0 to 264192
[  319.502790][T23516] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
00:23:31 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4860332", @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x7a, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000180)=0x90)

00:23:31 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0xff)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
r2 = dup3(r1, r0, 0x0)
write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a]}}, 0x50)

00:23:31 executing program 4:
syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x1200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8400effffffa)

00:23:31 executing program 5:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000000120001"], 0x34}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

00:23:31 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}]}, 0x58}}, 0x0)

00:23:31 executing program 1:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="f7ff000000000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="140002"], 0x40}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = dup(r7)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0)

00:23:31 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0xff)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
r2 = dup3(r1, r0, 0x0)
write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a]}}, 0x50)

00:23:31 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0xff)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
r2 = dup3(r1, r0, 0x0)
write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a]}}, 0x50)

[  320.012938][T23546] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  320.037328][T23546] device bridge1 entered promiscuous mode
[  320.046297][T23548] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
00:23:32 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}]}, 0x58}}, 0x0)

[  320.057185][T23546] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  320.090006][T23546] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  320.118644][T23558] loop4: detected capacity change from 0 to 264192
[  320.125263][T23554] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
00:23:32 executing program 5:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000000120001"], 0x34}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

00:23:32 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}]}, 0x58}}, 0x0)

00:23:32 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0xff)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
r2 = dup3(r1, r0, 0x0)
write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a]}}, 0x50)

[  320.162377][T23558] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  320.184825][T23565] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  320.246989][   T36] audit: type=1804 audit(1615595012.190:198): pid=23558 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir297863628/syzkaller.KCo0yb/441/file0/bus" dev="loop4" ino=16 res=1 errno=0
00:23:32 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4860332", @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x7a, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000180)=0x90)

00:23:32 executing program 1:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="f7ff000000000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="140002"], 0x40}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = dup(r7)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0)

[  320.721121][T23579] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  320.734257][T23579] device bridge2 entered promiscuous mode
00:23:32 executing program 4:
syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x1200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8400effffffa)

00:23:32 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}]}, 0x58}}, 0x0)

00:23:32 executing program 5:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="f7ff000000000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="140002"], 0x40}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = dup(r7)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0)

00:23:32 executing program 3:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="f7ff000000000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="140002"], 0x40}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = dup(r7)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0)

00:23:32 executing program 1:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="f7ff000000000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="140002"], 0x40}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = dup(r7)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0)

[  320.822053][   T24] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  320.850312][T23588] device bridge4 entered promiscuous mode
[  320.864850][T23591] device bridge1 entered promiscuous mode
00:23:32 executing program 5:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="f7ff000000000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="140002"], 0x40}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = dup(r7)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0)

[  320.879498][T23594] device bridge3 entered promiscuous mode
00:23:32 executing program 3:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="f7ff000000000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="140002"], 0x40}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = dup(r7)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0)

00:23:32 executing program 1:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="f7ff000000000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="140002"], 0x40}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = dup(r7)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0)

[  320.944987][T23601] loop4: detected capacity change from 0 to 264192
[  320.963853][T23604] device bridge5 entered promiscuous mode
[  320.984721][T23601] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
00:23:32 executing program 3:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="f7ff000000000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="140002"], 0x40}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = dup(r7)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0)

[  321.012458][T23611] device bridge4 entered promiscuous mode
[  321.035550][   T36] audit: type=1804 audit(1615595012.980:199): pid=23601 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir297863628/syzkaller.KCo0yb/442/file0/bus" dev="loop4" ino=17 res=1 errno=0
[  321.044459][T23613] device bridge2 entered promiscuous mode
[  321.141674][T23623] device bridge6 entered promiscuous mode
00:23:33 executing program 5:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="f7ff000000000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="140002"], 0x40}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = dup(r7)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0)

[  321.341112][T23632] device bridge3 entered promiscuous mode
[  321.705620][   T59] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
00:23:35 executing program 2:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="f7ff000000000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="140002"], 0x40}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = dup(r7)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0)

00:23:35 executing program 4:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8f, 0xcf, 0x30, 0x40, 0x7ca, 0xa868, 0x23cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd9, 0xbe, 0x77, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0)

00:23:35 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@datasec={0x8, 0x2, 0x0, 0xf, 0xfffffffc, [{0x3, 0x2, 0xfffffffc}], "f3"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7794b9"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000380)=""/249, 0x4a, 0xf9, 0xa}, 0x20)

00:23:35 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, 0x2, {0x77359400}, {}, 0x0, 0x1, @userptr})

00:23:35 executing program 3:
io_setup(0x9, &(0x7f0000000100)=<r0=>0x0)
r1 = eventfd(0x0)
read$eventfd(r1, &(0x7f0000000080), 0x8)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
write$eventfd(r1, &(0x7f0000000040), 0x8)

00:23:35 executing program 0:
fanotify_init(0x0, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:23:35 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@datasec={0x8, 0x2, 0x0, 0xf, 0xfffffffc, [{0x3, 0x2, 0xfffffffc}], "f3"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7794b9"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000380)=""/249, 0x4a, 0xf9, 0xa}, 0x20)

00:23:35 executing program 0:
fanotify_init(0x0, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

[  323.347717][T23647] device bridge5 entered promiscuous mode
00:23:35 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, 0x2, {0x77359400}, {}, 0x0, 0x1, @userptr})

00:23:35 executing program 2:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="f7ff000000000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="140002"], 0x40}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = dup(r7)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0)

00:23:35 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@datasec={0x8, 0x2, 0x0, 0xf, 0xfffffffc, [{0x3, 0x2, 0xfffffffc}], "f3"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7794b9"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000380)=""/249, 0x4a, 0xf9, 0xa}, 0x20)

00:23:35 executing program 0:
fanotify_init(0x0, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:23:35 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, 0x2, {0x77359400}, {}, 0x0, 0x1, @userptr})

[  323.489795][T23668] device bridge6 entered promiscuous mode
[  323.621884][ T8935] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  324.050593][ T8935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  324.230875][ T8935] usb 5-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=23.cd
[  324.240132][ T8935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.249131][ T8935] usb 5-1: Product: syz
[  324.253721][ T8935] usb 5-1: Manufacturer: syz
[  324.258308][ T8935] usb 5-1: SerialNumber: syz
[  324.264051][ T8935] usb 5-1: config 0 descriptor??
[  324.321462][ T8935] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state.
[  324.532217][ T8935] cxusb: set interface failed
[  324.537025][ T8935] dvb-usb: bulk message failed: -22 (1/0)
[  324.544912][ T8935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  324.580611][ T8935] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R))
[  324.589210][ T8935] usb 5-1: media controller created
[  324.598004][ T8935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  324.620302][ T8935] DVB: Unable to find symbol lgdt330x_attach()
[  324.639988][ T8935] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)'
[  324.680595][ T8935] dvb-usb: bulk message failed: -22 (1/0)
[  324.686454][ T8935] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected.
[  324.697599][ T8935] usb 5-1: USB disconnect, device number 11
[  324.711154][ T8935] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected.
[  325.290582][    T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  325.671012][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  325.840960][    T7] usb 5-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=23.cd
[  325.850291][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.860922][    T7] usb 5-1: Product: syz
[  325.865135][    T7] usb 5-1: Manufacturer: syz
[  325.869835][    T7] usb 5-1: SerialNumber: syz
[  325.877475][    T7] usb 5-1: config 0 descriptor??
[  325.922251][    T7] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state.
00:23:38 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@datasec={0x8, 0x2, 0x0, 0xf, 0xfffffffc, [{0x3, 0x2, 0xfffffffc}], "f3"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7794b9"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000380)=""/249, 0x4a, 0xf9, 0xa}, 0x20)

00:23:38 executing program 2:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="f7ff000000000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="140002"], 0x40}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = dup(r7)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0)

00:23:38 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, 0x2, {0x77359400}, {}, 0x0, 0x1, @userptr})

00:23:38 executing program 0:
fanotify_init(0x0, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

00:23:38 executing program 3:
io_setup(0x9, &(0x7f0000000100)=<r0=>0x0)
r1 = eventfd(0x0)
read$eventfd(r1, &(0x7f0000000080), 0x8)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
write$eventfd(r1, &(0x7f0000000040), 0x8)

00:23:38 executing program 4:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8f, 0xcf, 0x30, 0x40, 0x7ca, 0xa868, 0x23cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd9, 0xbe, 0x77, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0)

[  326.132655][    T7] cxusb: set interface failed
[  326.137422][    T7] dvb-usb: bulk message failed: -22 (1/0)
[  326.162607][    T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
00:23:38 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, 0x2, {0x77359400}, {}, 0x0, 0x1, @userptr})

00:23:38 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x4c000000}, 0x0)

[  326.204824][T23735] __nla_validate_parse: 21 callbacks suppressed
[  326.204839][T23735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  326.242227][    T7] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R))
00:23:38 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, 0x2, {0x77359400}, {}, 0x0, 0x1, @userptr})

00:23:38 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff)

[  326.251987][T23735] device bridge7 entered promiscuous mode
[  326.267505][    T7] usb 5-1: media controller created
[  326.298795][T23744] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  326.302391][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
00:23:38 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x4c000000}, 0x0)

00:23:38 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000bc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000240), 0x24, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x2b)

00:23:38 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, 0x2, {0x77359400}, {}, 0x0, 0x1, @userptr})

00:23:38 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff)

00:23:38 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x4c000000}, 0x0)

00:23:38 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000bc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000240), 0x24, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x2b)

[  326.418117][    T7] DVB: Unable to find symbol lgdt330x_attach()
[  326.425878][    T7] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)'
[  326.491925][    T7] dvb-usb: bulk message failed: -22 (1/0)
[  326.497689][    T7] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected.
[  326.535882][    T7] usb 5-1: USB disconnect, device number 12
[  326.564011][    T7] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected.
[  326.930635][    T7] usb 5-1: new high-speed USB device number 13 using dummy_hcd
00:23:39 executing program 3:
io_setup(0x9, &(0x7f0000000100)=<r0=>0x0)
r1 = eventfd(0x0)
read$eventfd(r1, &(0x7f0000000080), 0x8)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
write$eventfd(r1, &(0x7f0000000040), 0x8)

[  327.290636][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  327.451022][    T7] usb 5-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=23.cd
[  327.460649][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.468708][    T7] usb 5-1: Product: syz
[  327.472936][    T7] usb 5-1: Manufacturer: syz
[  327.477550][    T7] usb 5-1: SerialNumber: syz
[  327.483204][    T7] usb 5-1: config 0 descriptor??
[  327.522458][    T7] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state.
[  327.752018][    T7] cxusb: set interface failed
[  327.756724][    T7] dvb-usb: bulk message failed: -22 (1/0)
[  327.765017][    T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  327.790696][    T7] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R))
[  327.799554][    T7] usb 5-1: media controller created
[  327.809728][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  327.828919][    T7] DVB: Unable to find symbol lgdt330x_attach()
[  327.835458][    T7] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)'
[  327.880677][    T7] dvb-usb: bulk message failed: -22 (1/0)
[  327.886937][    T7] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected.
[  327.898285][    T7] usb 5-1: USB disconnect, device number 13
[  327.912738][    T7] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected.
00:23:40 executing program 4:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8f, 0xcf, 0x30, 0x40, 0x7ca, 0xa868, 0x23cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd9, 0xbe, 0x77, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0)

00:23:40 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff)

00:23:40 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff)

00:23:40 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000bc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000240), 0x24, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x2b)

00:23:40 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x4c000000}, 0x0)

00:23:40 executing program 3:
io_setup(0x9, &(0x7f0000000100)=<r0=>0x0)
r1 = eventfd(0x0)
read$eventfd(r1, &(0x7f0000000080), 0x8)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
write$eventfd(r1, &(0x7f0000000040), 0x8)

00:23:40 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
fsetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0)

00:23:40 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff)

00:23:40 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff)

00:23:40 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000bc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000240), 0x24, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x2b)

00:23:40 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
fsetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0)

00:23:40 executing program 2:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
close(r0)
socket$inet(0x2, 0x6, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})

[  328.610655][ T9774] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  329.010681][ T9774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  329.201022][ T9774] usb 5-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=23.cd
[  329.210191][ T9774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.219085][ T9774] usb 5-1: Product: syz
[  329.223939][ T9774] usb 5-1: Manufacturer: syz
[  329.228546][ T9774] usb 5-1: SerialNumber: syz
[  329.234938][ T9774] usb 5-1: config 0 descriptor??
[  329.282755][ T9774] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state.
[  329.491846][ T9774] cxusb: set interface failed
[  329.496552][ T9774] dvb-usb: bulk message failed: -22 (1/0)
[  329.503626][ T9774] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  329.530687][ T9774] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R))
[  329.539960][ T9774] usb 5-1: media controller created
[  329.550528][ T9774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  329.569422][ T9774] DVB: Unable to find symbol lgdt330x_attach()
[  329.576861][ T9774] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)'
[  329.640729][ T9774] dvb-usb: bulk message failed: -22 (1/0)
[  329.646810][ T9774] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected.
[  329.658427][ T9774] usb 5-1: USB disconnect, device number 14
[  329.671596][ T9774] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected.
00:23:41 executing program 4:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8f, 0xcf, 0x30, 0x40, 0x7ca, 0xa868, 0x23cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd9, 0xbe, 0x77, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0)

00:23:41 executing program 1:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600)
sendfile(r1, r2, 0x0, 0x1c575)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, r2, 0x9929f000)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002e00)='/dev/vcsa\x00', 0x101203, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000002e40)={@private1={0xfc, 0x1, [], 0x1}, @private1, @mcast2, 0x1, 0x1ff, 0x80, 0x500, 0x401, 0x410080})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104c200"/20, @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000d300000000000000c60000000419008009000000183b00"/48], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000001a00)=""/4096, 0x41100, 0x2, [], 0x0, 0x0, r3, 0x8, &(0x7f0000000480)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xf, 0xcd, 0xfffffffd}, 0x10}, 0x78)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x41b1394fc6da3d51, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="4b920800100000009500000000000000850000004e00000018320000010000000000000000000000850000002329bc62"], &(0x7f0000000140)='syzkaller\x00', 0x80, 0xbc, &(0x7f0000000280)=""/188, 0x40f00, 0x4, [], 0x0, 0xe, r1, 0x8, &(0x7f0000000340)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0x3ff, 0xb3}, 0x10, 0xffffffffffffffff, r6}, 0x78)

00:23:41 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
fsetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0)

00:23:41 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff)

00:23:41 executing program 2:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
close(r0)
socket$inet(0x2, 0x6, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})

00:23:41 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec0000e9d564f022", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

00:23:42 executing program 2:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
close(r0)
socket$inet(0x2, 0x6, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})

00:23:42 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
fsetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0)

00:23:42 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff)

[  330.110373][   T36] audit: type=1804 audit(1615595022.050:200): pid=23911 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file0" dev="sda1" ino=15313 res=1 errno=0
[  330.135099][T23905] batman_adv: Cannot find parent device
00:23:42 executing program 2:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
close(r0)
socket$inet(0x2, 0x6, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})

[  330.182141][T23905] bridge7: port 1(gretap0) entered blocking state
[  330.204502][T23905] bridge7: port 1(gretap0) entered disabled state
00:23:42 executing program 5:
r0 = socket(0x100000000011, 0x2, 0x0)
bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0}, &(0x7f00000002c0)=0x14)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4)
r3 = socket(0x100000000011, 0x2, 0x0)
bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000240)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4)
bind$xdp(r2, &(0x7f0000000900)={0x2c, 0xc, r4}, 0x10)
bind$xdp(r2, &(0x7f0000000900)={0x2c, 0x8, r1}, 0x10)

00:23:42 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec0000e9d564f022", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

[  330.407250][T23942] batman_adv: Cannot find parent device
[  330.410692][ T9774] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  330.422045][T23942] bridge9: port 1(gretap1) entered blocking state
[  330.429235][T23942] bridge9: port 1(gretap1) entered disabled state
[  330.771853][ T9774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  330.940707][ T9774] usb 5-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=23.cd
[  330.950172][ T9774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.958277][ T9774] usb 5-1: Product: syz
[  330.962499][ T9774] usb 5-1: Manufacturer: syz
[  330.967113][ T9774] usb 5-1: SerialNumber: syz
[  330.972508][ T9774] usb 5-1: config 0 descriptor??
[  331.013555][ T9774] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state.
[  331.220713][ T9774] cxusb: set interface failed
[  331.225427][ T9774] dvb-usb: bulk message failed: -22 (1/0)
[  331.232444][ T9774] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  331.260825][ T9774] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R))
[  331.269445][ T9774] usb 5-1: media controller created
[  331.281354][ T9774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  331.310866][ T9774] DVB: Unable to find symbol lgdt330x_attach()
[  331.317052][ T9774] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)'
[  331.361526][ T9774] dvb-usb: bulk message failed: -22 (1/0)
[  331.367261][ T9774] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected.
[  331.379400][ T9774] usb 5-1: USB disconnect, device number 15
[  331.388762][ T9774] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected.
00:23:43 executing program 1:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000001400)="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", 0x600)
sendfile(r1, r2, 0x0, 0x1c575)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, r2, 0x9929f000)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002e00)='/dev/vcsa\x00', 0x101203, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000002e40)={@private1={0xfc, 0x1, [], 0x1}, @private1, @mcast2, 0x1, 0x1ff, 0x80, 0x500, 0x401, 0x410080})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104c200"/20, @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000d300000000000000c60000000419008009000000183b00"/48], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000001a00)=""/4096, 0x41100, 0x2, [], 0x0, 0x0, r3, 0x8, &(0x7f0000000480)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xf, 0xcd, 0xfffffffd}, 0x10}, 0x78)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x41b1394fc6da3d51, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="4b920800100000009500000000000000850000004e00000018320000010000000000000000000000850000002329bc62"], &(0x7f0000000140)='syzkaller\x00', 0x80, 0xbc, &(0x7f0000000280)=""/188, 0x40f00, 0x4, [], 0x0, 0xe, r1, 0x8, &(0x7f0000000340)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0x3ff, 0xb3}, 0x10, 0xffffffffffffffff, r6}, 0x78)

00:23:43 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff)

00:23:43 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec0000e9d564f022", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

00:23:43 executing program 4:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000001400)="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", 0x600)
sendfile(r1, r2, 0x0, 0x1c575)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, r2, 0x9929f000)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002e00)='/dev/vcsa\x00', 0x101203, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000002e40)={@private1={0xfc, 0x1, [], 0x1}, @private1, @mcast2, 0x1, 0x1ff, 0x80, 0x500, 0x401, 0x410080})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104c200"/20, @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000d300000000000000c60000000419008009000000183b00"/48], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000001a00)=""/4096, 0x41100, 0x2, [], 0x0, 0x0, r3, 0x8, &(0x7f0000000480)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xf, 0xcd, 0xfffffffd}, 0x10}, 0x78)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x41b1394fc6da3d51, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="4b920800100000009500000000000000850000004e00000018320000010000000000000000000000850000002329bc62"], &(0x7f0000000140)='syzkaller\x00', 0x80, 0xbc, &(0x7f0000000280)=""/188, 0x40f00, 0x4, [], 0x0, 0xe, r1, 0x8, &(0x7f0000000340)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0x3ff, 0xb3}, 0x10, 0xffffffffffffffff, r6}, 0x78)

00:23:43 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec0000e9d564f022", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

00:23:43 executing program 5:
r0 = socket(0x100000000011, 0x2, 0x0)
bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0}, &(0x7f00000002c0)=0x14)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4)
r3 = socket(0x100000000011, 0x2, 0x0)
bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000240)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4)
bind$xdp(r2, &(0x7f0000000900)={0x2c, 0xc, r4}, 0x10)
bind$xdp(r2, &(0x7f0000000900)={0x2c, 0x8, r1}, 0x10)

00:23:43 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff)

00:23:43 executing program 5:
r0 = socket(0x100000000011, 0x2, 0x0)
bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0}, &(0x7f00000002c0)=0x14)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4)
r3 = socket(0x100000000011, 0x2, 0x0)
bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000240)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4)
bind$xdp(r2, &(0x7f0000000900)={0x2c, 0xc, r4}, 0x10)
bind$xdp(r2, &(0x7f0000000900)={0x2c, 0x8, r1}, 0x10)

[  331.910378][T23999] batman_adv: Cannot find parent device
00:23:43 executing program 1:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000001400)="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", 0x600)
sendfile(r1, r2, 0x0, 0x1c575)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, r2, 0x9929f000)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002e00)='/dev/vcsa\x00', 0x101203, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000002e40)={@private1={0xfc, 0x1, [], 0x1}, @private1, @mcast2, 0x1, 0x1ff, 0x80, 0x500, 0x401, 0x410080})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104c200"/20, @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000d300000000000000c60000000419008009000000183b00"/48], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000001a00)=""/4096, 0x41100, 0x2, [], 0x0, 0x0, r3, 0x8, &(0x7f0000000480)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xf, 0xcd, 0xfffffffd}, 0x10}, 0x78)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x41b1394fc6da3d51, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="4b920800100000009500000000000000850000004e00000018320000010000000000000000000000850000002329bc62"], &(0x7f0000000140)='syzkaller\x00', 0x80, 0xbc, &(0x7f0000000280)=""/188, 0x40f00, 0x4, [], 0x0, 0xe, r1, 0x8, &(0x7f0000000340)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0x3ff, 0xb3}, 0x10, 0xffffffffffffffff, r6}, 0x78)

00:23:43 executing program 4:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000001400)="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", 0x600)
sendfile(r1, r2, 0x0, 0x1c575)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, r2, 0x9929f000)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002e00)='/dev/vcsa\x00', 0x101203, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000002e40)={@private1={0xfc, 0x1, [], 0x1}, @private1, @mcast2, 0x1, 0x1ff, 0x80, 0x500, 0x401, 0x410080})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104c200"/20, @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000d300000000000000c60000000419008009000000183b00"/48], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000001a00)=""/4096, 0x41100, 0x2, [], 0x0, 0x0, r3, 0x8, &(0x7f0000000480)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xf, 0xcd, 0xfffffffd}, 0x10}, 0x78)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x41b1394fc6da3d51, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="4b920800100000009500000000000000850000004e00000018320000010000000000000000000000850000002329bc62"], &(0x7f0000000140)='syzkaller\x00', 0x80, 0xbc, &(0x7f0000000280)=""/188, 0x40f00, 0x4, [], 0x0, 0xe, r1, 0x8, &(0x7f0000000340)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0x3ff, 0xb3}, 0x10, 0xffffffffffffffff, r6}, 0x78)

[  331.956277][T23999] bridge8: port 1(gretap0) entered blocking state
[  331.984304][T23999] bridge8: port 1(gretap0) entered disabled state
00:23:44 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff)

00:23:44 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec0000e9d564f022", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

[  332.013402][T24001] batman_adv: Cannot find parent device
[  332.020062][T24001] bridge10: port 1(gretap2) entered blocking state
[  332.042105][T24001] bridge10: port 1(gretap2) entered disabled state
00:23:44 executing program 5:
r0 = socket(0x100000000011, 0x2, 0x0)
bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0}, &(0x7f00000002c0)=0x14)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4)
r3 = socket(0x100000000011, 0x2, 0x0)
bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000240)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4)
bind$xdp(r2, &(0x7f0000000900)={0x2c, 0xc, r4}, 0x10)
bind$xdp(r2, &(0x7f0000000900)={0x2c, 0x8, r1}, 0x10)

00:23:44 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec0000e9d564f022", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

00:23:44 executing program 1:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000001400)="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", 0x600)
sendfile(r1, r2, 0x0, 0x1c575)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, r2, 0x9929f000)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002e00)='/dev/vcsa\x00', 0x101203, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000002e40)={@private1={0xfc, 0x1, [], 0x1}, @private1, @mcast2, 0x1, 0x1ff, 0x80, 0x500, 0x401, 0x410080})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104c200"/20, @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000d300000000000000c60000000419008009000000183b00"/48], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000001a00)=""/4096, 0x41100, 0x2, [], 0x0, 0x0, r3, 0x8, &(0x7f0000000480)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xf, 0xcd, 0xfffffffd}, 0x10}, 0x78)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x41b1394fc6da3d51, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="4b920800100000009500000000000000850000004e00000018320000010000000000000000000000850000002329bc62"], &(0x7f0000000140)='syzkaller\x00', 0x80, 0xbc, &(0x7f0000000280)=""/188, 0x40f00, 0x4, [], 0x0, 0xe, r1, 0x8, &(0x7f0000000340)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0x3ff, 0xb3}, 0x10, 0xffffffffffffffff, r6}, 0x78)

00:23:44 executing program 0:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000001400)="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", 0x600)
sendfile(r1, r2, 0x0, 0x1c575)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, r2, 0x9929f000)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002e00)='/dev/vcsa\x00', 0x101203, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000002e40)={@private1={0xfc, 0x1, [], 0x1}, @private1, @mcast2, 0x1, 0x1ff, 0x80, 0x500, 0x401, 0x410080})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104c200"/20, @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000d300000000000000c60000000419008009000000183b00"/48], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000001a00)=""/4096, 0x41100, 0x2, [], 0x0, 0x0, r3, 0x8, &(0x7f0000000480)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xf, 0xcd, 0xfffffffd}, 0x10}, 0x78)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x41b1394fc6da3d51, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="4b920800100000009500000000000000850000004e00000018320000010000000000000000000000850000002329bc62"], &(0x7f0000000140)='syzkaller\x00', 0x80, 0xbc, &(0x7f0000000280)=""/188, 0x40f00, 0x4, [], 0x0, 0xe, r1, 0x8, &(0x7f0000000340)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0x3ff, 0xb3}, 0x10, 0xffffffffffffffff, r6}, 0x78)

00:23:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec0000e9d564f022", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

00:23:44 executing program 4:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000001400)="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", 0x600)
sendfile(r1, r2, 0x0, 0x1c575)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, r2, 0x9929f000)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002e00)='/dev/vcsa\x00', 0x101203, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000002e40)={@private1={0xfc, 0x1, [], 0x1}, @private1, @mcast2, 0x1, 0x1ff, 0x80, 0x500, 0x401, 0x410080})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104c200"/20, @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000d300000000000000c60000000419008009000000183b00"/48], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000001a00)=""/4096, 0x41100, 0x2, [], 0x0, 0x0, r3, 0x8, &(0x7f0000000480)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xf, 0xcd, 0xfffffffd}, 0x10}, 0x78)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x41b1394fc6da3d51, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="4b920800100000009500000000000000850000004e00000018320000010000000000000000000000850000002329bc62"], &(0x7f0000000140)='syzkaller\x00', 0x80, 0xbc, &(0x7f0000000280)=""/188, 0x40f00, 0x4, [], 0x0, 0xe, r1, 0x8, &(0x7f0000000340)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0x3ff, 0xb3}, 0x10, 0xffffffffffffffff, r6}, 0x78)

[  332.277867][T24031] batman_adv: Cannot find parent device
[  332.313712][T24031] bridge9: port 1(gretap1) entered blocking state
00:23:44 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002e80)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x3f6, 0x0)

[  332.344797][T24031] bridge9: port 1(gretap1) entered disabled state
[  332.363258][   T36] audit: type=1804 audit(1615595024.310:201): pid=24051 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file0" dev="sda1" ino=15543 res=1 errno=0
[  332.424447][T24033] batman_adv: Cannot find parent device
[  332.442192][T24033] bridge11: port 1(gretap3) entered blocking state
00:23:44 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec0000e9d564f022", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

00:23:44 executing program 0:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000001400)="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", 0x600)
sendfile(r1, r2, 0x0, 0x1c575)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, r2, 0x9929f000)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002e00)='/dev/vcsa\x00', 0x101203, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000002e40)={@private1={0xfc, 0x1, [], 0x1}, @private1, @mcast2, 0x1, 0x1ff, 0x80, 0x500, 0x401, 0x410080})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104c200"/20, @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000d300000000000000c60000000419008009000000183b00"/48], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000001a00)=""/4096, 0x41100, 0x2, [], 0x0, 0x0, r3, 0x8, &(0x7f0000000480)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xf, 0xcd, 0xfffffffd}, 0x10}, 0x78)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x41b1394fc6da3d51, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="4b920800100000009500000000000000850000004e00000018320000010000000000000000000000850000002329bc62"], &(0x7f0000000140)='syzkaller\x00', 0x80, 0xbc, &(0x7f0000000280)=""/188, 0x40f00, 0x4, [], 0x0, 0xe, r1, 0x8, &(0x7f0000000340)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0x3ff, 0xb3}, 0x10, 0xffffffffffffffff, r6}, 0x78)

[  332.476830][   T36] audit: type=1804 audit(1615595024.310:202): pid=24043 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="file0" dev="sda1" ino=15543 res=1 errno=0
[  332.501899][T24033] bridge11: port 1(gretap3) entered disabled state
00:23:44 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40, &(0x7f0000000780)={[{@size={'size', 0x3d, [0x31, 0x0]}}]})

00:23:44 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x2, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x94}}, 0x0)

[  332.553217][T24056] batman_adv: Cannot find parent device
[  332.559828][T24056] bridge4: port 1(gretap0) entered blocking state
00:23:44 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
close_range(r0, r0, 0x2)

[  332.605477][T24056] bridge4: port 1(gretap0) entered disabled state
[  332.653723][T24069] batman_adv: Cannot find parent device
[  332.673044][T24069] bridge10: port 1(gretap2) entered blocking state
00:23:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec0000e9d564f022", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

00:23:44 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x2, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x94}}, 0x0)

00:23:44 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40, &(0x7f0000000780)={[{@size={'size', 0x3d, [0x31, 0x0]}}]})

[  332.705885][T24069] bridge10: port 1(gretap2) entered disabled state
00:23:44 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
close_range(r0, r0, 0x2)

00:23:44 executing program 0:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000001400)="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", 0x600)
sendfile(r1, r2, 0x0, 0x1c575)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, r2, 0x9929f000)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002e00)='/dev/vcsa\x00', 0x101203, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000002e40)={@private1={0xfc, 0x1, [], 0x1}, @private1, @mcast2, 0x1, 0x1ff, 0x80, 0x500, 0x401, 0x410080})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104c200"/20, @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000d300000000000000c60000000419008009000000183b00"/48], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000001a00)=""/4096, 0x41100, 0x2, [], 0x0, 0x0, r3, 0x8, &(0x7f0000000480)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xf, 0xcd, 0xfffffffd}, 0x10}, 0x78)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x41b1394fc6da3d51, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="4b920800100000009500000000000000850000004e00000018320000010000000000000000000000850000002329bc62"], &(0x7f0000000140)='syzkaller\x00', 0x80, 0xbc, &(0x7f0000000280)=""/188, 0x40f00, 0x4, [], 0x0, 0xe, r1, 0x8, &(0x7f0000000340)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0x3ff, 0xb3}, 0x10, 0xffffffffffffffff, r6}, 0x78)

00:23:44 executing program 2:
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x1)

00:23:44 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x2, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x94}}, 0x0)

[  332.857959][T24091] batman_adv: Cannot find parent device
[  332.883669][T24091] bridge5: port 1(gretap1) entered blocking state
00:23:44 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
close_range(r0, r0, 0x2)

00:23:44 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40, &(0x7f0000000780)={[{@size={'size', 0x3d, [0x31, 0x0]}}]})

[  332.909535][T24091] bridge5: port 1(gretap1) entered disabled state
00:23:44 executing program 2:
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x1)

00:23:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec0000e9d564f022", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

00:23:44 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x2, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x94}}, 0x0)

00:23:44 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0)

00:23:45 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
close_range(r0, r0, 0x2)

00:23:45 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40, &(0x7f0000000780)={[{@size={'size', 0x3d, [0x31, 0x0]}}]})

00:23:45 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x37}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x3c, 0x2, [@TCA_ROUTE4_ACT={0x38, 0x6, [@m_xt={0x34, 0x1, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0)
r3 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0)

00:23:45 executing program 2:
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x1)

[  333.142788][T24119] batman_adv: Cannot find parent device
[  333.180951][T24119] bridge6: port 1(gretap2) entered blocking state
[  333.187452][T24119] bridge6: port 1(gretap2) entered disabled state
00:23:45 executing program 3:
unshare(0x400)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_ifreq(r0, 0x8982, 0x0)

00:23:45 executing program 0:
waitid(0x2, 0x0, &(0x7f0000000000), 0x4, &(0x7f0000000140))

[  333.214151][T24132] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
00:23:45 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010700000000000000000100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)

00:23:45 executing program 5:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001480)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3}, 0x18)
connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r2}, 0x18)

00:23:45 executing program 2:
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x1)

00:23:45 executing program 3:
unshare(0x400)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_ifreq(r0, 0x8982, 0x0)

[  333.314370][T24145] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
00:23:45 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x37}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x3c, 0x2, [@TCA_ROUTE4_ACT={0x38, 0x6, [@m_xt={0x34, 0x1, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0)
r3 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0)

00:23:45 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000002c0)={0x1, 0x0, 0x1000, 0xed, &(0x7f00000000c0)="636ab72acdf9a277a24b9fb4f770db6cdf9839e29229574e9cc6f90ea4e0d2920f678408d88e66e8cf25b51ba4a853aefe38b4296e889263e7bf9a9b988e3b6e15f5ccc51190d92b2ab425a49b31f2cc20f02ed4d3d153b6273ea4eb2bbfd4b7754255ba64ec6f799ac678ea5e62f7a6dad5bcb6023e7541235acc621a5db79f2ea3369addbe16a40c5a6edd21d5951f263a0daf4f8b6305c7679503a4370a5112e8dc73e2d3a49e5d233b46bee6a9d700303525d2209307bba2a377600544a99b061f13658ee00681d563d4384df9bb164d4c5fbc7be5e13039fbae43e6bcfc973d3403b5a49631eea0e42fc0", 0x0, 0x0, 0x0})
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200002000525d7, 0x187f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))

00:23:45 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010700000000000000000100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)

00:23:45 executing program 0:
waitid(0x2, 0x0, &(0x7f0000000000), 0x4, &(0x7f0000000140))

00:23:45 executing program 5:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001480)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3}, 0x18)
connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r2}, 0x18)

00:23:45 executing program 3:
unshare(0x400)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_ifreq(r0, 0x8982, 0x0)

[  333.472337][T24162] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
00:23:45 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000002c0)={0x1, 0x0, 0x1000, 0xed, &(0x7f00000000c0)="636ab72acdf9a277a24b9fb4f770db6cdf9839e29229574e9cc6f90ea4e0d2920f678408d88e66e8cf25b51ba4a853aefe38b4296e889263e7bf9a9b988e3b6e15f5ccc51190d92b2ab425a49b31f2cc20f02ed4d3d153b6273ea4eb2bbfd4b7754255ba64ec6f799ac678ea5e62f7a6dad5bcb6023e7541235acc621a5db79f2ea3369addbe16a40c5a6edd21d5951f263a0daf4f8b6305c7679503a4370a5112e8dc73e2d3a49e5d233b46bee6a9d700303525d2209307bba2a377600544a99b061f13658ee00681d563d4384df9bb164d4c5fbc7be5e13039fbae43e6bcfc973d3403b5a49631eea0e42fc0", 0x0, 0x0, 0x0})
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200002000525d7, 0x187f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))

00:23:45 executing program 0:
waitid(0x2, 0x0, &(0x7f0000000000), 0x4, &(0x7f0000000140))

00:23:45 executing program 5:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001480)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3}, 0x18)
connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r2}, 0x18)

00:23:45 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010700000000000000000100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)

00:23:45 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x37}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x3c, 0x2, [@TCA_ROUTE4_ACT={0x38, 0x6, [@m_xt={0x34, 0x1, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0)
r3 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0)

00:23:45 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000002c0)={0x1, 0x0, 0x1000, 0xed, &(0x7f00000000c0)="636ab72acdf9a277a24b9fb4f770db6cdf9839e29229574e9cc6f90ea4e0d2920f678408d88e66e8cf25b51ba4a853aefe38b4296e889263e7bf9a9b988e3b6e15f5ccc51190d92b2ab425a49b31f2cc20f02ed4d3d153b6273ea4eb2bbfd4b7754255ba64ec6f799ac678ea5e62f7a6dad5bcb6023e7541235acc621a5db79f2ea3369addbe16a40c5a6edd21d5951f263a0daf4f8b6305c7679503a4370a5112e8dc73e2d3a49e5d233b46bee6a9d700303525d2209307bba2a377600544a99b061f13658ee00681d563d4384df9bb164d4c5fbc7be5e13039fbae43e6bcfc973d3403b5a49631eea0e42fc0", 0x0, 0x0, 0x0})
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200002000525d7, 0x187f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))

00:23:45 executing program 3:
unshare(0x400)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_ifreq(r0, 0x8982, 0x0)

00:23:45 executing program 5:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001480)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3}, 0x18)
connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r2}, 0x18)

00:23:45 executing program 0:
waitid(0x2, 0x0, &(0x7f0000000000), 0x4, &(0x7f0000000140))

00:23:45 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010700000000000000000100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)

00:23:45 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000002c0)={0x1, 0x0, 0x1000, 0xed, &(0x7f00000000c0)="636ab72acdf9a277a24b9fb4f770db6cdf9839e29229574e9cc6f90ea4e0d2920f678408d88e66e8cf25b51ba4a853aefe38b4296e889263e7bf9a9b988e3b6e15f5ccc51190d92b2ab425a49b31f2cc20f02ed4d3d153b6273ea4eb2bbfd4b7754255ba64ec6f799ac678ea5e62f7a6dad5bcb6023e7541235acc621a5db79f2ea3369addbe16a40c5a6edd21d5951f263a0daf4f8b6305c7679503a4370a5112e8dc73e2d3a49e5d233b46bee6a9d700303525d2209307bba2a377600544a99b061f13658ee00681d563d4384df9bb164d4c5fbc7be5e13039fbae43e6bcfc973d3403b5a49631eea0e42fc0", 0x0, 0x0, 0x0})
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200002000525d7, 0x187f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))

[  333.713929][T24192] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
00:23:45 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000007fc0), &(0x7f0000008000)=0x4)

00:23:45 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x37}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x3c, 0x2, [@TCA_ROUTE4_ACT={0x38, 0x6, [@m_xt={0x34, 0x1, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0)
r3 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0)

00:23:45 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

00:23:45 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x17, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0)

00:23:45 executing program 2:
syz_usb_connect(0x0, 0x48, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x4f, 0x57, 0x51, 0x40, 0xf3d, 0x68aa, 0xcb91, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x4, 0x42, 0xeb, 0x1a, 0x0, [], [{{0x9, 0x5, 0x3}}, {{0x9, 0x5, 0x4}}, {{0x9, 0x5, 0x2}}, {{0x9, 0x5, 0x8}}]}}]}}]}}, 0x0)

00:23:45 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000007fc0), &(0x7f0000008000)=0x4)

00:23:45 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0xb}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xd6, &(0x7f00000000c0)=""/214, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

00:23:45 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0x4, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x60}}, 0x0)

[  333.942126][T24223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
00:23:45 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x17, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0)

00:23:45 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0xb}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xd6, &(0x7f00000000c0)=""/214, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

00:23:46 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000007fc0), &(0x7f0000008000)=0x4)

00:23:46 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4b6, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
io_submit(0x0, 0x2, &(0x7f0000002880)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/netlink\x00')
preadv(r4, &(0x7f00000017c0), 0x375, 0x605400, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)

00:23:46 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0x4, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x60}}, 0x0)

00:23:46 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0xb}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xd6, &(0x7f00000000c0)=""/214, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

00:23:46 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x17, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0)

00:23:46 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000007fc0), &(0x7f0000008000)=0x4)

[  334.270738][ T4824] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  334.630866][ T4824] usb 3-1: config 0 has an invalid interface number: 10 but max is 0
[  334.639020][ T4824] usb 3-1: config 0 has no interface number 0
[  334.645799][ T4824] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  334.656215][ T4824] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  334.666347][ T4824] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  334.676496][ T4824] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  334.686908][ T4824] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=cb.91
[  334.696469][ T4824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.707029][ T4824] usb 3-1: config 0 descriptor??
[  334.752534][ T4824] usb 3-1: Expected 3 endpoints, found: 4
[  334.955415][ T4824] usb 3-1: USB disconnect, device number 7
[  335.720800][ T4824] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  336.100813][ T4824] usb 3-1: config 0 has an invalid interface number: 10 but max is 0
[  336.108899][ T4824] usb 3-1: config 0 has no interface number 0
[  336.115222][ T4824] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  336.125048][ T4824] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  336.136063][ T4824] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  336.146177][ T4824] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  336.155965][ T4824] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=cb.91
[  336.165022][ T4824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.173717][ T4824] usb 3-1: config 0 descriptor??
[  336.221388][ T4824] usb 3-1: Expected 3 endpoints, found: 4
00:23:48 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x17, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0)

00:23:48 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0x4, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x60}}, 0x0)

00:23:48 executing program 3:
clock_gettime(0x0, &(0x7f0000000000))
clock_getres(0x0, &(0x7f0000000140))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x6, &(0x7f0000000940))
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={0x0}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
accept4$unix(r1, &(0x7f0000000e40), &(0x7f0000000ec0)=0x6e, 0x80800)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001700)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
fork()

00:23:48 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0xb}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xd6, &(0x7f00000000c0)=""/214, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

00:23:48 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}}, {{@in=@empty}, 0x0, @in=@private}}, 0xe8)

00:23:48 executing program 2:
syz_usb_connect(0x0, 0x48, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x4f, 0x57, 0x51, 0x40, 0xf3d, 0x68aa, 0xcb91, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x4, 0x42, 0xeb, 0x1a, 0x0, [], [{{0x9, 0x5, 0x3}}, {{0x9, 0x5, 0x4}}, {{0x9, 0x5, 0x2}}, {{0x9, 0x5, 0x8}}]}}]}}]}}, 0x0)

[  336.430858][ T4824] usb 3-1: USB disconnect, device number 8
00:23:48 executing program 0:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
preadv(r1, &(0x7f00000012c0), 0x1000000000000147, 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000080)=""/115, 0x73}], 0x1, 0xe31e, 0x0)

00:23:48 executing program 4:
set_mempolicy(0x2, &(0x7f0000000000)=0x80000001, 0x7f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8188aea6, &(0x7f00000003c0)={"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"})

00:23:48 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0x4, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x60}}, 0x0)

00:23:48 executing program 3:
clock_gettime(0x0, &(0x7f0000000000))
clock_getres(0x0, &(0x7f0000000140))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x6, &(0x7f0000000940))
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={0x0}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
accept4$unix(r1, &(0x7f0000000e40), &(0x7f0000000ec0)=0x6e, 0x80800)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001700)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
fork()

00:23:48 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}}, {{@in=@empty}, 0x0, @in=@private}}, 0xe8)

00:23:48 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}}, {{@in=@empty}, 0x0, @in=@private}}, 0xe8)

00:23:48 executing program 4:
set_mempolicy(0x2, &(0x7f0000000000)=0x80000001, 0x7f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8188aea6, &(0x7f00000003c0)={"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"})

00:23:48 executing program 5:
set_mempolicy(0x2, &(0x7f0000000000)=0x80000001, 0x7f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8188aea6, &(0x7f00000003c0)={"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"})

00:23:48 executing program 0:
set_mempolicy(0x2, &(0x7f0000000000)=0x80000001, 0x7f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8188aea6, &(0x7f00000003c0)={"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"})

00:23:48 executing program 3:
clock_gettime(0x0, &(0x7f0000000000))
clock_getres(0x0, &(0x7f0000000140))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x6, &(0x7f0000000940))
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={0x0}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
accept4$unix(r1, &(0x7f0000000e40), &(0x7f0000000ec0)=0x6e, 0x80800)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001700)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
fork()

00:23:48 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}}, {{@in=@empty}, 0x0, @in=@private}}, 0xe8)

[  336.950804][ T4824] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  337.340876][ T4824] usb 3-1: config 0 has an invalid interface number: 10 but max is 0
[  337.349366][ T4824] usb 3-1: config 0 has no interface number 0
[  337.355494][ T4824] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  337.365303][ T4824] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  337.375149][ T4824] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  337.384910][ T4824] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  337.394789][ T4824] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=cb.91
[  337.403899][ T4824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.414708][ T4824] usb 3-1: config 0 descriptor??
[  337.461500][ T4824] usb 3-1: Expected 3 endpoints, found: 4
[  337.667810][ T4824] usb 3-1: USB disconnect, device number 9
00:23:50 executing program 2:
syz_usb_connect(0x0, 0x48, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x4f, 0x57, 0x51, 0x40, 0xf3d, 0x68aa, 0xcb91, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x4, 0x42, 0xeb, 0x1a, 0x0, [], [{{0x9, 0x5, 0x3}}, {{0x9, 0x5, 0x4}}, {{0x9, 0x5, 0x2}}, {{0x9, 0x5, 0x8}}]}}]}}]}}, 0x0)

00:23:50 executing program 4:
set_mempolicy(0x2, &(0x7f0000000000)=0x80000001, 0x7f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8188aea6, &(0x7f00000003c0)={"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"})

00:23:50 executing program 0:
set_mempolicy(0x2, &(0x7f0000000000)=0x80000001, 0x7f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8188aea6, &(0x7f00000003c0)={"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"})

00:23:50 executing program 5:
set_mempolicy(0x2, &(0x7f0000000000)=0x80000001, 0x7f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8188aea6, &(0x7f00000003c0)={"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"})

00:23:50 executing program 1:
clock_gettime(0x0, &(0x7f0000000000))
clock_getres(0x0, &(0x7f0000000140))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x6, &(0x7f0000000940))
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={0x0}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
accept4$unix(r1, &(0x7f0000000e40), &(0x7f0000000ec0)=0x6e, 0x80800)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001700)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
fork()

00:23:50 executing program 3:
clock_gettime(0x0, &(0x7f0000000000))
clock_getres(0x0, &(0x7f0000000140))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x6, &(0x7f0000000940))
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={0x0}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
accept4$unix(r1, &(0x7f0000000e40), &(0x7f0000000ec0)=0x6e, 0x80800)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001700)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
fork()

00:23:50 executing program 0:
set_mempolicy(0x2, &(0x7f0000000000)=0x80000001, 0x7f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8188aea6, &(0x7f00000003c0)={"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"})

00:23:50 executing program 3:
clock_gettime(0x0, &(0x7f0000000000))
clock_getres(0x0, &(0x7f0000000140))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x6, &(0x7f0000000940))
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={0x0}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
accept4$unix(r1, &(0x7f0000000e40), &(0x7f0000000ec0)=0x6e, 0x80800)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001700)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
fork()

00:23:50 executing program 1:
clock_gettime(0x0, &(0x7f0000000000))
clock_getres(0x0, &(0x7f0000000140))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x6, &(0x7f0000000940))
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={0x0}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
accept4$unix(r1, &(0x7f0000000e40), &(0x7f0000000ec0)=0x6e, 0x80800)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001700)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
fork()

00:23:50 executing program 5:
set_mempolicy(0x2, &(0x7f0000000000)=0x80000001, 0x7f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8188aea6, &(0x7f00000003c0)={"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"})

00:23:50 executing program 4:
set_mempolicy(0x2, &(0x7f0000000000)=0x80000001, 0x7f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8188aea6, &(0x7f00000003c0)={"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"})

00:23:50 executing program 0:
set_mempolicy(0x3, &(0x7f0000000000)=0x7fffffff, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x55)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

[  338.496546][T24403] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  338.580851][    T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  338.941161][    T7] usb 3-1: config 0 has an invalid interface number: 10 but max is 0
[  338.949367][    T7] usb 3-1: config 0 has no interface number 0
[  338.956224][    T7] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  338.966514][    T7] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  338.976700][    T7] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  338.986962][    T7] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  338.997509][    T7] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=cb.91
[  339.007238][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.016442][    T7] usb 3-1: config 0 descriptor??
[  339.061316][    T7] usb 3-1: Expected 3 endpoints, found: 4
[  339.267816][    T7] usb 3-1: USB disconnect, device number 10
00:23:51 executing program 1:
clock_gettime(0x0, &(0x7f0000000000))
clock_getres(0x0, &(0x7f0000000140))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x6, &(0x7f0000000940))
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={0x0}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
accept4$unix(r1, &(0x7f0000000e40), &(0x7f0000000ec0)=0x6e, 0x80800)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001700)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
fork()

00:23:51 executing program 2:
syz_usb_connect(0x0, 0x48, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x4f, 0x57, 0x51, 0x40, 0xf3d, 0x68aa, 0xcb91, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x4, 0x42, 0xeb, 0x1a, 0x0, [], [{{0x9, 0x5, 0x3}}, {{0x9, 0x5, 0x4}}, {{0x9, 0x5, 0x2}}, {{0x9, 0x5, 0x8}}]}}]}}]}}, 0x0)

00:23:51 executing program 3:
clock_gettime(0x0, &(0x7f0000000000))
clock_getres(0x0, &(0x7f0000000140))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x6, &(0x7f0000000940))
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={0x0}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
accept4$unix(r1, &(0x7f0000000e40), &(0x7f0000000ec0)=0x6e, 0x80800)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001700)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
fork()

00:23:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000008c0)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000))

00:23:51 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000140)=0x3f)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1000)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0))
read$dsp(r0, &(0x7f0000000040)=""/17, 0x11)

00:23:51 executing program 0:
set_mempolicy(0x3, &(0x7f0000000000)=0x7fffffff, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x55)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

00:23:51 executing program 1:
set_mempolicy(0x3, &(0x7f0000000000)=0x7fffffff, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x55)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

00:23:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000008c0)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000))

[  339.850106][T24437] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
00:23:51 executing program 3:
clock_gettime(0x0, &(0x7f0000000000))
clock_getres(0x0, &(0x7f0000000140))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x6, &(0x7f0000000940))
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={0x0}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
accept4$unix(r1, &(0x7f0000000e40), &(0x7f0000000ec0)=0x6e, 0x80800)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001700)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
fork()

00:23:51 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000140)=0x3f)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1000)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0))
read$dsp(r0, &(0x7f0000000040)=""/17, 0x11)

00:23:51 executing program 0:
set_mempolicy(0x3, &(0x7f0000000000)=0x7fffffff, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x55)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

00:23:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000008c0)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000))

[  339.974557][T24457] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
00:23:52 executing program 1:
set_mempolicy(0x3, &(0x7f0000000000)=0x7fffffff, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x55)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

[  340.078402][T24472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  340.156665][T24482] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  340.192283][ T3603] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  340.550893][ T3603] usb 3-1: config 0 has an invalid interface number: 10 but max is 0
[  340.559232][ T3603] usb 3-1: config 0 has no interface number 0
[  340.565382][ T3603] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  340.575206][ T3603] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  340.585006][ T3603] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  340.594878][ T3603] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  340.605244][ T3603] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=cb.91
[  340.614387][ T3603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.625702][ T3603] usb 3-1: config 0 descriptor??
[  340.661418][ T3603] usb 3-1: Expected 3 endpoints, found: 4
[  340.866787][ T4824] usb 3-1: USB disconnect, device number 11
00:23:53 executing program 1:
set_mempolicy(0x3, &(0x7f0000000000)=0x7fffffff, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x55)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

00:23:53 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000140)=0x3f)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1000)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0))
read$dsp(r0, &(0x7f0000000040)=""/17, 0x11)

00:23:53 executing program 3:
set_mempolicy(0x3, &(0x7f0000000000)=0x7fffffff, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x55)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

00:23:53 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000008c0)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000))

00:23:53 executing program 0:
set_mempolicy(0x3, &(0x7f0000000000)=0x7fffffff, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x55)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

00:23:53 executing program 2:
set_mempolicy(0x3, &(0x7f0000000000)=0x7fffffff, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x55)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

[  341.436338][T24511] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  341.463877][T24510] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
00:23:53 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x1, 0x6, 0x2006, 0x20000000000001, 0x0, 0x1}, 0x40)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000000c0)="8e", &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r0, &(0x7f0000000380), 0x0}, 0x20)

00:23:53 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000140)=0x3f)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1000)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0))
read$dsp(r0, &(0x7f0000000040)=""/17, 0x11)

[  341.505430][T24516] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  341.536830][T24525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
00:23:53 executing program 1:
unshare(0x600)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x282c00, 0x0)
pwritev(r0, 0x0, 0x0, 0x0, 0x0)

00:23:53 executing program 3:
set_mempolicy(0x3, &(0x7f0000000000)=0x7fffffff, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x55)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

00:23:53 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000780)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0000001000000f5000000010800120002000100000000000000000030006c000301009f6eae02000000adb20200000000152c000000000000000001020014bb000000000000002300000000030005000020000002"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0)

00:23:53 executing program 2:
set_mempolicy(0x3, &(0x7f0000000000)=0x7fffffff, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x55)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

00:23:53 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x5, &(0x7f00000013c0)=[{&(0x7f0000000100)="1bef6b0c4c954879fdd022b87c3d77718d6f3e0242df22a7b8d936e887", 0xf}, {&(0x7f0000000140)="9b83ef", 0x20000143}], 0x2, 0x0, 0x0, 0x8dffffff}}], 0x8, 0x0)

00:23:53 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x1, 0x6, 0x2006, 0x20000000000001, 0x0, 0x1}, 0x40)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000000c0)="8e", &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r0, &(0x7f0000000380), 0x0}, 0x20)

00:23:53 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000780)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0000001000000f5000000010800120002000100000000000000000030006c000301009f6eae02000000adb20200000000152c000000000000000001020014bb000000000000002300000000030005000020000002"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0)

00:23:53 executing program 1:
unshare(0x600)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x282c00, 0x0)
pwritev(r0, 0x0, 0x0, 0x0, 0x0)

[  341.715984][T24555] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
00:23:53 executing program 2:
set_mempolicy(0x3, &(0x7f0000000000)=0x7fffffff, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x55)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

00:23:53 executing program 3:
set_mempolicy(0x3, &(0x7f0000000000)=0x7fffffff, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x55)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

00:23:53 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x1, 0x6, 0x2006, 0x20000000000001, 0x0, 0x1}, 0x40)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000000c0)="8e", &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r0, &(0x7f0000000380), 0x0}, 0x20)

00:23:53 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000780)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0000001000000f5000000010800120002000100000000000000000030006c000301009f6eae02000000adb20200000000152c000000000000000001020014bb000000000000002300000000030005000020000002"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0)

00:23:53 executing program 1:
unshare(0x600)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x282c00, 0x0)
pwritev(r0, 0x0, 0x0, 0x0, 0x0)

00:23:53 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x1, 0x6, 0x2006, 0x20000000000001, 0x0, 0x1}, 0x40)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000000c0)="8e", &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r0, &(0x7f0000000380), 0x0}, 0x20)

00:23:53 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800001, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
futex(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f00000000c0), 0x0)

00:23:54 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000780)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0000001000000f5000000010800120002000100000000000000000030006c000301009f6eae02000000adb20200000000152c000000000000000001020014bb000000000000002300000000030005000020000002"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0)

00:23:54 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x5, &(0x7f00000013c0)=[{&(0x7f0000000100)="1bef6b0c4c954879fdd022b87c3d77718d6f3e0242df22a7b8d936e887", 0xf}, {&(0x7f0000000140)="9b83ef", 0x20000143}], 0x2, 0x0, 0x0, 0x8dffffff}}], 0x8, 0x0)

00:23:54 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x4, 0x3, 'veth1\x00'}]}, 0x30}}, 0x0)

00:23:54 executing program 1:
unshare(0x600)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x282c00, 0x0)
pwritev(r0, 0x0, 0x0, 0x0, 0x0)

00:23:54 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioprio_get$uid(0x3, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)

00:23:54 executing program 5:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000111401f1ffffffffffffff00080001c0"], 0x28}}, 0x0)

00:23:54 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800001, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
futex(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f00000000c0), 0x0)

00:23:54 executing program 5:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000111401f1ffffffffffffff00080001c0"], 0x28}}, 0x0)

00:23:54 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
read$dsp(r0, 0x0, 0xfd2e)

00:23:54 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800001, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
futex(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f00000000c0), 0x0)

00:23:54 executing program 0:
syz_open_pts(0xffffffffffffffff, 0x228402)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x841280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x40000, &(0x7f0000000000)="3b6b49504bc07acedef62f584f8e6cadc8bc6e41a0100740b062ed2c7dd46794b1ca9ac35f19901d184e", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="44efdcfa47f3b5e4a3eb4e2e135ff5b34bccb7493af57efd35817d3601a38373cc5f2810dca188f9401bebb96878058e20f25c52093cf3954cc5")
syz_emit_ethernet(0x2e, 0x0, 0x0)
clone(0x800000, &(0x7f0000000140)="5c98e4bd293a360ca378a012dc48e2333b1840ef9a04f93d92571b64f53ca232f394a0dbf453fbb6c86af0937839eb3f37154fe2279e563ea5ca2eb7feb47b7c30efd7564ab4341c4c2ad6c2fb380e3c707aed52738bc90fafe9c6ac5f9937031d1b", 0x0, &(0x7f0000000200), &(0x7f0000000240)="90f4480798e90c2698cd212588aceb54052d91181e87a9ad8979ef54649e55ec8ad5419b5bb63d2178c705f2f5b777528b7d5fcffaa96826b1351733c9d8c80d79cfe78d5c095951259b6494afe2b564724ed28470d274ba76664047f8fdf5151b515279fc734cc2d6e23808c9aea01a3710e43678d72afcd03f59c415d26a3a2a0126264fbb5c82a4be456b0ad8c175217b8701880a5bdb16709068be73948cb30a25fb455ebfec63ac2f410a22b96a1974f87a2973abb56c717615d810981aa1dc1d6b5520526ec2ea")
clone(0x0, &(0x7f0000000340)="b2a0349ec7a2df493c01803b85233d08c288968a7d8bf54dfbadbf86186a9b0fdb6393b976670a557193424b20f13c2bc6e944492b8049e1b3ff45103d28e86780e1fc51069ffd4057dae94e67987b476e46b1ae1eda1521a0e60b9eba0debbcb3d27aa9de", &(0x7f00000003c0), 0x0, &(0x7f0000000440)="9487c4fa04a1ea88ea0c5e027cb567bc9d0d965d06e6c0ddf869c67c91ff34456c9ce046997577bf96b8fe68bbd81a5620e2be4f628458e1afff22beccf16404a3cfcb5533540da1a7eba9bd71c7fda7fae2e1aa64c28759ba0d9ce7c4da51848756f56bb631c3ca0092a66a3d5db2725cabb67fb40737c4e9bad938043702957ed59ee98c00302e023b5c8c4cd66bd637b3235dd5aaf773c633d3cfa62e794eb57942ab5cd05e")

00:23:54 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x4, 0x3, 'veth1\x00'}]}, 0x30}}, 0x0)

00:23:54 executing program 5:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000111401f1ffffffffffffff00080001c0"], 0x28}}, 0x0)

00:23:54 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x5, &(0x7f00000013c0)=[{&(0x7f0000000100)="1bef6b0c4c954879fdd022b87c3d77718d6f3e0242df22a7b8d936e887", 0xf}, {&(0x7f0000000140)="9b83ef", 0x20000143}], 0x2, 0x0, 0x0, 0x8dffffff}}], 0x8, 0x0)

00:23:54 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800001, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
futex(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f00000000c0), 0x0)

00:23:54 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
fgetxattr(r1, &(0x7f0000000280)=@random={'security.', ')\x00'}, &(0x7f00000002c0)=""/66, 0x42)

00:23:54 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x4, 0x3, 'veth1\x00'}]}, 0x30}}, 0x0)

00:23:54 executing program 0:
syz_open_pts(0xffffffffffffffff, 0x228402)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x841280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x40000, &(0x7f0000000000)="3b6b49504bc07acedef62f584f8e6cadc8bc6e41a0100740b062ed2c7dd46794b1ca9ac35f19901d184e", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="44efdcfa47f3b5e4a3eb4e2e135ff5b34bccb7493af57efd35817d3601a38373cc5f2810dca188f9401bebb96878058e20f25c52093cf3954cc5")
syz_emit_ethernet(0x2e, 0x0, 0x0)
clone(0x800000, &(0x7f0000000140)="5c98e4bd293a360ca378a012dc48e2333b1840ef9a04f93d92571b64f53ca232f394a0dbf453fbb6c86af0937839eb3f37154fe2279e563ea5ca2eb7feb47b7c30efd7564ab4341c4c2ad6c2fb380e3c707aed52738bc90fafe9c6ac5f9937031d1b", 0x0, &(0x7f0000000200), &(0x7f0000000240)="90f4480798e90c2698cd212588aceb54052d91181e87a9ad8979ef54649e55ec8ad5419b5bb63d2178c705f2f5b777528b7d5fcffaa96826b1351733c9d8c80d79cfe78d5c095951259b6494afe2b564724ed28470d274ba76664047f8fdf5151b515279fc734cc2d6e23808c9aea01a3710e43678d72afcd03f59c415d26a3a2a0126264fbb5c82a4be456b0ad8c175217b8701880a5bdb16709068be73948cb30a25fb455ebfec63ac2f410a22b96a1974f87a2973abb56c717615d810981aa1dc1d6b5520526ec2ea")
clone(0x0, &(0x7f0000000340)="b2a0349ec7a2df493c01803b85233d08c288968a7d8bf54dfbadbf86186a9b0fdb6393b976670a557193424b20f13c2bc6e944492b8049e1b3ff45103d28e86780e1fc51069ffd4057dae94e67987b476e46b1ae1eda1521a0e60b9eba0debbcb3d27aa9de", &(0x7f00000003c0), 0x0, &(0x7f0000000440)="9487c4fa04a1ea88ea0c5e027cb567bc9d0d965d06e6c0ddf869c67c91ff34456c9ce046997577bf96b8fe68bbd81a5620e2be4f628458e1afff22beccf16404a3cfcb5533540da1a7eba9bd71c7fda7fae2e1aa64c28759ba0d9ce7c4da51848756f56bb631c3ca0092a66a3d5db2725cabb67fb40737c4e9bad938043702957ed59ee98c00302e023b5c8c4cd66bd637b3235dd5aaf773c633d3cfa62e794eb57942ab5cd05e")

00:23:54 executing program 5:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000111401f1ffffffffffffff00080001c0"], 0x28}}, 0x0)

00:23:54 executing program 2:
syz_open_pts(0xffffffffffffffff, 0x228402)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x841280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x40000, &(0x7f0000000000)="3b6b49504bc07acedef62f584f8e6cadc8bc6e41a0100740b062ed2c7dd46794b1ca9ac35f19901d184e", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="44efdcfa47f3b5e4a3eb4e2e135ff5b34bccb7493af57efd35817d3601a38373cc5f2810dca188f9401bebb96878058e20f25c52093cf3954cc5")
syz_emit_ethernet(0x2e, 0x0, 0x0)
clone(0x800000, &(0x7f0000000140)="5c98e4bd293a360ca378a012dc48e2333b1840ef9a04f93d92571b64f53ca232f394a0dbf453fbb6c86af0937839eb3f37154fe2279e563ea5ca2eb7feb47b7c30efd7564ab4341c4c2ad6c2fb380e3c707aed52738bc90fafe9c6ac5f9937031d1b", 0x0, &(0x7f0000000200), &(0x7f0000000240)="90f4480798e90c2698cd212588aceb54052d91181e87a9ad8979ef54649e55ec8ad5419b5bb63d2178c705f2f5b777528b7d5fcffaa96826b1351733c9d8c80d79cfe78d5c095951259b6494afe2b564724ed28470d274ba76664047f8fdf5151b515279fc734cc2d6e23808c9aea01a3710e43678d72afcd03f59c415d26a3a2a0126264fbb5c82a4be456b0ad8c175217b8701880a5bdb16709068be73948cb30a25fb455ebfec63ac2f410a22b96a1974f87a2973abb56c717615d810981aa1dc1d6b5520526ec2ea")
clone(0x0, &(0x7f0000000340)="b2a0349ec7a2df493c01803b85233d08c288968a7d8bf54dfbadbf86186a9b0fdb6393b976670a557193424b20f13c2bc6e944492b8049e1b3ff45103d28e86780e1fc51069ffd4057dae94e67987b476e46b1ae1eda1521a0e60b9eba0debbcb3d27aa9de", &(0x7f00000003c0), 0x0, &(0x7f0000000440)="9487c4fa04a1ea88ea0c5e027cb567bc9d0d965d06e6c0ddf869c67c91ff34456c9ce046997577bf96b8fe68bbd81a5620e2be4f628458e1afff22beccf16404a3cfcb5533540da1a7eba9bd71c7fda7fae2e1aa64c28759ba0d9ce7c4da51848756f56bb631c3ca0092a66a3d5db2725cabb67fb40737c4e9bad938043702957ed59ee98c00302e023b5c8c4cd66bd637b3235dd5aaf773c633d3cfa62e794eb57942ab5cd05e")

00:23:54 executing program 1:
madvise(&(0x7f000012b000/0x3000)=nil, 0x3000, 0x2)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000200))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2)

00:23:54 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x4, 0x3, 'veth1\x00'}]}, 0x30}}, 0x0)

00:23:54 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

00:23:54 executing program 0:
syz_open_pts(0xffffffffffffffff, 0x228402)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x841280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x40000, &(0x7f0000000000)="3b6b49504bc07acedef62f584f8e6cadc8bc6e41a0100740b062ed2c7dd46794b1ca9ac35f19901d184e", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="44efdcfa47f3b5e4a3eb4e2e135ff5b34bccb7493af57efd35817d3601a38373cc5f2810dca188f9401bebb96878058e20f25c52093cf3954cc5")
syz_emit_ethernet(0x2e, 0x0, 0x0)
clone(0x800000, &(0x7f0000000140)="5c98e4bd293a360ca378a012dc48e2333b1840ef9a04f93d92571b64f53ca232f394a0dbf453fbb6c86af0937839eb3f37154fe2279e563ea5ca2eb7feb47b7c30efd7564ab4341c4c2ad6c2fb380e3c707aed52738bc90fafe9c6ac5f9937031d1b", 0x0, &(0x7f0000000200), &(0x7f0000000240)="90f4480798e90c2698cd212588aceb54052d91181e87a9ad8979ef54649e55ec8ad5419b5bb63d2178c705f2f5b777528b7d5fcffaa96826b1351733c9d8c80d79cfe78d5c095951259b6494afe2b564724ed28470d274ba76664047f8fdf5151b515279fc734cc2d6e23808c9aea01a3710e43678d72afcd03f59c415d26a3a2a0126264fbb5c82a4be456b0ad8c175217b8701880a5bdb16709068be73948cb30a25fb455ebfec63ac2f410a22b96a1974f87a2973abb56c717615d810981aa1dc1d6b5520526ec2ea")
clone(0x0, &(0x7f0000000340)="b2a0349ec7a2df493c01803b85233d08c288968a7d8bf54dfbadbf86186a9b0fdb6393b976670a557193424b20f13c2bc6e944492b8049e1b3ff45103d28e86780e1fc51069ffd4057dae94e67987b476e46b1ae1eda1521a0e60b9eba0debbcb3d27aa9de", &(0x7f00000003c0), 0x0, &(0x7f0000000440)="9487c4fa04a1ea88ea0c5e027cb567bc9d0d965d06e6c0ddf869c67c91ff34456c9ce046997577bf96b8fe68bbd81a5620e2be4f628458e1afff22beccf16404a3cfcb5533540da1a7eba9bd71c7fda7fae2e1aa64c28759ba0d9ce7c4da51848756f56bb631c3ca0092a66a3d5db2725cabb67fb40737c4e9bad938043702957ed59ee98c00302e023b5c8c4cd66bd637b3235dd5aaf773c633d3cfa62e794eb57942ab5cd05e")

00:23:55 executing program 1:
madvise(&(0x7f000012b000/0x3000)=nil, 0x3000, 0x2)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000200))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2)

00:23:55 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x5, &(0x7f00000013c0)=[{&(0x7f0000000100)="1bef6b0c4c954879fdd022b87c3d77718d6f3e0242df22a7b8d936e887", 0xf}, {&(0x7f0000000140)="9b83ef", 0x20000143}], 0x2, 0x0, 0x0, 0x8dffffff}}], 0x8, 0x0)

00:23:55 executing program 2:
syz_open_pts(0xffffffffffffffff, 0x228402)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x841280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x40000, &(0x7f0000000000)="3b6b49504bc07acedef62f584f8e6cadc8bc6e41a0100740b062ed2c7dd46794b1ca9ac35f19901d184e", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="44efdcfa47f3b5e4a3eb4e2e135ff5b34bccb7493af57efd35817d3601a38373cc5f2810dca188f9401bebb96878058e20f25c52093cf3954cc5")
syz_emit_ethernet(0x2e, 0x0, 0x0)
clone(0x800000, &(0x7f0000000140)="5c98e4bd293a360ca378a012dc48e2333b1840ef9a04f93d92571b64f53ca232f394a0dbf453fbb6c86af0937839eb3f37154fe2279e563ea5ca2eb7feb47b7c30efd7564ab4341c4c2ad6c2fb380e3c707aed52738bc90fafe9c6ac5f9937031d1b", 0x0, &(0x7f0000000200), &(0x7f0000000240)="90f4480798e90c2698cd212588aceb54052d91181e87a9ad8979ef54649e55ec8ad5419b5bb63d2178c705f2f5b777528b7d5fcffaa96826b1351733c9d8c80d79cfe78d5c095951259b6494afe2b564724ed28470d274ba76664047f8fdf5151b515279fc734cc2d6e23808c9aea01a3710e43678d72afcd03f59c415d26a3a2a0126264fbb5c82a4be456b0ad8c175217b8701880a5bdb16709068be73948cb30a25fb455ebfec63ac2f410a22b96a1974f87a2973abb56c717615d810981aa1dc1d6b5520526ec2ea")
clone(0x0, &(0x7f0000000340)="b2a0349ec7a2df493c01803b85233d08c288968a7d8bf54dfbadbf86186a9b0fdb6393b976670a557193424b20f13c2bc6e944492b8049e1b3ff45103d28e86780e1fc51069ffd4057dae94e67987b476e46b1ae1eda1521a0e60b9eba0debbcb3d27aa9de", &(0x7f00000003c0), 0x0, &(0x7f0000000440)="9487c4fa04a1ea88ea0c5e027cb567bc9d0d965d06e6c0ddf869c67c91ff34456c9ce046997577bf96b8fe68bbd81a5620e2be4f628458e1afff22beccf16404a3cfcb5533540da1a7eba9bd71c7fda7fae2e1aa64c28759ba0d9ce7c4da51848756f56bb631c3ca0092a66a3d5db2725cabb67fb40737c4e9bad938043702957ed59ee98c00302e023b5c8c4cd66bd637b3235dd5aaf773c633d3cfa62e794eb57942ab5cd05e")

00:23:55 executing program 3:
madvise(&(0x7f000012b000/0x3000)=nil, 0x3000, 0x2)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000200))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2)

00:23:55 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

00:23:55 executing program 0:
syz_open_pts(0xffffffffffffffff, 0x228402)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x841280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x40000, &(0x7f0000000000)="3b6b49504bc07acedef62f584f8e6cadc8bc6e41a0100740b062ed2c7dd46794b1ca9ac35f19901d184e", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="44efdcfa47f3b5e4a3eb4e2e135ff5b34bccb7493af57efd35817d3601a38373cc5f2810dca188f9401bebb96878058e20f25c52093cf3954cc5")
syz_emit_ethernet(0x2e, 0x0, 0x0)
clone(0x800000, &(0x7f0000000140)="5c98e4bd293a360ca378a012dc48e2333b1840ef9a04f93d92571b64f53ca232f394a0dbf453fbb6c86af0937839eb3f37154fe2279e563ea5ca2eb7feb47b7c30efd7564ab4341c4c2ad6c2fb380e3c707aed52738bc90fafe9c6ac5f9937031d1b", 0x0, &(0x7f0000000200), &(0x7f0000000240)="90f4480798e90c2698cd212588aceb54052d91181e87a9ad8979ef54649e55ec8ad5419b5bb63d2178c705f2f5b777528b7d5fcffaa96826b1351733c9d8c80d79cfe78d5c095951259b6494afe2b564724ed28470d274ba76664047f8fdf5151b515279fc734cc2d6e23808c9aea01a3710e43678d72afcd03f59c415d26a3a2a0126264fbb5c82a4be456b0ad8c175217b8701880a5bdb16709068be73948cb30a25fb455ebfec63ac2f410a22b96a1974f87a2973abb56c717615d810981aa1dc1d6b5520526ec2ea")
clone(0x0, &(0x7f0000000340)="b2a0349ec7a2df493c01803b85233d08c288968a7d8bf54dfbadbf86186a9b0fdb6393b976670a557193424b20f13c2bc6e944492b8049e1b3ff45103d28e86780e1fc51069ffd4057dae94e67987b476e46b1ae1eda1521a0e60b9eba0debbcb3d27aa9de", &(0x7f00000003c0), 0x0, &(0x7f0000000440)="9487c4fa04a1ea88ea0c5e027cb567bc9d0d965d06e6c0ddf869c67c91ff34456c9ce046997577bf96b8fe68bbd81a5620e2be4f628458e1afff22beccf16404a3cfcb5533540da1a7eba9bd71c7fda7fae2e1aa64c28759ba0d9ce7c4da51848756f56bb631c3ca0092a66a3d5db2725cabb67fb40737c4e9bad938043702957ed59ee98c00302e023b5c8c4cd66bd637b3235dd5aaf773c633d3cfa62e794eb57942ab5cd05e")

00:23:55 executing program 1:
madvise(&(0x7f000012b000/0x3000)=nil, 0x3000, 0x2)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000200))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2)

00:23:55 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

00:23:55 executing program 3:
madvise(&(0x7f000012b000/0x3000)=nil, 0x3000, 0x2)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000200))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2)

00:23:55 executing program 1:
madvise(&(0x7f000012b000/0x3000)=nil, 0x3000, 0x2)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000200))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2)

00:23:55 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000080)=0x5, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x37)
recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/2, 0x2}}], 0x1, 0x0, 0x0)

00:23:55 executing program 2:
syz_open_pts(0xffffffffffffffff, 0x228402)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x841280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x40000, &(0x7f0000000000)="3b6b49504bc07acedef62f584f8e6cadc8bc6e41a0100740b062ed2c7dd46794b1ca9ac35f19901d184e", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="44efdcfa47f3b5e4a3eb4e2e135ff5b34bccb7493af57efd35817d3601a38373cc5f2810dca188f9401bebb96878058e20f25c52093cf3954cc5")
syz_emit_ethernet(0x2e, 0x0, 0x0)
clone(0x800000, &(0x7f0000000140)="5c98e4bd293a360ca378a012dc48e2333b1840ef9a04f93d92571b64f53ca232f394a0dbf453fbb6c86af0937839eb3f37154fe2279e563ea5ca2eb7feb47b7c30efd7564ab4341c4c2ad6c2fb380e3c707aed52738bc90fafe9c6ac5f9937031d1b", 0x0, &(0x7f0000000200), &(0x7f0000000240)="90f4480798e90c2698cd212588aceb54052d91181e87a9ad8979ef54649e55ec8ad5419b5bb63d2178c705f2f5b777528b7d5fcffaa96826b1351733c9d8c80d79cfe78d5c095951259b6494afe2b564724ed28470d274ba76664047f8fdf5151b515279fc734cc2d6e23808c9aea01a3710e43678d72afcd03f59c415d26a3a2a0126264fbb5c82a4be456b0ad8c175217b8701880a5bdb16709068be73948cb30a25fb455ebfec63ac2f410a22b96a1974f87a2973abb56c717615d810981aa1dc1d6b5520526ec2ea")
clone(0x0, &(0x7f0000000340)="b2a0349ec7a2df493c01803b85233d08c288968a7d8bf54dfbadbf86186a9b0fdb6393b976670a557193424b20f13c2bc6e944492b8049e1b3ff45103d28e86780e1fc51069ffd4057dae94e67987b476e46b1ae1eda1521a0e60b9eba0debbcb3d27aa9de", &(0x7f00000003c0), 0x0, &(0x7f0000000440)="9487c4fa04a1ea88ea0c5e027cb567bc9d0d965d06e6c0ddf869c67c91ff34456c9ce046997577bf96b8fe68bbd81a5620e2be4f628458e1afff22beccf16404a3cfcb5533540da1a7eba9bd71c7fda7fae2e1aa64c28759ba0d9ce7c4da51848756f56bb631c3ca0092a66a3d5db2725cabb67fb40737c4e9bad938043702957ed59ee98c00302e023b5c8c4cd66bd637b3235dd5aaf773c633d3cfa62e794eb57942ab5cd05e")

00:23:55 executing program 3:
madvise(&(0x7f000012b000/0x3000)=nil, 0x3000, 0x2)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000200))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2)

00:23:55 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
fgetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000019080)=""/102400, 0x19000)

00:23:55 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000000)={0x94, 0x0, [0x748000]})

00:23:55 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

00:23:55 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000080)=0x5, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x37)
recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/2, 0x2}}], 0x1, 0x0, 0x0)

00:23:55 executing program 2:
io_setup(0x1f, &(0x7f0000000140)=<r0=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x7530}, 0x10)
io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000002940)="02", 0x1}])

00:23:56 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
setresuid(0x0, 0xee01, 0x0)
setreuid(0xffffffffffffffff, 0x0)

00:23:56 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000080)=0x5, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x37)
recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/2, 0x2}}], 0x1, 0x0, 0x0)

00:23:56 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
fgetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000019080)=""/102400, 0x19000)

00:23:56 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
setresuid(0x0, 0xee01, 0x0)
setreuid(0xffffffffffffffff, 0x0)

00:23:56 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x72e04cd9}, 0x0)

00:23:56 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000080)=0x5, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x37)
recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/2, 0x2}}], 0x1, 0x0, 0x0)

00:23:56 executing program 1:
set_mempolicy(0x2, &(0x7f0000000080)=0x9, 0x9c)
syslog(0x3, &(0x7f0000000040)=""/47, 0x2f)

00:23:56 executing program 2:
io_setup(0x1f, &(0x7f0000000140)=<r0=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x7530}, 0x10)
io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000002940)="02", 0x1}])

00:23:56 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
fgetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000019080)=""/102400, 0x19000)

[  344.347011][    C0] ------------[ cut here ]------------
[  344.352510][    C0] WARNING: CPU: 0 PID: 24778 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210
[  344.363375][    C0] Modules linked in:
[  344.367382][    C0] CPU: 0 PID: 24778 Comm: syz-executor.1 Not tainted 5.12.0-rc2-syzkaller #0
[  344.376145][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  344.386205][    C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210
[  344.392201][    C0] Code: 00 00 00 48 c7 c6 40 58 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 67 71 5c fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48
[  344.411925][    C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046
[  344.417995][    C0] RAX: ffffffff82e9ae49 RBX: 0000000000000005 RCX: ffff888026958000
[  344.425970][    C0] RDX: 0000000000010000 RSI: 0000000000000005 RDI: 0000000000000001
[  344.433940][    C0] RBP: ffff88813bc1da40 R08: ffffffff82e9ac9e R09: 00018881023694bf
[  344.441917][    C0] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bc1da58
[  344.449900][    C0] R13: ffff88813bc1da40 R14: ffff888102368628 R15: 0000000000fe4c00
[  344.457987][    C0] FS:  00007f832eb44700(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000
[  344.466921][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  344.473522][    C0] CR2: 000000000056c000 CR3: 00000000210c2000 CR4: 00000000001506f0
[  344.481706][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  344.489690][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
00:23:56 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x72e04cd9}, 0x0)

[  344.497774][    C0] Call Trace:
[  344.501074][    C0]  <IRQ>
[  344.503938][    C0]  ? vkms_get_vblank_timestamp+0x100/0x100
[  344.509765][    C0]  __run_hrtimer+0x163/0x460
[  344.514392][    C0]  ? clockevents_program_event+0x195/0x1e0
[  344.520220][    C0]  hrtimer_interrupt+0x36e/0xa30
[  344.525186][    C0]  __sysvec_apic_timer_interrupt+0x6f/0x200
[  344.531112][    C0]  sysvec_apic_timer_interrupt+0x69/0x80
[  344.536751][    C0]  </IRQ>
[  344.539682][    C0]  asm_sysvec_apic_timer_interrupt+0x12/0x20
00:23:56 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
setresuid(0x0, 0xee01, 0x0)
setreuid(0xffffffffffffffff, 0x0)

[  344.545676][    C0] RIP: 0010:do_syslog+0xc87/0x1050
[  344.550807][    C0] Code: e8 fe fd 1e 00 4c 89 25 ef 36 b7 07 eb 05 e8 b0 66 0e 00 48 c7 c7 d4 ef ee 88 e8 f4 d7 50 04 e8 ff 60 00 00 fb 48 8b 7c 24 20 <e8> f4 17 35 00 e9 9f f4 ff ff 31 ff 44 89 f6 e8 95 6a 0e 00 45 85
[  344.570461][    C0] RSP: 0018:ffffc900030efe00 EFLAGS: 00000246
[  344.576547][    C0] RAX: ffffffff81381a15 RBX: 0000000000000000 RCX: 0000000000040000
[  344.584526][    C0] RDX: ffffc90003422000 RSI: 000000000003ffff RDI: ffff88810cdd5000
[  344.592502][    C0] RBP: ffffc900030eff10 R08: 0000000000000000 R09: 0001ffff876666ff
[  344.600510][    C0] R10: 0000000000000002 R11: ffff888026958000 R12: 000000000000107c
[  344.608491][    C0] R13: ffffc900030efe48 R14: 0000000000000000 R15: 0000000000000000
[  344.616614][    C0]  ? __printk_safe_exit+0x5/0x10
[  344.621626][    C0]  __x64_sys_syslog+0x3f/0x50
[  344.626312][    C0]  do_syscall_64+0x39/0x80
[  344.630757][    C0]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  344.636657][    C0] RIP: 0033:0x465f69
00:23:56 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
fgetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000019080)=""/102400, 0x19000)

[  344.640547][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  344.660160][    C0] RSP: 002b:00007f832eb44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000067
[  344.668581][    C0] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69
[  344.676562][    C0] RDX: 000000000000002f RSI: 0000000020000040 RDI: 0000000000000003
[  344.684532][    C0] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000
[  344.692521][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60
[  344.700497][    C0] R13: 00007ffca73a8f5f R14: 00007f832eb44300 R15: 0000000000022000
[  344.708502][    C0] ---[ end trace 47a530e2f963fdfb ]---
[  344.714275][    C0] ------------[ cut here ]------------
[  344.719734][    C0] WARNING: CPU: 0 PID: 24778 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210
[  344.730620][    C0] Modules linked in:
[  344.734535][    C0] CPU: 0 PID: 24778 Comm: syz-executor.1 Tainted: G        W         5.12.0-rc2-syzkaller #0
[  344.744716][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  344.754777][    C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210
[  344.760816][    C0] Code: 00 00 00 48 c7 c6 40 58 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 67 71 5c fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48
[  344.780557][    C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046
[  344.786869][    C0] RAX: ffffffff82e9ae49 RBX: 0000000000000016 RCX: ffff888026958000
[  344.794939][    C0] RDX: 0000000000010000 RSI: 0000000000000016 RDI: 0000000000000001
[  344.802899][    C0] RBP: ffff88813bc1da40 R08: ffffffff82e9ac9e R09: 00018881023694bf
[  344.811233][    C0] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bc1da58
[  344.819293][    C0] R13: ffff88813bc1da40 R14: ffff888102368628 R15: 0000000000fe4c00
[  344.827266][    C0] FS:  00007f832eb44700(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000
[  344.836373][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  344.842959][    C0] CR2: 000000000056c000 CR3: 00000000210c2000 CR4: 00000000001506f0
[  344.850922][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  344.858989][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[  344.866982][    C0] Call Trace:
[  344.870244][    C0]  <IRQ>
[  344.873114][    C0]  ? vkms_get_vblank_timestamp+0x100/0x100
[  344.878909][    C0]  __run_hrtimer+0x163/0x460
[  344.884446][    C0]  ? clockevents_program_event+0x19c/0x1e0
[  344.890268][    C0]  hrtimer_interrupt+0x36e/0xa30
[  344.895196][    C0]  __sysvec_apic_timer_interrupt+0x6f/0x200
[  344.901077][    C0]  sysvec_apic_timer_interrupt+0x69/0x80
[  344.906718][    C0]  </IRQ>
[  344.909655][    C0]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[  344.915630][    C0] RIP: 0010:do_syslog+0xc87/0x1050
[  344.920754][    C0] Code: e8 fe fd 1e 00 4c 89 25 ef 36 b7 07 eb 05 e8 b0 66 0e 00 48 c7 c7 d4 ef ee 88 e8 f4 d7 50 04 e8 ff 60 00 00 fb 48 8b 7c 24 20 <e8> f4 17 35 00 e9 9f f4 ff ff 31 ff 44 89 f6 e8 95 6a 0e 00 45 85
[  344.940710][    C0] RSP: 0018:ffffc900030efe00 EFLAGS: 00000246
[  344.946762][    C0] RAX: ffffffff81381a15 RBX: 0000000000000000 RCX: 0000000000040000
[  344.954718][    C0] RDX: ffffc90003422000 RSI: 000000000003ffff RDI: ffff88810cdd5000
[  344.962779][    C0] RBP: ffffc900030eff10 R08: 0000000000000000 R09: 0001ffff876666ff
[  344.970758][    C0] R10: 0000000000000002 R11: ffff888026958000 R12: 000000000000107c
[  344.978736][    C0] R13: ffffc900030efe48 R14: 0000000000000000 R15: 0000000000000000
[  344.986836][    C0]  ? __printk_safe_exit+0x5/0x10
[  344.992103][    C0]  __x64_sys_syslog+0x3f/0x50
[  344.996793][    C0]  do_syscall_64+0x39/0x80
[  345.001646][    C0]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  345.007581][    C0] RIP: 0033:0x465f69
[  345.011570][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  345.031442][    C0] RSP: 002b:00007f832eb44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000067
[  345.039842][    C0] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69
[  345.047827][    C0] RDX: 000000000000002f RSI: 0000000020000040 RDI: 0000000000000003
[  345.055801][    C0] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000
[  345.063799][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60
[  345.071817][    C0] R13: 00007ffca73a8f5f R14: 00007f832eb44300 R15: 0000000000022000
[  345.079780][    C0] ---[ end trace 47a530e2f963fdfc ]---
[  345.085593][    C0] ------------[ cut here ]------------
[  345.091140][    C0] WARNING: CPU: 0 PID: 24778 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210
[  345.102043][    C0] Modules linked in:
[  345.105929][    C0] CPU: 0 PID: 24778 Comm: syz-executor.1 Tainted: G        W         5.12.0-rc2-syzkaller #0
[  345.116060][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  345.126114][    C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210
[  345.132101][    C0] Code: 00 00 00 48 c7 c6 40 58 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 67 71 5c fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48
[  345.151709][    C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046
[  345.157793][    C0] RAX: ffffffff82e9ae49 RBX: 0000000000000016 RCX: ffff888026958000
[  345.165780][    C0] RDX: 0000000000010000 RSI: 0000000000000016 RDI: 0000000000000001
[  345.173739][    C0] RBP: ffff88813bc1da40 R08: ffffffff82e9ac9e R09: 00018881023694bf
[  345.181802][    C0] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bc1da58
[  345.189793][    C0] R13: ffff88813bc1da40 R14: ffff888102368628 R15: 0000000000fe4c00
[  345.197826][    C0] FS:  00007f832eb44700(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000
[  345.206871][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  345.213457][    C0] CR2: 000000000056c000 CR3: 00000000210c2000 CR4: 00000000001506f0
[  345.221417][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  345.229511][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[  345.237504][    C0] Call Trace:
[  345.240775][    C0]  <IRQ>
[  345.243640][    C0]  ? vkms_get_vblank_timestamp+0x100/0x100
[  345.249441][    C0]  __run_hrtimer+0x163/0x460
[  345.254028][    C0]  ? clockevents_program_event+0x19c/0x1e0
[  345.259841][    C0]  hrtimer_interrupt+0x36e/0xa30
[  345.264858][    C0]  __sysvec_apic_timer_interrupt+0x6f/0x200
[  345.270793][    C0]  sysvec_apic_timer_interrupt+0x69/0x80
[  345.276419][    C0]  </IRQ>
[  345.279340][    C0]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[  345.285360][    C0] RIP: 0010:do_syslog+0xc87/0x1050
[  345.290485][    C0] Code: e8 fe fd 1e 00 4c 89 25 ef 36 b7 07 eb 05 e8 b0 66 0e 00 48 c7 c7 d4 ef ee 88 e8 f4 d7 50 04 e8 ff 60 00 00 fb 48 8b 7c 24 20 <e8> f4 17 35 00 e9 9f f4 ff ff 31 ff 44 89 f6 e8 95 6a 0e 00 45 85
[  345.310088][    C0] RSP: 0018:ffffc900030efe00 EFLAGS: 00000246
[  345.316154][    C0] RAX: ffffffff81381a15 RBX: 0000000000000000 RCX: 0000000000040000
[  345.324274][    C0] RDX: ffffc90003422000 RSI: 000000000003ffff RDI: ffff88810cdd5000
[  345.332231][    C0] RBP: ffffc900030eff10 R08: 0000000000000000 R09: 0001ffff876666ff
[  345.340300][    C0] R10: 0000000000000002 R11: ffff888026958000 R12: 000000000000107c
[  345.348788][    C0] R13: ffffc900030efe48 R14: 0000000000000000 R15: 0000000000000000
[  345.356759][    C0]  ? __printk_safe_exit+0x5/0x10
[  345.361898][    C0]  __x64_sys_syslog+0x3f/0x50
[  345.366582][    C0]  do_syscall_64+0x39/0x80
[  345.370981][    C0]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  345.376954][    C0] RIP: 0033:0x465f69
[  345.380858][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  345.400476][    C0] RSP: 002b:00007f832eb44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000067
[  345.409259][    C0] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69
[  345.417218][    C0] RDX: 000000000000002f RSI: 0000000020000040 RDI: 0000000000000003
[  345.425170][    C0] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000
[  345.433126][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60
[  345.441078][    C0] R13: 00007ffca73a8f5f R14: 00007f832eb44300 R15: 0000000000022000
00:23:57 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "2a73bfa9"}]}}, 0x0}, 0x0)

00:23:57 executing program 1:
set_mempolicy(0x2, &(0x7f0000000080)=0x9, 0x9c)
syslog(0x3, &(0x7f0000000040)=""/47, 0x2f)

[  345.449045][    C0] ---[ end trace 47a530e2f963fdfd ]---
00:23:57 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
setresuid(0x0, 0xee01, 0x0)
setreuid(0xffffffffffffffff, 0x0)

00:23:57 executing program 3:
r0 = open(&(0x7f0000000100)='./file0\x00', 0xc04c3, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
r2 = dup3(r0, r1, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000c79000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x10000000)

00:23:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x72e04cd9}, 0x0)

00:23:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x72e04cd9}, 0x0)

[  345.610616][    C0] ------------[ cut here ]------------
[  345.616119][    C0] WARNING: CPU: 0 PID: 24804 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210
[  345.626978][    C0] Modules linked in:
[  345.630870][    C0] CPU: 0 PID: 24804 Comm: syz-executor.1 Tainted: G        W         5.12.0-rc2-syzkaller #0
[  345.641034][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  345.651093][    C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210
[  345.657105][    C0] Code: 00 00 00 48 c7 c6 40 58 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 67 71 5c fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48
[  345.677004][    C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046
[  345.683167][    C0] RAX: ffffffff82e9ae49 RBX: 0000000000000020 RCX: ffff88802027e000
[  345.691177][    C0] RDX: 0000000000010001 RSI: 0000000000000020 RDI: 0000000000000001
[  345.699171][    C0] RBP: ffff88813bc1da40 R08: ffffffff82e9ac9e R09: 00018881023694bf
[  345.707153][    C0] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bc1da58
[  345.715125][    C0] R13: ffff88813bc1da40 R14: ffff888102368628 R15: 0000000000fe4c00
[  345.723119][    C0] FS:  00007f832eb44700(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000
[  345.732084][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  345.738681][    C0] CR2: 0000000000568000 CR3: 0000000025318000 CR4: 00000000001506f0
[  345.746669][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  345.754737][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[  345.762720][    C0] Call Trace:
[  345.766002][    C0]  <IRQ>
[  345.768852][    C0]  ? vkms_get_vblank_timestamp+0x100/0x100
[  345.774706][    C0]  __run_hrtimer+0x163/0x460
[  345.779307][    C0]  hrtimer_interrupt+0x36e/0xa30
[  345.784283][    C0]  __sysvec_apic_timer_interrupt+0x6f/0x200
[  345.790311][    C0]  sysvec_apic_timer_interrupt+0x69/0x80
[  345.795971][    C0]  </IRQ>
[  345.798925][    C0]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[  345.804956][    C0] RIP: 0010:preempt_schedule_irq+0x3e/0x80
[  345.810776][    C0] Code: 05 5f 32 79 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 40 32 79 7a 01 fb bf 01 00 00 00 <e8> 2d f8 ff ff fa 65 83 05 2c 32 79 7a ff 65 48 8b 04 25 00 6d 01
[  345.830399][    C0] RSP: 0018:ffffc90003207d28 EFLAGS: 00000202
[  345.836476][    C0] RAX: 0000000000000000 RBX: ffff88802027e000 RCX: ffffffff85a00e37
[  345.844455][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  345.852433][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  345.860418][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  345.868418][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  345.876438][    C0]  ? native_iret+0x7/0x7
[  345.880700][    C0]  irqentry_exit_cond_resched+0x30/0x40
[  345.886267][    C0]  irqentry_exit+0x2a/0x40
[  345.890698][    C0]  asm_sysvec_reschedule_ipi+0x12/0x20
[  345.896179][    C0] RIP: 0010:do_syslog+0xc87/0x1050
[  345.901304][    C0] Code: e8 fe fd 1e 00 4c 89 25 ef 36 b7 07 eb 05 e8 b0 66 0e 00 48 c7 c7 d4 ef ee 88 e8 f4 d7 50 04 e8 ff 60 00 00 fb 48 8b 7c 24 20 <e8> f4 17 35 00 e9 9f f4 ff ff 31 ff 44 89 f6 e8 95 6a 0e 00 45 85
[  345.920921][    C0] RSP: 0018:ffffc90003207e00 EFLAGS: 00000246
[  345.927003][    C0] RAX: ffffffff81381a15 RBX: 0000000000000000 RCX: 0000000000040000
[  345.934994][    C0] RDX: ffffc90003422000 RSI: 000000000003ffff RDI: ffff888026995c00
[  345.942978][    C0] RBP: ffffc90003207f10 R08: 0000000000000000 R09: 0001ffff876666ff
[  345.950959][    C0] R10: 0000000000000002 R11: ffff88802027e000 R12: 000000000000110f
[  345.958938][    C0] R13: ffffc90003207e48 R14: 0000000000000000 R15: 0000000000000000
[  345.966916][    C0]  ? __printk_safe_exit+0x5/0x10
[  345.971867][    C0]  __x64_sys_syslog+0x3f/0x50
[  345.976541][    C0]  do_syscall_64+0x39/0x80
[  345.980965][    C0]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  345.986886][    C0] RIP: 0033:0x465f69
[  345.990805][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  346.010472][    C0] RSP: 002b:00007f832eb44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000067
[  346.018930][    C0] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69
[  346.026896][    C0] RDX: 000000000000002f RSI: 0000000020000040 RDI: 0000000000000003
[  346.034960][    C0] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000
[  346.042930][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60
[  346.050920][    C0] R13: 00007ffca73a8f5f R14: 00007f832eb44300 R15: 0000000000022000
[  346.058920][    C0] ---[ end trace 47a530e2f963fdfe ]---
[  346.064737][    C0] ------------[ cut here ]------------
[  346.070202][    C0] WARNING: CPU: 0 PID: 24804 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210
[  346.081448][    C0] Modules linked in:
[  346.085319][    C0] CPU: 0 PID: 24804 Comm: syz-executor.1 Tainted: G        W         5.12.0-rc2-syzkaller #0
[  346.095474][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  346.105642][    C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210
[  346.111620][    C0] Code: 00 00 00 48 c7 c6 40 58 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 67 71 5c fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48
[  346.131331][    C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046
[  346.137387][    C0] RAX: ffffffff82e9ae49 RBX: 000000000000001b RCX: ffff88802027e000
[  346.145344][    C0] RDX: 0000000000010001 RSI: 000000000000001b RDI: 0000000000000001
[  346.153323][    C0] RBP: ffff88813bc1da40 R08: ffffffff82e9ac9e R09: 00018881023694bf
[  346.161624][    C0] R10: 0001ffffffffffff R11: 00000000000002fc R12: ffff88813bc1da58
[  346.169592][    C0] R13: ffff88813bc1da40 R14: ffff888102368628 R15: 0000000000fe4c00
[  346.177546][    C0] FS:  00007f832eb44700(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000
[  346.186475][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  346.193067][    C0] CR2: 0000000000568000 CR3: 0000000025318000 CR4: 00000000001506f0
[  346.201053][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  346.209012][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[  346.216969][    C0] Call Trace:
[  346.220233][    C0]  <IRQ>
[  346.223073][    C0]  ? vkms_get_vblank_timestamp+0x100/0x100
[  346.228911][    C0]  __run_hrtimer+0x163/0x460
[  346.233489][    C0]  ? clockevents_program_event+0x19c/0x1e0
[  346.239288][    C0]  hrtimer_interrupt+0x36e/0xa30
[  346.244232][    C0]  __sysvec_apic_timer_interrupt+0x6f/0x200
[  346.250142][    C0]  sysvec_apic_timer_interrupt+0x69/0x80
[  346.255792][    C0]  </IRQ>
[  346.258726][    C0]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[  346.264724][    C0] RIP: 0010:preempt_schedule_irq+0x3e/0x80
[  346.270553][    C0] Code: 05 5f 32 79 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 40 32 79 7a 01 fb bf 01 00 00 00 <e8> 2d f8 ff ff fa 65 83 05 2c 32 79 7a ff 65 48 8b 04 25 00 6d 01
[  346.290174][    C0] RSP: 0018:ffffc90003207d28 EFLAGS: 00000202
[  346.296225][    C0] RAX: 0000000000000000 RBX: ffff88802027e000 RCX: ffffffff85a00e37
[  346.304182][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  346.312155][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  346.320125][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  346.328138][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  346.336104][    C0]  ? native_iret+0x7/0x7
[  346.340395][    C0]  irqentry_exit_cond_resched+0x30/0x40
[  346.345929][    C0]  irqentry_exit+0x2a/0x40
[  346.350360][    C0]  asm_sysvec_reschedule_ipi+0x12/0x20
[  346.355825][    C0] RIP: 0010:do_syslog+0xc87/0x1050
[  346.360943][    C0] Code: e8 fe fd 1e 00 4c 89 25 ef 36 b7 07 eb 05 e8 b0 66 0e 00 48 c7 c7 d4 ef ee 88 e8 f4 d7 50 04 e8 ff 60 00 00 fb 48 8b 7c 24 20 <e8> f4 17 35 00 e9 9f f4 ff ff 31 ff 44 89 f6 e8 95 6a 0e 00 45 85
[  346.380952][    C0] RSP: 0018:ffffc90003207e00 EFLAGS: 00000246
[  346.387025][    C0] RAX: ffffffff81381a15 RBX: 0000000000000000 RCX: 0000000000040000
[  346.395027][    C0] RDX: ffffc90003422000 RSI: 000000000003ffff RDI: ffff888026995c00
[  346.402987][    C0] RBP: ffffc90003207f10 R08: 0000000000000000 R09: 0001ffff876666ff
[  346.411074][    C0] R10: 0000000000000002 R11: ffff88802027e000 R12: 000000000000110f
[  346.419492][    C0] R13: ffffc90003207e48 R14: 0000000000000000 R15: 0000000000000000
[  346.427700][    C0]  ? __printk_safe_exit+0x5/0x10
[  346.432673][    C0]  __x64_sys_syslog+0x3f/0x50
[  346.437341][    C0]  do_syscall_64+0x39/0x80
[  346.441744][    C0]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  346.447630][    C0] RIP: 0033:0x465f69
[  346.451725][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  346.471965][    C0] RSP: 002b:00007f832eb44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000067
[  346.480657][    C0] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69
[  346.488644][    C0] RDX: 000000000000002f RSI: 0000000020000040 RDI: 0000000000000003
[  346.496623][    C0] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000
[  346.504619][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60
00:23:58 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0xc0045009, &(0x7f0000000000))

[  346.512600][    C0] R13: 00007ffca73a8f5f R14: 00007f832eb44300 R15: 0000000000022000
[  346.520590][    C0] ---[ end trace 47a530e2f963fdff ]---
[  346.526413][    C0] ------------[ cut here ]------------
[  346.531961][    C0] WARNING: CPU: 0 PID: 24804 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210
[  346.542829][    C0] Modules linked in:
[  346.546740][    C0] CPU: 0 PID: 24804 Comm: syz-executor.1 Tainted: G        W         5.12.0-rc2-syzkaller #0
[  346.556874][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  346.566947][    C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210
[  346.572964][    C0] Code: 00 00 00 48 c7 c6 40 58 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 67 71 5c fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48
[  346.592835][    C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046
[  346.598887][    C0] RAX: ffffffff82e9ae49 RBX: 000000000000001c RCX: ffff88802027e000
[  346.606844][    C0] RDX: 0000000000010001 RSI: 000000000000001c RDI: 0000000000000001
[  346.614947][    C0] RBP: ffff88813bc1da40 R08: ffffffff82e9ac9e R09: 00018881023694bf
[  346.623050][    C0] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bc1da58
[  346.631221][    C0] R13: ffff88813bc1da40 R14: ffff888102368628 R15: 0000000000fe4c00
[  346.639189][    C0] FS:  00007f832eb44700(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000
[  346.648169][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  346.654746][    C0] CR2: 0000000000568000 CR3: 0000000025318000 CR4: 00000000001506f0
[  346.662724][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  346.670700][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[  346.678661][    C0] Call Trace:
[  346.681932][    C0]  <IRQ>
[  346.685006][    C0]  ? vkms_get_vblank_timestamp+0x100/0x100
[  346.690814][    C0]  __run_hrtimer+0x163/0x460
[  346.695412][    C0]  ? clockevents_program_event+0x19c/0x1e0
[  346.701229][    C0]  hrtimer_interrupt+0x36e/0xa30
[  346.706272][    C0]  __sysvec_apic_timer_interrupt+0x6f/0x200
[  346.712171][    C0]  sysvec_apic_timer_interrupt+0x69/0x80
[  346.717812][    C0]  </IRQ>
[  346.720727][    C0]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[  346.726879][    C0] RIP: 0010:preempt_schedule_irq+0x3e/0x80
[  346.732710][    C0] Code: 05 5f 32 79 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 40 32 79 7a 01 fb bf 01 00 00 00 <e8> 2d f8 ff ff fa 65 83 05 2c 32 79 7a ff 65 48 8b 04 25 00 6d 01
[  346.752408][    C0] RSP: 0018:ffffc90003207d28 EFLAGS: 00000202
[  346.758464][    C0] RAX: 0000000000000000 RBX: ffff88802027e000 RCX: ffffffff85a00e37
[  346.766515][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  346.774481][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  346.782449][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  346.790425][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  346.798599][    C0]  ? native_iret+0x7/0x7
[  346.802854][    C0]  irqentry_exit_cond_resched+0x30/0x40
[  346.808548][    C0]  irqentry_exit+0x2a/0x40
[  346.812968][    C0]  asm_sysvec_reschedule_ipi+0x12/0x20
[  346.818425][    C0] RIP: 0010:do_syslog+0xc87/0x1050
[  346.823519][    C0] Code: e8 fe fd 1e 00 4c 89 25 ef 36 b7 07 eb 05 e8 b0 66 0e 00 48 c7 c7 d4 ef ee 88 e8 f4 d7 50 04 e8 ff 60 00 00 fb 48 8b 7c 24 20 <e8> f4 17 35 00 e9 9f f4 ff ff 31 ff 44 89 f6 e8 95 6a 0e 00 45 85
[  346.843116][    C0] RSP: 0018:ffffc90003207e00 EFLAGS: 00000246
[  346.849438][    C0] RAX: ffffffff81381a15 RBX: 0000000000000000 RCX: 0000000000040000
[  346.857449][    C0] RDX: ffffc90003422000 RSI: 000000000003ffff RDI: ffff888026995c00
[  346.865420][    C0] RBP: ffffc90003207f10 R08: 0000000000000000 R09: 0001ffff876666ff
[  346.873418][    C0] R10: 0000000000000002 R11: ffff88802027e000 R12: 000000000000110f
[  346.881395][    C0] R13: ffffc90003207e48 R14: 0000000000000000 R15: 0000000000000000
[  346.889395][    C0]  ? __printk_safe_exit+0x5/0x10
[  346.894334][    C0]  __x64_sys_syslog+0x3f/0x50
[  346.899025][    C0]  do_syscall_64+0x39/0x80
[  346.903593][    C0]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  346.909499][    C0] RIP: 0033:0x465f69
[  346.913378][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  346.933201][    C0] RSP: 002b:00007f832eb44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000067
[  346.941603][    C0] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69
[  346.949691][    C0] RDX: 000000000000002f RSI: 0000000020000040 RDI: 0000000000000003
[  346.957690][    C0] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000
[  346.965650][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60
[  346.973617][    C0] R13: 00007ffca73a8f5f R14: 00007f832eb44300 R15: 0000000000022000
[  346.981597][    C0] ---[ end trace 47a530e2f963fe00 ]---
[  347.087500][    C0] ------------[ cut here ]------------
[  347.093110][    C0] WARNING: CPU: 0 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210
[  347.103649][    C0] Modules linked in:
[  347.107540][    C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G        W         5.12.0-rc2-syzkaller #0
[  347.117005][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  347.127057][    C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210
[  347.133058][    C0] Code: 00 00 00 48 c7 c6 40 58 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 67 71 5c fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48
[  347.152669][    C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046
[  347.158734][    C0] RAX: ffffffff82e9ae49 RBX: 0000000000000021 RCX: ffffffff87630780
[  347.166701][    C0] RDX: 0000000000010001 RSI: 0000000000000021 RDI: 0000000000000001
[  347.174764][    C0] RBP: ffff88813bc1da40 R08: ffffffff82e9ac9e R09: 00018881023694bf
[  347.182767][    C0] R10: 0001ffffffffffff R11: 0000000000000085 R12: ffff88813bc1da58
[  347.190733][    C0] R13: ffff88813bc1da40 R14: ffff888102368628 R15: 0000000000fe4c00
[  347.198713][    C0] FS:  0000000000000000(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000
[  347.207692][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  347.214263][    C0] CR2: 00005564115a6617 CR3: 000000010257b000 CR4: 00000000001506f0
[  347.222308][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  347.230275][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[  347.238245][    C0] Call Trace:
[  347.241510][    C0]  <IRQ>
[  347.244342][    C0]  ? vkms_get_vblank_timestamp+0x100/0x100
[  347.250276][    C0]  __run_hrtimer+0x163/0x460
[  347.254862][    C0]  hrtimer_interrupt+0x36e/0xa30
[  347.259792][    C0]  __sysvec_apic_timer_interrupt+0x6f/0x200
[  347.265693][    C0]  sysvec_apic_timer_interrupt+0x69/0x80
[  347.271334][    C0]  </IRQ>
[  347.274251][    C0]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[  347.280217][    C0] RIP: 0010:acpi_idle_enter+0x25b/0x2e0
[  347.285770][    C0] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 8e 3a 87 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 ce 35 87 fe 0f 00 2d 51 74 40 03 fb f4 <fa> eb 59 49 8d 7c 24 04 e8 e8 c6 97 fe 41 8b 54 24 04 ec 48 c7 c7
[  347.305384][    C0] RSP: 0018:ffffffff87603da0 EFLAGS: 00000246
[  347.311524][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  347.319474][    C0] RDX: ffffffff87630780 RSI: 0000000000000000 RDI: 0000000000000000
[  347.327448][    C0] RBP: 0000000000000001 R08: ffffffff82bee9d2 R09: ffffffff82bee993
[  347.335541][    C0] R10: 0000000000000002 R11: ffffffff87630780 R12: ffff888100e18864
[  347.343853][    C0] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bc00000
[  347.351980][    C0]  ? acpi_idle_enter+0x203/0x2e0
[  347.356920][    C0]  ? acpi_idle_enter+0x242/0x2e0
[  347.362039][    C0]  cpuidle_enter_state+0x2b6/0x7c0
[  347.367201][    C0]  cpuidle_enter+0x3c/0x60
[  347.371630][    C0]  do_idle+0x193/0x230
[  347.375705][    C0]  cpu_startup_entry+0x15/0x20
[  347.380468][    C0]  rest_init+0xd7/0xe0
[  347.384525][    C0]  ? time_init+0xc/0xc
[  347.388587][    C0]  arch_call_rest_init+0xa/0xb
[  347.393354][    C0]  start_kernel+0x5a1/0x626
[  347.397871][    C0]  secondary_startup_64_no_verify+0xb0/0xbb
[  347.403776][    C0] ---[ end trace 47a530e2f963fe01 ]---
[  347.409824][    C0] ------------[ cut here ]------------
[  347.415333][    C0] WARNING: CPU: 0 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210
[  347.425986][    C0] Modules linked in:
[  347.429875][    C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G        W         5.12.0-rc2-syzkaller #0
[  347.439226][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  347.449286][    C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210
[  347.455300][    C0] Code: 00 00 00 48 c7 c6 40 58 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 67 71 5c fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48
[  347.474985][    C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046
[  347.481837][    C0] RAX: ffffffff82e9ae49 RBX: 0000000000000014 RCX: ffffffff87630780
[  347.489795][    C0] RDX: 0000000000010001 RSI: 0000000000000014 RDI: 0000000000000001
[  347.497947][    C0] RBP: ffff88813bc1da40 R08: ffffffff82e9ac9e R09: 00018881023694bf
[  347.506094][    C0] R10: 0001ffffffffffff R11: 0000000000000210 R12: ffff88813bc1da58
[  347.514058][    C0] R13: ffff88813bc1da40 R14: ffff888102368628 R15: 0000000000fe4c00
[  347.522031][    C0] FS:  0000000000000000(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000
[  347.531071][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  347.537639][    C0] CR2: 00005564115a6617 CR3: 000000010257b000 CR4: 00000000001506f0
[  347.545845][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  347.553817][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[  347.561773][    C0] Call Trace:
[  347.565048][    C0]  <IRQ>
[  347.567936][    C0]  ? vkms_get_vblank_timestamp+0x100/0x100
[  347.573724][    C0]  __run_hrtimer+0x163/0x460
[  347.578495][    C0]  ? clockevents_program_event+0x19c/0x1e0
[  347.584306][    C0]  hrtimer_interrupt+0x36e/0xa30
[  347.589227][    C0]  __sysvec_apic_timer_interrupt+0x6f/0x200
[  347.595107][    C0]  sysvec_apic_timer_interrupt+0x69/0x80
[  347.600753][    C0]  </IRQ>
[  347.603667][    C0]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[  347.609659][    C0] RIP: 0010:acpi_idle_enter+0x25b/0x2e0
[  347.615209][    C0] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 8e 3a 87 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 ce 35 87 fe 0f 00 2d 51 74 40 03 fb f4 <fa> eb 59 49 8d 7c 24 04 e8 e8 c6 97 fe 41 8b 54 24 04 ec 48 c7 c7
[  347.634890][    C0] RSP: 0018:ffffffff87603da0 EFLAGS: 00000246
[  347.640946][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  347.649040][    C0] RDX: ffffffff87630780 RSI: 0000000000000000 RDI: 0000000000000000
[  347.656998][    C0] RBP: 0000000000000001 R08: ffffffff82bee9d2 R09: ffffffff82bee993
[  347.664967][    C0] R10: 0000000000000002 R11: ffffffff87630780 R12: ffff888100e18864
[  347.673018][    C0] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bc00000
[  347.680985][    C0]  ? acpi_idle_enter+0x203/0x2e0
[  347.685940][    C0]  ? acpi_idle_enter+0x242/0x2e0
[  347.690994][    C0]  cpuidle_enter_state+0x2b6/0x7c0
[  347.696095][    C0]  cpuidle_enter+0x3c/0x60
[  347.700517][    C0]  do_idle+0x193/0x230
[  347.704576][    C0]  cpu_startup_entry+0x15/0x20
[  347.709385][    C0]  rest_init+0xd7/0xe0
[  347.713474][    C0]  ? time_init+0xc/0xc
[  347.717521][    C0]  arch_call_rest_init+0xa/0xb
[  347.722274][    C0]  start_kernel+0x5a1/0x626
[  347.726758][    C0]  secondary_startup_64_no_verify+0xb0/0xbb
[  347.732712][    C0] ---[ end trace 47a530e2f963fe02 ]---
[  347.738561][    C0] ------------[ cut here ]------------
[  347.744078][    C0] WARNING: CPU: 0 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210
[  347.754843][    C0] Modules linked in:
[  347.758729][    C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G        W         5.12.0-rc2-syzkaller #0
[  347.768285][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  347.778331][    C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210
[  347.784430][    C0] Code: 00 00 00 48 c7 c6 40 58 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 67 71 5c fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48
[  347.804251][    C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046
[  347.810348][    C0] RAX: ffffffff82e9ae49 RBX: 0000000000000013 RCX: ffffffff87630780
[  347.818322][    C0] RDX: 0000000000010001 RSI: 0000000000000013 RDI: 0000000000000001
[  347.826300][    C0] RBP: ffff88813bc1da40 R08: ffffffff82e9ac9e R09: 00018881023694bf
[  347.834275][    C0] R10: 0001ffffffffffff R11: 000000000000001d R12: ffff88813bc1da58
[  347.843124][    C0] R13: ffff88813bc1da40 R14: ffff888102368628 R15: 0000000000fe4c00
[  347.851088][    C0] FS:  0000000000000000(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000
[  347.860005][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  347.866734][    C0] CR2: 00005564115a6617 CR3: 000000010257b000 CR4: 00000000001506f0
[  347.874697][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  347.882749][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[  347.890714][    C0] Call Trace:
[  347.893982][    C0]  <IRQ>
[  347.896823][    C0]  ? vkms_get_vblank_timestamp+0x100/0x100
[  347.902630][    C0]  __run_hrtimer+0x163/0x460
[  347.907217][    C0]  ? clockevents_program_event+0x19c/0x1e0
[  347.913206][    C0]  hrtimer_interrupt+0x36e/0xa30
[  347.918268][    C0]  __sysvec_apic_timer_interrupt+0x6f/0x200
[  347.924593][    C0]  sysvec_apic_timer_interrupt+0x69/0x80
[  347.930222][    C0]  </IRQ>
[  347.933139][    C0]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[  347.939127][    C0] RIP: 0010:acpi_idle_enter+0x25b/0x2e0
[  347.944659][    C0] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 8e 3a 87 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 ce 35 87 fe 0f 00 2d 51 74 40 03 fb f4 <fa> eb 59 49 8d 7c 24 04 e8 e8 c6 97 fe 41 8b 54 24 04 ec 48 c7 c7
[  347.964252][    C0] RSP: 0018:ffffffff87603da0 EFLAGS: 00000246
[  347.970298][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  347.978294][    C0] RDX: ffffffff87630780 RSI: 0000000000000000 RDI: 0000000000000000
[  347.986270][    C0] RBP: 0000000000000001 R08: ffffffff82bee9d2 R09: ffffffff82bee993
[  347.994226][    C0] R10: 0000000000000002 R11: ffffffff87630780 R12: ffff888100e18864
[  348.002201][    C0] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bc00000
[  348.010285][    C0]  ? acpi_idle_enter+0x203/0x2e0
[  348.015333][    C0]  ? acpi_idle_enter+0x242/0x2e0
[  348.020266][    C0]  cpuidle_enter_state+0x2b6/0x7c0
[  348.025541][    C0]  cpuidle_enter+0x3c/0x60
[  348.029953][    C0]  do_idle+0x193/0x230
[  348.034039][    C0]  cpu_startup_entry+0x15/0x20
00:24:00 executing program 2:
io_setup(0x1f, &(0x7f0000000140)=<r0=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x7530}, 0x10)
io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000002940)="02", 0x1}])

00:24:00 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, 0x0, 0x1, 0x40b, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @loopback=0x7f000006}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x8}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)

00:24:00 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
socket$packet(0x11, 0x0, 0x300)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$netlink(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000000c0)=ANY=[], 0x20001290}], 0x1}, 0x0)
recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)

00:24:00 executing program 5:
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffff8]}, 0x8)
read(r1, &(0x7f0000000740)=""/384, 0x200008c0)
timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0)

00:24:00 executing program 1:
set_mempolicy(0x2, &(0x7f0000000080)=0x9, 0x9c)
syslog(0x3, &(0x7f0000000040)=""/47, 0x2f)

00:24:00 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4004ae8b, &(0x7f0000000080)=ANY=[])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  348.039099][    C0]  rest_init+0xd7/0xe0
[  348.043327][    C0]  ? time_init+0xc/0xc
[  348.047395][    C0]  arch_call_rest_init+0xa/0xb
[  348.052157][    C0]  start_kernel+0x5a1/0x626
[  348.056667][    C0]  secondary_startup_64_no_verify+0xb0/0xbb
[  348.062578][    C0] ---[ end trace 47a530e2f963fe03 ]---
00:24:00 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, 0x0, 0x1, 0x40b, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @loopback=0x7f000006}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x8}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)

00:24:00 executing program 1:
set_mempolicy(0x2, &(0x7f0000000080)=0x9, 0x9c)
syslog(0x3, &(0x7f0000000040)=""/47, 0x2f)

00:24:00 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, 0x0, 0x1, 0x40b, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @loopback=0x7f000006}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x8}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)

00:24:00 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4004ae8b, &(0x7f0000000080)=ANY=[])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:24:00 executing program 2:
io_setup(0x1f, &(0x7f0000000140)=<r0=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x7530}, 0x10)
io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000002940)="02", 0x1}])

00:24:00 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, 0x0, 0x1, 0x40b, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @loopback=0x7f000006}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x8}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)

00:24:00 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4004ae8b, &(0x7f0000000080)=ANY=[])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:24:00 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4004ae8b, &(0x7f0000000080)=ANY=[])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:24:01 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
socket$packet(0x11, 0x0, 0x300)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$netlink(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000000c0)=ANY=[], 0x20001290}], 0x1}, 0x0)
recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)

00:24:01 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x8}, 0x0)

00:24:01 executing program 0:
r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000000a40)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, r1)
r3 = add_key$user(&(0x7f0000000a40)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r0, r3}, 0x0, 0x0, 0x0)

00:24:01 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4004ae8b, &(0x7f0000000080)=ANY=[])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:24:01 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4004ae8b, &(0x7f0000000080)=ANY=[])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:24:01 executing program 5:
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffff8]}, 0x8)
read(r1, &(0x7f0000000740)=""/384, 0x200008c0)
timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0)

00:24:01 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x8}, 0x0)

00:24:01 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
socket$packet(0x11, 0x0, 0x300)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$netlink(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000000c0)=ANY=[], 0x20001290}], 0x1}, 0x0)
recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)

00:24:01 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4004ae8b, &(0x7f0000000080)=ANY=[])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:24:01 executing program 0:
r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000000a40)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, r1)
r3 = add_key$user(&(0x7f0000000a40)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r0, r3}, 0x0, 0x0, 0x0)

00:24:01 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x8}, 0x0)

00:24:01 executing program 1:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001500)=ANY=[@ANYBLOB="4800000010000507000000020000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002e40)=ANY=[@ANYBLOB="581800002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000e0000000900010072737670000000002818020008000300ac1414bb080001000000080020000400000200000300000003000000ffffffff07000000ff7f0000331f0500080002000000e789080001"], 0x1858}}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

[  349.522761][T24933] __nla_validate_parse: 3 callbacks suppressed
[  349.522776][T24933] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  349.579611][T24933] netlink: 6116 bytes leftover after parsing attributes in process `syz-executor.1'.
[  349.613362][T24933] netlink: 6116 bytes leftover after parsing attributes in process `syz-executor.1'.
[  349.664109][T24933] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
00:24:01 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
socket$packet(0x11, 0x0, 0x300)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$netlink(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000000c0)=ANY=[], 0x20001290}], 0x1}, 0x0)
recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)

00:24:01 executing program 5:
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffff8]}, 0x8)
read(r1, &(0x7f0000000740)=""/384, 0x200008c0)
timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0)

00:24:01 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x8}, 0x0)

00:24:01 executing program 0:
r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000000a40)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, r1)
r3 = add_key$user(&(0x7f0000000a40)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r0, r3}, 0x0, 0x0, 0x0)

[  349.704320][T24940] netlink: 6116 bytes leftover after parsing attributes in process `syz-executor.1'.
[  349.726701][T24941] netlink: 6116 bytes leftover after parsing attributes in process `syz-executor.1'.
00:24:01 executing program 1:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001500)=ANY=[@ANYBLOB="4800000010000507000000020000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002e40)=ANY=[@ANYBLOB="581800002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000e0000000900010072737670000000002818020008000300ac1414bb080001000000080020000400000200000300000003000000ffffffff07000000ff7f0000331f0500080002000000e789080001"], 0x1858}}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:01 executing program 0:
r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000000a40)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, r1)
r3 = add_key$user(&(0x7f0000000a40)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r0, r3}, 0x0, 0x0, 0x0)

00:24:01 executing program 2:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001500)=ANY=[@ANYBLOB="4800000010000507000000020000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002e40)=ANY=[@ANYBLOB="581800002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000e0000000900010072737670000000002818020008000300ac1414bb080001000000080020000400000200000300000003000000ffffffff07000000ff7f0000331f0500080002000000e789080001"], 0x1858}}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:01 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
socket$packet(0x11, 0x0, 0x300)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$netlink(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000000c0)=ANY=[], 0x20001290}], 0x1}, 0x0)
recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  349.876868][T24956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
00:24:01 executing program 0:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0)
write$dsp(r1, &(0x7f0000000200)="3c69a38ac6df20df9d710562526a1d171729a3e180fb9c98b4fd875190867d52ffb26600c52914f3f65f8a527a7b1834d0f18ea13f796bc9", 0x38)

[  349.934889][T24959] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  349.987025][T24956] netlink: 6116 bytes leftover after parsing attributes in process `syz-executor.1'.
[  350.010598][T24968] netlink: 6116 bytes leftover after parsing attributes in process `syz-executor.2'.
00:24:02 executing program 1:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001500)=ANY=[@ANYBLOB="4800000010000507000000020000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002e40)=ANY=[@ANYBLOB="581800002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000e0000000900010072737670000000002818020008000300ac1414bb080001000000080020000400000200000300000003000000ffffffff07000000ff7f0000331f0500080002000000e789080001"], 0x1858}}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:02 executing program 2:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001500)=ANY=[@ANYBLOB="4800000010000507000000020000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002e40)=ANY=[@ANYBLOB="581800002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000e0000000900010072737670000000002818020008000300ac1414bb080001000000080020000400000200000300000003000000ffffffff07000000ff7f0000331f0500080002000000e789080001"], 0x1858}}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:02 executing program 0:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0)
write$dsp(r1, &(0x7f0000000200)="3c69a38ac6df20df9d710562526a1d171729a3e180fb9c98b4fd875190867d52ffb26600c52914f3f65f8a527a7b1834d0f18ea13f796bc9", 0x38)

00:24:02 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
socket$packet(0x11, 0x0, 0x300)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$netlink(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000000c0)=ANY=[], 0x20001290}], 0x1}, 0x0)
recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)

00:24:02 executing program 2:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001500)=ANY=[@ANYBLOB="4800000010000507000000020000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002e40)=ANY=[@ANYBLOB="581800002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000e0000000900010072737670000000002818020008000300ac1414bb080001000000080020000400000200000300000003000000ffffffff07000000ff7f0000331f0500080002000000e789080001"], 0x1858}}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:02 executing program 5:
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffff8]}, 0x8)
read(r1, &(0x7f0000000740)=""/384, 0x200008c0)
timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0)

00:24:02 executing program 1:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001500)=ANY=[@ANYBLOB="4800000010000507000000020000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002e40)=ANY=[@ANYBLOB="581800002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000e0000000900010072737670000000002818020008000300ac1414bb080001000000080020000400000200000300000003000000ffffffff07000000ff7f0000331f0500080002000000e789080001"], 0x1858}}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:02 executing program 0:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0)
write$dsp(r1, &(0x7f0000000200)="3c69a38ac6df20df9d710562526a1d171729a3e180fb9c98b4fd875190867d52ffb26600c52914f3f65f8a527a7b1834d0f18ea13f796bc9", 0x38)

00:24:02 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
socket$packet(0x11, 0x0, 0x300)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$netlink(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000000c0)=ANY=[], 0x20001290}], 0x1}, 0x0)
recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)

00:24:02 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f0000000400)=<r4=>0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001})
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0x118, 0x7}])
r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff80)

00:24:02 executing program 1:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xbc, 0x2, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_MASTER={0x8c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x15}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_MARK={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xbc}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0100002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b37200000b000100666c6f7765720000ec000200a0"], 0x11c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

[  350.714715][   T36] audit: type=1804 audit(1615595042.659:203): pid=25015 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir842609270/syzkaller.V8cPJS/514/bus" dev="sda1" ino=14674 res=1 errno=0
00:24:02 executing program 0:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0)
write$dsp(r1, &(0x7f0000000200)="3c69a38ac6df20df9d710562526a1d171729a3e180fb9c98b4fd875190867d52ffb26600c52914f3f65f8a527a7b1834d0f18ea13f796bc9", 0x38)

00:24:02 executing program 4:
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='nilfs2\x00', 0x0, 0x0)

00:24:02 executing program 1:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xbc, 0x2, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_MASTER={0x8c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x15}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_MARK={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xbc}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0100002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b37200000b000100666c6f7765720000ec000200a0"], 0x11c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:03 executing program 4:
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='nilfs2\x00', 0x0, 0x0)

00:24:03 executing program 0:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xbc, 0x2, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_MASTER={0x8c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x15}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_MARK={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xbc}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0100002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b37200000b000100666c6f7765720000ec000200a0"], 0x11c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:03 executing program 1:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xbc, 0x2, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_MASTER={0x8c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x15}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_MARK={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xbc}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0100002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b37200000b000100666c6f7765720000ec000200a0"], 0x11c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:03 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x401, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x3ff}})

00:24:03 executing program 0:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xbc, 0x2, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_MASTER={0x8c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x15}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_MARK={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xbc}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0100002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b37200000b000100666c6f7765720000ec000200a0"], 0x11c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:03 executing program 4:
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='nilfs2\x00', 0x0, 0x0)

00:24:03 executing program 1:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xbc, 0x2, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_MASTER={0x8c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x15}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_MARK={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xbc}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0100002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b37200000b000100666c6f7765720000ec000200a0"], 0x11c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

[  351.570416][   T36] audit: type=1804 audit(1615595043.489:204): pid=25085 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir842609270/syzkaller.V8cPJS/514/bus" dev="sda1" ino=14674 res=1 errno=0
[  351.606395][   T36] audit: type=1804 audit(1615595043.489:205): pid=25084 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir842609270/syzkaller.V8cPJS/514/bus" dev="sda1" ino=14674 res=1 errno=0
[  351.641978][   T36] audit: type=1804 audit(1615595043.579:206): pid=25027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir842609270/syzkaller.V8cPJS/514/bus" dev="sda1" ino=14674 res=1 errno=0
00:24:03 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f0000000400)=<r4=>0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001})
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b15531", 0x118, 0x7}])
r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff80)

00:24:03 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xfa, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

00:24:03 executing program 0:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xbc, 0x2, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_MASTER={0x8c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x15}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_MARK={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xbc}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0100002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b37200000b000100666c6f7765720000ec000200a0"], 0x11c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:03 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x401, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x3ff}})

00:24:03 executing program 4:
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='nilfs2\x00', 0x0, 0x0)

00:24:03 executing program 1:
r0 = socket(0x2, 0x6, 0x0)
connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)

00:24:03 executing program 1:
r0 = socket(0x2, 0x6, 0x0)
connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)

00:24:03 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f0000000400)=<r4=>0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001})
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0x118, 0x7}])
r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff80)

00:24:03 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x401, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x3ff}})

00:24:03 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="d800000018008109e00f80ecdb15b9040a6000f0ffff7c02e87c55a1bc000900b8000699030000000500050007008178a800050040003cc00200001203ac040000d67f6f94007134cf6efb800fa007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1, 0x0, 0x0, 0x8000000}, 0x0)
ftruncate(0xffffffffffffffff, 0x0)

[  351.843057][   T36] audit: type=1804 audit(1615595043.789:207): pid=25103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir842609270/syzkaller.V8cPJS/515/bus" dev="sda1" ino=14804 res=1 errno=0
[  351.954402][T25116] IPv6: NLM_F_REPLACE set, but no existing node found!
[  351.978009][   T36] audit: type=1804 audit(1615595043.919:208): pid=25117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="bus" dev="sda1" ino=14772 res=1 errno=0
00:24:03 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x401, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x3ff}})

00:24:03 executing program 1:
r0 = socket(0x2, 0x6, 0x0)
connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)

[  351.992746][T25116] IPv6: NLM_F_REPLACE set, but no existing node found!
00:24:04 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f0000000400)=<r4=>0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001})
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0x118, 0x7}])
r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff80)

00:24:04 executing program 3:
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001)
ioctl$USBDEVFS_GETDRIVER(r1, 0x5522, 0x0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x5523, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

00:24:04 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="d800000018008109e00f80ecdb15b9040a6000f0ffff7c02e87c55a1bc000900b8000699030000000500050007008178a800050040003cc00200001203ac040000d67f6f94007134cf6efb800fa007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1, 0x0, 0x0, 0x8000000}, 0x0)
ftruncate(0xffffffffffffffff, 0x0)

00:24:04 executing program 1:
r0 = socket(0x2, 0x6, 0x0)
connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)

00:24:04 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xfa, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

00:24:04 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5)
socket$inet_tcp(0x2, 0x1, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe00480f3, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x10, 0x0, 0xef013080, 0x1f4}}], 0x1, 0x100, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967483641ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170)

[  352.915055][T25136] IPv6: NLM_F_REPLACE set, but no existing node found!
00:24:04 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="d800000018008109e00f80ecdb15b9040a6000f0ffff7c02e87c55a1bc000900b8000699030000000500050007008178a800050040003cc00200001203ac040000d67f6f94007134cf6efb800fa007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1, 0x0, 0x0, 0x8000000}, 0x0)
ftruncate(0xffffffffffffffff, 0x0)

00:24:04 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f0000000400)=<r4=>0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001})
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0x118, 0x7}])
r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff80)

00:24:05 executing program 3:
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001)
ioctl$USBDEVFS_GETDRIVER(r1, 0x5522, 0x0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x5523, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  353.016243][   T36] audit: type=1804 audit(1615595044.959:209): pid=25146 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir842609270/syzkaller.V8cPJS/516/bus" dev="sda1" ino=14740 res=1 errno=0
[  353.050410][T25147] IPv6: NLM_F_REPLACE set, but no existing node found!
00:24:05 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="d800000018008109e00f80ecdb15b9040a6000f0ffff7c02e87c55a1bc000900b8000699030000000500050007008178a800050040003cc00200001203ac040000d67f6f94007134cf6efb800fa007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1, 0x0, 0x0, 0x8000000}, 0x0)
ftruncate(0xffffffffffffffff, 0x0)

[  353.163943][T25156] IPv6: NLM_F_REPLACE set, but no existing node found!
[  353.226479][   T36] audit: type=1804 audit(1615595045.169:210): pid=25159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="bus" dev="sda1" ino=14865 res=1 errno=0
00:24:05 executing program 4:
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001)
ioctl$USBDEVFS_GETDRIVER(r1, 0x5522, 0x0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x5523, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

00:24:05 executing program 3:
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001)
ioctl$USBDEVFS_GETDRIVER(r1, 0x5522, 0x0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x5523, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

00:24:05 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f0000000400)=<r4=>0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001})
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b15531", 0x118, 0x7}])
r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff80)

00:24:05 executing program 4:
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001)
ioctl$USBDEVFS_GETDRIVER(r1, 0x5522, 0x0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x5523, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

00:24:05 executing program 3:
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001)
ioctl$USBDEVFS_GETDRIVER(r1, 0x5522, 0x0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x5523, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

00:24:05 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xfa, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

00:24:05 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5)
socket$inet_tcp(0x2, 0x1, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe00480f3, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x10, 0x0, 0xef013080, 0x1f4}}], 0x1, 0x100, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967483641ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170)

[  354.126730][   T36] audit: type=1804 audit(1615595046.069:211): pid=25190 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir842609270/syzkaller.V8cPJS/517/bus" dev="sda1" ino=14913 res=1 errno=0
00:24:06 executing program 3:
syz_btf_id_by_name$bpf_lsm(0x0)
keyctl$get_security(0x11, 0x0, 0x0, 0x0)

00:24:06 executing program 4:
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001)
ioctl$USBDEVFS_GETDRIVER(r1, 0x5522, 0x0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x5523, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

00:24:06 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f0000000400)=<r4=>0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001})
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b15531", 0x118, 0x7}])
r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff80)

00:24:06 executing program 3:
syz_btf_id_by_name$bpf_lsm(0x0)
keyctl$get_security(0x11, 0x0, 0x0, 0x0)

00:24:06 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xc}, 0x10452, 0x7, 0x1, 0x1, 0x3, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x9, 0x2e}, 0xd8)
fcntl$setstatus(r0, 0x4, 0x2000)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0xf080, 0x3e}, 0x6)
write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x1000001bd)

[  354.525656][   T36] audit: type=1804 audit(1615595046.469:212): pid=25208 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="bus" dev="sda1" ino=14708 res=1 errno=0
00:24:06 executing program 3:
syz_btf_id_by_name$bpf_lsm(0x0)
keyctl$get_security(0x11, 0x0, 0x0, 0x0)

00:24:06 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xfa, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

00:24:07 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5)
socket$inet_tcp(0x2, 0x1, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe00480f3, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x10, 0x0, 0xef013080, 0x1f4}}], 0x1, 0x100, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967483641ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170)

00:24:07 executing program 3:
syz_btf_id_by_name$bpf_lsm(0x0)
keyctl$get_security(0x11, 0x0, 0x0, 0x0)

00:24:07 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x0, 0x158, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
socket$inet6(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

00:24:07 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x2, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="b8"}, 0x48)

[  355.317472][T25234] xt_CT: No such helper "pptp"
00:24:07 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xc}, 0x10452, 0x7, 0x1, 0x1, 0x3, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x9, 0x2e}, 0xd8)
fcntl$setstatus(r0, 0x4, 0x2000)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0xf080, 0x3e}, 0x6)
write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x1000001bd)

00:24:07 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x0, 0x158, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
socket$inet6(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

00:24:07 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x2, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="b8"}, 0x48)

[  355.437636][T25252] xt_CT: No such helper "pptp"
00:24:07 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x0, 0x158, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
socket$inet6(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

00:24:07 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x2, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="b8"}, 0x48)

00:24:07 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x2, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="b8"}, 0x48)

00:24:07 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x0, 0x158, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
socket$inet6(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

[  355.542439][T25260] xt_CT: No such helper "pptp"
[  355.616561][T25270] xt_CT: No such helper "pptp"
00:24:07 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x2, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="b8"}, 0x48)

00:24:07 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5)
socket$inet_tcp(0x2, 0x1, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe00480f3, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x10, 0x0, 0xef013080, 0x1f4}}], 0x1, 0x100, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967483641ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170)

00:24:07 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x0, 0x158, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
socket$inet6(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

00:24:07 executing program 5:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xc}, 0x10452, 0x7, 0x1, 0x1, 0x3, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x9, 0x2e}, 0xd8)
fcntl$setstatus(r0, 0x4, 0x2000)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0xf080, 0x3e}, 0x6)
write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x1000001bd)

00:24:07 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x2, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="b8"}, 0x48)

[  356.018944][T25291] xt_CT: No such helper "pptp"
00:24:08 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xc}, 0x10452, 0x7, 0x1, 0x1, 0x3, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x9, 0x2e}, 0xd8)
fcntl$setstatus(r0, 0x4, 0x2000)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0xf080, 0x3e}, 0x6)
write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x1000001bd)

00:24:08 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x2, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="b8"}, 0x48)

00:24:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00', 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}]}]}, 0x30}}, 0x0)

00:24:08 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x0, 0x158, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
socket$inet6(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

00:24:08 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000300)=[@register_looper], 0x0, 0xfffffdfd, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0xfdfdffff, 0x1000000, 0x0})

00:24:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00', 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}]}]}, 0x30}}, 0x0)

00:24:08 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x0, 0x158, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
socket$inet6(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

[  356.339460][T25310] xt_CT: No such helper "pptp"
00:24:08 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001800)=ANY=[@ANYBLOB="b702000003070000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000f5067d60b7030000000000006a0a00fe18000000850000002b000000b70000000000000095000000000000000d7a28073a82f5e4aeb54e36633e27c279341bf489903cfdb4c05e96e3046f05e77949c306340ee6af0d499a0d063518598e7e290b39f2fc2a5e019bc6b45684f002cf57bf887e83fbb2215b8a34e6bdc4dc1af6d3c6958da4bddac602e0048bec11e874602f060000002af21b753af0a0cc85ae281993bfa2139a3bb755c1f1abd1964007000000e27b2121a5f03dff9787dfd6e7608eb638e6fc4e0bc6bd5ff35928a5b5fa723028eb6ddd35ea79b92beeb52265a4b04ba50fd46a504116fb8ef84c2be021a6c9daf3f24ad7b965af8f522371c9a43c80ee6b397bea247e2d714090d43fe66bbf4f4ffe410bd701d035f867de2a20695033d91ee238c824e0b7a0aeffb9843947c3bc96e1f95c245168d2aeed2e00463d9c039bfdd58709e898c708ae73fc48673c75c8b50db852621ad19c854622f7c7d79ec3ab4494353b458c718021442bbc6456bf0c9f6b822211eb1aa488fcaebb109382c7ab6db9c100f24e466494e7b8549cc139a74b5aaaf261f35e8347eaabe01afe21d7b7a958e9cd04b5bfa5cf78dd2fa958dbb605cd1a99613369185b2bcfe0bf0e31c83fdcb254da7cd3b68983d0798b455c8c5a5a8565d83d28437895929fa0896cf45eda77c4feae29d96568c487a74dd4f9e8465f09818c12dfc93fdb09a1d04a087d3bf219efab764d3cd676f101d3b6c9177c57340b245f15af472f1b8370e4969db2d58ceab050ae4241c08a6469ac65af64737af961cc90132cd2ccb6d7adf63846af1554cfcaa4eb357142a5b525a18d9d88d42520c0903bc444dc0eec4d26e586eff7c432cd12be4c796f2a8cc7b0edab7ae8185bb7cd1fb78ff9e194e17c65acd8d015443a21815bf56f08f1d2293ced278899a97205638050fa21458e4aaf9be16b060000005d362cde82509ead8932869d3d9b3e87d56ac5c41f4d711c8b68a0a16c018ce2a24832cddb18bec414d78f886d1ebf7300384b13efefa03ad55fbaefc026eaa571d5deb4495ebd6fc7d457af008e74855562bbb4f255c5a6819ae0ccfdd7403d13938b4bae98b98b621c309b18df38a1cd779bf479096c09851c1f2e1765212094ffb97ebf972e48871f76b5e0cdfda81df28e5f721f8a63c0fbd8ac992d7535452f7af68f5ae22020afd0a6036d51cda98fef44b69139315832d49fef81198f15ebe3a7548ba46451d93da03b99becd85851e7157d7e23b2803358d060fc4fa989796900a9d76008d537275a8fb1d419408248ddc98113e884991726bf05401000000a5e0f6bc373e438df8508198cb61a4640684d02f9f97badee66fb92098eaa9ee8dedc0003731c511efcfa620075518635230b3467b92bf76b271bdab823dc284323acc4fc92e8fe452351272730702208f63ebf791adae9111d09727ed1d6fa159ee87aed74e5bfc1c93da96da4f3d0d8c03273b474bd194d2579541f86370d3f5258941be920100000000000000e32cd51089d136548ccdabfe1d2cc8e151cc6ecc1b91551eabca418e41289498d659f2ab89bbe5d40ed966b5ff74b12db521c36ce6c1daaafd9dca802bac19ed4e70a64d2a99092098493764662cc153f57deaff4f68ae76f3451daf9b27a11744b9b69f6ce477d6ee279bba72df0f04e22eb2650df6cde761917dea7c34e113ec765bb5fa0c71b8c2e25f001118fbc496a153a0d6e08a8f9117165e01044cb9fb0bb4026372effb9490290541a3930b38705e04758b90f8cf42b4886d417da85e8ab3c9efb8ad688491ba005eb7a798e935f7308ddbd001e478ccb308bc6596ccae90f5037c4dc020cf21bacc3cfa51db4e4ab6f92a355d4382802fdd9d746a1495489de7c21e3c6055d8a2dae048c10942fa9fe7a02dabf2c563dc4b81afa900000000d72299776a348fe7cce33e4138e7b26ab7630d407b82ee3ef340fb5794faf22c63c309ce6d3f0f292bee2f1172674fe921ae23008f352d85541c902f0a9209d558642ef490017d4f37e21a501dd5e39a5b0cfc9cb1b638459b65a2b2d5a7a5b95c87434ef38b4e0905e6347ebf0865ee4c8c88d370433bc227749e1b870dd742d569da8d372d2af0f1fd3490dca52f4cb8bae142859e0650f3b958201491529569e27f3d7079f9df47af3eda8f7090d27826f61cee56063c23bae60d932e84e1f26519b3e1d34fa4a386c1ba82ba0b5778c717a20a99498be4f239d70b4789b9237df3ae59fcf96b68709257b5bc83e29738281a06bc2a4dcd6a21deecb2440166b74a617dbfeaaf17bc57f2967650f6dd757b803408ce3ede97303e626b42966b613fb6692000dace36b2977edee08471d73babfb543185be2cbf90030c41c260b2d0057748c9f1650d6a5c692b1c62112f65b2c713a02b9ed0f28b22cafa1cabf3270e230f1a8456295e078a6ee96ea37458817d0bc27cd0a3274a0cca3eb07b8c65cf474263a5c7fb7174bacbf853bec6a7ceee35c51dfa636021dab8f8f07bb5caaff2bcae507cebd047c0666d903c4e4db9dc04b244cfd01c7d4623161496e8c9f4be19fb02f646a383cacfc5843f14e99d1df026c31f3a6faf7d3c6eb75c0aad55a636ae1b2d6830fb1ef4be5ea1df2941b4ec29af4590b605296039e301f1dcee1f26f8b9b4076b0d9ada0b3dea0c91bbac1be09ad68296f90009482518523a45017bd2fe8c893a99b08200c6486c2b45472cc8ab64a25119882550a146a6edf7e757d835b8dce0b86729f817c42633438bd1dba0c52ef3005b4f34440b36b2df969a42e0d49ee4f2943f135f35335c77fc67df0443beb5c8b9397ab5cbecca9327809092708a80aeb4b2d3d48e2a6283a58d26a75e6bd7aa2d7c886c1c8a20411d36a7b7f94815443ee311ffbb4368c833bc24826fadf27e5efc71dbd1949c27678dcd12f16f538a4755ead03ab7ba2b0d38cd491aebc70e9f34c1e19dbad9bdf614804911eca441cb239b9ae4bb14cc5722aaff301a910a6b0126adf40c5eaa3e932bf88968a56a8302d943b3d6532ceb1d0fcbf85726d2d1a15471ba544e92b6876e1ad721f6217bf0d73e41f7920a14efd10ce0a76b8521016f42d07a14c3a33f8ab422d21180ff97de6ea13c878f15f825a2cfb40769a08ced3fde97acfe0106e0e2d9cdb07d96178c2178c87cd7966c9d7e8f666b4f3a40e9baa0f7a53dc17aad1f0267556369ec51aed8cccaa00af7567a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x703, 0xe, 0x4d2f, &(0x7f0000000080)="1c04ff01de6da9725f90c5a06d0f9f2400844d0044a98db225a47ecb10b429441dec77009050d9560e58f2e162226d4fe467a890b6c4c556c6894acf3d4cd49c4dd5a2d05d6ce642e3abc0e0cb0a7de568fb3f30013c74eb73383ebaf4257042ec5277fa18a9b201882996c7b8de5080c75756094ac8e258ff1673c27fb2f2bffc290edbc5dec9e44b6fab8d5fcbd12ae8339b04701b316bd5eccc3961ce80", 0x0, 0xf0, 0x0, 0x0, 0xfffffffffffffe19}, 0x28)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)

00:24:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00', 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}]}]}, 0x30}}, 0x0)

[  356.434843][T25326] xt_CT: No such helper "pptp"
00:24:08 executing program 5:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xc}, 0x10452, 0x7, 0x1, 0x1, 0x3, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x9, 0x2e}, 0xd8)
fcntl$setstatus(r0, 0x4, 0x2000)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0xf080, 0x3e}, 0x6)
write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x1000001bd)

00:24:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00', 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}]}]}, 0x30}}, 0x0)

00:24:08 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in, 0x0, 0x3c}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb-twofish-avx\x00'}}}]}, 0x138}, 0x1, 0x1400000000000000}, 0x0)

00:24:09 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xc}, 0x10452, 0x7, 0x1, 0x1, 0x3, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x9, 0x2e}, 0xd8)
fcntl$setstatus(r0, 0x4, 0x2000)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0xf080, 0x3e}, 0x6)
write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x1000001bd)

00:24:09 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x703, 0xe, 0x4d2f, &(0x7f0000000080)="1c04ff01de6da9725f90c5a06d0f9f2400844d0044a98db225a47ecb10b429441dec77009050d9560e58f2e162226d4fe467a890b6c4c556c6894acf3d4cd49c4dd5a2d05d6ce642e3abc0e0cb0a7de568fb3f30013c74eb73383ebaf4257042ec5277fa18a9b201882996c7b8de5080c75756094ac8e258ff1673c27fb2f2bffc290edbc5dec9e44b6fab8d5fcbd12ae8339b04701b316bd5eccc3961ce80", 0x0, 0xf0, 0x0, 0x0, 0xfffffffffffffe19}, 0x28)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)

00:24:09 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x703, 0xe, 0x4d2f, &(0x7f0000000080)="1c04ff01de6da9725f90c5a06d0f9f2400844d0044a98db225a47ecb10b429441dec77009050d9560e58f2e162226d4fe467a890b6c4c556c6894acf3d4cd49c4dd5a2d05d6ce642e3abc0e0cb0a7de568fb3f30013c74eb73383ebaf4257042ec5277fa18a9b201882996c7b8de5080c75756094ac8e258ff1673c27fb2f2bffc290edbc5dec9e44b6fab8d5fcbd12ae8339b04701b316bd5eccc3961ce80", 0x0, 0xf0, 0x0, 0x0, 0xfffffffffffffe19}, 0x28)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)

00:24:09 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in, 0x0, 0x3c}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb-twofish-avx\x00'}}}]}, 0x138}, 0x1, 0x1400000000000000}, 0x0)

00:24:09 executing program 3:
perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x63c6, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x8d49, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

00:24:09 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x703, 0xe, 0x4d2f, &(0x7f0000000080)="1c04ff01de6da9725f90c5a06d0f9f2400844d0044a98db225a47ecb10b429441dec77009050d9560e58f2e162226d4fe467a890b6c4c556c6894acf3d4cd49c4dd5a2d05d6ce642e3abc0e0cb0a7de568fb3f30013c74eb73383ebaf4257042ec5277fa18a9b201882996c7b8de5080c75756094ac8e258ff1673c27fb2f2bffc290edbc5dec9e44b6fab8d5fcbd12ae8339b04701b316bd5eccc3961ce80", 0x0, 0xf0, 0x0, 0x0, 0xfffffffffffffe19}, 0x28)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)

00:24:09 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in, 0x0, 0x3c}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb-twofish-avx\x00'}}}]}, 0x138}, 0x1, 0x1400000000000000}, 0x0)

00:24:09 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x703, 0xe, 0x4d2f, &(0x7f0000000080)="1c04ff01de6da9725f90c5a06d0f9f2400844d0044a98db225a47ecb10b429441dec77009050d9560e58f2e162226d4fe467a890b6c4c556c6894acf3d4cd49c4dd5a2d05d6ce642e3abc0e0cb0a7de568fb3f30013c74eb73383ebaf4257042ec5277fa18a9b201882996c7b8de5080c75756094ac8e258ff1673c27fb2f2bffc290edbc5dec9e44b6fab8d5fcbd12ae8339b04701b316bd5eccc3961ce80", 0x0, 0xf0, 0x0, 0x0, 0xfffffffffffffe19}, 0x28)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)

00:24:09 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in, 0x0, 0x3c}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb-twofish-avx\x00'}}}]}, 0x138}, 0x1, 0x1400000000000000}, 0x0)

00:24:09 executing program 5:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xc}, 0x10452, 0x7, 0x1, 0x1, 0x3, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x9, 0x2e}, 0xd8)
fcntl$setstatus(r0, 0x4, 0x2000)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0xf080, 0x3e}, 0x6)
write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x1000001bd)

00:24:09 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001800)=ANY=[@ANYBLOB="b702000003070000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000f5067d60b7030000000000006a0a00fe18000000850000002b000000b70000000000000095000000000000000d7a28073a82f5e4aeb54e36633e27c279341bf489903cfdb4c05e96e3046f05e77949c306340ee6af0d499a0d063518598e7e290b39f2fc2a5e019bc6b45684f002cf57bf887e83fbb2215b8a34e6bdc4dc1af6d3c6958da4bddac602e0048bec11e874602f060000002af21b753af0a0cc85ae281993bfa2139a3bb755c1f1abd1964007000000e27b2121a5f03dff9787dfd6e7608eb638e6fc4e0bc6bd5ff35928a5b5fa723028eb6ddd35ea79b92beeb52265a4b04ba50fd46a504116fb8ef84c2be021a6c9daf3f24ad7b965af8f522371c9a43c80ee6b397bea247e2d714090d43fe66bbf4f4ffe410bd701d035f867de2a20695033d91ee238c824e0b7a0aeffb9843947c3bc96e1f95c245168d2aeed2e00463d9c039bfdd58709e898c708ae73fc48673c75c8b50db852621ad19c854622f7c7d79ec3ab4494353b458c718021442bbc6456bf0c9f6b822211eb1aa488fcaebb109382c7ab6db9c100f24e466494e7b8549cc139a74b5aaaf261f35e8347eaabe01afe21d7b7a958e9cd04b5bfa5cf78dd2fa958dbb605cd1a99613369185b2bcfe0bf0e31c83fdcb254da7cd3b68983d0798b455c8c5a5a8565d83d28437895929fa0896cf45eda77c4feae29d96568c487a74dd4f9e8465f09818c12dfc93fdb09a1d04a087d3bf219efab764d3cd676f101d3b6c9177c57340b245f15af472f1b8370e4969db2d58ceab050ae4241c08a6469ac65af64737af961cc90132cd2ccb6d7adf63846af1554cfcaa4eb357142a5b525a18d9d88d42520c0903bc444dc0eec4d26e586eff7c432cd12be4c796f2a8cc7b0edab7ae8185bb7cd1fb78ff9e194e17c65acd8d015443a21815bf56f08f1d2293ced278899a97205638050fa21458e4aaf9be16b060000005d362cde82509ead8932869d3d9b3e87d56ac5c41f4d711c8b68a0a16c018ce2a24832cddb18bec414d78f886d1ebf7300384b13efefa03ad55fbaefc026eaa571d5deb4495ebd6fc7d457af008e74855562bbb4f255c5a6819ae0ccfdd7403d13938b4bae98b98b621c309b18df38a1cd779bf479096c09851c1f2e1765212094ffb97ebf972e48871f76b5e0cdfda81df28e5f721f8a63c0fbd8ac992d7535452f7af68f5ae22020afd0a6036d51cda98fef44b69139315832d49fef81198f15ebe3a7548ba46451d93da03b99becd85851e7157d7e23b2803358d060fc4fa989796900a9d76008d537275a8fb1d419408248ddc98113e884991726bf05401000000a5e0f6bc373e438df8508198cb61a4640684d02f9f97badee66fb92098eaa9ee8dedc0003731c511efcfa620075518635230b3467b92bf76b271bdab823dc284323acc4fc92e8fe452351272730702208f63ebf791adae9111d09727ed1d6fa159ee87aed74e5bfc1c93da96da4f3d0d8c03273b474bd194d2579541f86370d3f5258941be920100000000000000e32cd51089d136548ccdabfe1d2cc8e151cc6ecc1b91551eabca418e41289498d659f2ab89bbe5d40ed966b5ff74b12db521c36ce6c1daaafd9dca802bac19ed4e70a64d2a99092098493764662cc153f57deaff4f68ae76f3451daf9b27a11744b9b69f6ce477d6ee279bba72df0f04e22eb2650df6cde761917dea7c34e113ec765bb5fa0c71b8c2e25f001118fbc496a153a0d6e08a8f9117165e01044cb9fb0bb4026372effb9490290541a3930b38705e04758b90f8cf42b4886d417da85e8ab3c9efb8ad688491ba005eb7a798e935f7308ddbd001e478ccb308bc6596ccae90f5037c4dc020cf21bacc3cfa51db4e4ab6f92a355d4382802fdd9d746a1495489de7c21e3c6055d8a2dae048c10942fa9fe7a02dabf2c563dc4b81afa900000000d72299776a348fe7cce33e4138e7b26ab7630d407b82ee3ef340fb5794faf22c63c309ce6d3f0f292bee2f1172674fe921ae23008f352d85541c902f0a9209d558642ef490017d4f37e21a501dd5e39a5b0cfc9cb1b638459b65a2b2d5a7a5b95c87434ef38b4e0905e6347ebf0865ee4c8c88d370433bc227749e1b870dd742d569da8d372d2af0f1fd3490dca52f4cb8bae142859e0650f3b958201491529569e27f3d7079f9df47af3eda8f7090d27826f61cee56063c23bae60d932e84e1f26519b3e1d34fa4a386c1ba82ba0b5778c717a20a99498be4f239d70b4789b9237df3ae59fcf96b68709257b5bc83e29738281a06bc2a4dcd6a21deecb2440166b74a617dbfeaaf17bc57f2967650f6dd757b803408ce3ede97303e626b42966b613fb6692000dace36b2977edee08471d73babfb543185be2cbf90030c41c260b2d0057748c9f1650d6a5c692b1c62112f65b2c713a02b9ed0f28b22cafa1cabf3270e230f1a8456295e078a6ee96ea37458817d0bc27cd0a3274a0cca3eb07b8c65cf474263a5c7fb7174bacbf853bec6a7ceee35c51dfa636021dab8f8f07bb5caaff2bcae507cebd047c0666d903c4e4db9dc04b244cfd01c7d4623161496e8c9f4be19fb02f646a383cacfc5843f14e99d1df026c31f3a6faf7d3c6eb75c0aad55a636ae1b2d6830fb1ef4be5ea1df2941b4ec29af4590b605296039e301f1dcee1f26f8b9b4076b0d9ada0b3dea0c91bbac1be09ad68296f90009482518523a45017bd2fe8c893a99b08200c6486c2b45472cc8ab64a25119882550a146a6edf7e757d835b8dce0b86729f817c42633438bd1dba0c52ef3005b4f34440b36b2df969a42e0d49ee4f2943f135f35335c77fc67df0443beb5c8b9397ab5cbecca9327809092708a80aeb4b2d3d48e2a6283a58d26a75e6bd7aa2d7c886c1c8a20411d36a7b7f94815443ee311ffbb4368c833bc24826fadf27e5efc71dbd1949c27678dcd12f16f538a4755ead03ab7ba2b0d38cd491aebc70e9f34c1e19dbad9bdf614804911eca441cb239b9ae4bb14cc5722aaff301a910a6b0126adf40c5eaa3e932bf88968a56a8302d943b3d6532ceb1d0fcbf85726d2d1a15471ba544e92b6876e1ad721f6217bf0d73e41f7920a14efd10ce0a76b8521016f42d07a14c3a33f8ab422d21180ff97de6ea13c878f15f825a2cfb40769a08ced3fde97acfe0106e0e2d9cdb07d96178c2178c87cd7966c9d7e8f666b4f3a40e9baa0f7a53dc17aad1f0267556369ec51aed8cccaa00af7567a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x703, 0xe, 0x4d2f, &(0x7f0000000080)="1c04ff01de6da9725f90c5a06d0f9f2400844d0044a98db225a47ecb10b429441dec77009050d9560e58f2e162226d4fe467a890b6c4c556c6894acf3d4cd49c4dd5a2d05d6ce642e3abc0e0cb0a7de568fb3f30013c74eb73383ebaf4257042ec5277fa18a9b201882996c7b8de5080c75756094ac8e258ff1673c27fb2f2bffc290edbc5dec9e44b6fab8d5fcbd12ae8339b04701b316bd5eccc3961ce80", 0x0, 0xf0, 0x0, 0x0, 0xfffffffffffffe19}, 0x28)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)

00:24:09 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x703, 0xe, 0x4d2f, &(0x7f0000000080)="1c04ff01de6da9725f90c5a06d0f9f2400844d0044a98db225a47ecb10b429441dec77009050d9560e58f2e162226d4fe467a890b6c4c556c6894acf3d4cd49c4dd5a2d05d6ce642e3abc0e0cb0a7de568fb3f30013c74eb73383ebaf4257042ec5277fa18a9b201882996c7b8de5080c75756094ac8e258ff1673c27fb2f2bffc290edbc5dec9e44b6fab8d5fcbd12ae8339b04701b316bd5eccc3961ce80", 0x0, 0xf0, 0x0, 0x0, 0xfffffffffffffe19}, 0x28)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)

00:24:10 executing program 3:
perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x63c6, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x8d49, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

00:24:10 executing program 2:
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='/dev/dsp1\x00')
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x2001, 0x0)

00:24:10 executing program 0:
perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x63c6, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x8d49, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

00:24:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="69d46c3a656600"/16, @ANYRES32, @ANYBLOB="0000000000220000000000014500001400800000002f"]})

00:24:10 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'bind'}}}]})

00:24:10 executing program 2:
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='/dev/dsp1\x00')
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x2001, 0x0)

00:24:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="69d46c3a656600"/16, @ANYRES32, @ANYBLOB="0000000000220000000000014500001400800000002f"]})

[  358.246053][T25405] tmpfs: Bad value for 'mpol'
[  358.258241][T25405] tmpfs: Bad value for 'mpol'
00:24:10 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'bind'}}}]})

00:24:10 executing program 2:
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='/dev/dsp1\x00')
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x2001, 0x0)

[  358.438160][T25414] tmpfs: Bad value for 'mpol'
00:24:10 executing program 5:
syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1b, &(0x7f0000000200)=[{&(0x7f0000010000)="0042454130310100"/32, 0x20, 0x8000}, {&(0x7f0000010100)="004e535230320100"/32, 0x20, 0x8800}, {&(0x7f0000010200)="0054454130310100"/32, 0x20, 0x9000}, {&(0x7f0000010300)="01000200af000100f37af0014d0000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e757855444600"/128, 0x80, 0x9a00}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c15565a35002a4c696e7578205544464653000000000000000000000004050000", 0xe0, 0x9ac0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600020018000100ec26ae014e00000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000", 0x80, 0x9be0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000005001000000000000000200000200000000000000000000000600000001000000002a4c696e75782055444646530000000000000000000000040500"/128, 0x80, 0x9cc0}, {&(0x7f0000010700)="0000000000000000000000000000000000140000530000000106010000000000", 0x20, 0x9da0}, {&(0x7f0000010800)="050002006900010049d8f0014f0000000500000001000000002b4e53523032000000000000000000000000000000000000000000000000000004000000000000", 0x40, 0x9e00}, {&(0x7f0000010900)="000000000000000000000000000000000000000000000000030000005d00000022000000002a4c696e7578205544464653000000000000000000000004050000", 0x40, 0x9ea0}, {&(0x7f0000010a00)="07000200ad000100cb800800500000000600"/32, 0x20, 0xa000}, {&(0x7f0000010b00)="0400020045000100aa52f0015100000004000000002a554446204c5620496e666f00000000000000000000005001040500000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000", 0x80, 0xa200}, {&(0x7f0000010c00)="0000000000000000000000000000000000000009084c696e7578206d6b756466667320322e32000000000000000000000000000000000012084c696e757820756466746f6f6c7320322e3200000000000000000000000000000000130868747470733a2f2f6769746875622e636f6d2f70616c692f756466746f6f6c732f0022002a4c696e757820554446465300000000000000000000000405000000000000", 0xa0, 0xa2e0}, {&(0x7f0000010d00)="080002004e0001000000f0015200"/32, 0x20, 0xa400}, {&(0x7f0000010e00)="090002001400010088b77600530000000010e4070913122c16061c5c0100000000000000000000001700000000000000000000000000000000000000000000000000000000000000010000002e0000000200000022000000002a4c696e757820554446465300000000000000000000000405000000000000050000000200000050015001010200"/160, 0xa0, 0xa600}, {&(0x7f0000010f00)="07010200d7000100f0bc200000000000000000000010010002000001000000000000000008000000000400002000"/64, 0x40, 0xba00}, {&(0x7f0000011000)="00010200c1000100c00af001020000007810e4070913142c15565a350300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e757855444600000000000000", 0x80, 0xbe00}, {&(0x7f0000011100)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900040000030000000000000000000000002a4f5354412055444620436f6d706c69616e74000000005001000000000000", 0xe0, 0xbee0}, {&(0x7f0000011200)="05010200b600010014eda8010300000000000000001001000200000400000000000003000000000000000000a53c00000200000000000000080100000000000000000000000000000010e4070913122c15565a350010e4070913122c1605362f0010e4070913122c1605362f0100000000000000000000000000000000000000002a4c696e757820554446465300000000000000000000000405000000000000000000000000000000000000080100000101020074000100421218000300000001000a00000400000300000000000000000000000000000001010200b3000100efa01c0003000000010002060002000005000000000000001000000000000866696c653001010200c2000100a1fd1c000300000001000006000200000b000000000000001300000000000866696c65310101020001000100904d1c000300000001000006000200000c000000000000001400000000000866696c65320101020046000100c45e1c000300000001000006000200000c000000000000001500000000000866696c6533010102008200010070ea2000030000000100000a000200001f000000000000001600000000000866696c652e636f6c640000000000000000", 0x1c0, 0xc000}, {&(0x7f0000011400)="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"/320, 0x140, 0xc400}, {&(0x7f0000011600)="050102008f000100b61ab0000600000000000000040000000100000500000000000001000000000000000000a57c000001000000000000001a0400000000000003000000000000000010e4070913122c1605362f0010e4070913122c1605362f0010e4070913122c1605362f0100000000000000000000000000000000000000002a4c696e757820554446465300000000000000000000000405000000000000110000000000000000000000100000001a0400000700"/192, 0xc0, 0xc600}, {&(0x7f0000011700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xc800}, {&(0x7f0000011c00)="050102009a000100dcd1da000a00000000000000040000000100000c00000000000003000000000000000000f77e000001000000000000003a0000000000000000000000000000000010e4070913122c1605362f0010e4070913122c1605362f0010e4070913122c1605362f0100000000000000000000000000000000000000002a4c696e7578205544464653000000000000000000000004050000000000001200000000000000000000003a000000010000000504000008746d70051600000873797a2d696d61676567656e303737363835343632050600000866696c6530050600000866696c653000"/256, 0x100, 0xce00}, {&(0x7f0000011d00)="05010200300001004032aa000b00000000000000040000000100000500000000000003000000000000000000a57c000001000000000000000a0000000000000000000000000000000010e4070913122c1605362f0010e4070913122c1605362f0010e4070913122c1605362f0100000000000000000000000000000000000000002a4c696e7578205544464653000000000000000000000004050000000000001300000000000000000000000a00000073797a6b616c6c657273000000000000", 0xc0, 0xd000}, {&(0x7f0000011e00)="050102006f000100dfcbb0000c00000000000000040000000100000500000000000001000000000000000000a57c00000200000000000000282300000000000012000000000000000010e4070913122c1605362f0010e4070913122c1605362f0010e4070913122c1605362f0100000000000000000000000000000000000000002a4c696e75782055444646530000000000000000000000040500000000000014000000000000000000000010000000282300000d00"/192, 0xc0, 0xd200}, {&(0x7f0000011f00)="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"/288, 0x120, 0xf800}, {&(0x7f0000012100)="020002009c0001002700f0017f000000000c00004d000000000c00004d000000", 0x20, 0xfe00}], 0x0, &(0x7f0000012200))

00:24:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="69d46c3a656600"/16, @ANYRES32, @ANYBLOB="0000000000220000000000014500001400800000002f"]})

00:24:10 executing program 0:
perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x63c6, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x8d49, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

00:24:10 executing program 2:
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='/dev/dsp1\x00')
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x2001, 0x0)

00:24:10 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'bind'}}}]})

00:24:10 executing program 3:
perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x63c6, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x8d49, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

00:24:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="69d46c3a656600"/16, @ANYRES32, @ANYBLOB="0000000000220000000000014500001400800000002f"]})

00:24:10 executing program 2:
keyctl$reject(0x13, 0x0, 0x0, 0x204, 0x0)

[  358.727209][T25429] tmpfs: Bad value for 'mpol'
[  358.751194][T25431] loop5: detected capacity change from 0 to 254
00:24:10 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'bind'}}}]})

[  358.814244][T25431] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
00:24:10 executing program 2:
keyctl$reject(0x13, 0x0, 0x0, 0x204, 0x0)

[  358.873321][T25431] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  358.883588][T25431] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  358.894029][T25431] UDF-fs: Scanning with blocksize 512 failed
[  358.915477][T25444] tmpfs: Bad value for 'mpol'
00:24:10 executing program 4:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0)
ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000080))

00:24:10 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)

[  358.934456][T25431] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  358.946077][T25431] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  358.986438][T25431] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  359.019427][T25431] UDF-fs: Scanning with blocksize 1024 failed
[  359.040244][T25431] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  359.076376][T25431] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  359.104376][T25431] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  359.115305][T25431] UDF-fs: Scanning with blocksize 2048 failed
[  359.122284][T25431] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  359.134493][T25431] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  359.144491][T25431] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  359.154426][T25431] UDF-fs: Scanning with blocksize 4096 failed
[  359.169342][T25431] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1)
00:24:11 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)

00:24:11 executing program 0:
perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x63c6, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x8d49, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

00:24:11 executing program 2:
keyctl$reject(0x13, 0x0, 0x0, 0x204, 0x0)

00:24:11 executing program 4:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0)
ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000080))

00:24:11 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)

00:24:11 executing program 3:
perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x63c6, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x8d49, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

00:24:11 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)

00:24:11 executing program 2:
keyctl$reject(0x13, 0x0, 0x0, 0x204, 0x0)

00:24:11 executing program 4:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0)
ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000080))

00:24:11 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)

00:24:11 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)

00:24:11 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)

00:24:11 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0)
dup2(r1, r0)

00:24:11 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0)
dup2(r1, r0)

00:24:11 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)

00:24:11 executing program 4:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0)
ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000080))

00:24:11 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040))

00:24:11 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0)
dup2(r1, r0)

00:24:11 executing program 0:
perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4)
sendmmsg$inet(r0, &(0x7f0000001080)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000b80)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0)

00:24:11 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0x0, 0xffffffff})

00:24:11 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket$inet_udplite(0x2, 0x2, 0x88)
connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x100000000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0, 0x900}])

00:24:11 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040))

00:24:11 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x20)

00:24:11 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0)
dup2(r1, r0)

00:24:11 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x20)

00:24:11 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040))

00:24:11 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket$inet_udplite(0x2, 0x2, 0x88)
connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x100000000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0, 0x900}])

00:24:11 executing program 0:
perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4)
sendmmsg$inet(r0, &(0x7f0000001080)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000b80)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0)

00:24:11 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x20)

00:24:12 executing program 2:
r0 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180))

00:24:12 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x20)

[  360.182568][ T8935] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  360.591184][ T8935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.602161][ T8935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  360.613037][ T8935] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40
[  360.622708][ T8935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.634741][ T8935] usb 6-1: config 0 descriptor??
[  361.121858][ T8935] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[  361.129149][ T8935] cm6533_jd 0003:0D8C:0022.0001: No inputs registered, leaving
[  361.143582][ T8935] cm6533_jd 0003:0D8C:0022.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0
[  361.402179][ T4824] usb 6-1: USB disconnect, device number 17
[  362.181206][ T4824] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  362.591688][ T4824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.603202][ T4824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.613310][ T4824] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40
[  362.622476][ T4824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.631643][ T4824] usb 6-1: config 0 descriptor??
00:24:14 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0x0, 0xffffffff})

00:24:14 executing program 0:
perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4)
sendmmsg$inet(r0, &(0x7f0000001080)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000b80)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0)

00:24:14 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000400)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f00000005c0)="ed41000010f1ff00daf4655fdb03655fdbf4655f0000000000f421a786b9c0fd36b334104f3ad10080", 0x29, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

00:24:14 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket$inet_udplite(0x2, 0x2, 0x88)
connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x100000000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0, 0x900}])

00:24:14 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040))

00:24:14 executing program 2:
r0 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180))

00:24:14 executing program 0:
perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4)
sendmmsg$inet(r0, &(0x7f0000001080)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000b80)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0)

00:24:14 executing program 3:
r0 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180))

[  362.952461][ T4824] usbhid 6-1:0.0: can't add hid device: -71
[  362.958495][ T4824] usbhid: probe of 6-1:0.0 failed with error -71
00:24:14 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket$inet_udplite(0x2, 0x2, 0x88)
connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x100000000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0, 0x900}])

00:24:15 executing program 1:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
unshare(0x2000400)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = gettid()
tkill(r1, 0x1000000000013)

[  363.005244][ T4824] usb 6-1: USB disconnect, device number 18
00:24:15 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net\x00')
getdents64(r0, 0x0, 0x18)

00:24:15 executing program 1:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
unshare(0x2000400)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = gettid()
tkill(r1, 0x1000000000013)

[  363.382020][ T4824] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  363.781544][ T4824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.798073][ T4824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  363.830136][ T4824] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40
[  363.849352][ T4824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.867714][ T4824] usb 6-1: config 0 descriptor??
[  364.341905][ T4824] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  364.350373][ T4824] cm6533_jd 0003:0D8C:0022.0002: No inputs registered, leaving
[  364.359195][ T4824] cm6533_jd 0003:0D8C:0022.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0
[  364.613529][ T9774] usb 6-1: USB disconnect, device number 19
00:24:17 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0x0, 0xffffffff})

00:24:17 executing program 4:
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0xfffffffffffffff8, 0xf4}], 0x0)

00:24:17 executing program 0:
syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000001800)=[{&(0x7f0000010000)="eb52904e54465320202020000801", 0xe}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000086e00)=ANY=[])

00:24:17 executing program 1:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
unshare(0x2000400)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = gettid()
tkill(r1, 0x1000000000013)

00:24:17 executing program 2:
r0 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180))

00:24:17 executing program 3:
r0 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180))

00:24:17 executing program 1:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
unshare(0x2000400)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = gettid()
tkill(r1, 0x1000000000013)

00:24:17 executing program 4:
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0xfffffffffffffff8, 0xf4}], 0x0)

00:24:17 executing program 0:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x203, &(0x7f0000000200)=<r2=>0x0)
ftruncate(r1, 0x81fd)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299})
recvmmsg(0xffffffffffffffff, &(0x7f000000d940)=[{{0x0, 0x0, &(0x7f0000002240)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000009ac0)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}])

00:24:17 executing program 4:
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0xfffffffffffffff8, 0xf4}], 0x0)

00:24:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)

00:24:17 executing program 4:
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0xfffffffffffffff8, 0xf4}], 0x0)

[  365.501315][ T9774] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  365.881548][ T9774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.898101][ T9774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  365.920669][ T9774] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40
[  365.940297][ T9774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.959929][ T9774] usb 6-1: config 0 descriptor??
[  366.462091][ T9774] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[  366.469425][ T9774] cm6533_jd 0003:0D8C:0022.0003: No inputs registered, leaving
[  366.488798][ T9774] cm6533_jd 0003:0D8C:0022.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0
[  366.733291][    T5] usb 6-1: USB disconnect, device number 20
00:24:19 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0x0, 0xffffffff})

00:24:19 executing program 0:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x203, &(0x7f0000000200)=<r2=>0x0)
ftruncate(r1, 0x81fd)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299})
recvmmsg(0xffffffffffffffff, &(0x7f000000d940)=[{{0x0, 0x0, &(0x7f0000002240)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000009ac0)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}])

00:24:19 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)

00:24:19 executing program 4:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x203, &(0x7f0000000200)=<r2=>0x0)
ftruncate(r1, 0x81fd)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299})
recvmmsg(0xffffffffffffffff, &(0x7f000000d940)=[{{0x0, 0x0, &(0x7f0000002240)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000009ac0)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}])

00:24:19 executing program 2:
r0 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180))

00:24:19 executing program 3:
r0 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180))

00:24:19 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)

00:24:19 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)

00:24:19 executing program 4:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x203, &(0x7f0000000200)=<r2=>0x0)
ftruncate(r1, 0x81fd)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299})
recvmmsg(0xffffffffffffffff, &(0x7f000000d940)=[{{0x0, 0x0, &(0x7f0000002240)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000009ac0)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}])

00:24:19 executing program 0:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x203, &(0x7f0000000200)=<r2=>0x0)
ftruncate(r1, 0x81fd)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299})
recvmmsg(0xffffffffffffffff, &(0x7f000000d940)=[{{0x0, 0x0, &(0x7f0000002240)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000009ac0)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}])

00:24:19 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x90080, 0x10)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
exit_group(0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0xfe, 0x0, {0x2d, 0x28, 0x3, 0x1c, 0x2}})
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040), 0x28}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x17)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r2=>0x0})
kcmp(0x0, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r3 = getpid()
tkill(r3, 0x2f)

[  367.621305][ T9774] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  367.639370][T25753] ptrace attach of "/root/syz-executor.1"[25751] was attempted by "/root/syz-executor.1"[25753]
00:24:19 executing program 4:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x203, &(0x7f0000000200)=<r2=>0x0)
ftruncate(r1, 0x81fd)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299})
recvmmsg(0xffffffffffffffff, &(0x7f000000d940)=[{{0x0, 0x0, &(0x7f0000002240)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000009ac0)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}])

[  368.021613][ T9774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  368.043801][ T9774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  368.073717][ T9774] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40
[  368.092852][ T9774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.112686][ T9774] usb 6-1: config 0 descriptor??
[  368.601868][ T9774] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  368.609159][ T9774] cm6533_jd 0003:0D8C:0022.0004: No inputs registered, leaving
[  368.622684][ T9774] cm6533_jd 0003:0D8C:0022.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0
[  368.873451][ T3603] usb 6-1: USB disconnect, device number 21
00:24:21 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x90080, 0x10)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
exit_group(0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0xfe, 0x0, {0x2d, 0x28, 0x3, 0x1c, 0x2}})
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040), 0x28}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x17)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r2=>0x0})
kcmp(0x0, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r3 = getpid()
tkill(r3, 0x2f)

00:24:21 executing program 0:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x203, &(0x7f0000000200)=<r2=>0x0)
ftruncate(r1, 0x81fd)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299})
recvmmsg(0xffffffffffffffff, &(0x7f000000d940)=[{{0x0, 0x0, &(0x7f0000002240)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000009ac0)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}])

00:24:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x121200, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x200, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="470f01f4460fc731f3410f09660f50fa66b8c5000f00d066baf80cb8cc52d882ef66bafc0c66edc9410f0fb44602000000bfc40289a990ec000000d26900", 0x3e}], 0x1, 0x1b, &(0x7f0000000140)=[@cstype3={0x5, 0x3}, @cstype3={0x5, 0x9}], 0x2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000180))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x2010, r5, 0x7ac10000)
sendfile(r6, r4, 0x0, 0x100000300)

00:24:21 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x4, &(0x7f00000002c0)=@framed={{}, [@alu={0x6, 0x0, 0x2}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

00:24:21 executing program 3:
sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
r0 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00), 0x40000000000037b, 0x0)
recvfrom(r0, 0x0, 0x0, 0x102, &(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80)

00:24:21 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff21c8402d080001b91d000000010902120011010000090904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

00:24:21 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x4, &(0x7f00000002c0)=@framed={{}, [@alu={0x6, 0x0, 0x2}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

00:24:21 executing program 3:
sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
r0 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00), 0x40000000000037b, 0x0)
recvfrom(r0, 0x0, 0x0, 0x102, &(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80)

[  369.477237][T25810] ptrace attach of "/root/syz-executor.1"[25804] was attempted by "/root/syz-executor.1"[25810]
00:24:21 executing program 3:
sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
r0 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00), 0x40000000000037b, 0x0)
recvfrom(r0, 0x0, 0x0, 0x102, &(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80)

00:24:21 executing program 0:
socketpair(0x18, 0x0, 0x2, &(0x7f0000002b00))

00:24:21 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x4, &(0x7f00000002c0)=@framed={{}, [@alu={0x6, 0x0, 0x2}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

00:24:21 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x90080, 0x10)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
exit_group(0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0xfe, 0x0, {0x2d, 0x28, 0x3, 0x1c, 0x2}})
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040), 0x28}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x17)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r2=>0x0})
kcmp(0x0, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r3 = getpid()
tkill(r3, 0x2f)

[  369.604244][   T36] audit: type=1804 audit(1615595061.549:213): pid=25803 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir297863628/syzkaller.KCo0yb/516/cgroup.controllers" dev="sda1" ino=14072 res=1 errno=0
00:24:21 executing program 0:
socketpair(0x18, 0x0, 0x2, &(0x7f0000002b00))

00:24:21 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x4, &(0x7f00000002c0)=@framed={{}, [@alu={0x6, 0x0, 0x2}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

00:24:21 executing program 3:
sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
r0 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00), 0x40000000000037b, 0x0)
recvfrom(r0, 0x0, 0x0, 0x102, &(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80)

00:24:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x121200, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x200, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="470f01f4460fc731f3410f09660f50fa66b8c5000f00d066baf80cb8cc52d882ef66bafc0c66edc9410f0fb44602000000bfc40289a990ec000000d26900", 0x3e}], 0x1, 0x1b, &(0x7f0000000140)=[@cstype3={0x5, 0x3}, @cstype3={0x5, 0x9}], 0x2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000180))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x2010, r5, 0x7ac10000)
sendfile(r6, r4, 0x0, 0x100000300)

00:24:21 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x90080, 0x10)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
exit_group(0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0xfe, 0x0, {0x2d, 0x28, 0x3, 0x1c, 0x2}})
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040), 0x28}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x17)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r2=>0x0})
kcmp(0x0, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r3 = getpid()
tkill(r3, 0x2f)

[  369.773896][T25837] ptrace attach of "/root/syz-executor.1"[25831] was attempted by "/root/syz-executor.1"[25837]
[  369.791313][ T4824] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  369.907588][T25853] ptrace attach of "/root/syz-executor.1"[25849] was attempted by "/root/syz-executor.1"[25853]
[  370.045911][   T36] audit: type=1804 audit(1615595061.989:214): pid=25850 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir297863628/syzkaller.KCo0yb/517/cgroup.controllers" dev="sda1" ino=14865 res=1 errno=0
[  370.203077][ T4824] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 17
[  370.216628][ T4824] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=1d.b9
[  370.229019][ T4824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.491350][ T4824] usb 6-1: Invalid connection information received from device
[  370.692723][ T8935] usb 6-1: USB disconnect, device number 22
[  371.461355][    T5] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  371.821393][    T5] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 17
[  371.830466][    T5] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=1d.b9
[  371.840129][    T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.971685][ T3245] ieee802154 phy0 wpan0: encryption failed: -22
[  371.978072][ T3245] ieee802154 phy1 wpan1: encryption failed: -22
00:24:24 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff21c8402d080001b91d000000010902120011010000090904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

00:24:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x121200, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x200, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="470f01f4460fc731f3410f09660f50fa66b8c5000f00d066baf80cb8cc52d882ef66bafc0c66edc9410f0fb44602000000bfc40289a990ec000000d26900", 0x3e}], 0x1, 0x1b, &(0x7f0000000140)=[@cstype3={0x5, 0x3}, @cstype3={0x5, 0x9}], 0x2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000180))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x2010, r5, 0x7ac10000)
sendfile(r6, r4, 0x0, 0x100000300)

00:24:24 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x220001, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)

00:24:24 executing program 0:
socketpair(0x18, 0x0, 0x2, &(0x7f0000002b00))

00:24:24 executing program 1:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001380)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x33}})

00:24:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x121200, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x200, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="470f01f4460fc731f3410f09660f50fa66b8c5000f00d066baf80cb8cc52d882ef66bafc0c66edc9410f0fb44602000000bfc40289a990ec000000d26900", 0x3e}], 0x1, 0x1b, &(0x7f0000000140)=[@cstype3={0x5, 0x3}, @cstype3={0x5, 0x9}], 0x2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000180))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x2010, r5, 0x7ac10000)
sendfile(r6, r4, 0x0, 0x100000300)

[  372.103864][    T5] usb 6-1: palm_os_3_probe - error -71 getting connection information
[  372.129290][    T5] visor: probe of 6-1:1.0 failed with error -71
[  372.169745][    T5] usb 6-1: USB disconnect, device number 23
00:24:24 executing program 1:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001380)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x33}})

00:24:24 executing program 0:
socketpair(0x18, 0x0, 0x2, &(0x7f0000002b00))

00:24:24 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
socket(0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="ae250f7a3a75e55409ccf28e0bf035ac5c17c8670b7bc399cee42faea115edd1ac83eea60d482565655c3f67655af5e4ab022e43fa066bdc3ca93e7748", 0x3d}, {&(0x7f0000002340)="aab3ce44143777bf61efca9fd5ac41b16f06e9988ba0869f4af0ee8babdf42b02ccca7e3b21e4862e758a3124c81684037c2c6caabcee059461b351621ea162bee5d9cdb7e982e41b9dcec66320f07407381a6aab7db74bebee538d5b71a2978f20a5bbc62280083dc7ff5b3e288fb00e994a2947a37cc662a4b24e8ebb3214ca8f919f8860f4cd29b0df2dea9d1558c76b010cb49ae8daffa86e55ae17ee2d890109a76c92bff77c04c05ee34e8f5382e8fe4f5e4accbd97506abd38be799d558ce20324dc162e259aaa80367d08e5a7d65d51462c464689b552e1b3c803b1552b8c44825528457f0d34f2c3a62b754b046a10fac9db92ef68f87281f615919c41f9016ed11cd1b61b77dae4d0794706bd391001be165623584f9dcf6d65eed4b7753614fbf654623ff4ecaf398ebdc573e8ce48bb6ae8590c2c59c570d422c59de1a2ecd67e6fffcbfcc33307ce61daabda64cf8680e358e6c9ce235d8bea0d967c4c2231cba2476fc3d5467ed16a6567e733a80718c358691de3c2e51d7fb424ad7f10fb90d083e9fc427b55dacad4ece78abacc99fe09204b357089becd00bd887bef0cf295c083e762ac4d3f2e45a77d93eedadb1f35aaf89eb44c65d6805b93a6869c9b91ef5d6bec7f25a61d52936b81bfe11e2ec939757c0dd8bdcff40b07968ea8715dc4f3a8c8555435cac512dac2566e172bbbb6701c7351c77f20a343f55433cf32f9a91f9e810ee813bc5e3bd8d33e1c1de826f99a7bc7f4b241d01dca29c92b3323c4a75195f982a44b30210265bfad93572e4cf51cc21ff692870b8f62eff10e5d6bb2732ca4e8411371eef24c88d9f7efa4b75f42a8f2591d07901bb8470287024580b718f76892ea7c3004f62a9bc05156488e834a99e4372fd612559c9d4738e2aa42bbd96910ebe091482bfef12532374b5e512cc899b0aebaaf743db0a58bc7f6ae6660fdb6052b1823e9a658ee84240142d45ed4ce5eeb6343c67ed308d7350636c7440c746fda74db5a03530e46a19bfaa7b13a60ace422f3e2b4be47efa85760191321752af507bc21778360f6335946d03381bedbdeba4755165583308c15536b02b55a581ee2924010e166935456484d0a9c3da09e5150a4f96c31b882b7200774bd9c98af2163f6600fb4f886a65b1999bad7cfc784b3579df51ca08c1100ab38476afafca806594e82e06745ee4469323684930c735dc3595a8003677f9c3fcbfff906462791c9ce9d25df41e340248ed64d5a5fb244f0fc7f0df05632f7c812086f681ffe1eddc074e653653c6fb3800c3eaecd837e2eaa6ee0e12f0a7e562f8e93458b037a260511198c458619fbe24b0b4c71773a65b548a04e47f957b1b5b93a26361f0b5aef322b61f518c92bd4b3b0991d4995c6ead3e6f832e40750827c0f5d947eddc07ca2b7682aedc7f9c7d03222a370e6c9241d43e4dd95f5841f61c7665962a91230258b3e392ad9afc0d935a5ebc5693edbb2d0b40f30d57df317eec10c201131b328356b3e0eb508c534a1a79045b01c67cdd4b8914efbbf5f547feaaa99eb217eb9b0d310a8946272a7780e4ef20c4a28717c9986e46f434155f2e2cee5569bef7732b6fcf1eb64247e41c91410416af4f1c0fa76937939a723217d8b5217f4ae9fc62c4d4b4fc9e8189ae673af510edeced25205d85914abd12fa09dcfcff6f8925e95988e5d274878ab9ad596bbb1388c236f1d0c9f01648525878c767d64f185a9f696d68c924ba9f06a0c587497e8267b1e1c47d4a294e5af913a557594c800062e43814534191c2cbe1833f31b81222e7f6ed94428f77de56d4ad76a8d12029177e6207a4468ddb0a2c99d2917e538fcb0347fe21dac3549002ab71f7c91e9f9825009e886a863c4d2e40002c5f00b17edc2ae17d82a3a5fa6af5c67379fc8c41801d82f3f310e205ea4e1fef17701fa3ce864039717cd0f96e0e1321d2b8f14d0efdf3169ef7ef691341f8a4ff8213fb56e2d096011c116e0fa7816b16aa9fa4790c1bd12e47ef2f9024eb9a5f9cb30424d4de688114313979e79f89f81bf3628305a319b5b30643c13eb9329518895c61534be1917417ee1b277508a5e6e5b75525d211de7a1ef7539c17779d40f75f0298eae9e9abb0200581b26351cce79e04a7c0b54aec3947d14a8841003b8f13528c1e764b2ac61a7c18269f83c9aae640578c53673f2ca56d4853d2fd5b250e9713dd2300d9303f6c1d4f8085a10aaf1d90d9bb6d15cde5659b08dfa4078e23c76675a6af2b7c15941c1d07f68a77332cb9a97dfb86c6d032786159b44e3ada1be075c3e91087489b14df42f1702403357b213d4705d62eb5c5a100dd00c432401b54d2481de3002b155514d783d9c6db42335cea4b368a726ba847e7f4f528b968c811c7764699d82ed60286faa9e50fae1a0593f894152899ab411110e48cd0cafad82e14e1333116a7772a0943f92b80098e297691a930203d2557c1f58d218cb96c841092f6ad741c616099a3bb33b794886a7359185afb919f503ef208fc8a390a735de64223ce4af8cb2524e89c385e93fdd5e47374e8d43a2745ff9bb60a48a29bb997a46dd51ea3ea57fb8e7cffdc02dd9fe0d004f367cd03ed52eb739ada0209c70fe08bbcf45460a569725bdbb9b63872f75d99d34dd51a18716d20c0fc38f5d9dc9a7da8213279de65b93c2285bc50c41bb3e16ea65e95813c284a339dfb009b96d8da26bc6b1f7c99e932dea3be58856a12402b41b4148801b5f0bdbfb6009046a07f39df2244733576453b5cbc22aa7b30e8f81eed73a69e786c50e78c8163f103233bbb7efa035df389c3e198cf1e7ef57429bba7f93d059adcfc160aab3ae4a151b18b54d0f6666e9a3c5ee8b47340221a990f7bfd149ec8901220169d9cadd3fffa858abb44a0750ea0a3efbd79a0a781dd01df105481853be819f00715c4009be9f079200dfc54c1891c271db9b1ea41854cbbe3e2b7fe2666e9c6ad8ec0e651b757b89aeb8b5793335025ef430fe12b13fef490efb9bcfe7a5205e1fe8d7375bf72d09ec4ffb2c5ad146378217f4ae3d17b1e8e9eecfccc19468596810487d130ef2cffa03159b823ef0a11ce81fb73e3066173ada0604fa88553ead49aff2f5d33383f8bbc2d6e9a3bba3cc6607819e19293707f4d5056bbfe46cca9f217", 0x8d0}], 0x2}}], 0x1, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f65e3b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

00:24:24 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0xa, 0xbc, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffa0018000}, 0x38)

[  372.366447][   T36] audit: type=1804 audit(1615595064.309:215): pid=25890 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir297863628/syzkaller.KCo0yb/518/cgroup.controllers" dev="sda1" ino=15505 res=1 errno=0
00:24:24 executing program 1:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001380)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x33}})

[  372.401283][   T36] audit: type=1804 audit(1615595064.329:216): pid=25897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir842609270/syzkaller.V8cPJS/549/cgroup.controllers" dev="sda1" ino=15762 res=1 errno=0
00:24:24 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0xa, 0xbc, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffa0018000}, 0x38)

[  372.541337][    T5] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  372.921446][    T5] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 17
[  372.931917][    T5] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=1d.b9
[  372.961859][    T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.253454][    T5] usb 6-1: Invalid connection information received from device
[  373.455294][ T8935] usb 6-1: USB disconnect, device number 24
00:24:25 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff21c8402d080001b91d000000010902120011010000090904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

00:24:25 executing program 1:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001380)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x33}})

00:24:25 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0xa, 0xbc, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffa0018000}, 0x38)

00:24:25 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x121200, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x200, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="470f01f4460fc731f3410f09660f50fa66b8c5000f00d066baf80cb8cc52d882ef66bafc0c66edc9410f0fb44602000000bfc40289a990ec000000d26900", 0x3e}], 0x1, 0x1b, &(0x7f0000000140)=[@cstype3={0x5, 0x3}, @cstype3={0x5, 0x9}], 0x2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000180))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x2010, r5, 0x7ac10000)
sendfile(r6, r4, 0x0, 0x100000300)

00:24:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x121200, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x200, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="470f01f4460fc731f3410f09660f50fa66b8c5000f00d066baf80cb8cc52d882ef66bafc0c66edc9410f0fb44602000000bfc40289a990ec000000d26900", 0x3e}], 0x1, 0x1b, &(0x7f0000000140)=[@cstype3={0x5, 0x3}, @cstype3={0x5, 0x9}], 0x2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000180))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x2010, r5, 0x7ac10000)
sendfile(r6, r4, 0x0, 0x100000300)

00:24:25 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x942, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50}, 0x50)

00:24:26 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0xa, 0xbc, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffa0018000}, 0x38)

00:24:26 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x0, 0x0, 0xfdfdffff}, {0x7, 0x0, 0x0, 0xfdfdffff}]})

00:24:26 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000080)={0x7b, 0x0, [0x1d9, 0x1]})

00:24:26 executing program 0:
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(0x0, 0x32)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
mount(&(0x7f00000004c0)=@sr0='/dev/sr0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='btrfs\x00', 0x140080, &(0x7f0000000580)='autofs\x00')
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0)
pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000180)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xffff, r1, &(0x7f0000000340)="dbeabf9be491c9946a218e00be9a69613bffeba33d08b0fb2727ebceb8606878f9500cc00acabcfe81c590c51b60715699ad56ad39ad91dd97806742ebbf6995c048bfeec0b660d93c163110c110fe1b3e7cc0ebe6f60ce7021d1d816579e00660ea439a5ec1d4db77c973376c0b8ceb8f311f3915b21489a29bb2bde8c93954d6fdb180e66b1072690c3f3f9605fc06f4af46252e9b9782b651d1e6d5433c573229a867022d5dd8bd925e8f60fb58f5167e04998256611f1be7468a8728a4c03178c651d7ae6447f318bb09550c", 0xce, 0x2, 0x0, 0x3, r3}, &(0x7f0000000240))
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0xf7, 0xfff, 0x11, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, 0x8000, 0x7, 0x1, 0x4}})

[  374.223667][   T36] audit: type=1804 audit(1615595066.169:217): pid=25957 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir297863628/syzkaller.KCo0yb/519/cgroup.controllers" dev="sda1" ino=15489 res=1 errno=0
00:24:26 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x0, 0x0, 0xfdfdffff}, {0x7, 0x0, 0x0, 0xfdfdffff}]})

[  374.321378][    T5] usb 6-1: new high-speed USB device number 25 using dummy_hcd
00:24:26 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="a4190b96896453a2a98d327edb687652", 0x10}, {&(0x7f0000000300)="de0c8002b0ffe117b4b06a874d55a705e3780e0893d5ae8f4e3833e4d2182dbeb0fd232a407b32afa633da7b9ec801be67b130a784", 0x35}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x27)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

[  374.359172][   T36] audit: type=1804 audit(1615595066.229:218): pid=25960 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir842609270/syzkaller.V8cPJS/550/cgroup.controllers" dev="sda1" ino=15762 res=1 errno=0
[  374.456192][T25990] validate_nla: 10 callbacks suppressed
[  374.456214][T25990] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  374.594318][T25996] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  374.722716][    T5] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 17
[  374.735118][    T5] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=1d.b9
[  374.780247][    T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.111447][    T5] usb 6-1: Invalid connection information received from device
[  375.315731][    T5] usb 6-1: USB disconnect, device number 25
00:24:27 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff21c8402d080001b91d000000010902120011010000090904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

00:24:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x0, 0x0, 0xfdfdffff}, {0x7, 0x0, 0x0, 0xfdfdffff}]})

00:24:27 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="a4190b96896453a2a98d327edb687652", 0x10}, {&(0x7f0000000300)="de0c8002b0ffe117b4b06a874d55a705e3780e0893d5ae8f4e3833e4d2182dbeb0fd232a407b32afa633da7b9ec801be67b130a784", 0x35}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x27)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

00:24:27 executing program 0:
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(0x0, 0x32)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
mount(&(0x7f00000004c0)=@sr0='/dev/sr0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='btrfs\x00', 0x140080, &(0x7f0000000580)='autofs\x00')
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0)
pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000180)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xffff, r1, &(0x7f0000000340)="dbeabf9be491c9946a218e00be9a69613bffeba33d08b0fb2727ebceb8606878f9500cc00acabcfe81c590c51b60715699ad56ad39ad91dd97806742ebbf6995c048bfeec0b660d93c163110c110fe1b3e7cc0ebe6f60ce7021d1d816579e00660ea439a5ec1d4db77c973376c0b8ceb8f311f3915b21489a29bb2bde8c93954d6fdb180e66b1072690c3f3f9605fc06f4af46252e9b9782b651d1e6d5433c573229a867022d5dd8bd925e8f60fb58f5167e04998256611f1be7468a8728a4c03178c651d7ae6447f318bb09550c", 0xce, 0x2, 0x0, 0x3, r3}, &(0x7f0000000240))
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0xf7, 0xfff, 0x11, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, 0x8000, 0x7, 0x1, 0x4}})

00:24:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x121200, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x200, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="470f01f4460fc731f3410f09660f50fa66b8c5000f00d066baf80cb8cc52d882ef66bafc0c66edc9410f0fb44602000000bfc40289a990ec000000d26900", 0x3e}], 0x1, 0x1b, &(0x7f0000000140)=[@cstype3={0x5, 0x3}, @cstype3={0x5, 0x9}], 0x2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000180))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x2010, r5, 0x7ac10000)
sendfile(r6, r4, 0x0, 0x100000300)

00:24:27 executing program 4:
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(0x0, 0x32)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
mount(&(0x7f00000004c0)=@sr0='/dev/sr0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='btrfs\x00', 0x140080, &(0x7f0000000580)='autofs\x00')
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0)
pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000180)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xffff, r1, &(0x7f0000000340)="dbeabf9be491c9946a218e00be9a69613bffeba33d08b0fb2727ebceb8606878f9500cc00acabcfe81c590c51b60715699ad56ad39ad91dd97806742ebbf6995c048bfeec0b660d93c163110c110fe1b3e7cc0ebe6f60ce7021d1d816579e00660ea439a5ec1d4db77c973376c0b8ceb8f311f3915b21489a29bb2bde8c93954d6fdb180e66b1072690c3f3f9605fc06f4af46252e9b9782b651d1e6d5433c573229a867022d5dd8bd925e8f60fb58f5167e04998256611f1be7468a8728a4c03178c651d7ae6447f318bb09550c", 0xce, 0x2, 0x0, 0x3, r3}, &(0x7f0000000240))
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0xf7, 0xfff, 0x11, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, 0x8000, 0x7, 0x1, 0x4}})

00:24:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x0, 0x0, 0xfdfdffff}, {0x7, 0x0, 0x0, 0xfdfdffff}]})

00:24:27 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="a4190b96896453a2a98d327edb687652", 0x10}, {&(0x7f0000000300)="de0c8002b0ffe117b4b06a874d55a705e3780e0893d5ae8f4e3833e4d2182dbeb0fd232a407b32afa633da7b9ec801be67b130a784", 0x35}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x27)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

[  375.914738][T26029] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  375.963997][T26033] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
00:24:27 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="a4190b96896453a2a98d327edb687652", 0x10}, {&(0x7f0000000300)="de0c8002b0ffe117b4b06a874d55a705e3780e0893d5ae8f4e3833e4d2182dbeb0fd232a407b32afa633da7b9ec801be67b130a784", 0x35}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x27)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

00:24:28 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="000000fe42f5b60f9b305f46c791000000000000cd611944407766ad7587f02d45720900000004009389"]})

[  376.058573][T26033] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  376.081427][   T36] audit: type=1804 audit(1615595068.019:219): pid=26028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir842609270/syzkaller.V8cPJS/551/cgroup.controllers" dev="sda1" ino=13940 res=1 errno=0
00:24:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000060c000200080006"], 0x3c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES16], 0x58}, 0x1, 0x0, 0x0, 0x22008040}, 0x48004)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r5 = socket(0x10, 0x3, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0)
preadv(r6, &(0x7f0000000280), 0x1, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x58, 0x14, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @empty}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x80}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3748}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x90}}, 0x0)

00:24:28 executing program 0:
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(0x0, 0x32)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
mount(&(0x7f00000004c0)=@sr0='/dev/sr0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='btrfs\x00', 0x140080, &(0x7f0000000580)='autofs\x00')
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0)
pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000180)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xffff, r1, &(0x7f0000000340)="dbeabf9be491c9946a218e00be9a69613bffeba33d08b0fb2727ebceb8606878f9500cc00acabcfe81c590c51b60715699ad56ad39ad91dd97806742ebbf6995c048bfeec0b660d93c163110c110fe1b3e7cc0ebe6f60ce7021d1d816579e00660ea439a5ec1d4db77c973376c0b8ceb8f311f3915b21489a29bb2bde8c93954d6fdb180e66b1072690c3f3f9605fc06f4af46252e9b9782b651d1e6d5433c573229a867022d5dd8bd925e8f60fb58f5167e04998256611f1be7468a8728a4c03178c651d7ae6447f318bb09550c", 0xce, 0x2, 0x0, 0x3, r3}, &(0x7f0000000240))
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0xf7, 0xfff, 0x11, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, 0x8000, 0x7, 0x1, 0x4}})

[  376.221552][ T8935] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  376.234660][T26056] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[  376.296048][T26091] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[  376.336846][T26092] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  376.691689][ T8935] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 17
[  376.721823][ T8935] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=1d.b9
[  376.730884][ T8935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.001493][ T8935] usb 6-1: Invalid connection information received from device
[  377.206792][ T8935] usb 6-1: USB disconnect, device number 26
[  377.406884][T16453] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.454992][T16453] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.524999][T16453] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.584983][T16453] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
00:24:29 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x73, 0x11, 0x41}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:24:29 executing program 4:
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(0x0, 0x32)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
mount(&(0x7f00000004c0)=@sr0='/dev/sr0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='btrfs\x00', 0x140080, &(0x7f0000000580)='autofs\x00')
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0)
pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000180)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xffff, r1, &(0x7f0000000340)="dbeabf9be491c9946a218e00be9a69613bffeba33d08b0fb2727ebceb8606878f9500cc00acabcfe81c590c51b60715699ad56ad39ad91dd97806742ebbf6995c048bfeec0b660d93c163110c110fe1b3e7cc0ebe6f60ce7021d1d816579e00660ea439a5ec1d4db77c973376c0b8ceb8f311f3915b21489a29bb2bde8c93954d6fdb180e66b1072690c3f3f9605fc06f4af46252e9b9782b651d1e6d5433c573229a867022d5dd8bd925e8f60fb58f5167e04998256611f1be7468a8728a4c03178c651d7ae6447f318bb09550c", 0xce, 0x2, 0x0, 0x3, r3}, &(0x7f0000000240))
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0xf7, 0xfff, 0x11, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, 0x8000, 0x7, 0x1, 0x4}})

00:24:29 executing program 0:
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(0x0, 0x32)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
mount(&(0x7f00000004c0)=@sr0='/dev/sr0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='btrfs\x00', 0x140080, &(0x7f0000000580)='autofs\x00')
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0)
pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000180)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xffff, r1, &(0x7f0000000340)="dbeabf9be491c9946a218e00be9a69613bffeba33d08b0fb2727ebceb8606878f9500cc00acabcfe81c590c51b60715699ad56ad39ad91dd97806742ebbf6995c048bfeec0b660d93c163110c110fe1b3e7cc0ebe6f60ce7021d1d816579e00660ea439a5ec1d4db77c973376c0b8ceb8f311f3915b21489a29bb2bde8c93954d6fdb180e66b1072690c3f3f9605fc06f4af46252e9b9782b651d1e6d5433c573229a867022d5dd8bd925e8f60fb58f5167e04998256611f1be7468a8728a4c03178c651d7ae6447f318bb09550c", 0xce, 0x2, 0x0, 0x3, r3}, &(0x7f0000000240))
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0xf7, 0xfff, 0x11, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, 0x8000, 0x7, 0x1, 0x4}})

00:24:29 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000060c000200080006"], 0x3c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES16], 0x58}, 0x1, 0x0, 0x0, 0x22008040}, 0x48004)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r5 = socket(0x10, 0x3, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0)
preadv(r6, &(0x7f0000000280), 0x1, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x58, 0x14, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @empty}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x80}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3748}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x90}}, 0x0)

00:24:29 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="000000fe42f5b60f9b305f46c791000000000000cd611944407766ad7587f02d45720900000004009389"]})

00:24:29 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fscache'])

00:24:29 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="000000fe42f5b60f9b305f46c791000000000000cd611944407766ad7587f02d45720900000004009389"]})

00:24:29 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fscache'])

00:24:30 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fscache'])

[  378.106676][T26148] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
00:24:30 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x73, 0x11, 0x41}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[  378.149588][T26150] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
00:24:30 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fscache'])

00:24:30 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="000000fe42f5b60f9b305f46c791000000000000cd611944407766ad7587f02d45720900000004009389"]})

00:24:30 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000060c000200080006"], 0x3c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES16], 0x58}, 0x1, 0x0, 0x0, 0x22008040}, 0x48004)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r5 = socket(0x10, 0x3, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0)
preadv(r6, &(0x7f0000000280), 0x1, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x58, 0x14, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @empty}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x80}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3748}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x90}}, 0x0)

[  378.450162][T26230] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[  379.096140][T16453] device hsr_slave_0 left promiscuous mode
[  379.102999][T16453] device hsr_slave_1 left promiscuous mode
[  379.109067][T16453] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  379.116793][T16453] batman_adv: batadv0: Removing interface: batadv_slave_0
[  379.124952][T16453] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  379.132652][T16453] batman_adv: batadv0: Removing interface: batadv_slave_1
[  379.140274][T16453] device bridge_slave_1 left promiscuous mode
[  379.146754][T16453] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.154708][T16453] device bridge_slave_0 left promiscuous mode
[  379.161002][T16453] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.171242][T16453] device veth1_macvtap left promiscuous mode
[  379.177443][T16453] device veth0_macvtap left promiscuous mode
[  379.183504][T16453] device veth1_vlan left promiscuous mode
[  379.189365][T16453] device veth0_vlan left promiscuous mode
[  379.933365][T16453] bond3 (unregistering): (slave wireguard5): Releasing backup interface
[  379.943757][T16453] bond3 (unregistering): (slave wireguard4): Releasing backup interface
[  380.008082][T16453] bond3 (unregistering): Released all slaves
[  380.016469][T16453] bond2 (unregistering): (slave wireguard3): Releasing backup interface
[  380.026916][T16453] bond2 (unregistering): (slave wireguard2): Releasing backup interface
[  380.037769][T16453] bond2 (unregistering): Released all slaves
[  380.046629][T16453] bond1 (unregistering): (slave wireguard1): Releasing backup interface
[  380.056910][T16453] bond1 (unregistering): (slave wireguard0): Releasing backup interface
[  380.067902][T16453] bond1 (unregistering): Released all slaves
[  380.218125][T16453] team0 (unregistering): Port device team_slave_1 removed
[  380.228565][T16453] team0 (unregistering): Port device team_slave_0 removed
[  380.238230][T16453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.250256][T16453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.276326][T16453] bond0 (unregistering): Released all slaves
[  381.110498][T26279] IPVS: ftp: loaded support on port[0] = 21
[  381.173088][T26279] chnl_net:caif_netlink_parms(): no params data found
[  381.202510][T26279] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.209721][T26279] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.217900][T26279] device bridge_slave_0 entered promiscuous mode
[  381.226117][T26279] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.233277][T26279] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.241032][T26279] device bridge_slave_1 entered promiscuous mode
[  381.257647][T26279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.268561][T26279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.285901][T26279] team0: Port device team_slave_0 added
[  381.292724][T26279] team0: Port device team_slave_1 added
[  381.305584][T26279] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.312562][T26279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  381.339386][T26279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.352411][T26279] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.359354][T26279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  381.386182][T26279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.406686][T26279] device hsr_slave_0 entered promiscuous mode
[  381.413196][T26279] device hsr_slave_1 entered promiscuous mode
[  381.419511][T26279] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  381.427096][T26279] Cannot create hsr debugfs directory
[  381.479992][T26279] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.492634][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  381.500273][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  381.510341][T26279] 8021q: adding VLAN 0 to HW filter on device team0
[  381.521642][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  381.530189][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  381.538940][ T8935] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.546092][ T8935] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.554081][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  381.563169][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  381.571813][ T8935] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.578861][ T8935] bridge0: port 2(bridge_slave_1) entered forwarding state
[  381.587263][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  381.597099][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  381.612257][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  381.621073][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  381.629816][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  381.639152][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  381.647941][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  381.656818][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  381.668665][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  381.679905][T26279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  381.691226][T26279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  381.698907][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  381.717174][T26279] 8021q: adding VLAN 0 to HW filter on device batadv0
[  381.724956][ T9774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  381.733094][ T9774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  381.762819][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  381.781000][T26279] device veth0_vlan entered promiscuous mode
[  381.787960][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  381.796842][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  381.804973][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  381.816980][T26279] device veth1_vlan entered promiscuous mode
[  381.833819][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  381.842594][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  381.850800][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  381.861203][T26279] device veth0_macvtap entered promiscuous mode
[  381.871085][T26279] device veth1_macvtap entered promiscuous mode
[  381.886208][T26279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  381.897116][T26279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.907444][T26279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  381.918160][T26279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.928120][T26279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  381.938704][T26279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.948741][T26279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  381.959967][T26279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.970166][T26279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  381.980893][T26279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.992051][T26279] batman_adv: batadv0: Interface activated: batadv_slave_0
[  381.999966][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  382.008304][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  382.017077][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  382.027438][T26279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  382.038251][T26279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.048543][T26279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  382.059845][T26279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.070606][T26279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  382.081325][T26279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.092847][T26279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  382.103612][T26279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.113752][T26279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  382.124205][T26279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.135130][T26279] batman_adv: batadv0: Interface activated: batadv_slave_1
[  382.147176][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  382.158061][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  382.193071][T16453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.201135][T16453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.209300][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  382.237738][T16453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.245703][T16453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.253660][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  382.308576][T26570] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  382.346487][T26570] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
00:24:34 executing program 4:
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(0x0, 0x32)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
mount(&(0x7f00000004c0)=@sr0='/dev/sr0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='btrfs\x00', 0x140080, &(0x7f0000000580)='autofs\x00')
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0)
pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000180)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xffff, r1, &(0x7f0000000340)="dbeabf9be491c9946a218e00be9a69613bffeba33d08b0fb2727ebceb8606878f9500cc00acabcfe81c590c51b60715699ad56ad39ad91dd97806742ebbf6995c048bfeec0b660d93c163110c110fe1b3e7cc0ebe6f60ce7021d1d816579e00660ea439a5ec1d4db77c973376c0b8ceb8f311f3915b21489a29bb2bde8c93954d6fdb180e66b1072690c3f3f9605fc06f4af46252e9b9782b651d1e6d5433c573229a867022d5dd8bd925e8f60fb58f5167e04998256611f1be7468a8728a4c03178c651d7ae6447f318bb09550c", 0xce, 0x2, 0x0, 0x3, r3}, &(0x7f0000000240))
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0xf7, 0xfff, 0x11, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, 0x8000, 0x7, 0x1, 0x4}})

00:24:34 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="c800000010001fff000000000000000000050000", @ANYRES32, @ANYBLOB="00001e00000000009c0012001000010069703665727370616e000000880002001400060000000000000000000000ffffe0000002140007000000000800000000000800ffac1e01010800030000000000040012"], 0xc8}}, 0x0)
r0 = socket(0x10, 0x8000000000000003, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x249, 0x0)

00:24:34 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x73, 0x11, 0x41}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:24:34 executing program 3:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x4b45, 0x0)

00:24:34 executing program 5:
waitid(0x0, 0x0, 0x0, 0x0, 0x0)

00:24:34 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000060c000200080006"], 0x3c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES16], 0x58}, 0x1, 0x0, 0x0, 0x22008040}, 0x48004)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r5 = socket(0x10, 0x3, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0)
preadv(r6, &(0x7f0000000280), 0x1, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x58, 0x14, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @empty}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x80}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3748}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x90}}, 0x0)

00:24:34 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r0, r1, 0x0, 0x800000080004103)

[  382.412767][T26580] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[  382.440276][T26584] __nla_validate_parse: 36 callbacks suppressed
[  382.440291][T26584] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
00:24:34 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x73, 0x11, 0x41}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:24:34 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
unshare(0x400)
ioctl$UI_BEGIN_FF_ERASE(r0, 0x40045568, 0x0)

[  382.510430][T26584] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  382.568599][T26584] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'.
00:24:34 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
unshare(0x400)
ioctl$UI_BEGIN_FF_ERASE(r0, 0x40045568, 0x0)

00:24:34 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
unshare(0x400)
ioctl$UI_BEGIN_FF_ERASE(r0, 0x40045568, 0x0)

00:24:34 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140))

00:24:34 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)

00:24:34 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="c800000010001fff000000000000000000050000", @ANYRES32, @ANYBLOB="00001e00000000009c0012001000010069703665727370616e000000880002001400060000000000000000000000ffffe0000002140007000000000800000000000800ffac1e01010800030000000000040012"], 0xc8}}, 0x0)
r0 = socket(0x10, 0x8000000000000003, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x249, 0x0)

00:24:34 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0xc, 0x0, 0x0, 0x0}, 0x20)

00:24:34 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x28, r0, 0x521, 0x0, 0x0, {{0x2}, {@void, @val={0xc}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x3, 0x4}]}, 0x28}}, 0x0)

00:24:34 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
unshare(0x400)
ioctl$UI_BEGIN_FF_ERASE(r0, 0x40045568, 0x0)

00:24:34 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140))

[  382.768400][T26640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  382.768425][T26640] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  382.768436][T26640] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'.
[  383.000103][T26653] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  383.000131][T26653] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  383.000141][T26653] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'.
00:24:35 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r0, r1, 0x0, 0x800000080004103)

00:24:35 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="c800000010001fff000000000000000000050000", @ANYRES32, @ANYBLOB="00001e00000000009c0012001000010069703665727370616e000000880002001400060000000000000000000000ffffe0000002140007000000000800000000000800ffac1e01010800030000000000040012"], 0xc8}}, 0x0)
r0 = socket(0x10, 0x8000000000000003, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x249, 0x0)

00:24:35 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0xc, 0x0, 0x0, 0x0}, 0x20)

00:24:35 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x7}, &(0x7f0000000140)={0x8}, 0x0, 0x0, 0x0)

00:24:35 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140))

00:24:35 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140))

00:24:35 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0xc, 0x0, 0x0, 0x0}, 0x20)

00:24:35 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x7}, &(0x7f0000000140)={0x8}, 0x0, 0x0, 0x0)

[  383.638215][T26674] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
00:24:35 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="c800000010001fff000000000000000000050000", @ANYRES32, @ANYBLOB="00001e00000000009c0012001000010069703665727370616e000000880002001400060000000000000000000000ffffe0000002140007000000000800000000000800ffac1e01010800030000000000040012"], 0xc8}}, 0x0)
r0 = socket(0x10, 0x8000000000000003, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x249, 0x0)

[  383.663014][T26674] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  383.663031][T26674] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'.
[  383.828459][T26685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  383.828489][T26685] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  383.828500][T26685] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'.
[  383.967325][   T59] device hsr_slave_0 left promiscuous mode
[  383.967663][   T59] device hsr_slave_1 left promiscuous mode
[  383.968083][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  383.968119][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  383.968773][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  383.968804][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  383.969379][   T59] device bridge_slave_1 left promiscuous mode
[  383.969474][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.969958][   T59] device bridge_slave_0 left promiscuous mode
[  383.970016][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.974502][   T59] device veth1_macvtap left promiscuous mode
[  383.974519][   T59] device veth0_macvtap left promiscuous mode
[  383.974540][   T59] device veth1_vlan left promiscuous mode
[  383.974560][   T59] device veth0_vlan left promiscuous mode
[  384.945313][   T59] team0 (unregistering): Port device team_slave_1 removed
[  384.948004][   T59] team0 (unregistering): Port device team_slave_0 removed
[  384.955514][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  384.976361][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  384.999784][   T59] bond0 (unregistering): Released all slaves
[  385.747627][T26698] IPVS: ftp: loaded support on port[0] = 21
[  385.811939][T26698] chnl_net:caif_netlink_parms(): no params data found
[  385.840342][T26698] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.847579][T26698] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.856667][T26698] device bridge_slave_0 entered promiscuous mode
[  385.865315][T26698] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.872695][T26698] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.880307][T26698] device bridge_slave_1 entered promiscuous mode
[  385.896584][T26698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.907748][T26698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.924310][T26698] team0: Port device team_slave_0 added
[  385.931387][T26698] team0: Port device team_slave_1 added
[  385.944872][T26698] batman_adv: batadv0: Adding interface: batadv_slave_0
[  385.951975][T26698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.979021][T26698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  385.991232][T26698] batman_adv: batadv0: Adding interface: batadv_slave_1
[  385.998370][T26698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.024557][T26698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.039064][T26698] device hsr_slave_0 entered promiscuous mode
[  386.045876][T26698] device hsr_slave_1 entered promiscuous mode
[  386.053295][T26698] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  386.060974][T26698] Cannot create hsr debugfs directory
[  386.117853][T26698] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.129445][ T9774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  386.137408][ T9774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  386.147733][T26698] 8021q: adding VLAN 0 to HW filter on device team0
[  386.157362][ T9774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  386.166043][ T9774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  386.174568][ T9774] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.181627][ T9774] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.190554][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  386.212488][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  386.220937][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  386.229987][ T9492] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.237082][ T9492] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.244953][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  386.253887][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  386.263049][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  386.271578][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  386.280002][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  386.288770][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  386.297448][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  386.305598][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  386.313738][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  386.322156][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  386.330932][T26698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  386.338680][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  386.353433][T26696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  386.361243][T26696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  386.372516][T26698] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.413316][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  386.427070][T26698] device veth0_vlan entered promiscuous mode
[  386.433846][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  386.444109][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  386.452386][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  386.463263][T26698] device veth1_vlan entered promiscuous mode
[  386.479959][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  386.489185][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  386.497857][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  386.508309][T26698] device veth0_macvtap entered promiscuous mode
[  386.516951][T26698] device veth1_macvtap entered promiscuous mode
[  386.530299][T26698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  386.541116][T26698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.551375][T26698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  386.562861][T26698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.572832][T26698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  386.583260][T26698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.593223][T26698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  386.603821][T26698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.613841][T26698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  386.624559][T26698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.635336][T26698] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.643510][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  386.652147][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  386.660479][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  386.670701][T26698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  386.682250][T26698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.692339][T26698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  386.702901][T26698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.712820][T26698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  386.723310][T26698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.733421][T26698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  386.743858][T26698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.753834][T26698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  386.764278][T26698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.775087][T26698] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.783491][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  386.792551][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  386.833015][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.840958][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.866030][T26696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
00:24:38 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x28, r0, 0x521, 0x0, 0x0, {{0x2}, {@void, @val={0xc}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x3, 0x4}]}, 0x28}}, 0x0)

00:24:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r0, r1, 0x0, 0x800000080004103)

00:24:38 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x7}, &(0x7f0000000140)={0x8}, 0x0, 0x0, 0x0)

[  386.875941][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.884404][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.892409][T26696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
00:24:38 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0xc, 0x0, 0x0, 0x0}, 0x20)

00:24:38 executing program 0:
r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb1\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0xa0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4})

00:24:38 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r0, r1, 0x0, 0x800000080004103)

00:24:39 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x7}, &(0x7f0000000140)={0x8}, 0x0, 0x0, 0x0)

00:24:39 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9d}]}, &(0x7f0000001600)='GPL\x00', 0x5, 0xb6, &(0x7f0000001700)=""/182, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

00:24:39 executing program 0:
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@alg={0xe0, 0x10, 0x1, 0x0, 0x0, {{'xts(ecb-serpent-avx)\x00'}, [0x2d, 0x28, 0x28, 0x3]}}, 0xe0}}, 0x0)

00:24:39 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x28, r0, 0x521, 0x0, 0x0, {{0x2}, {@void, @val={0xc}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x3, 0x4}]}, 0x28}}, 0x0)

00:24:39 executing program 3:
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2)
pwritev(r0, 0x0, 0x0, 0x0, 0x0)

00:24:39 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9d}]}, &(0x7f0000001600)='GPL\x00', 0x5, 0xb6, &(0x7f0000001700)=""/182, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

00:24:39 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x28, r0, 0x521, 0x0, 0x0, {{0x2}, {@void, @val={0xc}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x3, 0x4}]}, 0x28}}, 0x0)

00:24:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r0, r1, 0x0, 0x800000080004103)

00:24:39 executing program 0:
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@alg={0xe0, 0x10, 0x1, 0x0, 0x0, {{'xts(ecb-serpent-avx)\x00'}, [0x2d, 0x28, 0x28, 0x3]}}, 0xe0}}, 0x0)

00:24:39 executing program 3:
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2)
pwritev(r0, 0x0, 0x0, 0x0, 0x0)

00:24:39 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9d}]}, &(0x7f0000001600)='GPL\x00', 0x5, 0xb6, &(0x7f0000001700)=""/182, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  387.811927][ T9492] Bluetooth: hci4: command 0x0409 tx timeout
00:24:40 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r0, r1, 0x0, 0x800000080004103)

00:24:40 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x7, 0x4)
bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet(0x2, 0x2, 0x0)
bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @empty}, 0x80)

00:24:40 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9d}]}, &(0x7f0000001600)='GPL\x00', 0x5, 0xb6, &(0x7f0000001700)=""/182, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

00:24:40 executing program 3:
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2)
pwritev(r0, 0x0, 0x0, 0x0, 0x0)

00:24:40 executing program 0:
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@alg={0xe0, 0x10, 0x1, 0x0, 0x0, {{'xts(ecb-serpent-avx)\x00'}, [0x2d, 0x28, 0x28, 0x3]}}, 0xe0}}, 0x0)

00:24:40 executing program 1:
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
fallocate(r1, 0x100000001, 0x0, 0x2811fdff)

00:24:40 executing program 3:
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2)
pwritev(r0, 0x0, 0x0, 0x0, 0x0)

00:24:40 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x7, 0x4)
bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet(0x2, 0x2, 0x0)
bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @empty}, 0x80)

00:24:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r0, r1, 0x0, 0x800000080004103)

00:24:41 executing program 0:
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@alg={0xe0, 0x10, 0x1, 0x0, 0x0, {{'xts(ecb-serpent-avx)\x00'}, [0x2d, 0x28, 0x28, 0x3]}}, 0xe0}}, 0x0)

00:24:41 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68401)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0})

00:24:41 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x7, 0x4)
bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet(0x2, 0x2, 0x0)
bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @empty}, 0x80)

00:24:41 executing program 1:
r0 = syz_mount_image$v7(&(0x7f0000000000)='v7\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000100)="b82953d2f785ce8d3d10941313c3afae88bbf763162c63abd0a1cedc8f8c3cff20efb579887a1b5f803268bf5d02bcfe7a744c29bbe6fb0061e9b4935ce2547b4172e50273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32])
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x11}}], 0x18}}], 0x2, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x6)
statx(r0, &(0x7f000000ab00)='./file0\x00', 0x0, 0x0, 0x0)

00:24:41 executing program 5:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$search(0xa, r1, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0)

00:24:41 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x7, 0x4)
bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet(0x2, 0x2, 0x0)
bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @empty}, 0x80)

00:24:41 executing program 5:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$search(0xa, r1, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0)

00:24:41 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68401)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0})

00:24:41 executing program 1:
r0 = syz_mount_image$v7(&(0x7f0000000000)='v7\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000100)="b82953d2f785ce8d3d10941313c3afae88bbf763162c63abd0a1cedc8f8c3cff20efb579887a1b5f803268bf5d02bcfe7a744c29bbe6fb0061e9b4935ce2547b4172e50273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32])
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x11}}], 0x18}}], 0x2, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x6)
statx(r0, &(0x7f000000ab00)='./file0\x00', 0x0, 0x0, 0x0)

00:24:41 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x7, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f0000000100), &(0x7f00000004c0)=@udp6=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x20)

00:24:41 executing program 5:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$search(0xa, r1, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0)

[  389.893201][ T9492] Bluetooth: hci4: command 0x041b tx timeout
00:24:42 executing program 5:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$search(0xa, r1, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0)

00:24:42 executing program 2:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x7, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f0000000100), &(0x7f00000004c0)=@udp6=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x20)

00:24:42 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68401)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0})

00:24:42 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x2f, 0x6f, 0x20, 0x8, 0x8000, 0x753, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7], 0x0, 0x2080})
tkill(r1, 0x2)

00:24:42 executing program 1:
r0 = syz_mount_image$v7(&(0x7f0000000000)='v7\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000100)="b82953d2f785ce8d3d10941313c3afae88bbf763162c63abd0a1cedc8f8c3cff20efb579887a1b5f803268bf5d02bcfe7a744c29bbe6fb0061e9b4935ce2547b4172e50273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32])
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x11}}], 0x18}}], 0x2, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x6)
statx(r0, &(0x7f000000ab00)='./file0\x00', 0x0, 0x0, 0x0)

00:24:42 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x7, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f0000000100), &(0x7f00000004c0)=@udp6=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x20)

00:24:43 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x62020000, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "dfc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0xbf}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

00:24:43 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68401)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0})

00:24:43 executing program 1:
r0 = syz_mount_image$v7(&(0x7f0000000000)='v7\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000100)="b82953d2f785ce8d3d10941313c3afae88bbf763162c63abd0a1cedc8f8c3cff20efb579887a1b5f803268bf5d02bcfe7a744c29bbe6fb0061e9b4935ce2547b4172e50273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32])
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x11}}], 0x18}}], 0x2, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x6)
statx(r0, &(0x7f000000ab00)='./file0\x00', 0x0, 0x0, 0x0)

00:24:43 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x2f, 0x6f, 0x20, 0x8, 0x8000, 0x753, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7], 0x0, 0x2080})
tkill(r1, 0x2)

00:24:43 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x62020000, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "dfc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0xbf}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

00:24:43 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x7, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f0000000100), &(0x7f00000004c0)=@udp6=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x20)

00:24:43 executing program 2:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x7, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f0000000100), &(0x7f00000004c0)=@udp6=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x20)

00:24:43 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x2f, 0x6f, 0x20, 0x8, 0x8000, 0x753, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7], 0x0, 0x2080})
tkill(r1, 0x2)

00:24:43 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000000005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000100000000000030007000c0001007463696e646578000c000200080001009fa1"], 0x3c}}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:43 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x62020000, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "dfc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0xbf}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

00:24:43 executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

00:24:43 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x7, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f0000000100), &(0x7f00000004c0)=@udp6=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x20)

00:24:43 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x2f, 0x6f, 0x20, 0x8, 0x8000, 0x753, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7], 0x0, 0x2080})
tkill(r1, 0x2)

00:24:43 executing program 2:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x7, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f0000000100), &(0x7f00000004c0)=@udp6=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x20)

00:24:43 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x62020000, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "dfc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0xbf}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

[  391.345454][T27091] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
00:24:43 executing program 0:
r0 = syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
mkdirat(r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
openat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0)

00:24:43 executing program 2:
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000800)={"1be160aeadc821e13218117dfcb23a1b907a932e294e6ebe23175db63b9f7b09d859339d4f012c4bb39cd60cbfc5dfc9dbcdd2449f4477bcf56d81d5c228c6669803718cf581b4954f90ed55eba874d450a53027421629613695fdbe3bc0c8a80b2b94ac14580ceb5b59a2c8bf06dd10f23e6014095b0e80746699e1d5a6c65b50d0994c0c77ebdf6a43cabbd2da6e2d7f33184ebef3598f5bc332fd03a7ba1151c6a67fa9eada73ed04b2c9fc1bad47ce088e0b1a4e340d49f6773dbbadc9e935ef8bf57ec29e6d95e4acc15a1487d8a0419c2097cee8e8bda1029516c8c9c586f140978832d791d39319188e428693865a9b5df03f7fbf5b34df78c75e0c2b65a51525b1d1275e333e8af2c125eec4757a5dbd26651ce833a4c02d0f8c550dda20cc3af881c140e3c67cd9a2d98608253d2e13d8e97f5b49561c200be9662fe3c78674751e5e320f0a6407b96daa52354ce99608fbf4c5ed9714b2bbdc5d7f22ddbcc49c6caa91f7b1efda7f2da51d7abbc44a857a8b2080069b6423b9b359d2b0665300eb599b4fbd56ee5ced71088f8459f5e0d91e178bac399851c52c6f69fcf009af54131b00dcddd36fe717919273146797ce84c6ec2f3eb9b1ae4de0e71f6081d17174229f0f5056bffff1055127a582acba3f0f923e48619691dfcfd32e0efdae6d6b4f440149446ab6c0efe9de2808c09b14fbbc6e76ab8dceee574d61cabda2895642c0944cc3023a818462cfae952d8b1054c5953326a972d9df0fa4cdc7e76335d8985f2d2c67cab8f2c808c0598fea5605b0edd2835544777df156a8ac396a0a476f3bfbd5d42097527e1f0728798660e63844ab2b2e345ec53496fb975f29dc26ddfe141164f5f7eef9b50be5120a2acea955682a79fa377d77ad58144cb2c53fbd57125b2a03828f27a4f4059877a74e08d193181623540a0c01114f76956f6ea779022440c69a7c149924331fd9b649b0fe9a1993379023bc272028bfa4bae0208ff7fdc08ebf401f473369dde0f1e88939f025fd865b41d5ea74b1fa989aa9535cfa1b3c05bf5e03eb7cccf108fdc71376ff4dec24c712b6905ed2f29b0f01006e3773c73b16bc5fdb6de40cd6969f3837d10771cb23b773eec52c57ccf9a53971578e3a314a7a21abc46496cf4cf2799bf544f531903ee3089f498b667c2999ca0560c6dcd7fdd78db399ebb929667c4eb3c333e14cfdf79445b9faa1e49424c3366d501df8d340925421fd7b120fcb9e2c249dba02d20ec6f00466d44b0d95262f0a03ff035cbba5c131fecb0d0e95d9771e4490336657ae196a24f7aab6586cd94c86c0768a56f598194b6a5a5c05bc2bbd009e46bd5ad15dc09fca6baefba0d8194638550ade8071a5a34ac53ae6bbf31bb774e891f0859b3454367b41a6df274c126f8febc62fe0558b18af26558cf44ce0687528"})

00:24:43 executing program 5:
socket$unix(0x1, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x83, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

00:24:43 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
chdir(&(0x7f0000000380)='./bus\x00')
r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r1, 0x208200)
r2 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000800)=""/142, 0xffffff07}], 0x1, 0xfff, 0x0)

[  391.456333][T27097] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
00:24:43 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000000005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000100000000000030007000c0001007463696e646578000c000200080001009fa1"], 0x3c}}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:43 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000000005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000100000000000030007000c0001007463696e646578000c000200080001009fa1"], 0x3c}}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:43 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
chdir(&(0x7f0000000380)='./bus\x00')
r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r1, 0x208200)
r2 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000800)=""/142, 0xffffff07}], 0x1, 0xfff, 0x0)

[  391.630956][T27121] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  391.635563][T27114] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  391.660332][T27114] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  391.710943][T27131] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=834774459 (1669548918 ns) > initial count (165776412 ns). Using initial count to start timer.
[  391.737339][T27132] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  391.767846][T27131] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
00:24:43 executing program 1:
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
chdir(&(0x7f0000000380)='./bus\x00')
r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r1, 0x208200)
r2 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000800)=""/142, 0xffffff07}], 0x1, 0xfff, 0x0)

00:24:43 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000000005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000100000000000030007000c0001007463696e646578000c000200080001009fa1"], 0x3c}}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:43 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000000005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000100000000000030007000c0001007463696e646578000c000200080001009fa1"], 0x3c}}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:43 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
chdir(&(0x7f0000000380)='./bus\x00')
r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r1, 0x208200)
r2 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000800)=""/142, 0xffffff07}], 0x1, 0xfff, 0x0)

00:24:43 executing program 2:
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000800)={"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"})

[  391.972286][ T9492] Bluetooth: hci4: command 0x040f tx timeout
[  391.987858][T27156] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  392.020190][T27157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  392.044509][T27165] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
00:24:44 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
chdir(&(0x7f0000000380)='./bus\x00')
r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r1, 0x208200)
r2 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000800)=""/142, 0xffffff07}], 0x1, 0xfff, 0x0)

[  392.070226][T27165] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  392.128961][T27171] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=834774459 (1669548918 ns) > initial count (165776412 ns). Using initial count to start timer.
00:24:44 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000000005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000100000000000030007000c0001007463696e646578000c000200080001009fa1"], 0x3c}}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:44 executing program 5:
socket$unix(0x1, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x83, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

00:24:44 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000000005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000100000000000030007000c0001007463696e646578000c000200080001009fa1"], 0x3c}}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

00:24:44 executing program 1:
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
chdir(&(0x7f0000000380)='./bus\x00')
r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r1, 0x208200)
r2 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000800)=""/142, 0xffffff07}], 0x1, 0xfff, 0x0)

00:24:44 executing program 2:
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000800)={"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"})

00:24:44 executing program 4:
set_mempolicy(0x1, &(0x7f0000000000)=0x61, 0x401)
clone3(&(0x7f0000000700)={0x100800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  392.301617][T27181] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  392.358113][T27183] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  392.412543][T27189] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
00:24:44 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000420001b1"], 0x14}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
accept(0xffffffffffffffff, 0x0, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0x5)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000030003deb360f3b7f000000000000051558000100540001000b0001"], 0x6c}}, 0x0)
socket(0x0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0)
sendto$inet6(r3, &(0x7f0000001600)="88", 0x1, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000008c0)=0x22)

00:24:44 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xa2082a}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xc8280, 0x0)
dup3(r0, r1, 0x0)

[  392.469135][T27189] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  392.496729][T27204] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=834774459 (1669548918 ns) > initial count (165776412 ns). Using initial count to start timer.
00:24:44 executing program 1:
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
chdir(&(0x7f0000000380)='./bus\x00')
r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r1, 0x208200)
r2 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000800)=""/142, 0xffffff07}], 0x1, 0xfff, 0x0)

00:24:44 executing program 4:
set_mempolicy(0x1, &(0x7f0000000000)=0x61, 0x401)
clone3(&(0x7f0000000700)={0x100800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:24:44 executing program 2:
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000800)={"1be160aeadc821e13218117dfcb23a1b907a932e294e6ebe23175db63b9f7b09d859339d4f012c4bb39cd60cbfc5dfc9dbcdd2449f4477bcf56d81d5c228c6669803718cf581b4954f90ed55eba874d450a53027421629613695fdbe3bc0c8a80b2b94ac14580ceb5b59a2c8bf06dd10f23e6014095b0e80746699e1d5a6c65b50d0994c0c77ebdf6a43cabbd2da6e2d7f33184ebef3598f5bc332fd03a7ba1151c6a67fa9eada73ed04b2c9fc1bad47ce088e0b1a4e340d49f6773dbbadc9e935ef8bf57ec29e6d95e4acc15a1487d8a0419c2097cee8e8bda1029516c8c9c586f140978832d791d39319188e428693865a9b5df03f7fbf5b34df78c75e0c2b65a51525b1d1275e333e8af2c125eec4757a5dbd26651ce833a4c02d0f8c550dda20cc3af881c140e3c67cd9a2d98608253d2e13d8e97f5b49561c200be9662fe3c78674751e5e320f0a6407b96daa52354ce99608fbf4c5ed9714b2bbdc5d7f22ddbcc49c6caa91f7b1efda7f2da51d7abbc44a857a8b2080069b6423b9b359d2b0665300eb599b4fbd56ee5ced71088f8459f5e0d91e178bac399851c52c6f69fcf009af54131b00dcddd36fe717919273146797ce84c6ec2f3eb9b1ae4de0e71f6081d17174229f0f5056bffff1055127a582acba3f0f923e48619691dfcfd32e0efdae6d6b4f440149446ab6c0efe9de2808c09b14fbbc6e76ab8dceee574d61cabda2895642c0944cc3023a818462cfae952d8b1054c5953326a972d9df0fa4cdc7e76335d8985f2d2c67cab8f2c808c0598fea5605b0edd2835544777df156a8ac396a0a476f3bfbd5d42097527e1f0728798660e63844ab2b2e345ec53496fb975f29dc26ddfe141164f5f7eef9b50be5120a2acea955682a79fa377d77ad58144cb2c53fbd57125b2a03828f27a4f4059877a74e08d193181623540a0c01114f76956f6ea779022440c69a7c149924331fd9b649b0fe9a1993379023bc272028bfa4bae0208ff7fdc08ebf401f473369dde0f1e88939f025fd865b41d5ea74b1fa989aa9535cfa1b3c05bf5e03eb7cccf108fdc71376ff4dec24c712b6905ed2f29b0f01006e3773c73b16bc5fdb6de40cd6969f3837d10771cb23b773eec52c57ccf9a53971578e3a314a7a21abc46496cf4cf2799bf544f531903ee3089f498b667c2999ca0560c6dcd7fdd78db399ebb929667c4eb3c333e14cfdf79445b9faa1e49424c3366d501df8d340925421fd7b120fcb9e2c249dba02d20ec6f00466d44b0d95262f0a03ff035cbba5c131fecb0d0e95d9771e4490336657ae196a24f7aab6586cd94c86c0768a56f598194b6a5a5c05bc2bbd009e46bd5ad15dc09fca6baefba0d8194638550ade8071a5a34ac53ae6bbf31bb774e891f0859b3454367b41a6df274c126f8febc62fe0558b18af26558cf44ce0687528"})

[  392.597750][T27209] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
00:24:44 executing program 4:
set_mempolicy(0x1, &(0x7f0000000000)=0x61, 0x401)
clone3(&(0x7f0000000700)={0x100800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:24:44 executing program 5:
socket$unix(0x1, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x83, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

00:24:44 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xa2082a}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xc8280, 0x0)
dup3(r0, r1, 0x0)

00:24:44 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]})
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x69, &(0x7f0000000680)="c4c691019919da078a0098d1e0a593b04009f09100087f0000000022addee07beef063040002000000000000002ff6602022511253507db56f598e5878d27a953ad4419cc6ead9065e291e7e4e77c45200b4b778989e18e2786dc5eb38812a62a7de3a5071a8cef427"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = getpid()
tkill(r1, 0x2f)

00:24:44 executing program 4:
set_mempolicy(0x1, &(0x7f0000000000)=0x61, 0x401)
clone3(&(0x7f0000000700)={0x100800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  392.842993][T27226] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  392.888261][T27226] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
00:24:44 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]})
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x69, &(0x7f0000000680)="c4c691019919da078a0098d1e0a593b04009f09100087f0000000022addee07beef063040002000000000000002ff6602022511253507db56f598e5878d27a953ad4419cc6ead9065e291e7e4e77c45200b4b778989e18e2786dc5eb38812a62a7de3a5071a8cef427"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = getpid()
tkill(r1, 0x2f)

[  392.931474][T27237] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=834774459 (1669548918 ns) > initial count (165776412 ns). Using initial count to start timer.
00:24:44 executing program 2:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0xfffffffffffffffd)

00:24:45 executing program 0:
r0 = socket(0x11, 0xa, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1000000000000088, 0x0, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all='unlock all\x00', 0x7)
sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f0000000080)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "235996cc967bdb38"}}, 0x34}}, 0x0)

00:24:45 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xa2082a}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xc8280, 0x0)
dup3(r0, r1, 0x0)

00:24:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dummy0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}}, 0x0)

00:24:45 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]})
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x69, &(0x7f0000000680)="c4c691019919da078a0098d1e0a593b04009f09100087f0000000022addee07beef063040002000000000000002ff6602022511253507db56f598e5878d27a953ad4419cc6ead9065e291e7e4e77c45200b4b778989e18e2786dc5eb38812a62a7de3a5071a8cef427"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = getpid()
tkill(r1, 0x2f)

00:24:45 executing program 2:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0xfffffffffffffffd)

00:24:45 executing program 2:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0xfffffffffffffffd)

00:24:45 executing program 5:
socket$unix(0x1, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x83, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

00:24:45 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]})
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x69, &(0x7f0000000680)="c4c691019919da078a0098d1e0a593b04009f09100087f0000000022addee07beef063040002000000000000002ff6602022511253507db56f598e5878d27a953ad4419cc6ead9065e291e7e4e77c45200b4b778989e18e2786dc5eb38812a62a7de3a5071a8cef427"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = getpid()
tkill(r1, 0x2f)

00:24:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dummy0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}}, 0x0)

00:24:45 executing program 2:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0xfffffffffffffffd)

00:24:45 executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xdd, 0x9, 0x2f, 0x40, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf0, 0xf, 0x93}}]}}]}}, 0x0)

00:24:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dummy0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}}, 0x0)

00:24:45 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xa2082a}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xc8280, 0x0)
dup3(r0, r1, 0x0)

00:24:45 executing program 1:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r0, 0x0)
listen(r0, 0x0)

00:24:45 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="24b9edf57eab9b53a0bd51e161987244e8f858d8785bb7ab058b160b2fefbf2c6aa13a391c8598e0cb7538492b005cad95d0f21e05b5dc54637d0928e5e4d7ad2b5e51e6a7215b5156a9ea", 0x4b}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

00:24:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dummy0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}}, 0x0)

00:24:45 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="18000000000000000000000000ffffffc3112000000000009500000000000000f99ca3a7753fa66ebff0a93261763f00a57df35f3161c97af107333124d5d2ca1dcddc758e006662acf0543fda23cf60ab5aa1b4c0b97f7bfc5bbeb1b700002005c1255c41740c016975b770f32e66d2fa58d102b966770412ccb30587d465c8412466bcafafc86901a426c547c69f75d2c8140427e6d37bcdf397ac81b7e6652130846c97d2d67904c1496945dcf86ca5227d43d096361ca0c6d0fbffffff913083cfc359fffb731adf59acaa2d04ff7fec29770270dac8d11e7f651b9f8868c29c87dde04d359ff2d1c7300d2401a0a14c64d39799f1afd5b2f6681a6a5409811484ca56e68ca0536524242d2e461eb40814a0eca8a2e8fd8aa5069d201348329ee235a0b5deec3c366177ac8ba9d84cd2cfa180c1bed940a51cae53389cca056a79b985abb1ac77d8ce5c240aecea67e5cd37befbdc42534a502c3fa1e45c56ca750ed570069443ff057e737d8b2b22486389ac853fee470c932b6a36316ff0b7459a82f69fd74ba75c97dc42b504162bf6fa7933d0a3bb97090ed1b70d176b75b816667356030799897eedf1c7035d4b572c762c01b4f1869de8dc91d558fa41eec506dc3e8dabdd8824ffbde06620a1a1bcef3eb73a7171859a85e29bc3940055719718184121ff4080d6551fbd195516e3974ed3689fbae9c27684ed61aaef1b2595bb1f52f04cd6626ecc6bb88e2dd1b528070ec194d5b33f761fc91f07988098de9bbd931e47b8a389508924cf14e32aaca3710eb9915a200ed6452b2195447bd7a74edd015fdf2bd9808fb5f846be969fb8f71abf87395c48cedf9960f612c2e8bc8b96d003035702218f8c32c0bf"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:24:45 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="18000000000000000000000000ffffffc3112000000000009500000000000000f99ca3a7753fa66ebff0a93261763f00a57df35f3161c97af107333124d5d2ca1dcddc758e006662acf0543fda23cf60ab5aa1b4c0b97f7bfc5bbeb1b700002005c1255c41740c016975b770f32e66d2fa58d102b966770412ccb30587d465c8412466bcafafc86901a426c547c69f75d2c8140427e6d37bcdf397ac81b7e6652130846c97d2d67904c1496945dcf86ca5227d43d096361ca0c6d0fbffffff913083cfc359fffb731adf59acaa2d04ff7fec29770270dac8d11e7f651b9f8868c29c87dde04d359ff2d1c7300d2401a0a14c64d39799f1afd5b2f6681a6a5409811484ca56e68ca0536524242d2e461eb40814a0eca8a2e8fd8aa5069d201348329ee235a0b5deec3c366177ac8ba9d84cd2cfa180c1bed940a51cae53389cca056a79b985abb1ac77d8ce5c240aecea67e5cd37befbdc42534a502c3fa1e45c56ca750ed570069443ff057e737d8b2b22486389ac853fee470c932b6a36316ff0b7459a82f69fd74ba75c97dc42b504162bf6fa7933d0a3bb97090ed1b70d176b75b816667356030799897eedf1c7035d4b572c762c01b4f1869de8dc91d558fa41eec506dc3e8dabdd8824ffbde06620a1a1bcef3eb73a7171859a85e29bc3940055719718184121ff4080d6551fbd195516e3974ed3689fbae9c27684ed61aaef1b2595bb1f52f04cd6626ecc6bb88e2dd1b528070ec194d5b33f761fc91f07988098de9bbd931e47b8a389508924cf14e32aaca3710eb9915a200ed6452b2195447bd7a74edd015fdf2bd9808fb5f846be969fb8f71abf87395c48cedf9960f612c2e8bc8b96d003035702218f8c32c0bf"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[  394.051762][ T9492] Bluetooth: hci4: command 0x0419 tx timeout
00:24:46 executing program 0:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
io_setup(0x7, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001900)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="628957bb76b53a771ea826ec53c72b27", 0x10}])

00:24:46 executing program 4:
clock_adjtime(0x0, &(0x7f0000002540)={0xd8cd})

00:24:46 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="18000000000000000000000000ffffffc3112000000000009500000000000000f99ca3a7753fa66ebff0a93261763f00a57df35f3161c97af107333124d5d2ca1dcddc758e006662acf0543fda23cf60ab5aa1b4c0b97f7bfc5bbeb1b700002005c1255c41740c016975b770f32e66d2fa58d102b966770412ccb30587d465c8412466bcafafc86901a426c547c69f75d2c8140427e6d37bcdf397ac81b7e6652130846c97d2d67904c1496945dcf86ca5227d43d096361ca0c6d0fbffffff913083cfc359fffb731adf59acaa2d04ff7fec29770270dac8d11e7f651b9f8868c29c87dde04d359ff2d1c7300d2401a0a14c64d39799f1afd5b2f6681a6a5409811484ca56e68ca0536524242d2e461eb40814a0eca8a2e8fd8aa5069d201348329ee235a0b5deec3c366177ac8ba9d84cd2cfa180c1bed940a51cae53389cca056a79b985abb1ac77d8ce5c240aecea67e5cd37befbdc42534a502c3fa1e45c56ca750ed570069443ff057e737d8b2b22486389ac853fee470c932b6a36316ff0b7459a82f69fd74ba75c97dc42b504162bf6fa7933d0a3bb97090ed1b70d176b75b816667356030799897eedf1c7035d4b572c762c01b4f1869de8dc91d558fa41eec506dc3e8dabdd8824ffbde06620a1a1bcef3eb73a7171859a85e29bc3940055719718184121ff4080d6551fbd195516e3974ed3689fbae9c27684ed61aaef1b2595bb1f52f04cd6626ecc6bb88e2dd1b528070ec194d5b33f761fc91f07988098de9bbd931e47b8a389508924cf14e32aaca3710eb9915a200ed6452b2195447bd7a74edd015fdf2bd9808fb5f846be969fb8f71abf87395c48cedf9960f612c2e8bc8b96d003035702218f8c32c0bf"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:24:46 executing program 3:
r0 = getpid()
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x18c, 0x200, 0x140, 0x0, 0x250, 0x2e0, 0x2e0, 0x250, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@unspec=@mac={{0x30, 'mac\x00'}, {@local}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x12)
wait4(0x0, 0x0, 0x0, 0x0)

00:24:46 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005020314af00031400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}])
syz_read_part_table(0x7, 0x2, &(0x7f00000012c0)=[{&(0x7f0000000240)}, {0x0}])

00:24:46 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="18000000000000000000000000ffffffc3112000000000009500000000000000f99ca3a7753fa66ebff0a93261763f00a57df35f3161c97af107333124d5d2ca1dcddc758e006662acf0543fda23cf60ab5aa1b4c0b97f7bfc5bbeb1b700002005c1255c41740c016975b770f32e66d2fa58d102b966770412ccb30587d465c8412466bcafafc86901a426c547c69f75d2c8140427e6d37bcdf397ac81b7e6652130846c97d2d67904c1496945dcf86ca5227d43d096361ca0c6d0fbffffff913083cfc359fffb731adf59acaa2d04ff7fec29770270dac8d11e7f651b9f8868c29c87dde04d359ff2d1c7300d2401a0a14c64d39799f1afd5b2f6681a6a5409811484ca56e68ca0536524242d2e461eb40814a0eca8a2e8fd8aa5069d201348329ee235a0b5deec3c366177ac8ba9d84cd2cfa180c1bed940a51cae53389cca056a79b985abb1ac77d8ce5c240aecea67e5cd37befbdc42534a502c3fa1e45c56ca750ed570069443ff057e737d8b2b22486389ac853fee470c932b6a36316ff0b7459a82f69fd74ba75c97dc42b504162bf6fa7933d0a3bb97090ed1b70d176b75b816667356030799897eedf1c7035d4b572c762c01b4f1869de8dc91d558fa41eec506dc3e8dabdd8824ffbde06620a1a1bcef3eb73a7171859a85e29bc3940055719718184121ff4080d6551fbd195516e3974ed3689fbae9c27684ed61aaef1b2595bb1f52f04cd6626ecc6bb88e2dd1b528070ec194d5b33f761fc91f07988098de9bbd931e47b8a389508924cf14e32aaca3710eb9915a200ed6452b2195447bd7a74edd015fdf2bd9808fb5f846be969fb8f71abf87395c48cedf9960f612c2e8bc8b96d003035702218f8c32c0bf"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:24:46 executing program 4:
clock_adjtime(0x0, &(0x7f0000002540)={0xd8cd})

[  394.348901][T27332] xt_CT: You must specify a L4 protocol and not use inversions on it
00:24:46 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xfe, 0xd3, 0x84, 0x8, 0xeb1a, 0x2801, 0x81d3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd, 0xd5, 0x3e, 0x0, [], [{{0x9, 0x5, 0x84}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0})

[  394.408047][T27338] loop5: detected capacity change from 0 to 1
[  394.453618][T27338] ldm_validate_privheads(): Disk read failed.
[  394.460330][T27338]  loop5: p2 < > p4
[  394.466737][T27338] loop5: partition table partially beyond EOD, truncated
[  394.474427][T27338] loop5: p2 size 2 extends beyond EOD, truncated
[  394.486383][T27338] loop5: p4 size 2097152 extends beyond EOD, truncated
00:24:48 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="24b9edf57eab9b53a0bd51e161987244e8f858d8785bb7ab058b160b2fefbf2c6aa13a391c8598e0cb7538492b005cad95d0f21e05b5dc54637d0928e5e4d7ad2b5e51e6a7215b5156a9ea", 0x4b}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

00:24:48 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0)

00:24:48 executing program 4:
clock_adjtime(0x0, &(0x7f0000002540)={0xd8cd})

00:24:48 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005020314af00031400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}])
syz_read_part_table(0x7, 0x2, &(0x7f00000012c0)=[{&(0x7f0000000240)}, {0x0}])

00:24:48 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

00:24:48 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

[  396.848658][T27368] loop5: detected capacity change from 0 to 1
[  396.902371][T27368] ldm_validate_privheads(): Disk read failed.
[  396.909069][T27368]  loop5: p2 < > p4
[  396.915805][T27368] loop5: partition table partially beyond EOD, truncated
[  396.924244][T27368] loop5: p2 size 2 extends beyond EOD, truncated
[  396.936240][T27368] loop5: p4 size 2097152 extends beyond EOD, truncated
00:24:49 executing program 3:
r0 = getpid()
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x18c, 0x200, 0x140, 0x0, 0x250, 0x2e0, 0x2e0, 0x250, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@unspec=@mac={{0x30, 'mac\x00'}, {@local}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x12)
wait4(0x0, 0x0, 0x0, 0x0)

00:24:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0)

00:24:49 executing program 4:
clock_adjtime(0x0, &(0x7f0000002540)={0xd8cd})

00:24:49 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

00:24:49 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005020314af00031400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}])
syz_read_part_table(0x7, 0x2, &(0x7f00000012c0)=[{&(0x7f0000000240)}, {0x0}])

00:24:49 executing program 4:
r0 = getpid()
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x18c, 0x200, 0x140, 0x0, 0x250, 0x2e0, 0x2e0, 0x250, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@unspec=@mac={{0x30, 'mac\x00'}, {@local}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x12)
wait4(0x0, 0x0, 0x0, 0x0)

[  397.414426][T27396] loop5: detected capacity change from 0 to 1
[  397.422175][T27398] xt_CT: You must specify a L4 protocol and not use inversions on it
[  397.445599][T27404] xt_CT: You must specify a L4 protocol and not use inversions on it
[  397.494747][T27396] ldm_validate_privheads(): Disk read failed.
[  397.502392][T27396]  loop5: p2 < > p4
[  397.510918][T27396] loop5: partition table partially beyond EOD, truncated
[  397.519061][T27396] loop5: p2 size 2 extends beyond EOD, truncated
[  397.527121][T27396] loop5: p4 size 2097152 extends beyond EOD, truncated
00:24:51 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="24b9edf57eab9b53a0bd51e161987244e8f858d8785bb7ab058b160b2fefbf2c6aa13a391c8598e0cb7538492b005cad95d0f21e05b5dc54637d0928e5e4d7ad2b5e51e6a7215b5156a9ea", 0x4b}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

00:24:51 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

00:24:51 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0)

00:24:51 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005020314af00031400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}])
syz_read_part_table(0x7, 0x2, &(0x7f00000012c0)=[{&(0x7f0000000240)}, {0x0}])

00:24:51 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0xffffff92)
write$FUSE_DIRENTPLUS(r0, &(0x7f00000007c0)={0x10, 0x0, 0x3}, 0x10)

00:24:51 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0)

[  399.853466][T27421] loop5: detected capacity change from 0 to 1
[  399.933033][T27421] ldm_validate_privheads(): Disk read failed.
[  399.946302][T27421]  loop5: p2 < > p4
[  399.957103][T27421] loop5: partition table partially beyond EOD, truncated
[  399.965043][T27421] loop5: p2 size 2 extends beyond EOD, truncated
[  399.975138][T27421] loop5: p4 size 2097152 extends beyond EOD, truncated
[  399.990667][ T4841] ldm_validate_privheads(): Disk read failed.
[  399.997608][ T4841]  loop5: p2 < > p4
[  400.001567][ T4841] loop5: partition table partially beyond EOD, truncated
[  400.009036][ T4841] loop5: p2 size 2 extends beyond EOD, truncated
[  400.016151][ T4841] loop5: p4 size 2097152 extends beyond EOD, truncated
00:24:52 executing program 3:
r0 = getpid()
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x18c, 0x200, 0x140, 0x0, 0x250, 0x2e0, 0x2e0, 0x250, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@unspec=@mac={{0x30, 'mac\x00'}, {@local}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x12)
wait4(0x0, 0x0, 0x0, 0x0)

00:24:52 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x201)
io_setup(0x2, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

00:24:52 executing program 0:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7)
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000380), &(0x7f00000003c0)=0x8)
close(r0)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_es_lookup_extent_enter\x00', r2}, 0x10)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, [], 0x1}, 0xfffffbff}, 0x1c)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x208202)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0xfffffffffffffc34, &(0x7f0000001400)}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x20228, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffa)

00:24:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000c80), 0x4924924924924bd, 0x0)

00:24:52 executing program 4:
r0 = getpid()
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x18c, 0x200, 0x140, 0x0, 0x250, 0x2e0, 0x2e0, 0x250, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@unspec=@mac={{0x30, 'mac\x00'}, {@local}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x12)
wait4(0x0, 0x0, 0x0, 0x0)

00:24:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000c80), 0x4924924924924bd, 0x0)

[  400.416692][   T36] audit: type=1800 audit(1615595092.359:220): pid=27455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15879 res=0 errno=0
[  400.476277][T27459] xt_CT: You must specify a L4 protocol and not use inversions on it
[  400.572601][   T36] audit: type=1800 audit(1615595092.519:221): pid=27467 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15879 res=0 errno=0
[  400.596928][T27466] xt_CT: You must specify a L4 protocol and not use inversions on it
00:24:54 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="24b9edf57eab9b53a0bd51e161987244e8f858d8785bb7ab058b160b2fefbf2c6aa13a391c8598e0cb7538492b005cad95d0f21e05b5dc54637d0928e5e4d7ad2b5e51e6a7215b5156a9ea", 0x4b}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

00:24:54 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ba00"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xd)
r3 = syz_open_pts(r1, 0x1)
write(r3, &(0x7f0000000000)="d5", 0xfffffdc9)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1)

00:24:54 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000c80), 0x4924924924924bd, 0x0)

00:24:54 executing program 0:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7)
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000380), &(0x7f00000003c0)=0x8)
close(r0)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_es_lookup_extent_enter\x00', r2}, 0x10)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, [], 0x1}, 0xfffffbff}, 0x1c)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x208202)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0xfffffffffffffc34, &(0x7f0000001400)}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x20228, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffa)

00:24:54 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000c80), 0x4924924924924bd, 0x0)

00:24:54 executing program 1:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7)
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000380), &(0x7f00000003c0)=0x8)
close(r0)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_es_lookup_extent_enter\x00', r2}, 0x10)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, [], 0x1}, 0xfffffbff}, 0x1c)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x208202)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0xfffffffffffffc34, &(0x7f0000001400)}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x20228, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffa)

[  402.924270][   T36] audit: type=1800 audit(1615595094.869:222): pid=27480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15882 res=0 errno=0
[  403.088695][   T36] audit: type=1800 audit(1615595095.029:223): pid=27490 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15633 res=0 errno=0
00:24:55 executing program 3:
r0 = getpid()
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x18c, 0x200, 0x140, 0x0, 0x250, 0x2e0, 0x2e0, 0x250, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@unspec=@mac={{0x30, 'mac\x00'}, {@local}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x12)
wait4(0x0, 0x0, 0x0, 0x0)

00:24:55 executing program 0:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7)
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000380), &(0x7f00000003c0)=0x8)
close(r0)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_es_lookup_extent_enter\x00', r2}, 0x10)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, [], 0x1}, 0xfffffbff}, 0x1c)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x208202)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0xfffffffffffffc34, &(0x7f0000001400)}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x20228, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffa)

00:24:55 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840), 0x10}, 0x78)

00:24:55 executing program 1:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7)
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000380), &(0x7f00000003c0)=0x8)
close(r0)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_es_lookup_extent_enter\x00', r2}, 0x10)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, [], 0x1}, 0xfffffbff}, 0x1c)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x208202)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0xfffffffffffffc34, &(0x7f0000001400)}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x20228, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffa)

[  403.426291][   T36] audit: type=1800 audit(1615595095.369:224): pid=27497 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15878 res=0 errno=0
00:24:55 executing program 4:
r0 = getpid()
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x18c, 0x200, 0x140, 0x0, 0x250, 0x2e0, 0x2e0, 0x250, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@unspec=@mac={{0x30, 'mac\x00'}, {@local}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x12)
wait4(0x0, 0x0, 0x0, 0x0)

00:24:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00', 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000004c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xc, 0x8, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4, 0xa}]}]}]}, 0x34}}, 0x0)

[  403.462483][   T36] audit: type=1800 audit(1615595095.399:225): pid=27498 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15889 res=0 errno=0
[  403.489893][T27500] xt_CT: You must specify a L4 protocol and not use inversions on it
[  403.633154][T27506] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  403.637773][T27507] xt_CT: You must specify a L4 protocol and not use inversions on it
[  403.665063][T27509] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
00:24:57 executing program 1:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7)
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000380), &(0x7f00000003c0)=0x8)
close(r0)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_es_lookup_extent_enter\x00', r2}, 0x10)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, [], 0x1}, 0xfffffbff}, 0x1c)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x208202)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0xfffffffffffffc34, &(0x7f0000001400)}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x20228, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffa)

00:24:57 executing program 0:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7)
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000380), &(0x7f00000003c0)=0x8)
close(r0)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_es_lookup_extent_enter\x00', r2}, 0x10)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, [], 0x1}, 0xfffffbff}, 0x1c)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x208202)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0xfffffffffffffc34, &(0x7f0000001400)}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x20228, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffa)

00:24:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00', 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000004c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xc, 0x8, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4, 0xa}]}]}]}, 0x34}}, 0x0)

00:24:57 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x360, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4)
io_setup(0x7, &(0x7f0000000280)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}])

[  405.888205][   T36] audit: type=1800 audit(1615595097.829:226): pid=27517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=13954 res=0 errno=0
[  405.906814][T27519] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
00:24:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00', 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000004c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xc, 0x8, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4, 0xa}]}]}]}, 0x34}}, 0x0)

00:24:58 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00', 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000004c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xc, 0x8, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4, 0xa}]}]}]}, 0x34}}, 0x0)

[  405.950990][   T36] audit: type=1800 audit(1615595097.879:227): pid=27520 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14065 res=0 errno=0
[  406.017283][T27528] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  406.130741][T27532] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
00:24:58 executing program 5:
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000", @ANYBLOB="0833b8727bdcdc25c68b70"], 0x14}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="28000000100001080000000000005c540000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x14}, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8008000}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x20000800)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xf37)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf406665f8eea8f2d}, 0x48040)
link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000700)='./file1\x00')
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x602, 0x2002}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x80000001}]}, 0x38}}, 0x0)

00:24:58 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x360, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4)
io_setup(0x7, &(0x7f0000000280)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}])

00:24:58 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x360, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4)
io_setup(0x7, &(0x7f0000000280)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}])

00:24:58 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x1, 0x0, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3e005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @loopback}]}}]}, 0x3c}}, 0x0)

[  406.528366][T27542] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
00:24:58 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x360, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4)
io_setup(0x7, &(0x7f0000000280)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}])

00:24:58 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x401, @mcast1, 0x384}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080))
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x110, 0x0, 0x0, 0x0, 0x0, 0x1f8, 0x258, 0x258, 0x1f8, 0x258, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [0x0, 0x0, 0xffffffff], [0x0, 0xffffffff, 0x0, 0xff000000], 'wg2\x00', 'macvlan1\x00', {0xff}, {}, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x4000000, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x8, "1e4597832ed47419ccab5e2a24424987d1d51ca2fbef07faac3ceda63a63"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
dup(r2)

00:24:58 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1})

00:24:58 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x360, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4)
io_setup(0x7, &(0x7f0000000280)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}])

[  406.621866][T27542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  406.631075][T27542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
00:24:58 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1})

[  406.669307][T27555] xt_CT: You must specify a L4 protocol and not use inversions on it
[  406.709438][T27542] device bridge_slave_0 left promiscuous mode
00:24:58 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x360, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4)
io_setup(0x7, &(0x7f0000000280)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}])

[  406.717532][T27542] bridge0: port 1(bridge_slave_0) entered disabled state
00:24:58 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x360, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4)
io_setup(0x7, &(0x7f0000000280)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}])

00:24:58 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1})

[  406.759432][T27542] device bridge_slave_1 left promiscuous mode
[  406.784609][T27555] xt_CT: You must specify a L4 protocol and not use inversions on it
[  406.793645][T27542] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.831330][T27542] bond0: (slave bond_slave_0): Releasing backup interface
[  407.066451][T27542] bond0: (slave bond_slave_1): Releasing backup interface
[  407.158891][T27542] team0: Port device team_slave_0 removed
[  407.215665][T27542] team0: Port device team_slave_1 removed
[  407.226295][T27542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  407.234310][T27542] batman_adv: batadv0: Removing interface: batadv_slave_0
[  407.247743][T27542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  407.257018][T27542] batman_adv: batadv0: Removing interface: batadv_slave_1
00:24:59 executing program 5:
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000", @ANYBLOB="0833b8727bdcdc25c68b70"], 0x14}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="28000000100001080000000000005c540000", @ANYRES32=0x0, @ANYBLOB="7eac0d1f41711ef9b6b16a96f548366a4f81e6d1f78f1d7568955785ec25867c83ea7796c35f2e34570f73b391fa0716106ed1b1c14bc63663e2f8d24480e07290f8f6bd94c4ac127665710381bcff545c3cd7c23e8f9d3423df1cd4afdafe0d5940e486cb9d71d04114bb03f705688cbdf8a73ef7e92e9894206ef7e06c9bb3155924c07c98ef8e7cc30d57a03bda592f0f1b71a09a586cb0f405f2f5ade92674ae9f94306d5d8dea30f340785dd2fd6cd9171ac54bc392eb5d9c2abd82ccd16e391191163a39353cde57f2ecc3be4ece4e9266266650f993d982df5684166de627f4f72c43d18f0c6c46a562502a7bd4c50c0e1446bfca77003157ce1ef9beb95329d53e4ca75d"], 0x28}}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x14}, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8008000}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x20000800)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xf37)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf406665f8eea8f2d}, 0x48040)
link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000700)='./file1\x00')
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x602, 0x2002}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x80000001}]}, 0x38}}, 0x0)

00:24:59 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x401, @mcast1, 0x384}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080))
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x110, 0x0, 0x0, 0x0, 0x0, 0x1f8, 0x258, 0x258, 0x1f8, 0x258, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [0x0, 0x0, 0xffffffff], [0x0, 0xffffffff, 0x0, 0xff000000], 'wg2\x00', 'macvlan1\x00', {0xff}, {}, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x4000000, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x8, "1e4597832ed47419ccab5e2a24424987d1d51ca2fbef07faac3ceda63a63"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
dup(r2)

00:24:59 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1})

[  407.296482][T27542] bridge4: port 1(gretap0) entered disabled state
[  407.305087][T27542] bridge5: port 1(gretap1) entered disabled state
[  407.314919][T27542] bridge6: port 1(gretap2) entered disabled state
[  407.323160][T27543] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
00:24:59 executing program 1:
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000", @ANYBLOB="0833b8727bdcdc25c68b70"], 0x14}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="28000000100001080000000000005c540000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x14}, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8008000}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x20000800)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xf37)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf406665f8eea8f2d}, 0x48040)
link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000700)='./file1\x00')
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x602, 0x2002}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x80000001}]}, 0x38}}, 0x0)

00:24:59 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x401, @mcast1, 0x384}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080))
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x110, 0x0, 0x0, 0x0, 0x0, 0x1f8, 0x258, 0x258, 0x1f8, 0x258, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [0x0, 0x0, 0xffffffff], [0x0, 0xffffffff, 0x0, 0xff000000], 'wg2\x00', 'macvlan1\x00', {0xff}, {}, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x4000000, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x8, "1e4597832ed47419ccab5e2a24424987d1d51ca2fbef07faac3ceda63a63"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
dup(r2)

00:24:59 executing program 2:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

00:24:59 executing program 3:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$chown(0x4, r0, 0xee00, 0x0)
keyctl$setperm(0x5, r0, 0x4)
add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f00000001c0)="b0", 0x1, r0)
add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)="9c", 0x1, r0)

[  407.359733][T27547] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  407.385758][T27586] xt_CT: You must specify a L4 protocol and not use inversions on it
00:24:59 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x401, @mcast1, 0x384}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080))
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x110, 0x0, 0x0, 0x0, 0x0, 0x1f8, 0x258, 0x258, 0x1f8, 0x258, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [0x0, 0x0, 0xffffffff], [0x0, 0xffffffff, 0x0, 0xff000000], 'wg2\x00', 'macvlan1\x00', {0xff}, {}, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x4000000, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x8, "1e4597832ed47419ccab5e2a24424987d1d51ca2fbef07faac3ceda63a63"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
dup(r2)

[  407.429199][T27591] xt_CT: You must specify a L4 protocol and not use inversions on it
00:24:59 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x401, @mcast1, 0x384}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080))
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x110, 0x0, 0x0, 0x0, 0x0, 0x1f8, 0x258, 0x258, 0x1f8, 0x258, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [0x0, 0x0, 0xffffffff], [0x0, 0xffffffff, 0x0, 0xff000000], 'wg2\x00', 'macvlan1\x00', {0xff}, {}, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x4000000, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x8, "1e4597832ed47419ccab5e2a24424987d1d51ca2fbef07faac3ceda63a63"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
dup(r2)

00:24:59 executing program 3:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$chown(0x4, r0, 0xee00, 0x0)
keyctl$setperm(0x5, r0, 0x4)
add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f00000001c0)="b0", 0x1, r0)
add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)="9c", 0x1, r0)

00:24:59 executing program 2:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

00:24:59 executing program 3:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$chown(0x4, r0, 0xee00, 0x0)
keyctl$setperm(0x5, r0, 0x4)
add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f00000001c0)="b0", 0x1, r0)
add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)="9c", 0x1, r0)

[  407.558188][T27601] xt_CT: You must specify a L4 protocol and not use inversions on it
[  407.608183][T27606] xt_CT: You must specify a L4 protocol and not use inversions on it
[  407.669238][T27587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  407.737429][T27587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  407.747387][T27587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
00:24:59 executing program 5:
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000", @ANYBLOB="0833b8727bdcdc25c68b70"], 0x14}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="28000000100001080000000000005c540000", @ANYRES32=0x0, @ANYBLOB="7eac0d1f41711ef9b6b16a96f548366a4f81e6d1f78f1d7568955785ec25867c83ea7796c35f2e34570f73b391fa0716106ed1b1c14bc63663e2f8d24480e07290f8f6bd94c4ac127665710381bcff545c3cd7c23e8f9d3423df1cd4afdafe0d5940e486cb9d71d04114bb03f705688cbdf8a73ef7e92e9894206ef7e06c9bb3155924c07c98ef8e7cc30d57a03bda592f0f1b71a09a586cb0f405f2f5ade92674ae9f94306d5d8dea30f340785dd2fd6cd9171ac54bc392eb5d9c2abd82ccd16e391191163a39353cde57f2ecc3be4ece4e9266266650f993d982df5684166de627f4f72c43d18f0c6c46a562502a7bd4c50c0e1446bfca77003157ce1ef9beb95329d53e4ca75d"], 0x28}}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x14}, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8008000}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x20000800)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xf37)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf406665f8eea8f2d}, 0x48040)
link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000700)='./file1\x00')
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x602, 0x2002}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x80000001}]}, 0x38}}, 0x0)

00:24:59 executing program 2:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

00:24:59 executing program 3:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$chown(0x4, r0, 0xee00, 0x0)
keyctl$setperm(0x5, r0, 0x4)
add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f00000001c0)="b0", 0x1, r0)
add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)="9c", 0x1, r0)

[  408.041377][T27594] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  408.132687][T27594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  408.146211][T27594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  408.194568][T27594] device bridge_slave_0 left promiscuous mode
[  408.200837][T27594] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.214161][T27594] device bridge_slave_1 left promiscuous mode
[  408.220420][T27594] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.233558][T27594] bond0: (slave bond_slave_0): Releasing backup interface
[  408.275520][T27594] bond0: (slave bond_slave_1): Releasing backup interface
[  408.322662][T27594] @þ: Port device team_slave_0 removed
[  408.347599][T27594] @þ: Port device team_slave_1 removed
[  408.355952][T27594] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  408.363760][T27594] batman_adv: batadv0: Removing interface: batadv_slave_0
00:25:00 executing program 1:
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000", @ANYBLOB="0833b8727bdcdc25c68b70"], 0x14}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="28000000100001080000000000005c540000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x14}, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8008000}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x20000800)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xf37)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf406665f8eea8f2d}, 0x48040)
link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000700)='./file1\x00')
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x602, 0x2002}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x80000001}]}, 0x38}}, 0x0)

00:25:00 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x401, @mcast1, 0x384}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080))
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x110, 0x0, 0x0, 0x0, 0x0, 0x1f8, 0x258, 0x258, 0x1f8, 0x258, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [0x0, 0x0, 0xffffffff], [0x0, 0xffffffff, 0x0, 0xff000000], 'wg2\x00', 'macvlan1\x00', {0xff}, {}, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x4000000, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x8, "1e4597832ed47419ccab5e2a24424987d1d51ca2fbef07faac3ceda63a63"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
dup(r2)

00:25:00 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x401, @mcast1, 0x384}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080))
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x110, 0x0, 0x0, 0x0, 0x0, 0x1f8, 0x258, 0x258, 0x1f8, 0x258, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [0x0, 0x0, 0xffffffff], [0x0, 0xffffffff, 0x0, 0xff000000], 'wg2\x00', 'macvlan1\x00', {0xff}, {}, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x4000000, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x8, "1e4597832ed47419ccab5e2a24424987d1d51ca2fbef07faac3ceda63a63"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
dup(r2)

00:25:00 executing program 3:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$chown(0x4, r0, 0xee00, 0x0)
keyctl$setperm(0x5, r0, 0x4)
add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f00000001c0)="b0", 0x1, r0)
add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)="9c", 0x1, r0)

00:25:00 executing program 2:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

[  408.373960][T27594] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  408.381446][T27594] batman_adv: batadv0: Removing interface: batadv_slave_1
00:25:00 executing program 2:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604110, &(0x7f0000001500)={0x0, [[0x1], [0x0, 0xf], [0x8]], [], [{}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x1000000}, {0x2, 0xfffffffc}], [], 0x10000})

[  408.515967][T27635] xt_CT: You must specify a L4 protocol and not use inversions on it
[  408.515984][T27633] xt_CT: You must specify a L4 protocol and not use inversions on it
00:25:00 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=<r0=>0x0)
syz_io_uring_setup(0x4d, &(0x7f0000000000)={0x0, 0x4d9}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, r0, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)

00:25:00 executing program 3:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$chown(0x4, r0, 0xee00, 0x0)
keyctl$setperm(0x5, r0, 0x4)
add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f00000001c0)="b0", 0x1, r0)
add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)="9c", 0x1, r0)

00:25:00 executing program 2:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604110, &(0x7f0000001500)={0x0, [[0x1], [0x0, 0xf], [0x8]], [], [{}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x1000000}, {0x2, 0xfffffffc}], [], 0x10000})

[  408.665290][T27621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  408.768524][T27621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  408.788555][T27621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
00:25:00 executing program 5:
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000", @ANYBLOB="0833b8727bdcdc25c68b70"], 0x14}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="28000000100001080000000000005c540000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x14}, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8008000}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x20000800)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xf37)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf406665f8eea8f2d}, 0x48040)
link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000700)='./file1\x00')
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x602, 0x2002}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x80000001}]}, 0x38}}, 0x0)

00:25:00 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)

00:25:00 executing program 3:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$chown(0x4, r0, 0xee00, 0x0)
keyctl$setperm(0x5, r0, 0x4)
add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f00000001c0)="b0", 0x1, r0)
add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)="9c", 0x1, r0)

[  409.017652][T27637] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  409.099832][T27637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  409.110458][T27637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
00:25:01 executing program 1:
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000", @ANYBLOB="0833b8727bdcdc25c68b70"], 0x14}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="28000000100001080000000000005c540000", @ANYRES32=0x0, @ANYBLOB="7eac0d1f41711ef9b6b16a96f548366a4f81e6d1f78f1d7568955785ec25867c83ea7796c35f2e34570f73b391fa0716106ed1b1c14bc63663e2f8d24480e07290f8f6bd94c4ac127665710381bcff545c3cd7c23e8f9d3423df1cd4afdafe0d5940e486cb9d71d04114bb03f705688cbdf8a73ef7e92e9894206ef7e06c9bb3155924c07c98ef8e7cc30d57a03bda592f0f1b71a09a586cb0f405f2f5ade92674ae9f94306d5d8dea30f340785dd2fd6cd9171ac54bc392eb5d9c2abd82ccd16e391191163a39353cde57f2ecc3be4ece4e9266266650f993d982df5684166de627f4f72c43d18f0c6c46a562502a7bd4c50c0e1446bfca77003157ce1ef9beb95329d53e4ca75d"], 0x28}}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x14}, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8008000}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x20000800)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xf37)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf406665f8eea8f2d}, 0x48040)
link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000700)='./file1\x00')
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x602, 0x2002}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x80000001}]}, 0x38}}, 0x0)

00:25:01 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=<r0=>0x0)
syz_io_uring_setup(0x4d, &(0x7f0000000000)={0x0, 0x4d9}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, r0, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)

00:25:01 executing program 2:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604110, &(0x7f0000001500)={0x0, [[0x1], [0x0, 0xf], [0x8]], [], [{}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x1000000}, {0x2, 0xfffffffc}], [], 0x10000})

00:25:01 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x1}, 0x0)
r3 = gettid()
r4 = creat(&(0x7f0000000240)='./file0\x00', 0x11)
prctl$PR_SET_PTRACER(0x59616d61, r3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa468a9e9ea908186}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
close(r4)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0x0)

00:25:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)

00:25:01 executing program 2:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604110, &(0x7f0000001500)={0x0, [[0x1], [0x0, 0xf], [0x8]], [], [{}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x1000000}, {0x2, 0xfffffffc}], [], 0x10000})

00:25:01 executing program 3:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r2)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x50, 0x13, 0x10aeb7656b528f63, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0)

00:25:01 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=<r0=>0x0)
syz_io_uring_setup(0x4d, &(0x7f0000000000)={0x0, 0x4d9}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, r0, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)

00:25:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)

[  409.441311][T27663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  409.518038][T27663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  409.530132][T27663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
00:25:01 executing program 3:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r2)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x50, 0x13, 0x10aeb7656b528f63, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0)

00:25:01 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5422, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

00:25:01 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=<r0=>0x0)
syz_io_uring_setup(0x4d, &(0x7f0000000000)={0x0, 0x4d9}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, r0, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)

[  409.906586][T27675] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  409.996442][T27675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  410.007487][T27675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
00:25:02 executing program 3:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r2)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x50, 0x13, 0x10aeb7656b528f63, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0)

00:25:02 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)

00:25:02 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000000280))
fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x100000001})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
dup3(r0, r1, 0x0)

00:25:02 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5422, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

00:25:02 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5422, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

00:25:02 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab", 0x4)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000080)=""/41, 0x29}], 0x2}, 0x0)

00:25:02 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5422, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

00:25:02 executing program 3:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r2)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x50, 0x13, 0x10aeb7656b528f63, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0)

00:25:02 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab", 0x4)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000080)=""/41, 0x29}], 0x2}, 0x0)

00:25:02 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5422, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

00:25:02 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5422, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

00:25:02 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000e40), 0x0, &(0x7f0000000ec0)={0x8}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0)

00:25:02 executing program 3:
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x5000)=nil)

00:25:02 executing program 4:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000100)={0x0, 0x15b9, &(0x7f00000000c0)={0x0}, 0x300}, 0x0)

00:25:02 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000000280))
fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x100000001})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
dup3(r0, r1, 0x0)

00:25:02 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000000280))
fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x100000001})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
dup3(r0, r1, 0x0)

00:25:02 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab", 0x4)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000080)=""/41, 0x29}], 0x2}, 0x0)

00:25:02 executing program 3:
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x5000)=nil)

00:25:02 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5422, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

00:25:02 executing program 4:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000100)={0x0, 0x15b9, &(0x7f00000000c0)={0x0}, 0x300}, 0x0)

00:25:02 executing program 3:
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x5000)=nil)

00:25:02 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab", 0x4)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000080)=""/41, 0x29}], 0x2}, 0x0)

00:25:02 executing program 2:
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x5000)=nil)

00:25:02 executing program 4:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000100)={0x0, 0x15b9, &(0x7f00000000c0)={0x0}, 0x300}, 0x0)

00:25:02 executing program 3:
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x5000)=nil)

00:25:02 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000000280))
fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x100000001})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
dup3(r0, r1, 0x0)

00:25:02 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000000280))
fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x100000001})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
dup3(r0, r1, 0x0)

00:25:02 executing program 1:
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x5000)=nil)

00:25:02 executing program 2:
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x5000)=nil)

00:25:02 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000100)="c5", 0x1}, {&(0x7f00000001c0)="e0", 0x1, 0x80000001}], 0x0, &(0x7f0000000240)={[{@map_normal='map=normal'}, {@cruft='cruft'}, {@mode={'mode'}}, {@session={'session'}}, {@norock='norock'}]})

00:25:02 executing program 4:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000100)={0x0, 0x15b9, &(0x7f00000000c0)={0x0}, 0x300}, 0x0)

00:25:02 executing program 2:
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x5000)=nil)

00:25:02 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x9}}]}, 0x5c}}, 0x0)

00:25:02 executing program 1:
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x5000)=nil)

00:25:02 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet(0x2, 0x840000000003, 0x2)
setsockopt$inet_int(r1, 0x0, 0x200000000000d1, &(0x7f0000000000)=0x6, 0x4)
setsockopt$inet_int(r1, 0x0, 0xc8, 0x0, 0x4)
dup2(r0, r1)

00:25:02 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000000280))
fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x100000001})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
dup3(r0, r1, 0x0)

00:25:02 executing program 1:
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x5000)=nil)

00:25:02 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x9}}]}, 0x5c}}, 0x0)

00:25:02 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000000280))
fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x100000001})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
dup3(r0, r1, 0x0)

00:25:02 executing program 2:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1c1005, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080))
write$dsp(r0, &(0x7f0000000100)="5d58aa2948ce3589fc379e9a45867d986145cf67be942e955c4fdb49297589ad8840d0d6b138880747fdf7c9354eb0114c349b0fc0babbd05c64538352edfd180b10b59f390b18798dd3128392bbec0cc170e03e38", 0x20000155)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

00:25:02 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet(0x2, 0x840000000003, 0x2)
setsockopt$inet_int(r1, 0x0, 0x200000000000d1, &(0x7f0000000000)=0x6, 0x4)
setsockopt$inet_int(r1, 0x0, 0xc8, 0x0, 0x4)
dup2(r0, r1)

00:25:02 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x9}}]}, 0x5c}}, 0x0)

00:25:02 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40000005]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:25:02 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet(0x2, 0x840000000003, 0x2)
setsockopt$inet_int(r1, 0x0, 0x200000000000d1, &(0x7f0000000000)=0x6, 0x4)
setsockopt$inet_int(r1, 0x0, 0xc8, 0x0, 0x4)
dup2(r0, r1)

00:25:03 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e71b0fb1f147a825d86800278dcff47d01000067dd32378f364602812c66538d750f6ee1d001f400bb9fb045f2d1eaa302ab6c2fef2363933ea1315b9532f3af2f5e153eb78020fa00", 0x51}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

00:25:03 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet(0x2, 0x840000000003, 0x2)
setsockopt$inet_int(r1, 0x0, 0x200000000000d1, &(0x7f0000000000)=0x6, 0x4)
setsockopt$inet_int(r1, 0x0, 0xc8, 0x0, 0x4)
dup2(r0, r1)

00:25:03 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x9}}]}, 0x5c}}, 0x0)

00:25:03 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, 0x0, 0x0)

00:25:03 executing program 5:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0)
preadv(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/113, 0x71}], 0x1, 0x0, 0x0)

00:25:03 executing program 2:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1c1005, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080))
write$dsp(r0, &(0x7f0000000100)="5d58aa2948ce3589fc379e9a45867d986145cf67be942e955c4fdb49297589ad8840d0d6b138880747fdf7c9354eb0114c349b0fc0babbd05c64538352edfd180b10b59f390b18798dd3128392bbec0cc170e03e38", 0x20000155)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

00:25:03 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1c1005, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080))
write$dsp(r0, &(0x7f0000000100)="5d58aa2948ce3589fc379e9a45867d986145cf67be942e955c4fdb49297589ad8840d0d6b138880747fdf7c9354eb0114c349b0fc0babbd05c64538352edfd180b10b59f390b18798dd3128392bbec0cc170e03e38", 0x20000155)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

00:25:03 executing program 3:
io_setup(0x8, &(0x7f00000000c0)=<r0=>0x0)
r1 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001600)=ANY=[], 0x33fe0}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0)
io_submit(r0, 0x1, &(0x7f0000001540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000002780)="be", 0x1}])

00:25:03 executing program 0:
unshare(0x20600)
r0 = socket(0x10, 0x803, 0x0)
recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/238, 0xee}, {&(0x7f0000000640)=""/125, 0x7d}, {&(0x7f0000000600)=""/36, 0x24}, {&(0x7f0000019740)=""/102400, 0x19000}], 0x1000000000000296, &(0x7f00000196c0)=""/72, 0x48}, 0x0)

00:25:03 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e71b0fb1f147a825d86800278dcff47d01000067dd32378f364602812c66538d750f6ee1d001f400bb9fb045f2d1eaa302ab6c2fef2363933ea1315b9532f3af2f5e153eb78020fa00", 0x51}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

[  411.238280][T27845] new mount options do not match the existing superblock, will be ignored
00:25:03 executing program 2:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1c1005, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080))
write$dsp(r0, &(0x7f0000000100)="5d58aa2948ce3589fc379e9a45867d986145cf67be942e955c4fdb49297589ad8840d0d6b138880747fdf7c9354eb0114c349b0fc0babbd05c64538352edfd180b10b59f390b18798dd3128392bbec0cc170e03e38", 0x20000155)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

00:25:03 executing program 0:
unshare(0x20600)
r0 = socket(0x10, 0x803, 0x0)
recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/238, 0xee}, {&(0x7f0000000640)=""/125, 0x7d}, {&(0x7f0000000600)=""/36, 0x24}, {&(0x7f0000019740)=""/102400, 0x19000}], 0x1000000000000296, &(0x7f00000196c0)=""/72, 0x48}, 0x0)

[  411.297793][T27852] new mount options do not match the existing superblock, will be ignored
00:25:03 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1c1005, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080))
write$dsp(r0, &(0x7f0000000100)="5d58aa2948ce3589fc379e9a45867d986145cf67be942e955c4fdb49297589ad8840d0d6b138880747fdf7c9354eb0114c349b0fc0babbd05c64538352edfd180b10b59f390b18798dd3128392bbec0cc170e03e38", 0x20000155)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

00:25:03 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207a07e4f1e00000088035ffb0a000200030ada1b40d805000304c50083b8", 0x2e}], 0x1}, 0x0)

00:25:03 executing program 3:
io_setup(0x8, &(0x7f00000000c0)=<r0=>0x0)
r1 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001600)=ANY=[], 0x33fe0}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0)
io_submit(r0, 0x1, &(0x7f0000001540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000002780)="be", 0x1}])

00:25:03 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e71b0fb1f147a825d86800278dcff47d01000067dd32378f364602812c66538d750f6ee1d001f400bb9fb045f2d1eaa302ab6c2fef2363933ea1315b9532f3af2f5e153eb78020fa00", 0x51}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

00:25:03 executing program 0:
unshare(0x20600)
r0 = socket(0x10, 0x803, 0x0)
recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/238, 0xee}, {&(0x7f0000000640)=""/125, 0x7d}, {&(0x7f0000000600)=""/36, 0x24}, {&(0x7f0000019740)=""/102400, 0x19000}], 0x1000000000000296, &(0x7f00000196c0)=""/72, 0x48}, 0x0)

00:25:03 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e71b0fb1f147a825d86800278dcff47d01000067dd32378f364602812c66538d750f6ee1d001f400bb9fb045f2d1eaa302ab6c2fef2363933ea1315b9532f3af2f5e153eb78020fa00", 0x51}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

[  411.439146][T27869] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'.
00:25:03 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207a07e4f1e00000088035ffb0a000200030ada1b40d805000304c50083b8", 0x2e}], 0x1}, 0x0)

00:25:03 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1c1005, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080))
write$dsp(r0, &(0x7f0000000100)="5d58aa2948ce3589fc379e9a45867d986145cf67be942e955c4fdb49297589ad8840d0d6b138880747fdf7c9354eb0114c349b0fc0babbd05c64538352edfd180b10b59f390b18798dd3128392bbec0cc170e03e38", 0x20000155)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

00:25:03 executing program 3:
io_setup(0x8, &(0x7f00000000c0)=<r0=>0x0)
r1 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001600)=ANY=[], 0x33fe0}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0)
io_submit(r0, 0x1, &(0x7f0000001540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000002780)="be", 0x1}])

00:25:03 executing program 0:
unshare(0x20600)
r0 = socket(0x10, 0x803, 0x0)
recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/238, 0xee}, {&(0x7f0000000640)=""/125, 0x7d}, {&(0x7f0000000600)=""/36, 0x24}, {&(0x7f0000019740)=""/102400, 0x19000}], 0x1000000000000296, &(0x7f00000196c0)=""/72, 0x48}, 0x0)

[  411.540456][T27883] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'.
00:25:04 executing program 2:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1c1005, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080))
write$dsp(r0, &(0x7f0000000100)="5d58aa2948ce3589fc379e9a45867d986145cf67be942e955c4fdb49297589ad8840d0d6b138880747fdf7c9354eb0114c349b0fc0babbd05c64538352edfd180b10b59f390b18798dd3128392bbec0cc170e03e38", 0x20000155)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

00:25:04 executing program 1:
io_setup(0x8, &(0x7f00000000c0)=<r0=>0x0)
r1 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001600)=ANY=[], 0x33fe0}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0)
io_submit(r0, 0x1, &(0x7f0000001540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000002780)="be", 0x1}])

00:25:04 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207a07e4f1e00000088035ffb0a000200030ada1b40d805000304c50083b8", 0x2e}], 0x1}, 0x0)

00:25:04 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x17}, 0x18)

00:25:04 executing program 4:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x8ec0, 0x0)
read$FUSE(r3, &(0x7f0000003340), 0x23)
write$P9_RCLUNK(r4, &(0x7f0000000140)={0x7}, 0x7)
close(r2)

00:25:04 executing program 3:
io_setup(0x8, &(0x7f00000000c0)=<r0=>0x0)
r1 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001600)=ANY=[], 0x33fe0}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0)
io_submit(r0, 0x1, &(0x7f0000001540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000002780)="be", 0x1}])

00:25:04 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207a07e4f1e00000088035ffb0a000200030ada1b40d805000304c50083b8", 0x2e}], 0x1}, 0x0)

[  412.293615][T27904] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'.
00:25:04 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000140))

00:25:04 executing program 1:
io_setup(0x8, &(0x7f00000000c0)=<r0=>0x0)
r1 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001600)=ANY=[], 0x33fe0}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0)
io_submit(r0, 0x1, &(0x7f0000001540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000002780)="be", 0x1}])

00:25:04 executing program 3:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000660027090000377b40b4aff08bc344000700000000000000f0"], 0x24}}, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0)

00:25:04 executing program 5:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x5c)

[  412.357711][T27912] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'.
00:25:04 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

00:25:04 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000140))

00:25:04 executing program 5:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x5c)

00:25:04 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000140))

00:25:04 executing program 3:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000660027090000377b40b4aff08bc344000700000000000000f0"], 0x24}}, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0)

00:25:04 executing program 4:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x8ec0, 0x0)
read$FUSE(r3, &(0x7f0000003340), 0x23)
write$P9_RCLUNK(r4, &(0x7f0000000140)={0x7}, 0x7)
close(r2)

00:25:04 executing program 5:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x5c)

00:25:04 executing program 1:
io_setup(0x8, &(0x7f00000000c0)=<r0=>0x0)
r1 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001600)=ANY=[], 0x33fe0}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0)
io_submit(r0, 0x1, &(0x7f0000001540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000002780)="be", 0x1}])

00:25:04 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000140))

[  412.578626][   T36] audit: type=1804 audit(1615595104.519:228): pid=27936 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir842609270/syzkaller.V8cPJS/601/bus" dev="sda1" ino=14852 res=1 errno=0
00:25:04 executing program 5:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x5c)

00:25:04 executing program 0:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x8ec0, 0x0)
read$FUSE(r3, &(0x7f0000003340), 0x23)
write$P9_RCLUNK(r4, &(0x7f0000000140)={0x7}, 0x7)
close(r2)

00:25:04 executing program 5:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x8ec0, 0x0)
read$FUSE(r3, &(0x7f0000003340), 0x23)
write$P9_RCLUNK(r4, &(0x7f0000000140)={0x7}, 0x7)
close(r2)

00:25:05 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

00:25:05 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x8ec0, 0x0)
read$FUSE(r3, &(0x7f0000003340), 0x23)
write$P9_RCLUNK(r4, &(0x7f0000000140)={0x7}, 0x7)
close(r2)

00:25:05 executing program 3:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000660027090000377b40b4aff08bc344000700000000000000f0"], 0x24}}, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0)

00:25:05 executing program 4:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x8ec0, 0x0)
read$FUSE(r3, &(0x7f0000003340), 0x23)
write$P9_RCLUNK(r4, &(0x7f0000000140)={0x7}, 0x7)
close(r2)

00:25:05 executing program 0:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x8ec0, 0x0)
read$FUSE(r3, &(0x7f0000003340), 0x23)
write$P9_RCLUNK(r4, &(0x7f0000000140)={0x7}, 0x7)
close(r2)

00:25:05 executing program 5:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x8ec0, 0x0)
read$FUSE(r3, &(0x7f0000003340), 0x23)
write$P9_RCLUNK(r4, &(0x7f0000000140)={0x7}, 0x7)
close(r2)

00:25:05 executing program 3:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000660027090000377b40b4aff08bc344000700000000000000f0"], 0x24}}, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0)

00:25:05 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

00:25:05 executing program 0:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x8ec0, 0x0)
read$FUSE(r3, &(0x7f0000003340), 0x23)
write$P9_RCLUNK(r4, &(0x7f0000000140)={0x7}, 0x7)
close(r2)

[  413.632682][   T36] audit: type=1804 audit(1615595105.579:229): pid=28002 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir842609270/syzkaller.V8cPJS/602/bus" dev="sda1" ino=15555 res=1 errno=0
00:25:05 executing program 4:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x8ec0, 0x0)
read$FUSE(r3, &(0x7f0000003340), 0x23)
write$P9_RCLUNK(r4, &(0x7f0000000140)={0x7}, 0x7)
close(r2)

00:25:05 executing program 5:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x8ec0, 0x0)
read$FUSE(r3, &(0x7f0000003340), 0x23)
write$P9_RCLUNK(r4, &(0x7f0000000140)={0x7}, 0x7)
close(r2)

00:25:05 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x8ec0, 0x0)
read$FUSE(r3, &(0x7f0000003340), 0x23)
write$P9_RCLUNK(r4, &(0x7f0000000140)={0x7}, 0x7)
close(r2)

[  413.785751][   T36] audit: type=1804 audit(1615595105.729:230): pid=28012 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir537779607/syzkaller.aJvRa0/641/bus" dev="sda1" ino=14818 res=1 errno=0
00:25:06 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x46a}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0)

00:25:06 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000d80)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x31, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

00:25:06 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x8ec0, 0x0)
read$FUSE(r3, &(0x7f0000003340), 0x23)
write$P9_RCLUNK(r4, &(0x7f0000000140)={0x7}, 0x7)
close(r2)

00:25:06 executing program 5:
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0xb, 0x5, 0x9000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0)

00:25:06 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

00:25:06 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x46a}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0)

00:25:06 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x46a}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0)

00:25:06 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

00:25:06 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000180)={0xa506, 0x0, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}, {0x0, 0x0, 0x0, {}, {}, @ramp}})

00:25:06 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x46a}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0)

00:25:06 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x46a}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0)

00:25:06 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000180)={0xa506, 0x0, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}, {0x0, 0x0, 0x0, {}, {}, @ramp}})

[  414.689099][   T36] audit: type=1804 audit(1615595106.629:231): pid=28067 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir842609270/syzkaller.V8cPJS/603/bus" dev="sda1" ino=14820 res=1 errno=0
[  414.838930][   T36] audit: type=1804 audit(1615595106.779:232): pid=28077 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir537779607/syzkaller.aJvRa0/642/bus" dev="sda1" ino=13921 res=1 errno=0
00:25:07 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x46a}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0)

00:25:07 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

00:25:07 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x149042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

00:25:07 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x46a}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0)

00:25:07 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000180)={0xa506, 0x0, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}, {0x0, 0x0, 0x0, {}, {}, @ramp}})

00:25:07 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000180)={0xa506, 0x0, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}, {0x0, 0x0, 0x0, {}, {}, @ramp}})

00:25:07 executing program 0:
r0 = fanotify_init(0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
fanotify_mark(r0, 0x35, 0x4000002b, r2, 0x0)
copy_file_range(r2, 0x0, r2, 0x0, 0x0, 0x0)

00:25:07 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

00:25:07 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x149042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

00:25:07 executing program 4:
syz_mount_image$omfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [], {}, [], {}, {0x2}}, 0x24, 0x0)

00:25:07 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12)

00:25:07 executing program 4:
syz_mount_image$omfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [], {}, [], {}, {0x2}}, 0x24, 0x0)

00:25:07 executing program 0:
r0 = fanotify_init(0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
fanotify_mark(r0, 0x35, 0x4000002b, r2, 0x0)
copy_file_range(r2, 0x0, r2, 0x0, 0x0, 0x0)

[  415.795116][   T36] audit: type=1804 audit(1615595107.739:233): pid=28111 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir842609270/syzkaller.V8cPJS/604/bus" dev="sda1" ino=15634 res=1 errno=0
[  415.883292][   T36] audit: type=1804 audit(1615595107.829:234): pid=28118 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir537779607/syzkaller.aJvRa0/643/bus" dev="sda1" ino=13923 res=1 errno=0
[  415.977013][T28118] ==================================================================
[  415.985128][T28118] BUG: KCSAN: data-race in ext4_writepages / xas_clear_mark
[  415.992457][T28118] 
[  415.994792][T28118] write to 0xffff88801c03fc44 of 4 bytes by task 28121 on cpu 0:
[  416.002695][T28118]  xas_clear_mark+0x16c/0x180
[  416.007390][T28118]  __test_set_page_writeback+0x3db/0x4f0
[  416.013077][T28118]  ext4_bio_write_page+0xfe/0xe60
[  416.018295][T28118]  mpage_process_page_bufs+0x4db/0x5f0
[  416.023765][T28118]  mpage_prepare_extent_to_map+0x4e6/0x640
[  416.029567][T28118]  ext4_writepages+0x674/0x1e70
[  416.034409][T28118]  do_writepages+0x7b/0x150
[  416.039139][T28118]  __filemap_fdatawrite_range+0x19d/0x1d0
[  416.044877][T28118]  file_write_and_wait_range+0x9f/0x120
[  416.050773][T28118]  ext4_sync_file+0x105/0x6e0
[  416.055477][T28118]  vfs_fsync_range+0x107/0x120
[  416.060256][T28118]  ext4_buffered_write_iter+0x38f/0x3e0
[  416.065801][T28118]  ext4_file_write_iter+0x48a/0x10b0
[  416.071160][T28118]  do_iter_readv_writev+0x2cb/0x360
[  416.076355][T28118]  do_iter_write+0x112/0x4c0
[  416.081178][T28118]  vfs_iter_write+0x4c/0x70
[  416.085940][T28118]  iter_file_splice_write+0x40a/0x750
[  416.091320][T28118]  direct_splice_actor+0x80/0xa0
[  416.096246][T28118]  splice_direct_to_actor+0x345/0x650
[  416.101607][T28118]  do_splice_direct+0xf5/0x170
[  416.106356][T28118]  do_sendfile+0x7a6/0xe20
[  416.110842][T28118]  __x64_sys_sendfile64+0xa9/0x130
[  416.115937][T28118]  do_syscall_64+0x39/0x80
[  416.120343][T28118]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  416.126246][T28118] 
[  416.128663][T28118] read to 0xffff88801c03fc44 of 4 bytes by task 28118 on cpu 1:
[  416.136289][T28118]  ext4_writepages+0x155/0x1e70
[  416.141327][T28118]  do_writepages+0x7b/0x150
[  416.145815][T28118]  __filemap_fdatawrite_range+0x19d/0x1d0
[  416.151543][T28118]  filemap_write_and_wait_range+0x8b/0x2a0
[  416.157441][T28118]  __iomap_dio_rw+0x40a/0xa30
[  416.162109][T28118]  iomap_dio_rw+0x30/0x70
[  416.166673][T28118]  ext4_file_write_iter+0xe5d/0x10b0
[  416.171948][T28118]  do_iter_readv_writev+0x2cb/0x360
[  416.177166][T28118]  do_iter_write+0x112/0x4c0
[  416.181746][T28118]  vfs_iter_write+0x4c/0x70
[  416.186259][T28118]  iter_file_splice_write+0x40a/0x750
[  416.191621][T28118]  direct_splice_actor+0x80/0xa0
[  416.196582][T28118]  splice_direct_to_actor+0x345/0x650
[  416.201936][T28118]  do_splice_direct+0xf5/0x170
[  416.206687][T28118]  do_sendfile+0x7a6/0xe20
[  416.211242][T28118]  __x64_sys_sendfile64+0xf2/0x130
[  416.216341][T28118]  do_syscall_64+0x39/0x80
[  416.220739][T28118]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  416.226615][T28118] 
[  416.228915][T28118] Reported by Kernel Concurrency Sanitizer on:
[  416.235247][T28118] CPU: 1 PID: 28118 Comm: syz-executor.3 Tainted: G        W         5.12.0-rc2-syzkaller #0
[  416.245482][T28118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  416.255673][T28118] ==================================================================
00:25:08 executing program 0:
r0 = fanotify_init(0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
fanotify_mark(r0, 0x35, 0x4000002b, r2, 0x0)
copy_file_range(r2, 0x0, r2, 0x0, 0x0, 0x0)

00:25:08 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x149042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

00:25:08 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12)

00:25:08 executing program 4:
syz_mount_image$omfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [], {}, [], {}, {0x2}}, 0x24, 0x0)

00:25:08 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12)

00:25:08 executing program 0:
r0 = fanotify_init(0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
fanotify_mark(r0, 0x35, 0x4000002b, r2, 0x0)
copy_file_range(r2, 0x0, r2, 0x0, 0x0, 0x0)

00:25:08 executing program 3:
r0 = fanotify_init(0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
fanotify_mark(r0, 0x35, 0x4000002b, r2, 0x0)
copy_file_range(r2, 0x0, r2, 0x0, 0x0, 0x0)

00:25:08 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x149042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

00:25:08 executing program 4:
syz_mount_image$omfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [], {}, [], {}, {0x2}}, 0x24, 0x0)

00:25:08 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12)

00:25:08 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12)

00:25:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = getpgrp(0x0)
r2 = inotify_init1(0x80800)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, <r3=>0x0})
kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
ioprio_get$pid(0x1, r3)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x3}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x200000000000038d)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4044, 0x0, 0xffffffffffffffce)
sendto$inet(r0, &(0x7f0000000040), 0xffffffffffffff94, 0x4000085, 0x0, 0x21)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25)

00:25:08 executing program 3:
r0 = fanotify_init(0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
fanotify_mark(r0, 0x35, 0x4000002b, r2, 0x0)
copy_file_range(r2, 0x0, r2, 0x0, 0x0, 0x0)

00:25:08 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12)

00:25:08 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty={[0x45]}, @ipv4={[0x0, 0x2], [], @local}}})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = dup(r1)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', <r6=>0x0})
bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r6, 0x29, 0x32, 0x2, 0x6, 0x10, @dev={0xfe, 0x80, [], 0x26}, @local, 0x8, 0x1, 0x1, 0xfffffff7}})

00:25:08 executing program 1:
timer_create(0x8, 0x0, &(0x7f00000000c0))
timer_delete(0x0)

00:25:08 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12)

00:25:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = getpgrp(0x0)
r2 = inotify_init1(0x80800)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, <r3=>0x0})
kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
ioprio_get$pid(0x1, r3)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x3}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x200000000000038d)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4044, 0x0, 0xffffffffffffffce)
sendto$inet(r0, &(0x7f0000000040), 0xffffffffffffff94, 0x4000085, 0x0, 0x21)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25)

00:25:08 executing program 3:
r0 = fanotify_init(0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
fanotify_mark(r0, 0x35, 0x4000002b, r2, 0x0)
copy_file_range(r2, 0x0, r2, 0x0, 0x0, 0x0)

00:25:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = getpgrp(0x0)
r2 = inotify_init1(0x80800)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, <r3=>0x0})
kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
ioprio_get$pid(0x1, r3)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x3}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x200000000000038d)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4044, 0x0, 0xffffffffffffffce)
sendto$inet(r0, &(0x7f0000000040), 0xffffffffffffff94, 0x4000085, 0x0, 0x21)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25)

00:25:09 executing program 1:
timer_create(0x8, 0x0, &(0x7f00000000c0))
timer_delete(0x0)

00:25:09 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty={[0x45]}, @ipv4={[0x0, 0x2], [], @local}}})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = dup(r1)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', <r6=>0x0})
bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r6, 0x29, 0x32, 0x2, 0x6, 0x10, @dev={0xfe, 0x80, [], 0x26}, @local, 0x8, 0x1, 0x1, 0xfffffff7}})

00:25:09 executing program 3:
timer_create(0x8, 0x0, &(0x7f00000000c0))
timer_delete(0x0)

00:25:09 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = getpgrp(0x0)
r2 = inotify_init1(0x80800)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, <r3=>0x0})
kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
ioprio_get$pid(0x1, r3)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x3}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x200000000000038d)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4044, 0x0, 0xffffffffffffffce)
sendto$inet(r0, &(0x7f0000000040), 0xffffffffffffff94, 0x4000085, 0x0, 0x21)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25)

00:25:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = getpgrp(0x0)
r2 = inotify_init1(0x80800)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, <r3=>0x0})
kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
ioprio_get$pid(0x1, r3)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x3}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x200000000000038d)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4044, 0x0, 0xffffffffffffffce)
sendto$inet(r0, &(0x7f0000000040), 0xffffffffffffff94, 0x4000085, 0x0, 0x21)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25)

00:25:09 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty={[0x45]}, @ipv4={[0x0, 0x2], [], @local}}})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = dup(r1)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', <r6=>0x0})
bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r6, 0x29, 0x32, 0x2, 0x6, 0x10, @dev={0xfe, 0x80, [], 0x26}, @local, 0x8, 0x1, 0x1, 0xfffffff7}})

00:25:09 executing program 1:
timer_create(0x8, 0x0, &(0x7f00000000c0))
timer_delete(0x0)

00:25:09 executing program 3:
timer_create(0x8, 0x0, &(0x7f00000000c0))
timer_delete(0x0)

00:25:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = getpgrp(0x0)
r2 = inotify_init1(0x80800)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, <r3=>0x0})
kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
ioprio_get$pid(0x1, r3)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x3}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x200000000000038d)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4044, 0x0, 0xffffffffffffffce)
sendto$inet(r0, &(0x7f0000000040), 0xffffffffffffff94, 0x4000085, 0x0, 0x21)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25)

00:25:09 executing program 1:
timer_create(0x8, 0x0, &(0x7f00000000c0))
timer_delete(0x0)

00:25:09 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty={[0x45]}, @ipv4={[0x0, 0x2], [], @local}}})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = dup(r1)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', <r6=>0x0})
bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r6, 0x29, 0x32, 0x2, 0x6, 0x10, @dev={0xfe, 0x80, [], 0x26}, @local, 0x8, 0x1, 0x1, 0xfffffff7}})

00:25:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = getpgrp(0x0)
r2 = inotify_init1(0x80800)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, <r3=>0x0})
kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
ioprio_get$pid(0x1, r3)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x3}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x200000000000038d)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4044, 0x0, 0xffffffffffffffce)
sendto$inet(r0, &(0x7f0000000040), 0xffffffffffffff94, 0x4000085, 0x0, 0x21)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25)

00:25:09 executing program 3:
timer_create(0x8, 0x0, &(0x7f00000000c0))
timer_delete(0x0)

00:25:09 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1a01, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280))
r4 = dup(0xffffffffffffffff)
write$P9_RGETLOCK(r4, 0x0, 0x27)
write$nbd(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(r4, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000540)="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", 0x913}, {&(0x7f0000001540)="b2c474477734761b0ec762e59474460a10788e2c38b9511f56bf82e9e293943fc5c3bab1d7e3c3720403301c059bde3c6abf27908b3fa01f6a3e35bfd7a8b85384ec6c27cac0a281ce0bedeada55b3693afdd232e03f4e7579276233b9dd3d9599416f6d18c63c636bbf465571", 0x6d}, {&(0x7f0000000100)="6c3164bcd423f016e4e17607495c7088d4446b86050254b59f5a2608b284ac884a2c0c2babd2ede55d57", 0x2a}, {&(0x7f0000001740)}, {&(0x7f0000001840)}], 0x5, &(0x7f0000001b80)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="422f00d519c024fe03eb6853ee28d8425390411a7fb5b2c571de5ede638b26cf1b5c0c35299887b0aba724d2db348d7dba2a19bfa4039148904431eac3897ae95a47da21c06d8e11572d2be6a8efe8fb99f19e51ec0a82cee9f80974a142510caf3445818fd81014593b6952cca6ec2ac1aa5d2984162ac72b26e22e50779a29b7054d5d6e2a8a8f143762bf01b7887c835fe92721a4b75a1100b8957f5dd2b9c19b432f40c0ffc46a517d1a7ffb724e6c55e523723d19825a364c1181b8df5aedca88c44070351db3d503d9dc8ecb0bb13b714ad275f682b3d5c1ed76b61fc5", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1800000001000000020000009ae69b5b7a154f7824670ac3744e458efa8629f3cbdd44870d76166e3952c4c90e7b7006fdeeee39b34ee12fc755ce871f4fb10e79", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB, @ANYBLOB, @ANYBLOB="e091930bdfbdc3c5764dd57a8432c526f61c6ff9", @ANYRES32, @ANYRES32, @ANYBLOB="a03a2bd916ea13b58d78c0ffbc18fbdce7b920", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x10c, 0x4000000}, 0x84)
r5 = dup2(r2, r1)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4112, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40c0, 0x20)
ioctl$SNDCTL_DSP_GETISPACE(r6, 0x8010500d, &(0x7f0000000140))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40802, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1a}, 0x1, 0x2, 0x0, 0x5, 0x9, 0x40, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xffffffff)

00:25:09 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080), &(0x7f00000001c0)=0x8)

00:25:10 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = getpgrp(0x0)
r2 = inotify_init1(0x80800)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, <r3=>0x0})
kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
ioprio_get$pid(0x1, r3)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x3}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x200000000000038d)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4044, 0x0, 0xffffffffffffffce)
sendto$inet(r0, &(0x7f0000000040), 0xffffffffffffff94, 0x4000085, 0x0, 0x21)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25)

00:25:10 executing program 0:
unshare(0x20600)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0xe)

00:25:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv4_getrule={0x1c, 0x22, 0x901}, 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f000000a480)=[{{0x0, 0x0, &(0x7f0000007a80), 0x3}}], 0x1, 0x0, 0x0)

00:25:10 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = getpgrp(0x0)
r2 = inotify_init1(0x80800)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, <r3=>0x0})
kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
ioprio_get$pid(0x1, r3)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x3}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x200000000000038d)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4044, 0x0, 0xffffffffffffffce)
sendto$inet(r0, &(0x7f0000000040), 0xffffffffffffff94, 0x4000085, 0x0, 0x21)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25)

[  417.991862][   T36] audit: type=1800 audit(1615595109.928:235): pid=28208 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=15507 res=0 errno=0
00:25:10 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
syz_fuse_handle_req(r1, &(0x7f0000004440)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000004300)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
chmod(&(0x7f00000004c0)='./file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x2)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

00:25:10 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080), &(0x7f00000001c0)=0x8)

00:25:10 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080), &(0x7f00000001c0)=0x8)

00:25:10 executing program 5:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/104, 0x68}], 0x1}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00', 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="0740fbffffffffffffff07000000"], 0x14}}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/155, 0x9b}, {&(0x7f0000000340)=""/136, 0x88}], 0x2)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup3(0xffffffffffffffff, r5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
close(r1)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8)
bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r7, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc10}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x300)
splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0)

00:25:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv4_getrule={0x1c, 0x22, 0x901}, 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f000000a480)=[{{0x0, 0x0, &(0x7f0000007a80), 0x3}}], 0x1, 0x0, 0x0)

00:25:10 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = getpgrp(0x0)
r2 = inotify_init1(0x80800)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, <r3=>0x0})
kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
ioprio_get$pid(0x1, r3)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x3}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x200000000000038d)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4044, 0x0, 0xffffffffffffffce)
sendto$inet(r0, &(0x7f0000000040), 0xffffffffffffff94, 0x4000085, 0x0, 0x21)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25)

00:25:10 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv4_getrule={0x1c, 0x22, 0x901}, 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f000000a480)=[{{0x0, 0x0, &(0x7f0000007a80), 0x3}}], 0x1, 0x0, 0x0)

00:25:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv4_getrule={0x1c, 0x22, 0x901}, 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f000000a480)=[{{0x0, 0x0, &(0x7f0000007a80), 0x3}}], 0x1, 0x0, 0x0)

00:25:10 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@in={0x2, 0x0, @private=0xa0100fd}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="ab", 0x1}], 0x1}, 0x0)
sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)='e', 0x58}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7b, &(0x7f0000000000)=[@in={0x2, 0x0, @private}], 0x10)

00:25:10 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv4_getrule={0x1c, 0x22, 0x901}, 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f000000a480)=[{{0x0, 0x0, &(0x7f0000007a80), 0x3}}], 0x1, 0x0, 0x0)

00:25:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv4_getrule={0x1c, 0x22, 0x901}, 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f000000a480)=[{{0x0, 0x0, &(0x7f0000007a80), 0x3}}], 0x1, 0x0, 0x0)

00:25:10 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv4_getrule={0x1c, 0x22, 0x901}, 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f000000a480)=[{{0x0, 0x0, &(0x7f0000007a80), 0x3}}], 0x1, 0x0, 0x0)

00:25:10 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
execve(&(0x7f0000000540)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='\x00'], &(0x7f0000000840)=[0x0, 0x0, &(0x7f0000000780)='subj_role', 0x0])
mount$overlay(0x0, 0x0, 0x0, 0x100002, 0x0)
creat(&(0x7f0000000180)='./bus/file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
mount$overlay(0x0, 0x0, &(0x7f0000000380)='overlay\x00', 0x1107859, &(0x7f0000000400)={[{@default_permissions='default_permissions'}, {@index_on='index=on'}, {@metacopy_off='metacopy=off'}, {@metacopy_on='metacopy=on'}, {@xino_auto='xino=auto'}, {@nfs_export_off='nfs_export=off'}], [{@fowner_gt={'fowner>'}}]})
lsetxattr$security_capability(&(0x7f0000000680)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000640)=@v2, 0x14, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0)

[  418.637725][T28263] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  418.680963][T28263] overlayfs: 'file0' not a directory
[  418.688915][T28266] overlayfs: filesystem on './bus' not supported as upperdir
00:25:10 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080), &(0x7f00000001c0)=0x8)

00:25:11 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080), &(0x7f00000001c0)=0x8)

00:25:11 executing program 5:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/104, 0x68}], 0x1}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00', 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="0740fbffffffffffffff07000000"], 0x14}}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/155, 0x9b}, {&(0x7f0000000340)=""/136, 0x88}], 0x2)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup3(0xffffffffffffffff, r5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
close(r1)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8)
bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r7, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc10}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x300)
splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0)

00:25:11 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007a00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000005880)=""/4096, 0x1000}], 0x1}}], 0x4, 0x0, 0x0)

00:25:11 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
execve(&(0x7f0000000540)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='\x00'], &(0x7f0000000840)=[0x0, 0x0, &(0x7f0000000780)='subj_role', 0x0])
mount$overlay(0x0, 0x0, 0x0, 0x100002, 0x0)
creat(&(0x7f0000000180)='./bus/file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
mount$overlay(0x0, 0x0, &(0x7f0000000380)='overlay\x00', 0x1107859, &(0x7f0000000400)={[{@default_permissions='default_permissions'}, {@index_on='index=on'}, {@metacopy_off='metacopy=off'}, {@metacopy_on='metacopy=on'}, {@xino_auto='xino=auto'}, {@nfs_export_off='nfs_export=off'}], [{@fowner_gt={'fowner>'}}]})
lsetxattr$security_capability(&(0x7f0000000680)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000640)=@v2, 0x14, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0)

[  419.139544][T28285] syz-executor.1 sent an empty control message without MSG_MORE.
00:25:11 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007a00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000005880)=""/4096, 0x1000}], 0x1}}], 0x4, 0x0, 0x0)

00:25:11 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007a00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000005880)=""/4096, 0x1000}], 0x1}}], 0x4, 0x0, 0x0)

00:25:11 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@in={0x2, 0x0, @private=0xa0100fd}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="ab", 0x1}], 0x1}, 0x0)
sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)='e', 0x58}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7b, &(0x7f0000000000)=[@in={0x2, 0x0, @private}], 0x10)

00:25:11 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007a00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000005880)=""/4096, 0x1000}], 0x1}}], 0x4, 0x0, 0x0)

00:25:11 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
execve(&(0x7f0000000540)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='\x00'], &(0x7f0000000840)=[0x0, 0x0, &(0x7f0000000780)='subj_role', 0x0])
mount$overlay(0x0, 0x0, 0x0, 0x100002, 0x0)
creat(&(0x7f0000000180)='./bus/file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
mount$overlay(0x0, 0x0, &(0x7f0000000380)='overlay\x00', 0x1107859, &(0x7f0000000400)={[{@default_permissions='default_permissions'}, {@index_on='index=on'}, {@metacopy_off='metacopy=off'}, {@metacopy_on='metacopy=on'}, {@xino_auto='xino=auto'}, {@nfs_export_off='nfs_export=off'}], [{@fowner_gt={'fowner>'}}]})
lsetxattr$security_capability(&(0x7f0000000680)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000640)=@v2, 0x14, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0)

[  419.257531][T28283] overlayfs: './file0' not a directory
00:25:11 executing program 1:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/104, 0x68}], 0x1}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00', 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="0740fbffffffffffffff07000000"], 0x14}}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/155, 0x9b}, {&(0x7f0000000340)=""/136, 0x88}], 0x2)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup3(0xffffffffffffffff, r5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
close(r1)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8)
bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r7, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc10}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x300)
splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0)

[  419.409693][T28301] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
00:25:11 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
execve(&(0x7f0000000540)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='\x00'], &(0x7f0000000840)=[0x0, 0x0, &(0x7f0000000780)='subj_role', 0x0])
mount$overlay(0x0, 0x0, 0x0, 0x100002, 0x0)
creat(&(0x7f0000000180)='./bus/file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
mount$overlay(0x0, 0x0, &(0x7f0000000380)='overlay\x00', 0x1107859, &(0x7f0000000400)={[{@default_permissions='default_permissions'}, {@index_on='index=on'}, {@metacopy_off='metacopy=off'}, {@metacopy_on='metacopy=on'}, {@xino_auto='xino=auto'}, {@nfs_export_off='nfs_export=off'}], [{@fowner_gt={'fowner>'}}]})
lsetxattr$security_capability(&(0x7f0000000680)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000640)=@v2, 0x14, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0)

[  419.610830][T28313] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
00:25:11 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080), &(0x7f00000001c0)=0x8)

00:25:11 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080), &(0x7f00000001c0)=0x8)

00:25:11 executing program 5:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/104, 0x68}], 0x1}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00', 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="0740fbffffffffffffff07000000"], 0x14}}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/155, 0x9b}, {&(0x7f0000000340)=""/136, 0x88}], 0x2)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup3(0xffffffffffffffff, r5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
close(r1)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8)
bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r7, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc10}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x300)
splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0)

00:25:11 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
execve(&(0x7f0000000540)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='\x00'], &(0x7f0000000840)=[0x0, 0x0, &(0x7f0000000780)='subj_role', 0x0])
mount$overlay(0x0, 0x0, 0x0, 0x100002, 0x0)
creat(&(0x7f0000000180)='./bus/file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
mount$overlay(0x0, 0x0, &(0x7f0000000380)='overlay\x00', 0x1107859, &(0x7f0000000400)={[{@default_permissions='default_permissions'}, {@index_on='index=on'}, {@metacopy_off='metacopy=off'}, {@metacopy_on='metacopy=on'}, {@xino_auto='xino=auto'}, {@nfs_export_off='nfs_export=off'}], [{@fowner_gt={'fowner>'}}]})
lsetxattr$security_capability(&(0x7f0000000680)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000640)=@v2, 0x14, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0)

00:25:12 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
execve(&(0x7f0000000540)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='\x00'], &(0x7f0000000840)=[0x0, 0x0, &(0x7f0000000780)='subj_role', 0x0])
mount$overlay(0x0, 0x0, 0x0, 0x100002, 0x0)
creat(&(0x7f0000000180)='./bus/file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
mount$overlay(0x0, 0x0, &(0x7f0000000380)='overlay\x00', 0x1107859, &(0x7f0000000400)={[{@default_permissions='default_permissions'}, {@index_on='index=on'}, {@metacopy_off='metacopy=off'}, {@metacopy_on='metacopy=on'}, {@xino_auto='xino=auto'}, {@nfs_export_off='nfs_export=off'}], [{@fowner_gt={'fowner>'}}]})
lsetxattr$security_capability(&(0x7f0000000680)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000640)=@v2, 0x14, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0)

[  420.070454][T28328] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
00:25:12 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@in={0x2, 0x0, @private=0xa0100fd}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="ab", 0x1}], 0x1}, 0x0)
sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)='e', 0x58}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7b, &(0x7f0000000000)=[@in={0x2, 0x0, @private}], 0x10)

00:25:12 executing program 1:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/104, 0x68}], 0x1}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00', 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1e00000836b6c1b4552aede3104635ebc2cb7e6b2d4f51fbcbff5ed58f1143931bf9bbaef9adf902f8878f883d71e1fb575233c30f0d4f6c8cff033336e5f3b0a0b150bc2007ed42c21cd499e2cea71405d3886fb47d0f680a3d1df496775d99d51158ede9e8da9cfe2418b6d02da0c35af87c4056b1a9a89c83effd1b299f19722a98dba550b1c80cbb3e935f84a4460600dc434a6989619f9c75621431321e6c6036f17e02a24884c0976fc881e7d5baa91322bd62c4fe866d89c96ef9929db6ae0bb04be6c7360f3889168ace6d6e6e1c07c6cf8b148ce6fadd32d98c78974438984d99ab257eef989d71ae96a1d73b506e6e8b566cd4f2ad8741cb884acdf539d9eb81c1aafcbd4d27d8457b54", @ANYRES16=0x0, @ANYBLOB="0740fbffffffffffffff07000000"], 0x14}}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/155, 0x9b}, {&(0x7f0000000340)=""/136, 0x88}], 0x2)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup3(0xffffffffffffffff, r5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
close(r1)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8)
bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r7, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc10}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x300)
splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0)

[  420.249686][T28334] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
00:25:12 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
execve(&(0x7f0000000540)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='\x00'], &(0x7f0000000840)=[0x0, 0x0, &(0x7f0000000780)='subj_role', 0x0])
mount$overlay(0x0, 0x0, 0x0, 0x100002, 0x0)
creat(&(0x7f0000000180)='./bus/file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
mount$overlay(0x0, 0x0, &(0x7f0000000380)='overlay\x00', 0x1107859, &(0x7f0000000400)={[{@default_permissions='default_permissions'}, {@index_on='index=on'}, {@metacopy_off='metacopy=off'}, {@metacopy_on='metacopy=on'}, {@xino_auto='xino=auto'}, {@nfs_export_off='nfs_export=off'}], [{@fowner_gt={'fowner>'}}]})
lsetxattr$security_capability(&(0x7f0000000680)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000640)=@v2, 0x14, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0)

[  420.426147][T28348] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
00:25:12 executing program 3:
r0 = socket$inet(0x10, 0x80002, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000110007041dfffd946f610500020003e8fe02080100010800080002000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

[  420.535929][T28352] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
00:25:12 executing program 3:
r0 = socket$inet(0x10, 0x80002, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000110007041dfffd946f610500020003e8fe02080100010800080002000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

[  420.634761][T28357] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
00:25:12 executing program 3:
r0 = socket$inet(0x10, 0x80002, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000110007041dfffd946f610500020003e8fe02080100010800080002000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

[  420.676908][T28359] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
00:25:12 executing program 4:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0xd8d8000)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

00:25:12 executing program 3:
r0 = socket$inet(0x10, 0x80002, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000110007041dfffd946f610500020003e8fe02080100010800080002000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

00:25:12 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000040130000000000000359850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_enter\x00', r0}, 0x10)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  420.744222][T28363] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
00:25:12 executing program 5:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/104, 0x68}], 0x1}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00', 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="0740fbffffffffffffff07000000"], 0x14}}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/155, 0x9b}, {&(0x7f0000000340)=""/136, 0x88}], 0x2)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup3(0xffffffffffffffff, r5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
close(r1)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8)
bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r7, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc10}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x300)
splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0)

00:25:12 executing program 3:
mq_open(0x0, 0x0, 0x0, 0x0)

[  420.815567][T28368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
00:25:12 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x250, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth0_to_team\x00'}, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @inet=@rpfilter={{0x27, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0)

00:25:13 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@in={0x2, 0x0, @private=0xa0100fd}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="ab", 0x1}], 0x1}, 0x0)
sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)='e', 0x58}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7b, &(0x7f0000000000)=[@in={0x2, 0x0, @private}], 0x10)

00:25:13 executing program 1:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/104, 0x68}], 0x1}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00', 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="0740fbffffffffffffff07000000"], 0x14}}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/155, 0x9b}, {&(0x7f0000000340)=""/136, 0x88}], 0x2)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup3(0xffffffffffffffff, r5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
close(r1)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8)
bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r7, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc10}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x300)
splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0)

00:25:13 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000040130000000000000359850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_enter\x00', r0}, 0x10)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

00:25:13 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x250, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth0_to_team\x00'}, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @inet=@rpfilter={{0x27, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0)

00:25:13 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000040130000000000000359850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_enter\x00', r0}, 0x10)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

00:25:13 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x250, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth0_to_team\x00'}, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @inet=@rpfilter={{0x27, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0)

00:25:13 executing program 4:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0xd8d8000)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

00:25:13 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x250, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth0_to_team\x00'}, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @inet=@rpfilter={{0x27, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0)

00:25:13 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000040130000000000000359850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_enter\x00', r0}, 0x10)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

00:25:13 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x2, 0x0)

00:25:13 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0xd8d8000)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

00:25:13 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000300)={r2, 0x1, 0x6, @multicast}, 0x10)

[  421.936793][T28418] device lo entered promiscuous mode
[  421.942495][T28416] device lo left promiscuous mode
[  421.974324][T28418] device lo entered promiscuous mode
00:25:13 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0xd8d8000)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

[  421.983589][T28418] device lo left promiscuous mode
00:25:13 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x2, 0x0)

00:25:13 executing program 2:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x5cc}}, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0)

00:25:13 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000300)={r2, 0x1, 0x6, @multicast}, 0x10)

00:25:14 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000300)={r2, 0x1, 0x6, @multicast}, 0x10)

00:25:14 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0xd8d8000)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

[  422.064343][T28426] netlink: 704 bytes leftover after parsing attributes in process `syz-executor.2'.
[  422.087206][T28426] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  422.106357][T28426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  422.124476][T28430] device lo entered promiscuous mode
[  422.130184][T28427] device lo left promiscuous mode
00:25:14 executing program 4:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0xd8d8000)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

00:25:14 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000300)={r2, 0x1, 0x6, @multicast}, 0x10)

00:25:14 executing program 2:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
sendmsg$NFT