DUID 00:04:10:0c:0b:6c:cf:01:97:71:63:d9:08:fa:b1:5a:68:3c forked to background, child pid 4653 [ 34.855806][ T4654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.885494][ T4654] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.46' (ECDSA) to the list of known hosts. 2023/04/15 00:24:44 fuzzer started 2023/04/15 00:24:44 dialing manager at 10.128.0.169:36379 syzkaller login: [ 57.265689][ T5076] cgroup: Unknown subsys name 'net' [ 57.380664][ T5076] cgroup: Unknown subsys name 'rlimit' 2023/04/15 00:24:44 syscalls: 3481 2023/04/15 00:24:44 code coverage: enabled 2023/04/15 00:24:44 comparison tracing: enabled 2023/04/15 00:24:44 extra coverage: enabled 2023/04/15 00:24:44 delay kcov mmap: enabled 2023/04/15 00:24:44 setuid sandbox: enabled 2023/04/15 00:24:44 namespace sandbox: enabled 2023/04/15 00:24:44 Android sandbox: /sys/fs/selinux/policy does not exist 2023/04/15 00:24:44 fault injection: enabled 2023/04/15 00:24:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2023/04/15 00:24:44 net packet injection: enabled 2023/04/15 00:24:44 net device setup: enabled 2023/04/15 00:24:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/04/15 00:24:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/04/15 00:24:44 NIC VF setup: PCI device 0000:00:11.0 is not available 2023/04/15 00:24:44 USB emulation: enabled 2023/04/15 00:24:44 hci packet injection: enabled 2023/04/15 00:24:44 wifi device emulation: enabled 2023/04/15 00:24:44 802.15.4 emulation: enabled 2023/04/15 00:24:44 fetching corpus: 0, signal 0/2000 (executing program) 2023/04/15 00:24:45 fetching corpus: 50, signal 46909/50415 (executing program) 2023/04/15 00:24:45 fetching corpus: 100, signal 65161/70139 (executing program) 2023/04/15 00:24:45 fetching corpus: 149, signal 74781/81199 (executing program) 2023/04/15 00:24:45 fetching corpus: 199, signal 85109/92859 (executing program) 2023/04/15 00:24:45 fetching corpus: 248, signal 92521/101601 (executing program) 2023/04/15 00:24:45 fetching corpus: 298, signal 98736/109121 (executing program) 2023/04/15 00:24:45 fetching corpus: 348, signal 105468/117021 (executing program) 2023/04/15 00:24:45 fetching corpus: 398, signal 111260/123971 (executing program) 2023/04/15 00:24:46 fetching corpus: 448, signal 118095/131850 (executing program) 2023/04/15 00:24:46 fetching corpus: 497, signal 126246/140910 (executing program) 2023/04/15 00:24:46 fetching corpus: 547, signal 132444/148025 (executing program) 2023/04/15 00:24:46 fetching corpus: 596, signal 137414/153967 (executing program) 2023/04/15 00:24:46 fetching corpus: 646, signal 142289/159800 (executing program) 2023/04/15 00:24:46 fetching corpus: 696, signal 145604/164110 (executing program) 2023/04/15 00:24:46 fetching corpus: 745, signal 150674/169991 (executing program) 2023/04/15 00:24:46 fetching corpus: 795, signal 155231/175311 (executing program) 2023/04/15 00:24:47 fetching corpus: 845, signal 159065/179951 (executing program) 2023/04/15 00:24:47 fetching corpus: 895, signal 163397/184996 (executing program) 2023/04/15 00:24:47 fetching corpus: 945, signal 168508/190730 (executing program) 2023/04/15 00:24:47 fetching corpus: 995, signal 170777/193864 (executing program) 2023/04/15 00:24:47 fetching corpus: 1044, signal 173909/197703 (executing program) 2023/04/15 00:24:47 fetching corpus: 1094, signal 176322/200912 (executing program) 2023/04/15 00:24:47 fetching corpus: 1143, signal 179638/204847 (executing program) 2023/04/15 00:24:47 fetching corpus: 1193, signal 181900/207811 (executing program) 2023/04/15 00:24:48 fetching corpus: 1242, signal 184437/211038 (executing program) 2023/04/15 00:24:48 fetching corpus: 1292, signal 188659/215616 (executing program) 2023/04/15 00:24:48 fetching corpus: 1342, signal 191202/218722 (executing program) 2023/04/15 00:24:48 fetching corpus: 1392, signal 194179/222195 (executing program) 2023/04/15 00:24:48 fetching corpus: 1442, signal 196207/224832 (executing program) 2023/04/15 00:24:48 fetching corpus: 1491, signal 198739/227901 (executing program) 2023/04/15 00:24:48 fetching corpus: 1540, signal 200527/230369 (executing program) 2023/04/15 00:24:48 fetching corpus: 1590, signal 203155/233402 (executing program) 2023/04/15 00:24:48 fetching corpus: 1640, signal 206036/236732 (executing program) 2023/04/15 00:24:49 fetching corpus: 1689, signal 208485/239609 (executing program) 2023/04/15 00:24:49 fetching corpus: 1738, signal 210455/242119 (executing program) 2023/04/15 00:24:49 fetching corpus: 1785, signal 212638/244732 (executing program) 2023/04/15 00:24:49 fetching corpus: 1835, signal 214653/247235 (executing program) 2023/04/15 00:24:49 fetching corpus: 1884, signal 216417/249508 (executing program) 2023/04/15 00:24:49 fetching corpus: 1932, signal 217950/251549 (executing program) 2023/04/15 00:24:49 fetching corpus: 1982, signal 220536/254383 (executing program) 2023/04/15 00:24:49 fetching corpus: 2032, signal 221943/256299 (executing program) 2023/04/15 00:24:50 fetching corpus: 2080, signal 224760/259302 (executing program) 2023/04/15 00:24:50 fetching corpus: 2130, signal 226927/261762 (executing program) 2023/04/15 00:24:50 fetching corpus: 2180, signal 228750/263921 (executing program) 2023/04/15 00:24:50 fetching corpus: 2230, signal 230656/266111 (executing program) 2023/04/15 00:24:50 fetching corpus: 2279, signal 232455/268213 (executing program) 2023/04/15 00:24:50 fetching corpus: 2328, signal 233810/269973 (executing program) 2023/04/15 00:24:50 fetching corpus: 2378, signal 235654/272087 (executing program) 2023/04/15 00:24:50 fetching corpus: 2428, signal 237101/273911 (executing program) 2023/04/15 00:24:50 fetching corpus: 2478, signal 238796/275882 (executing program) 2023/04/15 00:24:51 fetching corpus: 2528, signal 240619/277965 (executing program) 2023/04/15 00:24:51 fetching corpus: 2578, signal 241826/279539 (executing program) 2023/04/15 00:24:51 fetching corpus: 2628, signal 243910/281766 (executing program) 2023/04/15 00:24:51 fetching corpus: 2677, signal 245489/283573 (executing program) 2023/04/15 00:24:51 fetching corpus: 2727, signal 246670/285120 (executing program) 2023/04/15 00:24:51 fetching corpus: 2777, signal 249346/287679 (executing program) 2023/04/15 00:24:51 fetching corpus: 2825, signal 250390/289042 (executing program) 2023/04/15 00:24:51 fetching corpus: 2874, signal 252124/290932 (executing program) 2023/04/15 00:24:51 fetching corpus: 2924, signal 253873/292772 (executing program) 2023/04/15 00:24:52 fetching corpus: 2974, signal 254915/294131 (executing program) 2023/04/15 00:24:52 fetching corpus: 3024, signal 256030/295509 (executing program) 2023/04/15 00:24:52 fetching corpus: 3074, signal 257418/297055 (executing program) 2023/04/15 00:24:52 fetching corpus: 3124, signal 259216/298903 (executing program) 2023/04/15 00:24:52 fetching corpus: 3173, signal 260534/300369 (executing program) 2023/04/15 00:24:52 fetching corpus: 3223, signal 261669/301695 (executing program) 2023/04/15 00:24:52 fetching corpus: 3273, signal 263529/303454 (executing program) 2023/04/15 00:24:52 fetching corpus: 3323, signal 265415/305242 (executing program) 2023/04/15 00:24:53 fetching corpus: 3373, signal 267049/306901 (executing program) 2023/04/15 00:24:53 fetching corpus: 3423, signal 268462/308350 (executing program) 2023/04/15 00:24:53 fetching corpus: 3472, signal 269450/309545 (executing program) 2023/04/15 00:24:53 fetching corpus: 3522, signal 270776/310930 (executing program) 2023/04/15 00:24:53 fetching corpus: 3571, signal 272134/312309 (executing program) 2023/04/15 00:24:53 fetching corpus: 3621, signal 273557/313723 (executing program) 2023/04/15 00:24:53 fetching corpus: 3671, signal 274944/315080 (executing program) 2023/04/15 00:24:53 fetching corpus: 3721, signal 275955/316178 (executing program) 2023/04/15 00:24:54 fetching corpus: 3771, signal 277541/317636 (executing program) 2023/04/15 00:24:54 fetching corpus: 3821, signal 279163/319062 (executing program) 2023/04/15 00:24:54 fetching corpus: 3871, signal 280471/320328 (executing program) 2023/04/15 00:24:54 fetching corpus: 3921, signal 281707/321579 (executing program) 2023/04/15 00:24:54 fetching corpus: 3971, signal 283067/322829 (executing program) 2023/04/15 00:24:54 fetching corpus: 4021, signal 283855/323755 (executing program) 2023/04/15 00:24:54 fetching corpus: 4071, signal 285267/325006 (executing program) 2023/04/15 00:24:54 fetching corpus: 4121, signal 286125/325930 (executing program) 2023/04/15 00:24:55 fetching corpus: 4171, signal 287559/327215 (executing program) 2023/04/15 00:24:55 fetching corpus: 4221, signal 288804/328321 (executing program) 2023/04/15 00:24:55 fetching corpus: 4271, signal 290391/329643 (executing program) 2023/04/15 00:24:55 fetching corpus: 4320, signal 291376/330638 (executing program) 2023/04/15 00:24:55 fetching corpus: 4369, signal 292428/331613 (executing program) 2023/04/15 00:24:55 fetching corpus: 4419, signal 293558/332634 (executing program) 2023/04/15 00:24:55 fetching corpus: 4469, signal 294942/333738 (executing program) 2023/04/15 00:24:55 fetching corpus: 4519, signal 295870/334681 (executing program) 2023/04/15 00:24:55 fetching corpus: 4569, signal 297059/335712 (executing program) 2023/04/15 00:24:56 fetching corpus: 4619, signal 298341/336774 (executing program) 2023/04/15 00:24:56 fetching corpus: 4669, signal 299836/337897 (executing program) 2023/04/15 00:24:56 fetching corpus: 4719, signal 300962/338867 (executing program) 2023/04/15 00:24:56 fetching corpus: 4769, signal 301741/339625 (executing program) 2023/04/15 00:24:56 fetching corpus: 4819, signal 302670/340454 (executing program) 2023/04/15 00:24:56 fetching corpus: 4869, signal 304029/341478 (executing program) 2023/04/15 00:24:56 fetching corpus: 4919, signal 304998/342311 (executing program) 2023/04/15 00:24:56 fetching corpus: 4969, signal 305869/343100 (executing program) 2023/04/15 00:24:57 fetching corpus: 5019, signal 306714/343855 (executing program) 2023/04/15 00:24:57 fetching corpus: 5069, signal 307690/344584 (executing program) 2023/04/15 00:24:57 fetching corpus: 5119, signal 308933/345477 (executing program) 2023/04/15 00:24:57 fetching corpus: 5169, signal 310117/346353 (executing program) 2023/04/15 00:24:57 fetching corpus: 5219, signal 311117/347141 (executing program) 2023/04/15 00:24:57 fetching corpus: 5269, signal 311744/347737 (executing program) 2023/04/15 00:24:57 fetching corpus: 5319, signal 314449/349235 (executing program) 2023/04/15 00:24:57 fetching corpus: 5368, signal 316130/350258 (executing program) 2023/04/15 00:24:58 fetching corpus: 5418, signal 317282/351051 (executing program) 2023/04/15 00:24:58 fetching corpus: 5468, signal 318369/351785 (executing program) 2023/04/15 00:24:58 fetching corpus: 5518, signal 319435/352503 (executing program) 2023/04/15 00:24:58 fetching corpus: 5568, signal 320324/353188 (executing program) 2023/04/15 00:24:58 fetching corpus: 5617, signal 321450/353901 (executing program) 2023/04/15 00:24:58 fetching corpus: 5667, signal 322091/354428 (executing program) [ 71.314364][ T1204] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.320958][ T1204] ieee802154 phy1 wpan1: encryption failed: -22 2023/04/15 00:24:58 fetching corpus: 5717, signal 322693/354950 (executing program) 2023/04/15 00:24:59 fetching corpus: 5767, signal 323861/355665 (executing program) 2023/04/15 00:24:59 fetching corpus: 5817, signal 324807/356324 (executing program) 2023/04/15 00:24:59 fetching corpus: 5866, signal 325457/356859 (executing program) 2023/04/15 00:24:59 fetching corpus: 5914, signal 326442/357488 (executing program) 2023/04/15 00:24:59 fetching corpus: 5964, signal 327720/358198 (executing program) 2023/04/15 00:24:59 fetching corpus: 6014, signal 328393/358669 (executing program) 2023/04/15 00:24:59 fetching corpus: 6064, signal 329328/359268 (executing program) 2023/04/15 00:24:59 fetching corpus: 6113, signal 329964/359736 (executing program) 2023/04/15 00:25:00 fetching corpus: 6163, signal 330726/360245 (executing program) 2023/04/15 00:25:00 fetching corpus: 6213, signal 331594/360740 (executing program) 2023/04/15 00:25:00 fetching corpus: 6263, signal 332399/361218 (executing program) 2023/04/15 00:25:00 fetching corpus: 6312, signal 333071/361636 (executing program) 2023/04/15 00:25:00 fetching corpus: 6362, signal 333688/362053 (executing program) 2023/04/15 00:25:00 fetching corpus: 6412, signal 334397/362475 (executing program) 2023/04/15 00:25:00 fetching corpus: 6462, signal 335215/362927 (executing program) 2023/04/15 00:25:00 fetching corpus: 6512, signal 336445/363465 (executing program) 2023/04/15 00:25:00 fetching corpus: 6562, signal 337239/363861 (executing program) 2023/04/15 00:25:01 fetching corpus: 6610, signal 338132/364324 (executing program) 2023/04/15 00:25:01 fetching corpus: 6659, signal 339079/364799 (executing program) 2023/04/15 00:25:01 fetching corpus: 6709, signal 339601/365120 (executing program) 2023/04/15 00:25:01 fetching corpus: 6759, signal 340360/365525 (executing program) 2023/04/15 00:25:01 fetching corpus: 6808, signal 340907/365886 (executing program) 2023/04/15 00:25:01 fetching corpus: 6856, signal 341650/366267 (executing program) 2023/04/15 00:25:01 fetching corpus: 6906, signal 342392/366621 (executing program) 2023/04/15 00:25:01 fetching corpus: 6956, signal 343236/367031 (executing program) 2023/04/15 00:25:02 fetching corpus: 7005, signal 343929/367383 (executing program) 2023/04/15 00:25:02 fetching corpus: 7055, signal 344709/367739 (executing program) 2023/04/15 00:25:02 fetching corpus: 7105, signal 345445/368088 (executing program) 2023/04/15 00:25:02 fetching corpus: 7155, signal 346254/368431 (executing program) 2023/04/15 00:25:02 fetching corpus: 7205, signal 346984/368724 (executing program) 2023/04/15 00:25:02 fetching corpus: 7255, signal 347994/369100 (executing program) 2023/04/15 00:25:02 fetching corpus: 7305, signal 348911/369468 (executing program) 2023/04/15 00:25:02 fetching corpus: 7355, signal 349986/369832 (executing program) 2023/04/15 00:25:03 fetching corpus: 7405, signal 350894/370142 (executing program) 2023/04/15 00:25:03 fetching corpus: 7454, signal 351824/370457 (executing program) 2023/04/15 00:25:03 fetching corpus: 7503, signal 352315/370684 (executing program) 2023/04/15 00:25:03 fetching corpus: 7553, signal 352976/370913 (executing program) 2023/04/15 00:25:03 fetching corpus: 7603, signal 353618/371149 (executing program) 2023/04/15 00:25:03 fetching corpus: 7653, signal 354445/371440 (executing program) [ 76.444511][ T7] cfg80211: failed to load regulatory.db 2023/04/15 00:25:03 fetching corpus: 7703, signal 355270/371658 (executing program) 2023/04/15 00:25:04 fetching corpus: 7753, signal 355920/371877 (executing program) 2023/04/15 00:25:04 fetching corpus: 7803, signal 356596/372095 (executing program) 2023/04/15 00:25:04 fetching corpus: 7853, signal 357561/372340 (executing program) 2023/04/15 00:25:04 fetching corpus: 7903, signal 358191/372492 (executing program) 2023/04/15 00:25:04 fetching corpus: 7953, signal 358960/372693 (executing program) 2023/04/15 00:25:04 fetching corpus: 8002, signal 360081/372957 (executing program) 2023/04/15 00:25:04 fetching corpus: 8051, signal 360999/373164 (executing program) 2023/04/15 00:25:04 fetching corpus: 8100, signal 361645/373327 (executing program) 2023/04/15 00:25:05 fetching corpus: 8149, signal 362634/373527 (executing program) 2023/04/15 00:25:05 fetching corpus: 8199, signal 363286/373661 (executing program) 2023/04/15 00:25:05 fetching corpus: 8249, signal 363765/373766 (executing program) 2023/04/15 00:25:05 fetching corpus: 8299, signal 364333/373877 (executing program) 2023/04/15 00:25:05 fetching corpus: 8349, signal 365142/374009 (executing program) 2023/04/15 00:25:05 fetching corpus: 8399, signal 365651/374108 (executing program) 2023/04/15 00:25:05 fetching corpus: 8449, signal 366618/374248 (executing program) 2023/04/15 00:25:05 fetching corpus: 8499, signal 367165/374345 (executing program) 2023/04/15 00:25:06 fetching corpus: 8549, signal 367938/374465 (executing program) 2023/04/15 00:25:06 fetching corpus: 8597, signal 368550/374550 (executing program) 2023/04/15 00:25:06 fetching corpus: 8597, signal 368550/374582 (executing program) 2023/04/15 00:25:06 fetching corpus: 8597, signal 368550/374616 (executing program) 2023/04/15 00:25:06 fetching corpus: 8597, signal 368550/374657 (executing program) 2023/04/15 00:25:06 fetching corpus: 8597, signal 368550/374687 (executing program) 2023/04/15 00:25:06 fetching corpus: 8597, signal 368550/374720 (executing program) 2023/04/15 00:25:06 fetching corpus: 8597, signal 368550/374755 (executing program) 2023/04/15 00:25:06 fetching corpus: 8597, signal 368550/374792 (executing program) 2023/04/15 00:25:06 fetching corpus: 8597, signal 368550/374828 (executing program) 2023/04/15 00:25:06 fetching corpus: 8597, signal 368550/374860 (executing program) 2023/04/15 00:25:06 fetching corpus: 8597, signal 368550/374890 (executing program) 2023/04/15 00:25:06 fetching corpus: 8597, signal 368550/374938 (executing program) 2023/04/15 00:25:06 fetching corpus: 8597, signal 368550/374979 (executing program) 2023/04/15 00:25:06 fetching corpus: 8597, signal 368550/375004 (executing program) 2023/04/15 00:25:06 fetching corpus: 8597, signal 368550/375027 (executing program) 2023/04/15 00:25:06 fetching corpus: 8597, signal 368550/375027 (executing program) 2023/04/15 00:25:08 starting 6 fuzzer processes 00:25:08 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110, 0x3}}], 0x18, 0x4c00}, 0x0) 00:25:08 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000080)=@name, 0x10) 00:25:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000008c00000008000a00", @ANYRES32=r5], 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a100000", @ANYRES32=r8, @ANYBLOB="000000000000000008000a001000"], 0x28}}, 0x0) 00:25:08 executing program 3: syz_usb_connect(0x0, 0x55, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000084ef1540109bf03006000000000109024100010000001c09040000000e0100000824048d08db44a318"], 0x0) 00:25:08 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4020744f, &(0x7f0000000100)) 00:25:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x13, 0xa, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 81.562883][ T5074] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5074 'syz-fuzzer' [ 82.038892][ T5092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.057114][ T5092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.065246][ T5092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.085604][ T5097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.097446][ T5098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.108334][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.116771][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.124812][ T5098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.133047][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.140477][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.146429][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.150895][ T5102] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.157665][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.167088][ T5102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.173881][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.179564][ T5102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.188720][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.204558][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.206036][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.213526][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.220387][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.227349][ T5102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.235194][ T5101] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.244070][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.258277][ T4395] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.259685][ T5102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.274663][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.282814][ T5102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.290602][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.304881][ T5104] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.313473][ T5104] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.324479][ T5104] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.334495][ T5104] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.342171][ T5104] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.350115][ T5104] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.652104][ T5105] chnl_net:caif_netlink_parms(): no params data found [ 82.899025][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 82.920715][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 82.937816][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.948798][ T5105] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.957072][ T5105] bridge_slave_0: entered allmulticast mode [ 82.967088][ T5105] bridge_slave_0: entered promiscuous mode [ 82.989600][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.005887][ T5105] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.013909][ T5105] bridge_slave_1: entered allmulticast mode [ 83.021850][ T5105] bridge_slave_1: entered promiscuous mode [ 83.036856][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 83.067771][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 83.105654][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 83.146210][ T5105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.179919][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.190347][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.198463][ T5112] bridge_slave_0: entered allmulticast mode [ 83.206265][ T5112] bridge_slave_0: entered promiscuous mode [ 83.218082][ T5105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.269986][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.277895][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.285416][ T5112] bridge_slave_1: entered allmulticast mode [ 83.292621][ T5112] bridge_slave_1: entered promiscuous mode [ 83.343615][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.350994][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.358916][ T5109] bridge_slave_0: entered allmulticast mode [ 83.365918][ T5109] bridge_slave_0: entered promiscuous mode [ 83.379562][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.386897][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.394388][ T5107] bridge_slave_0: entered allmulticast mode [ 83.400959][ T5107] bridge_slave_0: entered promiscuous mode [ 83.419901][ T5105] team0: Port device team_slave_0 added [ 83.432771][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.440769][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.448541][ T5109] bridge_slave_1: entered allmulticast mode [ 83.455653][ T5109] bridge_slave_1: entered promiscuous mode [ 83.467010][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.474670][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.481946][ T5107] bridge_slave_1: entered allmulticast mode [ 83.489547][ T5107] bridge_slave_1: entered promiscuous mode [ 83.498105][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.508943][ T5105] team0: Port device team_slave_1 added [ 83.523730][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.530943][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.538490][ T5106] bridge_slave_0: entered allmulticast mode [ 83.548928][ T5106] bridge_slave_0: entered promiscuous mode [ 83.587144][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.609063][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.618787][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.626523][ T5106] bridge_slave_1: entered allmulticast mode [ 83.635923][ T5106] bridge_slave_1: entered promiscuous mode [ 83.663706][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.698690][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.712482][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.719579][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.727451][ T5110] bridge_slave_0: entered allmulticast mode [ 83.734213][ T5110] bridge_slave_0: entered promiscuous mode [ 83.742997][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.769795][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.778520][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.806184][ T5105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.821944][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.839476][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.847565][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.855176][ T5110] bridge_slave_1: entered allmulticast mode [ 83.863669][ T5110] bridge_slave_1: entered promiscuous mode [ 83.880768][ T5112] team0: Port device team_slave_0 added [ 83.889540][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.902400][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.909467][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.937715][ T5105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.975401][ T5112] team0: Port device team_slave_1 added [ 83.982607][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.007201][ T5109] team0: Port device team_slave_0 added [ 84.025084][ T5107] team0: Port device team_slave_0 added [ 84.061321][ T5109] team0: Port device team_slave_1 added [ 84.069034][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.080211][ T5107] team0: Port device team_slave_1 added [ 84.096440][ T5106] team0: Port device team_slave_0 added [ 84.122659][ T5105] hsr_slave_0: entered promiscuous mode [ 84.133436][ T5105] hsr_slave_1: entered promiscuous mode [ 84.141977][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.160787][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.168791][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.196904][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.213307][ T5106] team0: Port device team_slave_1 added [ 84.230929][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.238074][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.264348][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.283108][ T5104] Bluetooth: hci1: command 0x0409 tx timeout [ 84.301226][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.308876][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.336743][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.352699][ T5104] Bluetooth: hci3: command 0x0409 tx timeout [ 84.361578][ T5098] Bluetooth: hci0: command 0x0409 tx timeout [ 84.361636][ T5102] Bluetooth: hci4: command 0x0409 tx timeout [ 84.368781][ T5098] Bluetooth: hci2: command 0x0409 tx timeout [ 84.388345][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.395487][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.422055][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.433879][ T5098] Bluetooth: hci5: command 0x0409 tx timeout [ 84.446236][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.454187][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.480331][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.508379][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.516089][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.543064][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.564084][ T5110] team0: Port device team_slave_0 added [ 84.572033][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.579152][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.606113][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.646334][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.653973][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.680430][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.693489][ T5110] team0: Port device team_slave_1 added [ 84.759455][ T5109] hsr_slave_0: entered promiscuous mode [ 84.766335][ T5109] hsr_slave_1: entered promiscuous mode [ 84.773070][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.781043][ T5109] Cannot create hsr debugfs directory [ 84.810029][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.817601][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.846424][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.891285][ T5112] hsr_slave_0: entered promiscuous mode [ 84.898071][ T5112] hsr_slave_1: entered promiscuous mode [ 84.905027][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.913376][ T5112] Cannot create hsr debugfs directory [ 84.921983][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.930535][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.959768][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.979611][ T5106] hsr_slave_0: entered promiscuous mode [ 84.987012][ T5106] hsr_slave_1: entered promiscuous mode [ 84.994272][ T5106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.006707][ T5106] Cannot create hsr debugfs directory [ 85.015923][ T5107] hsr_slave_0: entered promiscuous mode [ 85.025096][ T5107] hsr_slave_1: entered promiscuous mode [ 85.031140][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.041308][ T5107] Cannot create hsr debugfs directory [ 85.150856][ T5110] hsr_slave_0: entered promiscuous mode [ 85.160345][ T5110] hsr_slave_1: entered promiscuous mode [ 85.167332][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.175826][ T5110] Cannot create hsr debugfs directory [ 85.409845][ T5105] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.456160][ T5105] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.498134][ T5105] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.530697][ T5105] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.574705][ T5107] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.584675][ T5107] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.600000][ T5107] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.620354][ T5107] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.667827][ T5109] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.696049][ T5109] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.718625][ T5109] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.747774][ T5109] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.837119][ T5112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.853291][ T5105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.862837][ T5112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.890109][ T5112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.900208][ T5112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.969965][ T5105] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.989729][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.011986][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.105486][ T5106] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.115527][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.125214][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.134468][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.141718][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.150475][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.159715][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.168922][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.176073][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.184057][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.193535][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.202186][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.219310][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.237827][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.292782][ T5106] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.315279][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.331266][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.340324][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.352782][ T5098] Bluetooth: hci1: command 0x041b tx timeout [ 86.357227][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.371321][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.384280][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.399580][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.411174][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.433044][ T5102] Bluetooth: hci2: command 0x041b tx timeout [ 86.433060][ T5098] Bluetooth: hci4: command 0x041b tx timeout [ 86.433094][ T5098] Bluetooth: hci3: command 0x041b tx timeout [ 86.439082][ T5102] Bluetooth: hci0: command 0x041b tx timeout [ 86.464071][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.498213][ T5105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.512411][ T5104] Bluetooth: hci5: command 0x041b tx timeout [ 86.520093][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.539291][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.549525][ T5106] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.570093][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.578747][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.626300][ T5106] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.657071][ T5110] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.668033][ T5110] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.679365][ T5110] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.694450][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.706519][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.715727][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.722907][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.737730][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.760939][ T5110] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.772828][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.780766][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.790140][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.799304][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.808538][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.817428][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.824608][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.832927][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.843649][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.852135][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.859378][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.867164][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.874796][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.883945][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.911987][ T5105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.927129][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.936806][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.946801][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.956468][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.965257][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.972470][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.988794][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.022388][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.031181][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.041075][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.050576][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.059607][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.068554][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.077643][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.086641][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.095411][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.105103][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.146942][ T5107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.159512][ T5107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.177685][ T5109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.185532][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.194173][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.203524][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.212070][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.222771][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.232863][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.243275][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.251906][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.260842][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.269525][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.277775][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.286438][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.296338][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.313347][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.349669][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.359003][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.368337][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.377169][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.385936][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.393127][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.451767][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.459828][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.470525][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.478448][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.486333][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.494179][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.503269][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.511811][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.519117][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.526970][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.539766][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.586341][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.598784][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.608611][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.618149][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.627812][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.637296][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.646418][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.655816][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.666749][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.674817][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.683873][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.692579][ T5105] veth0_vlan: entered promiscuous mode [ 87.712088][ T5112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.723987][ T5112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.766668][ T5105] veth1_vlan: entered promiscuous mode [ 87.778374][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.790588][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.799042][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.808022][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.817800][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.826646][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.864275][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.873155][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.880909][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.890182][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.899685][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.909547][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.926389][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.977553][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.986972][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.995679][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.004580][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.021476][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.039063][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.052631][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.061312][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.077782][ T5109] veth0_vlan: entered promiscuous mode [ 88.099115][ T5107] veth0_vlan: entered promiscuous mode [ 88.125408][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.133745][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.145954][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.157076][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.167105][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.174634][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.182635][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.191245][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.200337][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.208855][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.217152][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.225553][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.235203][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.244269][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.253303][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.261470][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.273693][ T5109] veth1_vlan: entered promiscuous mode [ 88.284978][ T5105] veth0_macvtap: entered promiscuous mode [ 88.298597][ T5105] veth1_macvtap: entered promiscuous mode [ 88.309599][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.318242][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.326615][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.336994][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.346305][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.355500][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.364478][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.375492][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.383565][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.406180][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.415857][ T5107] veth1_vlan: entered promiscuous mode [ 88.433556][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.439563][ T5102] Bluetooth: hci1: command 0x040f tx timeout [ 88.441943][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.456006][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.466078][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.475052][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.484212][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.493166][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.504018][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.512562][ T5104] Bluetooth: hci0: command 0x040f tx timeout [ 88.513022][ T5102] Bluetooth: hci3: command 0x040f tx timeout [ 88.518607][ T5104] Bluetooth: hci2: command 0x040f tx timeout [ 88.525305][ T5102] Bluetooth: hci4: command 0x040f tx timeout [ 88.537564][ T5109] veth0_macvtap: entered promiscuous mode [ 88.587070][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.594823][ T5102] Bluetooth: hci5: command 0x040f tx timeout [ 88.602368][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.612125][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.621345][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.630286][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.639237][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.646366][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.654482][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.663593][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.672009][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.679355][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.687867][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.696238][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.704728][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.714187][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.722403][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.730400][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.738437][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.749720][ T5112] veth0_vlan: entered promiscuous mode [ 88.770651][ T5112] veth1_vlan: entered promiscuous mode [ 88.779821][ T5109] veth1_macvtap: entered promiscuous mode [ 88.787222][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.796653][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.805626][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.815111][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.823697][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.836149][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.851635][ T5107] veth0_macvtap: entered promiscuous mode [ 88.893088][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.901634][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.914396][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.923377][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.932365][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.941063][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.950098][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.959263][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.968271][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.977260][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.987003][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.996360][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.005377][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.014294][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.023221][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.033179][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.046016][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.065207][ T5107] veth1_macvtap: entered promiscuous mode [ 89.075592][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.097014][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.106163][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.115161][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.124402][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.133284][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.147706][ T5105] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.158628][ T5105] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.168731][ T5105] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.177891][ T5105] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.212580][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.224102][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.236490][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.258840][ T5112] veth0_macvtap: entered promiscuous mode [ 89.271642][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.279398][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.287177][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.295302][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.304447][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.314938][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.323977][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.335032][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.344314][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.351797][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.369928][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.384194][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.397581][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.408639][ T5112] veth1_macvtap: entered promiscuous mode [ 89.429756][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.446589][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.458646][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.469922][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.481569][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.493475][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.501132][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.511854][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.525683][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.534835][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.544037][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.555623][ T5109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.565554][ T5109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.580920][ T5109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.590181][ T5109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.633227][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.659464][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.669860][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.680782][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.693920][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.726887][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.736077][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.746238][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.756114][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.769233][ T5107] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.781534][ T5107] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.791436][ T5107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.803462][ T5107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.830857][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.847629][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.858153][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.869646][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.880595][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.892160][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.903526][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.935428][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.944822][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.955010][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.964101][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.975634][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.986465][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.000342][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.011606][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.021831][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.034907][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.046614][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.074435][ T5112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.084193][ T5112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.094509][ T5112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.104421][ T5112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.117593][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.126211][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.127687][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.150418][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.213334][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.221493][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.230593][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.241970][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.250043][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.258259][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.267139][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.283582][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.294110][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.303302][ T5110] veth0_vlan: entered promiscuous mode [ 90.319754][ T5106] veth0_vlan: entered promiscuous mode [ 90.368461][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.381563][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.390183][ T5106] veth1_vlan: entered promiscuous mode [ 90.411475][ T5110] veth1_vlan: entered promiscuous mode [ 90.420020][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.428283][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.441323][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.473509][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.481584][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.483820][ T5106] veth0_macvtap: entered promiscuous mode [ 90.512625][ T5101] Bluetooth: hci1: command 0x0419 tx timeout [ 90.519912][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.529182][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.537811][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.546240][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.555047][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.564312][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.575338][ T5106] veth1_macvtap: entered promiscuous mode [ 90.593558][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.593786][ T5101] Bluetooth: hci2: command 0x0419 tx timeout [ 90.607773][ T5102] Bluetooth: hci3: command 0x0419 tx timeout [ 90.608094][ T5104] Bluetooth: hci0: command 0x0419 tx timeout [ 90.615702][ T5102] Bluetooth: hci4: command 0x0419 tx timeout [ 90.637334][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.646118][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.653783][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.666847][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.681074][ T5110] veth0_macvtap: entered promiscuous mode [ 90.683593][ T5102] Bluetooth: hci5: command 0x0419 tx timeout [ 90.710047][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.725096][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.735507][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.750871][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.763619][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.774397][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.788316][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.801792][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.814918][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.832871][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.841828][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.860651][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.869986][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.898551][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.910954][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.922329][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.936056][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.946212][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.957103][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.968457][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.980514][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.991821][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.007518][ T5110] veth1_macvtap: entered promiscuous mode [ 91.034444][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.046462][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.077327][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.091047][ T5106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.103314][ T5106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.116035][ T5106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.125192][ T5106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.139721][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.181466][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.204872][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.215498][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.236089][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.258960][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.267973][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.288241][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.308501][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.329384][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.344682][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.357050][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.367789][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.378407][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.389216][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.403913][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.441887][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.450140][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.461162][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.473805][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.485798][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.496147][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.506834][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.517583][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.529859][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.542566][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.553685][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.565779][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.577482][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.589823][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.628032][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.630333][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.644698][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.649355][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.666866][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.676282][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.686022][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.697335][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.743952][ T5110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.769698][ T5110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 00:25:19 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110, 0x3}}], 0x18, 0x4c00}, 0x0) [ 91.786269][ T5110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.798314][ T5110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:25:19 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110, 0x3}}], 0x18, 0x4c00}, 0x0) [ 91.890668][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.939647][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:25:19 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110, 0x3}}], 0x18, 0x4c00}, 0x0) [ 92.060135][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.084096][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.118628][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.153486][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 00:25:19 executing program 0: sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="da81603e4df43b7f00ba6d2f37cc665a624017e1ed54c60e60b2bb6acd37cf8e83463343d468bcd802805b1534eac0b1de3bf2b2ffe2ff700d251f8ea8238c4375f6e7a8ced0357f6b954f84cfb0e611811bb4d72f8c7d3e154e0e6da9bc", 0x5e, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x0, 0x0, 0x48, {0x48, 0x0, "56fa767e1a7d0ce064c01916c4699a40c0483586b800964d3c01734915477de0be905e28d5b6e64530bd85d09e4d58cdb7bb9be7db23baedd1db2f25912da2fd6f901d1dffcd"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:25:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x13, 0xa, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 92.167965][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.176496][ T5181] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 00:25:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x13, 0xa, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 92.226833][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.244519][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 00:25:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x13, 0xa, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 92.433374][ T5183] team0: Device tunl0 is of different type [ 92.488630][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.523614][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.524624][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.585654][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:25:20 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000080)=@name, 0x10) 00:25:20 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) [ 92.784655][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 92.882566][ T4403] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.902445][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 92.925085][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 92.960316][ T22] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 92.976130][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.039944][ T22] usb 1-1: config 0 descriptor?? [ 93.243682][ T4403] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.267394][ T4403] usb 4-1: New USB device found, idVendor=9b10, idProduct=30f0, bcdDevice= 0.06 [ 93.302042][ T4403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.343283][ T4403] usb 4-1: config 0 descriptor?? [ 93.385005][ T4403] usb 4-1: Found UVC 0.00 device (9b10:30f0) [ 93.404819][ T4403] usb 4-1: No valid video chain found. [ 93.514321][ T5184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.543027][ T5184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.593541][ T22] hid (null): unknown global tag 0xc [ 93.593887][ T5163] usb 4-1: USB disconnect, device number 2 [ 93.602386][ T22] hid (null): invalid report_count 15437 [ 93.617516][ T22] hid (null): global environment stack underflow [ 93.651025][ T22] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0001/input/input5 [ 93.726622][ T22] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0001/input/input6 [ 93.838711][ T22] kye 0003:0458:5019.0001: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.0-1/input0 [ 93.864080][ T22] usb 1-1: USB disconnect, device number 2 00:25:21 executing program 3: syz_usb_connect(0x0, 0x55, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000084ef1540109bf03006000000000109024100010000001c09040000000e0100000824048d08db44a318"], 0x0) 00:25:21 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4020744f, &(0x7f0000000100)) 00:25:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000008c00000008000a00", @ANYRES32=r5], 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a100000", @ANYRES32=r8, @ANYBLOB="000000000000000008000a001000"], 0x28}}, 0x0) 00:25:21 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000080)=@name, 0x10) 00:25:21 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 00:25:21 executing program 0: sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="da81603e4df43b7f00ba6d2f37cc665a624017e1ed54c60e60b2bb6acd37cf8e83463343d468bcd802805b1534eac0b1de3bf2b2ffe2ff700d251f8ea8238c4375f6e7a8ced0357f6b954f84cfb0e611811bb4d72f8c7d3e154e0e6da9bc", 0x5e, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x0, 0x0, 0x48, {0x48, 0x0, "56fa767e1a7d0ce064c01916c4699a40c0483586b800964d3c01734915477de0be905e28d5b6e64530bd85d09e4d58cdb7bb9be7db23baedd1db2f25912da2fd6f901d1dffcd"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 94.472397][ T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd 00:25:21 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000080)=@name, 0x10) [ 94.528256][ T5210] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 00:25:22 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4020744f, &(0x7f0000000100)) [ 94.710006][ T5217] team0: Device erspan0 is up. Set it down before adding it as a team port [ 94.763975][ T5154] usb 1-1: new high-speed USB device number 3 using dummy_hcd 00:25:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000008c00000008000a00", @ANYRES32=r5], 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a100000", @ANYRES32=r8, @ANYBLOB="000000000000000008000a001000"], 0x28}}, 0x0) [ 94.893002][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.922440][ T22] usb 4-1: New USB device found, idVendor=9b10, idProduct=30f0, bcdDevice= 0.06 [ 94.931700][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.963799][ T22] usb 4-1: config 0 descriptor?? [ 95.002326][ T5154] usb 1-1: Using ep0 maxpacket: 16 [ 95.051475][ T5225] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 95.065304][ T22] usb 4-1: Found UVC 0.00 device (9b10:30f0) [ 95.100391][ T22] usb 4-1: No valid video chain found. [ 95.122647][ T5154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 95.137741][ T5154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 95.168083][ T5154] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 95.188348][ T5154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.217204][ T5154] usb 1-1: config 0 descriptor?? [ 95.254384][ T5227] team0: Device sit0 is of different type 00:25:22 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) [ 95.543497][ T22] usb 4-1: USB disconnect, device number 3 00:25:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000008c00000008000a00", @ANYRES32=r5], 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a100000", @ANYRES32=r8, @ANYBLOB="000000000000000008000a001000"], 0x28}}, 0x0) [ 95.684492][ T5209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.722726][ T5209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.748583][ T5234] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 95.763364][ T5154] hid (null): unknown global tag 0xc [ 95.768757][ T5154] hid (null): invalid report_count 15437 [ 95.788144][ T5154] hid (null): global environment stack underflow [ 95.841140][ T5154] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0002/input/input7 [ 95.922362][ T5237] team0: Device syz_tun is up. Set it down before adding it as a team port [ 95.948326][ T5154] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0002/input/input8 00:25:23 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4020744f, &(0x7f0000000100)) 00:25:23 executing program 3: syz_usb_connect(0x0, 0x55, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000084ef1540109bf03006000000000109024100010000001c09040000000e0100000824048d08db44a318"], 0x0) [ 96.024453][ T5154] kye 0003:0458:5019.0002: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.0-1/input0 [ 96.051223][ T5154] usb 1-1: USB disconnect, device number 3 00:25:23 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4020744f, &(0x7f0000000100)) 00:25:23 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4020744f, &(0x7f0000000100)) 00:25:23 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) [ 96.462350][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd 00:25:24 executing program 0: sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="da81603e4df43b7f00ba6d2f37cc665a624017e1ed54c60e60b2bb6acd37cf8e83463343d468bcd802805b1534eac0b1de3bf2b2ffe2ff700d251f8ea8238c4375f6e7a8ced0357f6b954f84cfb0e611811bb4d72f8c7d3e154e0e6da9bc", 0x5e, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x0, 0x0, 0x48, {0x48, 0x0, "56fa767e1a7d0ce064c01916c4699a40c0483586b800964d3c01734915477de0be905e28d5b6e64530bd85d09e4d58cdb7bb9be7db23baedd1db2f25912da2fd6f901d1dffcd"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 96.845337][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.910220][ T22] usb 4-1: New USB device found, idVendor=9b10, idProduct=30f0, bcdDevice= 0.06 [ 96.975654][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.039564][ T22] usb 4-1: config 0 descriptor?? [ 97.114702][ T22] usb 4-1: Found UVC 0.00 device (9b10:30f0) [ 97.138807][ T22] usb 4-1: No valid video chain found. [ 97.172379][ T5151] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.429387][ T5153] usb 4-1: USB disconnect, device number 4 [ 97.442552][ T5151] usb 1-1: Using ep0 maxpacket: 16 [ 97.582458][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 97.617773][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 97.680286][ T5151] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 97.748910][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:25:25 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4020744f, &(0x7f0000000100)) [ 97.818266][ T5151] usb 1-1: config 0 descriptor?? 00:25:25 executing program 3: syz_usb_connect(0x0, 0x55, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000084ef1540109bf03006000000000109024100010000001c09040000000e0100000824048d08db44a318"], 0x0) 00:25:25 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4020744f, &(0x7f0000000100)) 00:25:25 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4020744f, &(0x7f0000000100)) [ 98.321388][ T5255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.351735][ T5255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.383268][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd 00:25:25 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) [ 98.473227][ T5151] hid (null): unknown global tag 0xc [ 98.478720][ T5151] hid (null): invalid report_count 15437 [ 98.535467][ T5151] hid (null): global environment stack underflow [ 98.630393][ T5151] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0003/input/input9 [ 98.762502][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.783148][ T5151] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0003/input/input10 [ 98.845009][ T27] usb 4-1: New USB device found, idVendor=9b10, idProduct=30f0, bcdDevice= 0.06 [ 98.887654][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.921584][ T5151] kye 0003:0458:5019.0003: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.0-1/input0 [ 98.992002][ T27] usb 4-1: config 0 descriptor?? [ 99.011079][ T5151] usb 1-1: USB disconnect, device number 4 [ 99.114783][ T27] usb 4-1: Found UVC 0.00 device (9b10:30f0) [ 99.121917][ T27] usb 4-1: No valid video chain found. 00:25:26 executing program 0: sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="da81603e4df43b7f00ba6d2f37cc665a624017e1ed54c60e60b2bb6acd37cf8e83463343d468bcd802805b1534eac0b1de3bf2b2ffe2ff700d251f8ea8238c4375f6e7a8ced0357f6b954f84cfb0e611811bb4d72f8c7d3e154e0e6da9bc", 0x5e, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x0, 0x0, 0x48, {0x48, 0x0, "56fa767e1a7d0ce064c01916c4699a40c0483586b800964d3c01734915477de0be905e28d5b6e64530bd85d09e4d58cdb7bb9be7db23baedd1db2f25912da2fd6f901d1dffcd"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:25:26 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) [ 99.530059][ T5163] usb 4-1: USB disconnect, device number 5 [ 99.822419][ T5151] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 100.102383][ T5151] usb 1-1: Using ep0 maxpacket: 16 00:25:27 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000080)=@name, 0x10) 00:25:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000008c00000008000a00", @ANYRES32=r5], 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a100000", @ANYRES32=r8, @ANYBLOB="000000000000000008000a001000"], 0x28}}, 0x0) 00:25:27 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000080)=@name, 0x10) 00:25:27 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) [ 100.241562][ T5298] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 100.263100][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 100.318762][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 00:25:27 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000080)=@name, 0x10) [ 100.385300][ T5151] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 00:25:27 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4020744f, &(0x7f0000000100)) [ 100.458095][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.521689][ T5151] usb 1-1: config 0 descriptor?? [ 100.608640][ T5299] team0: Device vxcan1 is of different type 00:25:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) 00:25:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000008c00000008000a00", @ANYRES32=r5], 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a100000", @ANYRES32=r8, @ANYBLOB="000000000000000008000a001000"], 0x28}}, 0x0) [ 101.024151][ T5283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.052651][ T5283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.143682][ T5151] hid (null): unknown global tag 0xc [ 101.150043][ T5151] hid (null): invalid report_count 15437 [ 101.191754][ T5151] hid (null): global environment stack underflow [ 101.222842][ T5317] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 101.326513][ T5151] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0004/input/input11 [ 101.396629][ T5318] team0: Device wg0 is of different type 00:25:28 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) [ 101.597042][ T5151] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0004/input/input12 [ 101.769783][ T5151] kye 0003:0458:5019.0004: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.0-1/input0 [ 101.870185][ T5151] usb 1-1: USB disconnect, device number 5 00:25:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000008c00000008000a00", @ANYRES32=r5], 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a100000", @ANYRES32=r8, @ANYBLOB="000000000000000008000a001000"], 0x28}}, 0x0) 00:25:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) 00:25:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) 00:25:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) [ 102.133890][ T5326] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 00:25:29 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 00:25:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) [ 102.426785][ T5330] team0: Device veth0_to_bridge is up. Set it down before adding it as a team port 00:25:29 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2, 0x10001, 0xff0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r5, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x48}}, 0xe010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x50}}, 0x20480c4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r7, 0x4, 0x20}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r7, 0x2, r3, 0x4, 0x80000}) r8 = dup3(r3, r1, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x4}}}]}, 0x48}}, 0xe010) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "29bfca4cce792d7eede6fdd1aa"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "63942495af"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x200000d0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d302262899"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 102.749205][ T26] audit: type=1326 audit(1681518330.116:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6c579 code=0x7fc00000 00:25:30 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2, 0x10001, 0xff0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r5, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x48}}, 0xe010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x50}}, 0x20480c4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r7, 0x4, 0x20}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r7, 0x2, r3, 0x4, 0x80000}) r8 = dup3(r3, r1, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x4}}}]}, 0x48}}, 0xe010) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "29bfca4cce792d7eede6fdd1aa"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "63942495af"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x200000d0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d302262899"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 102.978143][ T26] audit: type=1326 audit(1681518330.156:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f6c579 code=0x7fc00000 [ 103.011635][ T26] audit: type=1326 audit(1681518330.156:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6c579 code=0x7fc00000 [ 103.259374][ T26] audit: type=1326 audit(1681518330.156:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6c579 code=0x7fc00000 00:25:30 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2, 0x10001, 0xff0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r5, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x48}}, 0xe010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x50}}, 0x20480c4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r7, 0x4, 0x20}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r7, 0x2, r3, 0x4, 0x80000}) r8 = dup3(r3, r1, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x4}}}]}, 0x48}}, 0xe010) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "29bfca4cce792d7eede6fdd1aa"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "63942495af"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x200000d0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d302262899"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 103.502506][ T26] audit: type=1326 audit(1681518330.156:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6c579 code=0x7fc00000 00:25:30 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) 00:25:30 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 00:25:30 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2, 0x10001, 0xff0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r5, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x48}}, 0xe010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020028bd7000fcdbdf250b0000000c0099000100000051000000000050801100010029bfca4cce792d7eede6fdd1aa0000000900010063942495af000000050009000000000004000b00b80d7b5d37e1704c811bf38de683d9d6856ec645c53a2506833c13c48e81fed2e4bf6700e6d6271f59e5a8fb2b69adf8e8509cb8ae5f0c6e4ce9dbe7ee3ca5d12adecca3aa9d9b550265554b64dc5372a41240436e6ecf0689a19f6fb2b70ccf87372001c7bc8862a9f0e2425916a12ca148012f304c439500bbbcb5218c24b19c5000ed2b1efe49df5cb4e38b10320785bd84fad7cc078fb5c40e4145331ac884f1172259c54a9d1daf02c10cccbaf102b1e46e84f20e1c62c0d3072a6c90991937910405d474a22933dae9d2bbc7b42eb9b8f6f6b1"], 0x50}}, 0x20480c4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r7, 0x4, 0x20}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r7, 0x2, r3, 0x4, 0x80000}) r8 = dup3(r3, r1, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x4}}}]}, 0x48}}, 0xe010) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "29bfca4cce792d7eede6fdd1aa"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "63942495af"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x200000d0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d302262899"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 103.666154][ T26] audit: type=1326 audit(1681518330.156:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6c579 code=0x7fc00000 [ 103.790431][ T26] audit: type=1326 audit(1681518330.156:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6c579 code=0x7fc00000 [ 103.994140][ T26] audit: type=1326 audit(1681518330.426:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6c579 code=0x7fc00000 [ 104.157319][ T26] audit: type=1326 audit(1681518330.426:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f6c579 code=0x7fc00000 00:25:31 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2, 0x10001, 0xff0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r5, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x48}}, 0xe010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x50}}, 0x20480c4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r7, 0x4, 0x20}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r7, 0x2, r3, 0x4, 0x80000}) r8 = dup3(r3, r1, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x4}}}]}, 0x48}}, 0xe010) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "29bfca4cce792d7eede6fdd1aa"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "63942495af"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x200000d0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d302262899"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 104.369334][ T26] audit: type=1326 audit(1681518330.426:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6c579 code=0x7fc00000 00:25:31 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2, 0x10001, 0xff0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r5, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x48}}, 0xe010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x50}}, 0x20480c4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r7, 0x4, 0x20}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r7, 0x2, r3, 0x4, 0x80000}) r8 = dup3(r3, r1, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x4}}}]}, 0x48}}, 0xe010) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "29bfca4cce792d7eede6fdd1aa"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "63942495af"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x200000d0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d302262899"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 00:25:31 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2, 0x10001, 0xff0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r5, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x48}}, 0xe010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x50}}, 0x20480c4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r7, 0x4, 0x20}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r7, 0x2, r3, 0x4, 0x80000}) r8 = dup3(r3, r1, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x4}}}]}, 0x48}}, 0xe010) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "29bfca4cce792d7eede6fdd1aa"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "63942495af"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x200000d0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d302262899"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 00:25:31 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2, 0x10001, 0xff0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r5, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x48}}, 0xe010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x50}}, 0x20480c4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r7, 0x4, 0x20}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r7, 0x2, r3, 0x4, 0x80000}) r8 = dup3(r3, r1, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x4}}}]}, 0x48}}, 0xe010) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "29bfca4cce792d7eede6fdd1aa"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "63942495af"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x200000d0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d302262899"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 00:25:32 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2, 0x10001, 0xff0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r5, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x48}}, 0xe010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x50}}, 0x20480c4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r7, 0x4, 0x20}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r7, 0x2, r3, 0x4, 0x80000}) r8 = dup3(r3, r1, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x4}}}]}, 0x48}}, 0xe010) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "29bfca4cce792d7eede6fdd1aa"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "63942495af"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x200000d0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d302262899"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 00:25:32 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2, 0x10001, 0xff0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r5, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x48}}, 0xe010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x50}}, 0x20480c4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r7, 0x4, 0x20}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r7, 0x2, r3, 0x4, 0x80000}) r8 = dup3(r3, r1, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x4}}}]}, 0x48}}, 0xe010) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "29bfca4cce792d7eede6fdd1aa"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "63942495af"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x200000d0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d302262899"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 00:25:32 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2, 0x10001, 0xff0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r5, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x48}}, 0xe010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x50}}, 0x20480c4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r7, 0x4, 0x20}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r7, 0x2, r3, 0x4, 0x80000}) r8 = dup3(r3, r1, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x4}}}]}, 0x48}}, 0xe010) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "29bfca4cce792d7eede6fdd1aa"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "63942495af"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x200000d0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d302262899"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 00:25:32 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2, 0x10001, 0xff0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r5, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x48}}, 0xe010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x50}}, 0x20480c4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r7, 0x4, 0x20}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r7, 0x2, r3, 0x4, 0x80000}) r8 = dup3(r3, r1, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x4}}}]}, 0x48}}, 0xe010) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "29bfca4cce792d7eede6fdd1aa"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "63942495af"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x200000d0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d302262899"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 00:25:32 executing program 0: r0 = openat$dma_heap(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x0, 0x0) 00:25:33 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) 00:25:33 executing program 0: r0 = openat$dma_heap(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x0, 0x0) 00:25:33 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x21d01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120117004c794a40ca081820917c000000010902"], 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x0) 00:25:33 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2, 0x10001, 0xff0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r5, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x48}}, 0xe010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020028bd7000fcdbdf250b0000000c0099000100000051000000000050801100010029bfca4cce792d7eede6fdd1aa0000000900010063942495af000000050009000000000004000b00b80d7b5d37e1704c811bf38de683d9d6856ec645c53a2506833c13c48e81fed2e4bf6700e6d6271f59e5a8fb2b69adf8e8509cb8ae5f0c6e4ce9dbe7ee3ca5d12adecca3aa9d9b550265554b64dc5372a41240436e6ecf0689a19f6fb2b70ccf87372001c7bc8862a9f0e2425916a12ca148012f304c439500bbbcb5218c24b19c5000ed2b1efe49df5cb4e38b10320785bd84fad7cc078fb5c40e4145331ac884f1172259c54a9d1daf02c10cccbaf102b1e46e84f20e1c62c0d3072a6c90991937910405d474a22933dae9d2bbc7b42eb9b8f6f6b1"], 0x50}}, 0x20480c4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r7, 0x4, 0x20}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r7, 0x2, r3, 0x4, 0x80000}) r8 = dup3(r3, r1, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x48, 0x70, 0x200, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x4}}}]}, 0x48}}, 0xe010) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003d40)=ANY=[@ANYBLOB="fc5938000000", @ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2404c094) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd5b93629bdb5080b}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "29bfca4cce792d7eede6fdd1aa"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "63942495af"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x200000d0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d302262899"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 00:25:33 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x802, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000140)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x1, 0x0, '\x00'}]}, 0x30) 00:25:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 00:25:34 executing program 0: r0 = openat$dma_heap(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x0, 0x0) [ 106.588684][ T5391] random: crng reseeded on system resumption 00:25:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 00:25:34 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x802, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000140)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x1, 0x0, '\x00'}]}, 0x30) 00:25:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 00:25:34 executing program 0: r0 = openat$dma_heap(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x0, 0x0) 00:25:34 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x802, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000140)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x1, 0x0, '\x00'}]}, 0x30) [ 107.112631][ T5320] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.482449][ T5320] usb 3-1: config 0 has no interfaces? [ 107.488128][ T5320] usb 3-1: New USB device found, idVendor=08ca, idProduct=2018, bcdDevice=7c.91 [ 107.530601][ T5320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.547828][ T5320] usb 3-1: config 0 descriptor?? [ 107.824591][ T5157] usb 3-1: USB disconnect, device number 2 00:25:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) 00:25:35 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x802, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000140)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x1, 0x0, '\x00'}]}, 0x30) 00:25:35 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000340)='syz0\x00', 0x1ff) 00:25:35 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x21d01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120117004c794a40ca081820917c000000010902"], 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x0) 00:25:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8}, @CTA_MARK={0x8}]}, 0x24}}, 0x0) 00:25:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 00:25:35 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000340)='syz0\x00', 0x1ff) 00:25:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x1b, 0x5b, 0x8, 0x7, 0x31, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d}}, 0x40) 00:25:35 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000340)='syz0\x00', 0x1ff) 00:25:35 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x21d01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120117004c794a40ca081820917c000000010902"], 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x0) 00:25:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8}, @CTA_MARK={0x8}]}, 0x24}}, 0x0) 00:25:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x1b, 0x5b, 0x8, 0x7, 0x31, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d}}, 0x40) [ 108.466298][ T5433] random: crng reseeded on system resumption [ 108.879613][ T5320] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 108.887251][ T4403] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.252467][ T4403] usb 3-1: config 0 has no interfaces? [ 109.257982][ T4403] usb 3-1: New USB device found, idVendor=08ca, idProduct=2018, bcdDevice=7c.91 [ 109.267562][ T5320] usb 6-1: config 0 has no interfaces? [ 109.273309][ T5320] usb 6-1: New USB device found, idVendor=08ca, idProduct=2018, bcdDevice=7c.91 [ 109.286959][ T4403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.295765][ T5320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.311539][ T5320] usb 6-1: config 0 descriptor?? [ 109.323046][ T4403] usb 3-1: config 0 descriptor?? 00:25:36 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000340)='syz0\x00', 0x1ff) 00:25:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8}, @CTA_MARK={0x8}]}, 0x24}}, 0x0) 00:25:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x1b, 0x5b, 0x8, 0x7, 0x31, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d}}, 0x40) [ 109.635005][ T5320] usb 6-1: USB disconnect, device number 2 [ 109.684519][ T5157] usb 3-1: USB disconnect, device number 3 00:25:37 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x21d01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120117004c794a40ca081820917c000000010902"], 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x0) 00:25:37 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x21d01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120117004c794a40ca081820917c000000010902"], 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x0) 00:25:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x1b, 0x5b, 0x8, 0x7, 0x31, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d}}, 0x40) 00:25:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8}, @CTA_MARK={0x8}]}, 0x24}}, 0x0) 00:25:37 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x21d01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120117004c794a40ca081820917c000000010902"], 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x0) 00:25:37 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x21d01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120117004c794a40ca081820917c000000010902"], 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x0) 00:25:37 executing program 4: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) [ 110.225846][ T5455] random: crng reseeded on system resumption 00:25:37 executing program 1: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@random="7b0e65ca6d5d", @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ad6547", 0x44, 0x29, 0x0, @dev, @local}}}}, 0x0) 00:25:37 executing program 1: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@random="7b0e65ca6d5d", @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ad6547", 0x44, 0x29, 0x0, @dev, @local}}}}, 0x0) 00:25:37 executing program 1: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@random="7b0e65ca6d5d", @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ad6547", 0x44, 0x29, 0x0, @dev, @local}}}}, 0x0) 00:25:37 executing program 4: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 00:25:37 executing program 1: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@random="7b0e65ca6d5d", @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ad6547", 0x44, 0x29, 0x0, @dev, @local}}}}, 0x0) [ 110.582617][ T4403] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.594230][ T5157] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.601862][ T5151] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.609500][ T27] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 110.952338][ T4403] usb 4-1: config 0 has no interfaces? [ 110.958122][ T4403] usb 4-1: New USB device found, idVendor=08ca, idProduct=2018, bcdDevice=7c.91 [ 110.967387][ T4403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.972835][ T5157] usb 1-1: config 0 has no interfaces? [ 110.979351][ T4403] usb 4-1: config 0 descriptor?? [ 110.992175][ T5157] usb 1-1: New USB device found, idVendor=08ca, idProduct=2018, bcdDevice=7c.91 [ 111.003705][ T5157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.015809][ T5151] usb 3-1: config 0 has no interfaces? [ 111.021304][ T5151] usb 3-1: New USB device found, idVendor=08ca, idProduct=2018, bcdDevice=7c.91 [ 111.030751][ T27] usb 6-1: config 0 has no interfaces? [ 111.040488][ T27] usb 6-1: New USB device found, idVendor=08ca, idProduct=2018, bcdDevice=7c.91 [ 111.049894][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.059062][ T5157] usb 1-1: config 0 descriptor?? [ 111.068771][ T5151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.081625][ T5151] usb 3-1: config 0 descriptor?? [ 111.093076][ T27] usb 6-1: config 0 descriptor?? [ 111.263380][ T14] usb 4-1: USB disconnect, device number 6 [ 111.318721][ T27] usb 1-1: USB disconnect, device number 6 [ 111.359587][ T4403] usb 3-1: USB disconnect, device number 4 [ 111.363555][ T5157] usb 6-1: USB disconnect, device number 3 00:25:39 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x21d01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120117004c794a40ca081820917c000000010902"], 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x0) 00:25:39 executing program 1: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 00:25:39 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x21d01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120117004c794a40ca081820917c000000010902"], 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x0) 00:25:39 executing program 4: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 00:25:39 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x21d01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120117004c794a40ca081820917c000000010902"], 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x0) 00:25:39 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x21d01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120117004c794a40ca081820917c000000010902"], 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x0) [ 111.902121][ T5484] random: crng reseeded on system resumption 00:25:39 executing program 4: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 00:25:39 executing program 1: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 00:25:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x4000000, 0xc, 0x1f}) 00:25:39 executing program 1: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) [ 112.352552][ T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 112.362893][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.372330][ T5319] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.392412][ T5157] usb 6-1: new high-speed USB device number 4 using dummy_hcd 00:25:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x4000000, 0xc, 0x1f}) 00:25:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x4000000, 0xc, 0x1f}) [ 112.722753][ T14] usb 1-1: config 0 has no interfaces? [ 112.728320][ T14] usb 1-1: New USB device found, idVendor=08ca, idProduct=2018, bcdDevice=7c.91 [ 112.737684][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.746387][ T5319] usb 3-1: config 0 has no interfaces? [ 112.752733][ T27] usb 4-1: config 0 has no interfaces? [ 112.756097][ T5319] usb 3-1: New USB device found, idVendor=08ca, idProduct=2018, bcdDevice=7c.91 [ 112.764722][ T27] usb 4-1: New USB device found, idVendor=08ca, idProduct=2018, bcdDevice=7c.91 [ 112.771279][ T14] usb 1-1: config 0 descriptor?? [ 112.785445][ T5319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.797658][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.802729][ T5319] usb 3-1: config 0 descriptor?? [ 112.808125][ T5157] usb 6-1: config 0 has no interfaces? [ 112.827715][ T5157] usb 6-1: New USB device found, idVendor=08ca, idProduct=2018, bcdDevice=7c.91 [ 112.844739][ T27] usb 4-1: config 0 descriptor?? [ 112.854363][ T5157] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.867637][ T5157] usb 6-1: config 0 descriptor?? [ 113.089015][ T5157] usb 1-1: USB disconnect, device number 7 [ 113.121882][ T5319] usb 3-1: USB disconnect, device number 5 [ 113.158249][ T5151] usb 4-1: USB disconnect, device number 7 [ 113.171971][ T27] usb 6-1: USB disconnect, device number 4 00:25:41 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x21d01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120117004c794a40ca081820917c000000010902"], 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x0) 00:25:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x4000000, 0xc, 0x1f}) 00:25:41 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x21d01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120117004c794a40ca081820917c000000010902"], 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x0) 00:25:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8}]}], {0x14}}, 0xb8}}, 0x0) 00:25:41 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0xfe60) 00:25:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') getdents64(r0, &(0x7f0000000140)=""/91, 0x5b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x16}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/122, 0x7a) 00:25:41 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0<.\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\x06M^\x01ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\a\x00\x00\x00\xb4\xa5\xfd\xf4NR\xd0\x94\xc6\x92\x9b\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\xd0\xc0\x9a\xff\xc3\xe7\xbf\xbf\xdb\x85\xb4U\xd5\xac\xccB=\x8f\xfd\x95\x0f\xcd\x03}\xfcaq!\xd6\xcd\xe5P\xe6\x87\xf9W\xc3\xb3\x9f=\xb2\x9f\xd0\x1epe\xb1X\xae\xad\xdf\xcc\xe4\xa7C\xb8\xc1pC\x88\xb7\xac\x89,f\xe3\xf0/}\xcf\xad\xa9\xe3\x9dklT\xee&\xa5\xf3\xd5\x03\xf7\xf6\xf61\x00TAp}\\b\x8d\xff\r\'\x9a&\x8b3E\xf4\xb7\xceU\x89\xeb\xef*DY]w\xef\'\xc5V\xd9\xff\x12\x95\xf2\xc8\xab\xa1\xb6\x00\v\x80p\xaf\xf4', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4d091, r0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) [ 113.670893][ T5515] random: crng reseeded on system resumption 00:25:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8}]}], {0x14}}, 0xb8}}, 0x0) 00:25:41 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0xfe60) 00:25:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8}]}], {0x14}}, 0xb8}}, 0x0) 00:25:41 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0<.\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\x06M^\x01ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\a\x00\x00\x00\xb4\xa5\xfd\xf4NR\xd0\x94\xc6\x92\x9b\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\xd0\xc0\x9a\xff\xc3\xe7\xbf\xbf\xdb\x85\xb4U\xd5\xac\xccB=\x8f\xfd\x95\x0f\xcd\x03}\xfcaq!\xd6\xcd\xe5P\xe6\x87\xf9W\xc3\xb3\x9f=\xb2\x9f\xd0\x1epe\xb1X\xae\xad\xdf\xcc\xe4\xa7C\xb8\xc1pC\x88\xb7\xac\x89,f\xe3\xf0/}\xcf\xad\xa9\xe3\x9dklT\xee&\xa5\xf3\xd5\x03\xf7\xf6\xf61\x00TAp}\\b\x8d\xff\r\'\x9a&\x8b3E\xf4\xb7\xceU\x89\xeb\xef*DY]w\xef\'\xc5V\xd9\xff\x12\x95\xf2\xc8\xab\xa1\xb6\x00\v\x80p\xaf\xf4', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4d091, r0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) [ 113.827877][ T26] kauditd_printk_skb: 2700 callbacks suppressed [ 113.827893][ T26] audit: type=1326 audit(1681518341.196:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f2c579 code=0x0 00:25:41 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0xfe60) [ 114.092678][ T5319] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 114.102345][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 114.452400][ T5319] usb 4-1: config 0 has no interfaces? [ 114.458050][ T5319] usb 4-1: New USB device found, idVendor=08ca, idProduct=2018, bcdDevice=7c.91 [ 114.467907][ T14] usb 1-1: config 0 has no interfaces? [ 114.473670][ T14] usb 1-1: New USB device found, idVendor=08ca, idProduct=2018, bcdDevice=7c.91 [ 114.482872][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.490955][ T5319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.505994][ T14] usb 1-1: config 0 descriptor?? [ 114.512645][ T5319] usb 4-1: config 0 descriptor?? [ 114.799798][ T27] usb 4-1: USB disconnect, device number 8 [ 114.818771][ T5157] usb 1-1: USB disconnect, device number 8 00:25:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') getdents64(r0, &(0x7f0000000140)=""/91, 0x5b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x16}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/122, 0x7a) 00:25:42 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0<.\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\x06M^\x01ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\a\x00\x00\x00\xb4\xa5\xfd\xf4NR\xd0\x94\xc6\x92\x9b\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\xd0\xc0\x9a\xff\xc3\xe7\xbf\xbf\xdb\x85\xb4U\xd5\xac\xccB=\x8f\xfd\x95\x0f\xcd\x03}\xfcaq!\xd6\xcd\xe5P\xe6\x87\xf9W\xc3\xb3\x9f=\xb2\x9f\xd0\x1epe\xb1X\xae\xad\xdf\xcc\xe4\xa7C\xb8\xc1pC\x88\xb7\xac\x89,f\xe3\xf0/}\xcf\xad\xa9\xe3\x9dklT\xee&\xa5\xf3\xd5\x03\xf7\xf6\xf61\x00TAp}\\b\x8d\xff\r\'\x9a&\x8b3E\xf4\xb7\xceU\x89\xeb\xef*DY]w\xef\'\xc5V\xd9\xff\x12\x95\xf2\xc8\xab\xa1\xb6\x00\v\x80p\xaf\xf4', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4d091, r0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 00:25:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8}]}], {0x14}}, 0xb8}}, 0x0) 00:25:42 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0xfe60) 00:25:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') getdents64(r0, &(0x7f0000000140)=""/91, 0x5b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x16}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/122, 0x7a) 00:25:42 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0<.\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\x06M^\x01ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\a\x00\x00\x00\xb4\xa5\xfd\xf4NR\xd0\x94\xc6\x92\x9b\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\xd0\xc0\x9a\xff\xc3\xe7\xbf\xbf\xdb\x85\xb4U\xd5\xac\xccB=\x8f\xfd\x95\x0f\xcd\x03}\xfcaq!\xd6\xcd\xe5P\xe6\x87\xf9W\xc3\xb3\x9f=\xb2\x9f\xd0\x1epe\xb1X\xae\xad\xdf\xcc\xe4\xa7C\xb8\xc1pC\x88\xb7\xac\x89,f\xe3\xf0/}\xcf\xad\xa9\xe3\x9dklT\xee&\xa5\xf3\xd5\x03\xf7\xf6\xf61\x00TAp}\\b\x8d\xff\r\'\x9a&\x8b3E\xf4\xb7\xceU\x89\xeb\xef*DY]w\xef\'\xc5V\xd9\xff\x12\x95\xf2\xc8\xab\xa1\xb6\x00\v\x80p\xaf\xf4', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4d091, r0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 00:25:42 executing program 1: creat(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00', &(0x7f00000002c0)='$}#:^%^@P)(%,$\x00', 0xf, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.selinux\x00', &(0x7f0000000300)=""/4096, 0x1000) [ 115.405300][ T26] audit: type=1326 audit(1681518342.776:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f2c579 code=0x0 00:25:42 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0<.\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\x06M^\x01ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\a\x00\x00\x00\xb4\xa5\xfd\xf4NR\xd0\x94\xc6\x92\x9b\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\xd0\xc0\x9a\xff\xc3\xe7\xbf\xbf\xdb\x85\xb4U\xd5\xac\xccB=\x8f\xfd\x95\x0f\xcd\x03}\xfcaq!\xd6\xcd\xe5P\xe6\x87\xf9W\xc3\xb3\x9f=\xb2\x9f\xd0\x1epe\xb1X\xae\xad\xdf\xcc\xe4\xa7C\xb8\xc1pC\x88\xb7\xac\x89,f\xe3\xf0/}\xcf\xad\xa9\xe3\x9dklT\xee&\xa5\xf3\xd5\x03\xf7\xf6\xf61\x00TAp}\\b\x8d\xff\r\'\x9a&\x8b3E\xf4\xb7\xceU\x89\xeb\xef*DY]w\xef\'\xc5V\xd9\xff\x12\x95\xf2\xc8\xab\xa1\xb6\x00\v\x80p\xaf\xf4', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4d091, r0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 00:25:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}}, 0xb4}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000480)=""/89, &(0x7f0000000040)=0x59) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x1, 0x0, 0x0) r3 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000dba4c5ce", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e6400f0ffff0b0002800800070009000000"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ad00)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0xff, "75db64cf7310f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058980)={0x1000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r8}], 0x20, "11190a4fd9be90"}) r10 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r10, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r11, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b180)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r11}], 0x6, "c493f2463f4ae8"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 00:25:42 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0<.\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\x06M^\x01ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\a\x00\x00\x00\xb4\xa5\xfd\xf4NR\xd0\x94\xc6\x92\x9b\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\xd0\xc0\x9a\xff\xc3\xe7\xbf\xbf\xdb\x85\xb4U\xd5\xac\xccB=\x8f\xfd\x95\x0f\xcd\x03}\xfcaq!\xd6\xcd\xe5P\xe6\x87\xf9W\xc3\xb3\x9f=\xb2\x9f\xd0\x1epe\xb1X\xae\xad\xdf\xcc\xe4\xa7C\xb8\xc1pC\x88\xb7\xac\x89,f\xe3\xf0/}\xcf\xad\xa9\xe3\x9dklT\xee&\xa5\xf3\xd5\x03\xf7\xf6\xf61\x00TAp}\\b\x8d\xff\r\'\x9a&\x8b3E\xf4\xb7\xceU\x89\xeb\xef*DY]w\xef\'\xc5V\xd9\xff\x12\x95\xf2\xc8\xab\xa1\xb6\x00\v\x80p\xaf\xf4', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4d091, r0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) [ 115.485965][ T26] audit: type=1326 audit(1681518342.816:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5545 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x0 00:25:42 executing program 1: creat(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00', &(0x7f00000002c0)='$}#:^%^@P)(%,$\x00', 0xf, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.selinux\x00', &(0x7f0000000300)=""/4096, 0x1000) 00:25:42 executing program 4: creat(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00', &(0x7f00000002c0)='$}#:^%^@P)(%,$\x00', 0xf, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.selinux\x00', &(0x7f0000000300)=""/4096, 0x1000) [ 115.570170][ T5552] IPVS: length: 89 != 8 00:25:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') getdents64(r0, &(0x7f0000000140)=""/91, 0x5b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x16}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/122, 0x7a) 00:25:43 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0<.\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\x06M^\x01ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\a\x00\x00\x00\xb4\xa5\xfd\xf4NR\xd0\x94\xc6\x92\x9b\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\xd0\xc0\x9a\xff\xc3\xe7\xbf\xbf\xdb\x85\xb4U\xd5\xac\xccB=\x8f\xfd\x95\x0f\xcd\x03}\xfcaq!\xd6\xcd\xe5P\xe6\x87\xf9W\xc3\xb3\x9f=\xb2\x9f\xd0\x1epe\xb1X\xae\xad\xdf\xcc\xe4\xa7C\xb8\xc1pC\x88\xb7\xac\x89,f\xe3\xf0/}\xcf\xad\xa9\xe3\x9dklT\xee&\xa5\xf3\xd5\x03\xf7\xf6\xf61\x00TAp}\\b\x8d\xff\r\'\x9a&\x8b3E\xf4\xb7\xceU\x89\xeb\xef*DY]w\xef\'\xc5V\xd9\xff\x12\x95\xf2\xc8\xab\xa1\xb6\x00\v\x80p\xaf\xf4', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4d091, r0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 00:25:43 executing program 1: creat(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00', &(0x7f00000002c0)='$}#:^%^@P)(%,$\x00', 0xf, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.selinux\x00', &(0x7f0000000300)=""/4096, 0x1000) 00:25:43 executing program 4: creat(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00', &(0x7f00000002c0)='$}#:^%^@P)(%,$\x00', 0xf, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.selinux\x00', &(0x7f0000000300)=""/4096, 0x1000) 00:25:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') getdents64(r0, &(0x7f0000000140)=""/91, 0x5b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x16}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/122, 0x7a) 00:25:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}}, 0xb4}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000480)=""/89, &(0x7f0000000040)=0x59) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x1, 0x0, 0x0) r3 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000dba4c5ce", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e6400f0ffff0b0002800800070009000000"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ad00)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0xff, "75db64cf7310f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058980)={0x1000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r8}], 0x20, "11190a4fd9be90"}) r10 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r10, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r11, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b180)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r11}], 0x6, "c493f2463f4ae8"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 00:25:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}}, 0xb4}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000480)=""/89, &(0x7f0000000040)=0x59) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x1, 0x0, 0x0) r3 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000dba4c5ce", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e6400f0ffff0b0002800800070009000000"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ad00)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0xff, "75db64cf7310f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058980)={0x1000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r8}], 0x20, "11190a4fd9be90"}) r10 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r10, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r11, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b180)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r11}], 0x6, "c493f2463f4ae8"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 00:25:43 executing program 4: creat(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00', &(0x7f00000002c0)='$}#:^%^@P)(%,$\x00', 0xf, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.selinux\x00', &(0x7f0000000300)=""/4096, 0x1000) 00:25:43 executing program 1: creat(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00', &(0x7f00000002c0)='$}#:^%^@P)(%,$\x00', 0xf, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.selinux\x00', &(0x7f0000000300)=""/4096, 0x1000) [ 116.304733][ T26] audit: type=1326 audit(1681518343.676:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5570 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f2c579 code=0x0 [ 116.358899][ T5578] IPVS: length: 89 != 8 [ 116.364994][ T5575] IPVS: length: 89 != 8 00:25:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}}, 0xb4}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000480)=""/89, &(0x7f0000000040)=0x59) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x1, 0x0, 0x0) r3 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000dba4c5ce", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e6400f0ffff0b0002800800070009000000"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ad00)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0xff, "75db64cf7310f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058980)={0x1000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r8}], 0x20, "11190a4fd9be90"}) r10 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r10, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r11, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b180)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r11}], 0x6, "c493f2463f4ae8"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 00:25:43 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='vxfs\x00', 0x4000, &(0x7f00000001c0)='cgroup2\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0xf, r4}]}}}]}, 0x3c}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r5 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') write$cgroup_pid(r5, 0x0, 0x0) [ 116.394227][ T26] audit: type=1326 audit(1681518343.766:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x0 00:25:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}}, 0xb4}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000480)=""/89, &(0x7f0000000040)=0x59) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x1, 0x0, 0x0) r3 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000dba4c5ce", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e6400f0ffff0b0002800800070009000000"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ad00)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0xff, "75db64cf7310f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058980)={0x1000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r8}], 0x20, "11190a4fd9be90"}) r10 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r10, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r11, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b180)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r11}], 0x6, "c493f2463f4ae8"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) [ 116.527824][ T5592] IPVS: length: 89 != 8 [ 116.535960][ T5590] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 116.617035][ T5595] IPVS: length: 89 != 8 00:25:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') getdents64(r0, &(0x7f0000000140)=""/91, 0x5b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x16}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/122, 0x7a) 00:25:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}}, 0xb4}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000480)=""/89, &(0x7f0000000040)=0x59) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x1, 0x0, 0x0) r3 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000dba4c5ce", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e6400f0ffff0b0002800800070009000000"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ad00)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0xff, "75db64cf7310f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058980)={0x1000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r8}], 0x20, "11190a4fd9be90"}) r10 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r10, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r11, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b180)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r11}], 0x6, "c493f2463f4ae8"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 00:25:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}}, 0xb4}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000480)=""/89, &(0x7f0000000040)=0x59) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x1, 0x0, 0x0) r3 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000dba4c5ce", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e6400f0ffff0b0002800800070009000000"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ad00)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0xff, "75db64cf7310f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058980)={0x1000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r8}], 0x20, "11190a4fd9be90"}) r10 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r10, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r11, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b180)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r11}], 0x6, "c493f2463f4ae8"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 00:25:44 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='vxfs\x00', 0x4000, &(0x7f00000001c0)='cgroup2\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0xf, r4}]}}}]}, 0x3c}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r5 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') write$cgroup_pid(r5, 0x0, 0x0) [ 117.141490][ T5604] IPVS: length: 89 != 8 00:25:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') getdents64(r0, &(0x7f0000000140)=""/91, 0x5b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x16}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/122, 0x7a) 00:25:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}}, 0xb4}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000480)=""/89, &(0x7f0000000040)=0x59) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x1, 0x0, 0x0) r3 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000dba4c5ce", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e6400f0ffff0b0002800800070009000000"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ad00)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0xff, "75db64cf7310f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058980)={0x1000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r8}], 0x20, "11190a4fd9be90"}) r10 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r10, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r11, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b180)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r11}], 0x6, "c493f2463f4ae8"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 00:25:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}}, 0xb4}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000480)=""/89, &(0x7f0000000040)=0x59) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x1, 0x0, 0x0) r3 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000dba4c5ce", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e6400f0ffff0b0002800800070009000000"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ad00)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0xff, "75db64cf7310f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058980)={0x1000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r8}], 0x20, "11190a4fd9be90"}) r10 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r10, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r11, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b180)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r11}], 0x6, "c493f2463f4ae8"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) [ 117.168763][ T5605] IPVS: length: 89 != 8 [ 117.169682][ T26] audit: type=1326 audit(1681518344.536:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5606 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f2c579 code=0x0 00:25:44 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='vxfs\x00', 0x4000, &(0x7f00000001c0)='cgroup2\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0xf, r4}]}}}]}, 0x3c}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r5 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') write$cgroup_pid(r5, 0x0, 0x0) [ 117.255254][ T26] audit: type=1326 audit(1681518344.626:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x0 [ 117.273519][ T5603] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 117.287293][ T5610] IPVS: length: 89 != 8 [ 117.305753][ T5613] IPVS: length: 89 != 8 00:25:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}}, 0xb4}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000480)=""/89, &(0x7f0000000040)=0x59) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x1, 0x0, 0x0) r3 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000dba4c5ce", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e6400f0ffff0b0002800800070009000000"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ad00)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0xff, "75db64cf7310f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058980)={0x1000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r8}], 0x20, "11190a4fd9be90"}) r10 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r10, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r11, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b180)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r11}], 0x6, "c493f2463f4ae8"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) [ 117.331425][ T5616] netlink: 'syz-executor.2': attribute type 15 has an invalid length. 00:25:44 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='vxfs\x00', 0x4000, &(0x7f00000001c0)='cgroup2\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0xf, r4}]}}}]}, 0x3c}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r5 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') write$cgroup_pid(r5, 0x0, 0x0) 00:25:44 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='vxfs\x00', 0x4000, &(0x7f00000001c0)='cgroup2\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0xf, r4}]}}}]}, 0x3c}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r5 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') write$cgroup_pid(r5, 0x0, 0x0) 00:25:44 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='vxfs\x00', 0x4000, &(0x7f00000001c0)='cgroup2\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0xf, r4}]}}}]}, 0x3c}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r5 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') write$cgroup_pid(r5, 0x0, 0x0) [ 117.460657][ T5619] IPVS: length: 89 != 8 00:25:44 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='vxfs\x00', 0x4000, &(0x7f00000001c0)='cgroup2\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0xf, r4}]}}}]}, 0x3c}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r5 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') write$cgroup_pid(r5, 0x0, 0x0) [ 117.557724][ T5625] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 117.592357][ T5623] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 117.618668][ T5622] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 117.696719][ T5627] netlink: 'syz-executor.1': attribute type 15 has an invalid length. 00:25:45 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='vxfs\x00', 0x4000, &(0x7f00000001c0)='cgroup2\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0xf, r4}]}}}]}, 0x3c}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r5 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') write$cgroup_pid(r5, 0x0, 0x0) 00:25:45 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='vxfs\x00', 0x4000, &(0x7f00000001c0)='cgroup2\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0xf, r4}]}}}]}, 0x3c}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r5 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') write$cgroup_pid(r5, 0x0, 0x0) 00:25:45 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='vxfs\x00', 0x4000, &(0x7f00000001c0)='cgroup2\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0xf, r4}]}}}]}, 0x3c}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r5 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') write$cgroup_pid(r5, 0x0, 0x0) 00:25:45 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) socket$inet6(0xa, 0x0, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x1f) syz_open_dev$mouse(&(0x7f0000000180), 0xffffffffffffff96, 0x303000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2004, &(0x7f00000002c0)={0x0, 0x3938700}) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r2, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 00:25:45 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) read$FUSE(r2, 0x0, 0x0) 00:25:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @dev}, 0x8) 00:25:45 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='vxfs\x00', 0x4000, &(0x7f00000001c0)='cgroup2\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0xf, r4}]}}}]}, 0x3c}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r5 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') write$cgroup_pid(r5, 0x0, 0x0) [ 118.040890][ T5632] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 118.061324][ T5631] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 118.070615][ T5633] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 00:25:45 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='vxfs\x00', 0x4000, &(0x7f00000001c0)='cgroup2\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0xf, r4}]}}}]}, 0x3c}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r5 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') write$cgroup_pid(r5, 0x0, 0x0) 00:25:45 executing program 4: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x9ea, &(0x7f0000000100), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x2952, &(0x7f0000000380)={0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000300), 0x0) syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) 00:25:45 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) read$FUSE(r2, 0x0, 0x0) 00:25:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @dev}, 0x8) 00:25:45 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='vxfs\x00', 0x4000, &(0x7f00000001c0)='cgroup2\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0xf, r4}]}}}]}, 0x3c}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r5 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') write$cgroup_pid(r5, 0x0, 0x0) 00:25:45 executing program 4: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x9ea, &(0x7f0000000100), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x2952, &(0x7f0000000380)={0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000300), 0x0) syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) 00:25:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @dev}, 0x8) 00:25:45 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) read$FUSE(r2, 0x0, 0x0) 00:25:46 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) socket$inet6(0xa, 0x0, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x1f) syz_open_dev$mouse(&(0x7f0000000180), 0xffffffffffffff96, 0x303000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2004, &(0x7f00000002c0)={0x0, 0x3938700}) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r2, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 00:25:46 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x9ea, &(0x7f0000000100), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x2952, &(0x7f0000000380)={0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000300), 0x0) syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) 00:25:46 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) read$FUSE(r2, 0x0, 0x0) 00:25:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @dev}, 0x8) 00:25:46 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x9ea, &(0x7f0000000100), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x2952, &(0x7f0000000380)={0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000300), 0x0) syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) 00:25:46 executing program 4: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x9ea, &(0x7f0000000100), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x2952, &(0x7f0000000380)={0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000300), 0x0) syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) 00:25:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) socket$inet6(0xa, 0x0, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x1f) syz_open_dev$mouse(&(0x7f0000000180), 0xffffffffffffff96, 0x303000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2004, &(0x7f00000002c0)={0x0, 0x3938700}) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r2, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 00:25:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) socket$inet6(0xa, 0x0, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x1f) syz_open_dev$mouse(&(0x7f0000000180), 0xffffffffffffff96, 0x303000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2004, &(0x7f00000002c0)={0x0, 0x3938700}) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r2, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 00:25:46 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x9ea, &(0x7f0000000100), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x2952, &(0x7f0000000380)={0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000300), 0x0) syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) 00:25:46 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x9ea, &(0x7f0000000100), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x2952, &(0x7f0000000380)={0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000300), 0x0) syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) 00:25:46 executing program 4: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x9ea, &(0x7f0000000100), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x2952, &(0x7f0000000380)={0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000300), 0x0) syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) 00:25:47 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x9ea, &(0x7f0000000100), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x2952, &(0x7f0000000380)={0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000300), 0x0) syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) 00:25:47 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x9ea, &(0x7f0000000100), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x2952, &(0x7f0000000380)={0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000300), 0x0) syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) 00:25:47 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) socket$inet6(0xa, 0x0, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x1f) syz_open_dev$mouse(&(0x7f0000000180), 0xffffffffffffff96, 0x303000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2004, &(0x7f00000002c0)={0x0, 0x3938700}) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r2, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 00:25:47 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) socket$inet6(0xa, 0x0, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x1f) syz_open_dev$mouse(&(0x7f0000000180), 0xffffffffffffff96, 0x303000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2004, &(0x7f00000002c0)={0x0, 0x3938700}) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r2, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 00:25:47 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) socket$inet6(0xa, 0x0, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x1f) syz_open_dev$mouse(&(0x7f0000000180), 0xffffffffffffff96, 0x303000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2004, &(0x7f00000002c0)={0x0, 0x3938700}) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r2, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 00:25:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) socket$inet6(0xa, 0x0, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x1f) syz_open_dev$mouse(&(0x7f0000000180), 0xffffffffffffff96, 0x303000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2004, &(0x7f00000002c0)={0x0, 0x3938700}) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r2, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 00:25:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) socket$inet6(0xa, 0x0, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x1f) syz_open_dev$mouse(&(0x7f0000000180), 0xffffffffffffff96, 0x303000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2004, &(0x7f00000002c0)={0x0, 0x3938700}) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r2, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 00:25:48 executing program 1: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000040)) 00:25:48 executing program 1: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000040)) 00:25:48 executing program 1: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000040)) 00:25:49 executing program 1: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000040)) 00:25:49 executing program 1: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) socket$inet6(0xa, 0x0, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x1f) syz_open_dev$mouse(&(0x7f0000000180), 0xffffffffffffff96, 0x303000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2004, &(0x7f00000002c0)={0x0, 0x3938700}) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r2, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 00:25:49 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) socket$inet6(0xa, 0x0, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x1f) syz_open_dev$mouse(&(0x7f0000000180), 0xffffffffffffff96, 0x303000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2004, &(0x7f00000002c0)={0x0, 0x3938700}) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r2, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 00:25:49 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) socket$inet6(0xa, 0x0, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x1f) syz_open_dev$mouse(&(0x7f0000000180), 0xffffffffffffff96, 0x303000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2004, &(0x7f00000002c0)={0x0, 0x3938700}) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r2, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 00:25:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) socket$inet6(0xa, 0x0, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x1f) syz_open_dev$mouse(&(0x7f0000000180), 0xffffffffffffff96, 0x303000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2004, &(0x7f00000002c0)={0x0, 0x3938700}) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r2, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 00:25:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) socket$inet6(0xa, 0x0, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x1f) syz_open_dev$mouse(&(0x7f0000000180), 0xffffffffffffff96, 0x303000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2004, &(0x7f00000002c0)={0x0, 0x3938700}) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r2, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 00:25:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) socket$inet6(0xa, 0x0, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x1f) syz_open_dev$mouse(&(0x7f0000000180), 0xffffffffffffff96, 0x303000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2004, &(0x7f00000002c0)={0x0, 0x3938700}) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r2, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 00:25:50 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) socket$inet6(0xa, 0x0, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x1f) syz_open_dev$mouse(&(0x7f0000000180), 0xffffffffffffff96, 0x303000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2004, &(0x7f00000002c0)={0x0, 0x3938700}) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r2, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 00:25:51 executing program 3: r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7L\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 00:25:51 executing program 1: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:51 executing program 5: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:51 executing program 2: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) [ 123.979387][ T5794] libceph: resolve '400' (ret=-3): failed 00:25:51 executing program 3: r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7L\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 00:25:51 executing program 3: r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7L\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) [ 124.368866][ T5811] libceph: resolve '400' (ret=-3): failed 00:25:51 executing program 1: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:51 executing program 3: r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7L\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 00:25:51 executing program 5: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:52 executing program 0: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:52 executing program 2: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) [ 124.774028][ T5817] libceph: resolve '400' (ret=-3): failed 00:25:52 executing program 3: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:52 executing program 4: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:52 executing program 1: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:52 executing program 5: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:52 executing program 2: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:52 executing program 0: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:52 executing program 3: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:53 executing program 4: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:53 executing program 1: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:53 executing program 0: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:53 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f0000000080), &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x16b847409187de28, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xfff, 0x0, 0x0}, 0xfffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7333, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7a7c, 0x0, 0x0, 0x0, 0x0) 00:25:53 executing program 5: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000080)) 00:25:53 executing program 3: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:54 executing program 5: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000080)) 00:25:54 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f0000000080), &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x16b847409187de28, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xfff, 0x0, 0x0}, 0xfffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7333, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7a7c, 0x0, 0x0, 0x0, 0x0) 00:25:54 executing program 1: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:54 executing program 5: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000080)) 00:25:54 executing program 4: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:54 executing program 0: r0 = syz_io_uring_setup(0x183, &(0x7f0000000080), &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x16b847409187de28, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xfff, 0x0, 0x0}, 0xfffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7333, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7a7c, 0x0, 0x0, 0x0, 0x0) 00:25:54 executing program 5: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000080)) 00:25:54 executing program 5: r0 = memfd_create(&(0x7f0000000340)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r0, &(0x7f0000000140)='.', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r1, &(0x7f0000000380)="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", 0xc81, 0x0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 00:25:54 executing program 5: r0 = memfd_create(&(0x7f0000000340)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r0, &(0x7f0000000140)='.', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r1, &(0x7f0000000380)="cd81cf8b2c9aca2d8ef53ad8589b3c9451fb58037ae7e88256abf1669e9cdfdefd21bd6738c536850a81cb55719506dab4cbd701d5c44d95eb32895ed9692a58ec128f3aaf2a8e030f36757e19e35bfede782c6748f88099959078069cf0505b90f03d25309349446f8032d01e97a98feb4fead6c429b402124397cc3d1cf2e611ce7a95ce9ae58d7b1c5079207e2cefcbb159a73e8148099d2ecd9e1e4db026d29c8241243bd009187bc0e23655a8bf506047cea995b92b746c4ddb4339e9b7d3c1a6b7c5f06c0312b12df011bedfee8dd07a3a23e0e201682f79b927657989e18a5bdbaae288acd727219a3e15aff4387e912ad8149c9f31b6c3ca212f314967c9cd872e436a1ba930e13f592e5a79f3da69c9cf46743655418d0283147db58a141d164a61beac646e66b5f62a2098ec0e9b828a8ccc67509b0682b5f03f17f58b6851afea4ffc03243cd81f7b152b86e3ba70639fb60164f20480d51c0725a0c2920dd6aa1b0acc94c660abb6da86f0dffeab8868fa81512b9afe2e0145de34eafd524aa8de21b0a4b5667a9eedba05658664df2a5c05438c02382f30d98d2443ad668683de9611f45618b7abe6ca07ae145777b38802565aede34d99db73bfc730af7b0bacba457e6c676702a3451b3cedf9fbc7a8430c950614192028c7f898323d166c7571c7bac3b3d45f7c1a37067a18f11a8c7ba3c58a524ece6c0743f394de470b47ed588a6b4e9739b22ebf99b7cfb6d55da5f02bcad6def02731d2fca1f1c94d0e3e635be494ae6b0542baccd1c16258f405e418f09a6439dcc23d7a1be40be60c41d7a1f37c3ea7959fdc7ba03a7550d75dd008e285eb820de2ad556ee60a2ecd44f79fca5c1c11b05920f9c60df4be2d71b6bdfa65fc8b95d8a8ae463770bfee04021c810b9334dbf9aa0cebd317983ec95339038fd0a4f6dacd949f358f6e2d6b3bb80b1b1b8b2eb80650abf55f061d742689faf308070776bb44d345eac0f8f882892a0b7bf728c7c2a99ef5d8300dbefedc4baa845ae9b41495d1bc93e055245f5c0f26934610f478514071bf5e75129f9558e20185864eb6ba489f53c223a5f764a7c1a7f68ebc678ac23e730136bc59a665ae8880f086ef66517cbf22d96f561d1bdb94bddeb5024c36c4d2ab4f776ddc150cf927f5e6cc15a77ba4eb04cb2d06b32eaf132d1541cea4f3f8a7863ef79b6b14ab6ff0fc68a902ce7ddf6c818eb1473cb445fc00bd161f3e2d7e64238684a14e7199c63b6d3e10106fb36b91e01c73f18f1c2382e64330d1c33d263ea0099f37fbd34cd184125d9abe669441ed9011220ae5d07cbd870403d54570925e3f39e03723b0cf7b985d81a07a11e908edeaa6aae28ef755b9f05cade54249241c87580cc1d55db1c0fce99eb652bd63b343c5487115ee199af9b1e6efe698b161953e576dd4343726b8c6f59ef48707f6ae108de74f8efdcb12bf53dcc47affe448f55a83694d84983a3e4920bb7c3ac60dcdb12bc60cc2dc5f4c446865e5055d3235fcbc85d64e358a4c31471d16313090e96b75422ded472d99963067a890b85801fd1c1b7108d6acecff3f95dfc862ea034e5d9eb0961f79b9a3db845cad5887262cdb77cefc5e08e98c3bbcc87f6b184fba76dc81073eff726863b94faad1b7d72a6cdf60fd02283bb8d07efedf9485ddde9172284c244dd2eb96c4644acf16fca518c77dd22c6e0f31a28a6731299c55f1e87dd1c841a65240cdebc7a70353e73140ba37a59cf0601c9bea4466a5281b8de8ba7f699d941481dc80a5f76743136a3e4be282b9d08920145b2151bc7db0ca8525da84e21b17cd12121b1002e9b617945e0ad2d110fd7f4bd447032af0c4ed834b2cf7228e136f56dfba58857092279ae0daa19498f22d998dc4421483c57b0cb1fd288ea749aba65abcac8912926ef2c4f8e835e6815bbad55e0c387900f88bd883fccb1420ee36fbee852d1172843fe48d16e79c39db7d4bdb7ac8331ce40a90791a3323da94dbb22aa494771277af5da996aebaa35e6d2fe6565d0067ea5881212fa2f620e33e0e769a4ba9304dcf8ddad24ff3cbb257185216910cca41a1198493f26a9b8d96c510ebd2770defb823ea0fd8511506ab5ecce41af5e30455c2a17bd66db49e43da8b4e05dd24eed9ba3f92c738527a161e6d3608894ef83abb096987bda5ce90a6b9618a9cb4d47a54a173e264bc91defb1b08fba89499a68cb4c4c32dbee2c294f8638a83fc85c2e0fcedf40c2ccac114436e9c4bb8033c89fa759a467fe113323e26d753da325040e923e1559ce79f2e61b25a99a07abe80c1c4faf53a5d2034d543552dd38462d95c1c36095d40aab236b493fbc29d4a4ba66a7534e1a241625038adfd2fd969e1deafa4805421b2f1e35b357de388badd4bf1c44850d4c516c09eaf5ffd8306ca8af7dc8ff560781dd6d9844ef78eeb7f23fa4b0896a637b4c5aa9eb838a5b87015e39bdbf6d74a5e447b04223184cb392b290f4bba79c0fb099d9bf11f4fe3b6bfa4a31225851c42ba1fd3e3bcb560010664df9a23e83f7b683d4c052e67c0b78e35d796ef4858f8d8e3fee08e9d514c1ce31935a4897da5a31f5ce2dad454dd3150b524495acd06fa9e8ca610e53f42499a81088e094a670baab1afb6f64f1f0cb3462366933c3584fba3881d60582ac5cb3ff822affaba3f639c11b134d8c85392d4f77485316738ff33191b56cf8ed07faa4978b41f640bbc2525225d7d25ec3b0368627b2f06a564bc73793b8a660a6d56ee2bfb7c6e9e6d6ec7ecd54cb2c581d845a40aaa2423f818b057895c89c6550cfc7d2b5c67a204ebf6d3367278960a9785e414f1122f8dddba9c4336328b49067670d1897503d9f2179ae1e275d0dae3b3a927a8a751669e02dc78d105e5619ac4f5649393dc06c903308b423bd45557aa4c7b009192fa491647d080454b819f7324850e69e4aa5b0ccf47c13c5cf5342f3c50e84a89bd143fe62f97f65807be6ac28d345855007bb094ea9f7ed511d2d483a427b79d143300a8f0b259889371ecf2f73af6960f98585d98b4fa9da82ffb8a00ab15c33a0c30aa57c08d8d16c093da361a29cbc382309edd37cc7cc58bd71439c963d2a707dd295fe6779b8681824975ad6d2c7db897a6c97b738aebc2f2d6cb29de20f9070e41aa560e76c07612a2c43f7f687826eb34b962b8a6fd5e6a3d27dd921c36ffae941e8118e30c3f78272577424bdd8b0c93052515e130ca5a9722c36dd03856d69f54be2d66942234876f3e694501c59b86e2425bfdc2f08f246e816a6d6055c0911b0b6535205eee518330c63b30b281bcff409628e75c954a6fe453e4e9cc8d909b80ec656b40efa8fc4bf1e725ae348fcae6579afc1ae4efdecfef7828e33765f5eca6e2b4abf6bdc22090f5e919626768a8408e602a60344bef12d995ef27f6aee4d1ddb7ddd48407a64e351f1ce705ff35f2dd423a0aeda73d15c857699316dd208167fecd19e05ea0d50d8457bdd4797ef22be1aae81686aa3269d006d5f7fff4403fc9e4e4a2d0856842bd0ab8431a73aaa14bb8eb98d32b777f9b914142044833375047d61f5d8be94e415b220b11436d54e674a1f3562c1ca7085005471e6c2f83371ef555139161db3e0043abec0684af3ed9c63e329461615eb11d25e26c08b009bf6ebb80d5246e585628f70494a170cda5420243965f5419eb4fc5f332cbdf2f5dcd67d4e4e82cd700666e731051c6491fea1751a39d5785278aac60cfccb934c00f488272abf5412b13c3a730c0fc395ff872be53b28a3e006032e8adf4c12ed44ee643b4d4bc34a1bf6eb7ea41c612e619246d512f0b495f02179df58dfa9cacfc97220092154307fe7db65cf69239d350be08163ee94084ffae86d207869ccd9ce0517d41410128636eacf991e86fc56ee54de649a24eeeb51004a700c062de9222b2fdf63a02cc2f1f7ad1c4f8c3275b10e8c05e90561e8482f289dff4d569be17a1c459995f9ff6cec392f61b452af4c17ef1b25ae24d41ed02fa7d4425517b8a7db1fdd98849e6d6879a12050e73fc959813f15b6e06ea46781c77adb045cd687985e13ddf257f54ea0913fba989f4f02a41b52083ad9fba2da177e5e87da65a55bae99e1d21ad6deebbcc8eaac4e47dcaece00b4a02bd2fce0d66e05a28b07ba2848fe33dc0bd60737ed6db1ec41ebdca9699bd89c1325aefa350ad07018f156f5e3955ba7deeccfdf4908914809bdb661178bbf97b6cf3695c3faa3d309013de980b2703a3ec6757c76068b0fc02e7cf6356d730281f11537ed648c6434a758b9b1b69be36f3b445f68543fb6ccc3a60c8c64ea395e20d40fb38c3c5dc08b9b1bdcee2e814f2fd01e4b4c19ebe8044c2d32d299f3597f5c204d1c0ff2accc547e6336f659b905c61ac9bc9fc10e94fb6f531996aca8cea1ebad2624de5935a21826233b69012fc8ae6715e2252392394952de98de56d9ec11a8c4b1a9fde08818c1df420c6598bc1b150b6be", 0xc81, 0x0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 00:25:54 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f0000000080), &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x16b847409187de28, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xfff, 0x0, 0x0}, 0xfffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7333, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7a7c, 0x0, 0x0, 0x0, 0x0) 00:25:54 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x88a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x10001) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="2709294520f65fb1b3bf976c572ace99709756627eaabdd0a04ddd6950af95c82dea955da0976b21164043d061313d1a8391ebb58fb734c49553aeabd7848b12402ca522eeacd53d05d520fb1bd28dededbefed9c38d259802f36b2ebd460b1fae9264984f9fb5c98a21efebdcbf1a055e89a73b147e506080465046eb04f9244e08d970e79e6aa89fe29e9f68a76e18ed79c891b2c3d1575b733ccead2b11f95098f2f04cbadc148ea6296c3fb091d9f362b87744372ba71ca8345ed08e42d069a7e7bfc8def377049b339bb0e6c50edf80559e51000000000000078076b9335405bae9bb9b3138b178c57ab649ec74", 0xf0}, {&(0x7f0000000040)="6f0000013b6f463bca666cd0d6f16237352c78b306", 0x15}], 0x2) 00:25:54 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x88a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x10001) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="2709294520f65fb1b3bf976c572ace99709756627eaabdd0a04ddd6950af95c82dea955da0976b21164043d061313d1a8391ebb58fb734c49553aeabd7848b12402ca522eeacd53d05d520fb1bd28dededbefed9c38d259802f36b2ebd460b1fae9264984f9fb5c98a21efebdcbf1a055e89a73b147e506080465046eb04f9244e08d970e79e6aa89fe29e9f68a76e18ed79c891b2c3d1575b733ccead2b11f95098f2f04cbadc148ea6296c3fb091d9f362b87744372ba71ca8345ed08e42d069a7e7bfc8def377049b339bb0e6c50edf80559e51000000000000078076b9335405bae9bb9b3138b178c57ab649ec74", 0xf0}, {&(0x7f0000000040)="6f0000013b6f463bca666cd0d6f16237352c78b306", 0x15}], 0x2) 00:25:54 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x88a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x10001) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="2709294520f65fb1b3bf976c572ace99709756627eaabdd0a04ddd6950af95c82dea955da0976b21164043d061313d1a8391ebb58fb734c49553aeabd7848b12402ca522eeacd53d05d520fb1bd28dededbefed9c38d259802f36b2ebd460b1fae9264984f9fb5c98a21efebdcbf1a055e89a73b147e506080465046eb04f9244e08d970e79e6aa89fe29e9f68a76e18ed79c891b2c3d1575b733ccead2b11f95098f2f04cbadc148ea6296c3fb091d9f362b87744372ba71ca8345ed08e42d069a7e7bfc8def377049b339bb0e6c50edf80559e51000000000000078076b9335405bae9bb9b3138b178c57ab649ec74", 0xf0}, {&(0x7f0000000040)="6f0000013b6f463bca666cd0d6f16237352c78b306", 0x15}], 0x2) 00:25:54 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x88a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x10001) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="2709294520f65fb1b3bf976c572ace99709756627eaabdd0a04ddd6950af95c82dea955da0976b21164043d061313d1a8391ebb58fb734c49553aeabd7848b12402ca522eeacd53d05d520fb1bd28dededbefed9c38d259802f36b2ebd460b1fae9264984f9fb5c98a21efebdcbf1a055e89a73b147e506080465046eb04f9244e08d970e79e6aa89fe29e9f68a76e18ed79c891b2c3d1575b733ccead2b11f95098f2f04cbadc148ea6296c3fb091d9f362b87744372ba71ca8345ed08e42d069a7e7bfc8def377049b339bb0e6c50edf80559e51000000000000078076b9335405bae9bb9b3138b178c57ab649ec74", 0xf0}, {&(0x7f0000000040)="6f0000013b6f463bca666cd0d6f16237352c78b306", 0x15}], 0x2) 00:25:54 executing program 5: r0 = memfd_create(&(0x7f0000000340)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r0, &(0x7f0000000140)='.', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r1, &(0x7f0000000380)="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", 0xc81, 0x0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 00:25:54 executing program 1: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="bd", 0x0}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0xa40, 0x18a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\a\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./bus\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rxrpc_congest\x00', r5}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x6) unshare(0x8000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000580)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x0, 0x4, 0xa, 0x0, 0x1}, 0x48) unshare(0x4000180) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0}, 0x1c) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r8, r1, &(0x7f00000000c0)=0x80000000, 0x2140) read$FUSE(r8, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r9 = openat$incfs(r8, &(0x7f0000000340)='.log\x00', 0x200000, 0x180) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r7, r7, 0x0, r9}, 0x10) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 00:25:54 executing program 5: r0 = memfd_create(&(0x7f0000000340)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r0, &(0x7f0000000140)='.', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r1, &(0x7f0000000380)="cd81cf8b2c9aca2d8ef53ad8589b3c9451fb58037ae7e88256abf1669e9cdfdefd21bd6738c536850a81cb55719506dab4cbd701d5c44d95eb32895ed9692a58ec128f3aaf2a8e030f36757e19e35bfede782c6748f88099959078069cf0505b90f03d25309349446f8032d01e97a98feb4fead6c429b402124397cc3d1cf2e611ce7a95ce9ae58d7b1c5079207e2cefcbb159a73e8148099d2ecd9e1e4db026d29c8241243bd009187bc0e23655a8bf506047cea995b92b746c4ddb4339e9b7d3c1a6b7c5f06c0312b12df011bedfee8dd07a3a23e0e201682f79b927657989e18a5bdbaae288acd727219a3e15aff4387e912ad8149c9f31b6c3ca212f314967c9cd872e436a1ba930e13f592e5a79f3da69c9cf46743655418d0283147db58a141d164a61beac646e66b5f62a2098ec0e9b828a8ccc67509b0682b5f03f17f58b6851afea4ffc03243cd81f7b152b86e3ba70639fb60164f20480d51c0725a0c2920dd6aa1b0acc94c660abb6da86f0dffeab8868fa81512b9afe2e0145de34eafd524aa8de21b0a4b5667a9eedba05658664df2a5c05438c02382f30d98d2443ad668683de9611f45618b7abe6ca07ae145777b38802565aede34d99db73bfc730af7b0bacba457e6c676702a3451b3cedf9fbc7a8430c950614192028c7f898323d166c7571c7bac3b3d45f7c1a37067a18f11a8c7ba3c58a524ece6c0743f394de470b47ed588a6b4e9739b22ebf99b7cfb6d55da5f02bcad6def02731d2fca1f1c94d0e3e635be494ae6b0542baccd1c16258f405e418f09a6439dcc23d7a1be40be60c41d7a1f37c3ea7959fdc7ba03a7550d75dd008e285eb820de2ad556ee60a2ecd44f79fca5c1c11b05920f9c60df4be2d71b6bdfa65fc8b95d8a8ae463770bfee04021c810b9334dbf9aa0cebd317983ec95339038fd0a4f6dacd949f358f6e2d6b3bb80b1b1b8b2eb80650abf55f061d742689faf308070776bb44d345eac0f8f882892a0b7bf728c7c2a99ef5d8300dbefedc4baa845ae9b41495d1bc93e055245f5c0f26934610f478514071bf5e75129f9558e20185864eb6ba489f53c223a5f764a7c1a7f68ebc678ac23e730136bc59a665ae8880f086ef66517cbf22d96f561d1bdb94bddeb5024c36c4d2ab4f776ddc150cf927f5e6cc15a77ba4eb04cb2d06b32eaf132d1541cea4f3f8a7863ef79b6b14ab6ff0fc68a902ce7ddf6c818eb1473cb445fc00bd161f3e2d7e64238684a14e7199c63b6d3e10106fb36b91e01c73f18f1c2382e64330d1c33d263ea0099f37fbd34cd184125d9abe669441ed9011220ae5d07cbd870403d54570925e3f39e03723b0cf7b985d81a07a11e908edeaa6aae28ef755b9f05cade54249241c87580cc1d55db1c0fce99eb652bd63b343c5487115ee199af9b1e6efe698b161953e576dd4343726b8c6f59ef48707f6ae108de74f8efdcb12bf53dcc47affe448f55a83694d84983a3e4920bb7c3ac60dcdb12bc60cc2dc5f4c446865e5055d3235fcbc85d64e358a4c31471d16313090e96b75422ded472d99963067a890b85801fd1c1b7108d6acecff3f95dfc862ea034e5d9eb0961f79b9a3db845cad5887262cdb77cefc5e08e98c3bbcc87f6b184fba76dc81073eff726863b94faad1b7d72a6cdf60fd02283bb8d07efedf9485ddde9172284c244dd2eb96c4644acf16fca518c77dd22c6e0f31a28a6731299c55f1e87dd1c841a65240cdebc7a70353e73140ba37a59cf0601c9bea4466a5281b8de8ba7f699d941481dc80a5f76743136a3e4be282b9d08920145b2151bc7db0ca8525da84e21b17cd12121b1002e9b617945e0ad2d110fd7f4bd447032af0c4ed834b2cf7228e136f56dfba58857092279ae0daa19498f22d998dc4421483c57b0cb1fd288ea749aba65abcac8912926ef2c4f8e835e6815bbad55e0c387900f88bd883fccb1420ee36fbee852d1172843fe48d16e79c39db7d4bdb7ac8331ce40a90791a3323da94dbb22aa494771277af5da996aebaa35e6d2fe6565d0067ea5881212fa2f620e33e0e769a4ba9304dcf8ddad24ff3cbb257185216910cca41a1198493f26a9b8d96c510ebd2770defb823ea0fd8511506ab5ecce41af5e30455c2a17bd66db49e43da8b4e05dd24eed9ba3f92c738527a161e6d3608894ef83abb096987bda5ce90a6b9618a9cb4d47a54a173e264bc91defb1b08fba89499a68cb4c4c32dbee2c294f8638a83fc85c2e0fcedf40c2ccac114436e9c4bb8033c89fa759a467fe113323e26d753da325040e923e1559ce79f2e61b25a99a07abe80c1c4faf53a5d2034d543552dd38462d95c1c36095d40aab236b493fbc29d4a4ba66a7534e1a241625038adfd2fd969e1deafa4805421b2f1e35b357de388badd4bf1c44850d4c516c09eaf5ffd8306ca8af7dc8ff560781dd6d9844ef78eeb7f23fa4b0896a637b4c5aa9eb838a5b87015e39bdbf6d74a5e447b04223184cb392b290f4bba79c0fb099d9bf11f4fe3b6bfa4a31225851c42ba1fd3e3bcb560010664df9a23e83f7b683d4c052e67c0b78e35d796ef4858f8d8e3fee08e9d514c1ce31935a4897da5a31f5ce2dad454dd3150b524495acd06fa9e8ca610e53f42499a81088e094a670baab1afb6f64f1f0cb3462366933c3584fba3881d60582ac5cb3ff822affaba3f639c11b134d8c85392d4f77485316738ff33191b56cf8ed07faa4978b41f640bbc2525225d7d25ec3b0368627b2f06a564bc73793b8a660a6d56ee2bfb7c6e9e6d6ec7ecd54cb2c581d845a40aaa2423f818b057895c89c6550cfc7d2b5c67a204ebf6d3367278960a9785e414f1122f8dddba9c4336328b49067670d1897503d9f2179ae1e275d0dae3b3a927a8a751669e02dc78d105e5619ac4f5649393dc06c903308b423bd45557aa4c7b009192fa491647d080454b819f7324850e69e4aa5b0ccf47c13c5cf5342f3c50e84a89bd143fe62f97f65807be6ac28d345855007bb094ea9f7ed511d2d483a427b79d143300a8f0b259889371ecf2f73af6960f98585d98b4fa9da82ffb8a00ab15c33a0c30aa57c08d8d16c093da361a29cbc382309edd37cc7cc58bd71439c963d2a707dd295fe6779b8681824975ad6d2c7db897a6c97b738aebc2f2d6cb29de20f9070e41aa560e76c07612a2c43f7f687826eb34b962b8a6fd5e6a3d27dd921c36ffae941e8118e30c3f78272577424bdd8b0c93052515e130ca5a9722c36dd03856d69f54be2d66942234876f3e694501c59b86e2425bfdc2f08f246e816a6d6055c0911b0b6535205eee518330c63b30b281bcff409628e75c954a6fe453e4e9cc8d909b80ec656b40efa8fc4bf1e725ae348fcae6579afc1ae4efdecfef7828e33765f5eca6e2b4abf6bdc22090f5e919626768a8408e602a60344bef12d995ef27f6aee4d1ddb7ddd48407a64e351f1ce705ff35f2dd423a0aeda73d15c857699316dd208167fecd19e05ea0d50d8457bdd4797ef22be1aae81686aa3269d006d5f7fff4403fc9e4e4a2d0856842bd0ab8431a73aaa14bb8eb98d32b777f9b914142044833375047d61f5d8be94e415b220b11436d54e674a1f3562c1ca7085005471e6c2f83371ef555139161db3e0043abec0684af3ed9c63e329461615eb11d25e26c08b009bf6ebb80d5246e585628f70494a170cda5420243965f5419eb4fc5f332cbdf2f5dcd67d4e4e82cd700666e731051c6491fea1751a39d5785278aac60cfccb934c00f488272abf5412b13c3a730c0fc395ff872be53b28a3e006032e8adf4c12ed44ee643b4d4bc34a1bf6eb7ea41c612e619246d512f0b495f02179df58dfa9cacfc97220092154307fe7db65cf69239d350be08163ee94084ffae86d207869ccd9ce0517d41410128636eacf991e86fc56ee54de649a24eeeb51004a700c062de9222b2fdf63a02cc2f1f7ad1c4f8c3275b10e8c05e90561e8482f289dff4d569be17a1c459995f9ff6cec392f61b452af4c17ef1b25ae24d41ed02fa7d4425517b8a7db1fdd98849e6d6879a12050e73fc959813f15b6e06ea46781c77adb045cd687985e13ddf257f54ea0913fba989f4f02a41b52083ad9fba2da177e5e87da65a55bae99e1d21ad6deebbcc8eaac4e47dcaece00b4a02bd2fce0d66e05a28b07ba2848fe33dc0bd60737ed6db1ec41ebdca9699bd89c1325aefa350ad07018f156f5e3955ba7deeccfdf4908914809bdb661178bbf97b6cf3695c3faa3d309013de980b2703a3ec6757c76068b0fc02e7cf6356d730281f11537ed648c6434a758b9b1b69be36f3b445f68543fb6ccc3a60c8c64ea395e20d40fb38c3c5dc08b9b1bdcee2e814f2fd01e4b4c19ebe8044c2d32d299f3597f5c204d1c0ff2accc547e6336f659b905c61ac9bc9fc10e94fb6f531996aca8cea1ebad2624de5935a21826233b69012fc8ae6715e2252392394952de98de56d9ec11a8c4b1a9fde08818c1df420c6598bc1b150b6be", 0xc81, 0x0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 00:25:54 executing program 0: r0 = syz_io_uring_setup(0x183, &(0x7f0000000080), &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x16b847409187de28, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xfff, 0x0, 0x0}, 0xfffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7333, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7a7c, 0x0, 0x0, 0x0, 0x0) 00:25:54 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x88a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x10001) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="2709294520f65fb1b3bf976c572ace99709756627eaabdd0a04ddd6950af95c82dea955da0976b21164043d061313d1a8391ebb58fb734c49553aeabd7848b12402ca522eeacd53d05d520fb1bd28dededbefed9c38d259802f36b2ebd460b1fae9264984f9fb5c98a21efebdcbf1a055e89a73b147e506080465046eb04f9244e08d970e79e6aa89fe29e9f68a76e18ed79c891b2c3d1575b733ccead2b11f95098f2f04cbadc148ea6296c3fb091d9f362b87744372ba71ca8345ed08e42d069a7e7bfc8def377049b339bb0e6c50edf80559e51000000000000078076b9335405bae9bb9b3138b178c57ab649ec74", 0xf0}, {&(0x7f0000000040)="6f0000013b6f463bca666cd0d6f16237352c78b306", 0x15}], 0x2) 00:25:54 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x88a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x10001) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="2709294520f65fb1b3bf976c572ace99709756627eaabdd0a04ddd6950af95c82dea955da0976b21164043d061313d1a8391ebb58fb734c49553aeabd7848b12402ca522eeacd53d05d520fb1bd28dededbefed9c38d259802f36b2ebd460b1fae9264984f9fb5c98a21efebdcbf1a055e89a73b147e506080465046eb04f9244e08d970e79e6aa89fe29e9f68a76e18ed79c891b2c3d1575b733ccead2b11f95098f2f04cbadc148ea6296c3fb091d9f362b87744372ba71ca8345ed08e42d069a7e7bfc8def377049b339bb0e6c50edf80559e51000000000000078076b9335405bae9bb9b3138b178c57ab649ec74", 0xf0}, {&(0x7f0000000040)="6f0000013b6f463bca666cd0d6f16237352c78b306", 0x15}], 0x2) 00:25:55 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x88a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x10001) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="2709294520f65fb1b3bf976c572ace99709756627eaabdd0a04ddd6950af95c82dea955da0976b21164043d061313d1a8391ebb58fb734c49553aeabd7848b12402ca522eeacd53d05d520fb1bd28dededbefed9c38d259802f36b2ebd460b1fae9264984f9fb5c98a21efebdcbf1a055e89a73b147e506080465046eb04f9244e08d970e79e6aa89fe29e9f68a76e18ed79c891b2c3d1575b733ccead2b11f95098f2f04cbadc148ea6296c3fb091d9f362b87744372ba71ca8345ed08e42d069a7e7bfc8def377049b339bb0e6c50edf80559e51000000000000078076b9335405bae9bb9b3138b178c57ab649ec74", 0xf0}, {&(0x7f0000000040)="6f0000013b6f463bca666cd0d6f16237352c78b306", 0x15}], 0x2) 00:25:55 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f0000000080), &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x16b847409187de28, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xfff, 0x0, 0x0}, 0xfffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7333, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7a7c, 0x0, 0x0, 0x0, 0x0) 00:25:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 00:25:55 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x88a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x10001) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="2709294520f65fb1b3bf976c572ace99709756627eaabdd0a04ddd6950af95c82dea955da0976b21164043d061313d1a8391ebb58fb734c49553aeabd7848b12402ca522eeacd53d05d520fb1bd28dededbefed9c38d259802f36b2ebd460b1fae9264984f9fb5c98a21efebdcbf1a055e89a73b147e506080465046eb04f9244e08d970e79e6aa89fe29e9f68a76e18ed79c891b2c3d1575b733ccead2b11f95098f2f04cbadc148ea6296c3fb091d9f362b87744372ba71ca8345ed08e42d069a7e7bfc8def377049b339bb0e6c50edf80559e51000000000000078076b9335405bae9bb9b3138b178c57ab649ec74", 0xf0}, {&(0x7f0000000040)="6f0000013b6f463bca666cd0d6f16237352c78b306", 0x15}], 0x2) 00:25:55 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x88a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x10001) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="2709294520f65fb1b3bf976c572ace99709756627eaabdd0a04ddd6950af95c82dea955da0976b21164043d061313d1a8391ebb58fb734c49553aeabd7848b12402ca522eeacd53d05d520fb1bd28dededbefed9c38d259802f36b2ebd460b1fae9264984f9fb5c98a21efebdcbf1a055e89a73b147e506080465046eb04f9244e08d970e79e6aa89fe29e9f68a76e18ed79c891b2c3d1575b733ccead2b11f95098f2f04cbadc148ea6296c3fb091d9f362b87744372ba71ca8345ed08e42d069a7e7bfc8def377049b339bb0e6c50edf80559e51000000000000078076b9335405bae9bb9b3138b178c57ab649ec74", 0xf0}, {&(0x7f0000000040)="6f0000013b6f463bca666cd0d6f16237352c78b306", 0x15}], 0x2) 00:25:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 127.837950][ T5157] IPVS: starting estimator thread 0... 00:25:55 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x88a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x10001) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="2709294520f65fb1b3bf976c572ace99709756627eaabdd0a04ddd6950af95c82dea955da0976b21164043d061313d1a8391ebb58fb734c49553aeabd7848b12402ca522eeacd53d05d520fb1bd28dededbefed9c38d259802f36b2ebd460b1fae9264984f9fb5c98a21efebdcbf1a055e89a73b147e506080465046eb04f9244e08d970e79e6aa89fe29e9f68a76e18ed79c891b2c3d1575b733ccead2b11f95098f2f04cbadc148ea6296c3fb091d9f362b87744372ba71ca8345ed08e42d069a7e7bfc8def377049b339bb0e6c50edf80559e51000000000000078076b9335405bae9bb9b3138b178c57ab649ec74", 0xf0}, {&(0x7f0000000040)="6f0000013b6f463bca666cd0d6f16237352c78b306", 0x15}], 0x2) [ 127.932541][ T5941] IPVS: using max 22 ests per chain, 52800 per kthread 00:25:55 executing program 0: r0 = syz_io_uring_setup(0x183, &(0x7f0000000080), &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x16b847409187de28, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xfff, 0x0, 0x0}, 0xfffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7333, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7a7c, 0x0, 0x0, 0x0, 0x0) 00:25:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 00:25:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 00:25:55 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000017c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 00:25:55 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000017c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 00:25:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 128.223139][ T4403] IPVS: starting estimator thread 0... 00:25:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 00:25:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001d80)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) 00:25:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/177, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xff61}, 0x28) [ 128.322509][ T5961] IPVS: using max 20 ests per chain, 48000 per kthread 00:25:55 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000017c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 00:25:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 00:25:55 executing program 5: r0 = openat$sysctl(0xffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 00:25:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/177, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xff61}, 0x28) 00:25:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001d80)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) 00:25:55 executing program 5: r0 = openat$sysctl(0xffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 00:25:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000140)) 00:25:55 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000017c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 00:25:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 00:25:56 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/177, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xff61}, 0x28) 00:25:56 executing program 5: r0 = openat$sysctl(0xffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 00:25:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001d80)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) 00:25:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 00:25:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000140)) 00:25:56 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() ppoll(&(0x7f0000000480), 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) openat(0xffffffffffffffff, 0x0, 0x40100, 0x101) socket$phonet(0x23, 0x2, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 00:25:56 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/177, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xff61}, 0x28) 00:25:56 executing program 5: r0 = openat$sysctl(0xffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 00:25:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000140)) 00:25:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000140)) 00:25:56 executing program 5: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:56 executing program 2: mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001380), 0x0) 00:25:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 00:25:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001d80)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) 00:25:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000140)="f30f09ea00003600642e0f0d3af0fe060000660f72f40b2e360fc14600baa000edb816008ee866b9800000c00f326635008000000f3066b9680800000f32", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xd000, 0xe02}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:25:56 executing program 5: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) [ 129.186187][ T6031] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 00:25:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 00:25:57 executing program 1: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:57 executing program 5: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:57 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:57 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() ppoll(&(0x7f0000000480), 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) openat(0xffffffffffffffff, 0x0, 0x40100, 0x101) socket$phonet(0x23, 0x2, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 00:25:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000140)="f30f09ea00003600642e0f0d3af0fe060000660f72f40b2e360fc14600baa000edb816008ee866b9800000c00f326635008000000f3066b9680800000f32", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xd000, 0xe02}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:25:57 executing program 1: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:57 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:57 executing program 5: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:57 executing program 2: mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001380), 0x0) 00:25:57 executing program 1: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:57 executing program 1: mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001380), 0x0) 00:25:57 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:57 executing program 5: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:57 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000140)="f30f09ea00003600642e0f0d3af0fe060000660f72f40b2e360fc14600baa000edb816008ee866b9800000c00f326635008000000f3066b9680800000f32", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xd000, 0xe02}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:25:59 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() ppoll(&(0x7f0000000480), 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) openat(0xffffffffffffffff, 0x0, 0x40100, 0x101) socket$phonet(0x23, 0x2, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 00:25:59 executing program 5: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:59 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000140)="f30f09ea00003600642e0f0d3af0fe060000660f72f40b2e360fc14600baa000edb816008ee866b9800000c00f326635008000000f3066b9680800000f32", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xd000, 0xe02}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:25:59 executing program 1: mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001380), 0x0) 00:25:59 executing program 2: mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001380), 0x0) 00:25:59 executing program 5: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:59 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:59 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:59 executing program 3: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:59 executing program 5: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:25:59 executing program 3: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) [ 132.755232][ T1204] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.762281][ T1204] ieee802154 phy1 wpan1: encryption failed: -22 00:26:00 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() ppoll(&(0x7f0000000480), 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) openat(0xffffffffffffffff, 0x0, 0x40100, 0x101) socket$phonet(0x23, 0x2, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 00:26:00 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:26:00 executing program 5: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:26:00 executing program 3: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:26:00 executing program 1: mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001380), 0x0) 00:26:00 executing program 2: mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001380), 0x0) 00:26:00 executing program 5: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:26:00 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) readv(r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getgid() signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57, 0x6) 00:26:00 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$inet(r0, 0x0, 0x0) 00:26:00 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000115000/0x1000)=nil, 0x1000, 0xe1094d4bf24423b1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() mremap(&(0x7f00003c5000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000088000/0x3000)=nil) syz_clone3(&(0x7f0000000480)={0x1000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x3c}, &(0x7f0000000240)=""/79, 0x4f, &(0x7f00000002c0)=""/28, &(0x7f0000000380)=[0x0, r0], 0x2}, 0x58) r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8080) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 00:26:00 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 00:26:01 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 00:26:02 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000115000/0x1000)=nil, 0x1000, 0xe1094d4bf24423b1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() mremap(&(0x7f00003c5000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000088000/0x3000)=nil) syz_clone3(&(0x7f0000000480)={0x1000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x3c}, &(0x7f0000000240)=""/79, 0x4f, &(0x7f00000002c0)=""/28, &(0x7f0000000380)=[0x0, r0], 0x2}, 0x58) r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8080) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 00:26:02 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000115000/0x1000)=nil, 0x1000, 0xe1094d4bf24423b1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() mremap(&(0x7f00003c5000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000088000/0x3000)=nil) syz_clone3(&(0x7f0000000480)={0x1000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x3c}, &(0x7f0000000240)=""/79, 0x4f, &(0x7f00000002c0)=""/28, &(0x7f0000000380)=[0x0, r0], 0x2}, 0x58) r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8080) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 00:26:02 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 00:26:02 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000115000/0x1000)=nil, 0x1000, 0xe1094d4bf24423b1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() mremap(&(0x7f00003c5000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000088000/0x3000)=nil) syz_clone3(&(0x7f0000000480)={0x1000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x3c}, &(0x7f0000000240)=""/79, 0x4f, &(0x7f00000002c0)=""/28, &(0x7f0000000380)=[0x0, r0], 0x2}, 0x58) r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8080) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 00:26:02 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 00:26:02 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 00:26:02 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 00:26:02 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 00:26:02 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000180), 0x90) 00:26:02 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 00:26:02 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000180), 0x90) 00:26:02 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 00:26:03 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000115000/0x1000)=nil, 0x1000, 0xe1094d4bf24423b1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() mremap(&(0x7f00003c5000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000088000/0x3000)=nil) syz_clone3(&(0x7f0000000480)={0x1000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x3c}, &(0x7f0000000240)=""/79, 0x4f, &(0x7f00000002c0)=""/28, &(0x7f0000000380)=[0x0, r0], 0x2}, 0x58) r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8080) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 00:26:03 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000115000/0x1000)=nil, 0x1000, 0xe1094d4bf24423b1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() mremap(&(0x7f00003c5000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000088000/0x3000)=nil) syz_clone3(&(0x7f0000000480)={0x1000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x3c}, &(0x7f0000000240)=""/79, 0x4f, &(0x7f00000002c0)=""/28, &(0x7f0000000380)=[0x0, r0], 0x2}, 0x58) r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8080) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 00:26:03 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000180), 0x90) 00:26:04 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 00:26:04 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040), 0x80, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0x2, 0x103}) 00:26:04 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000115000/0x1000)=nil, 0x1000, 0xe1094d4bf24423b1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() mremap(&(0x7f00003c5000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000088000/0x3000)=nil) syz_clone3(&(0x7f0000000480)={0x1000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x3c}, &(0x7f0000000240)=""/79, 0x4f, &(0x7f00000002c0)=""/28, &(0x7f0000000380)=[0x0, r0], 0x2}, 0x58) r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8080) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 00:26:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000180), 0x90) 00:26:04 executing program 3: syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 00:26:04 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040), 0x80, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0x2, 0x103}) 00:26:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000003c0)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6, 0x1, 0x2}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x74}}, 0x0) 00:26:04 executing program 3: syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 00:26:04 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040), 0x80, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0x2, 0x103}) 00:26:04 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040), 0x80, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0x2, 0x103}) 00:26:05 executing program 3: syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 00:26:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000003c0)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6, 0x1, 0x2}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x74}}, 0x0) 00:26:05 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000115000/0x1000)=nil, 0x1000, 0xe1094d4bf24423b1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() mremap(&(0x7f00003c5000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000088000/0x3000)=nil) syz_clone3(&(0x7f0000000480)={0x1000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x3c}, &(0x7f0000000240)=""/79, 0x4f, &(0x7f00000002c0)=""/28, &(0x7f0000000380)=[0x0, r0], 0x2}, 0x58) r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8080) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 00:26:05 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000115000/0x1000)=nil, 0x1000, 0xe1094d4bf24423b1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() mremap(&(0x7f00003c5000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000088000/0x3000)=nil) syz_clone3(&(0x7f0000000480)={0x1000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x3c}, &(0x7f0000000240)=""/79, 0x4f, &(0x7f00000002c0)=""/28, &(0x7f0000000380)=[0x0, r0], 0x2}, 0x58) r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8080) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 00:26:05 executing program 1: syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 00:26:05 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000115000/0x1000)=nil, 0x1000, 0xe1094d4bf24423b1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() mremap(&(0x7f00003c5000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000088000/0x3000)=nil) syz_clone3(&(0x7f0000000480)={0x1000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x3c}, &(0x7f0000000240)=""/79, 0x4f, &(0x7f00000002c0)=""/28, &(0x7f0000000380)=[0x0, r0], 0x2}, 0x58) r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8080) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 00:26:05 executing program 3: syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 00:26:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000003c0)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6, 0x1, 0x2}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x74}}, 0x0) 00:26:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) accept4$alg(r1, 0x0, 0x0, 0x0) 00:26:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) accept4$alg(r1, 0x0, 0x0, 0x0) 00:26:05 executing program 1: syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 00:26:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) accept4$alg(r1, 0x0, 0x0, 0x0) 00:26:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000003c0)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6, 0x1, 0x2}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x74}}, 0x0) 00:26:05 executing program 1: syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 00:26:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) accept4$alg(r1, 0x0, 0x0, 0x0) 00:26:07 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x0) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/90}, 0x62, 0x0, 0x0) 00:26:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x7ff, 0x4000) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x0) sendmsg$nl_route(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)=@ipmr_getroute={0x1c, 0x1a, 0x904, 0x70bd2d, 0x25dfdbfc, {0x80, 0x80, 0x0, 0x96, 0xfe, 0x0, 0xfe, 0x3, 0x100}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6f53e35b0b2dc53}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000104000100000475000000000000", @ANYRES32=r2, @ANYBLOB="82"], 0x20}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) socket(0x28, 0x805, 0x10000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0xb, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56}]}}]}, 0x8c}}, 0x0) 00:26:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='y', 0x1}], 0x1, &(0x7f0000000180)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x0, 0x2}}], 0x2c}, 0x0) 00:26:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005740)=[{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000780)="252928b35d558ab92aa83a4509f0f3d58d3291f2759cad8e19358e92a283c954c167c8edc2cf5425241c3391cc1ce2ea276c5e0881d098ad16e005a1", 0x3c}, {&(0x7f00000007c0)="bdaf75693547adeebe70f6c8bc09ec6575bb037860c8d941b91a8110798d266f3c407c3f80beb5c49fbf8c9682e3549349f27fc4daa69de4442501e960c8d273007d3f388291b67ef0b97066a08c9d13e499551366e1396c798af71395a2091fe0225e24fcd7ea16850b6936e75d1aa4d199f1129ed705d3ed6cbf28114d6f20be37ee43368e0a6c1d6525d2fa3cfcfcd749f04b31ea1d9320af69b39d07e7c6eb52e6887009aec1e62851e474383a36ac42ca2b8d29cdfa2e1727d77d5ae01b456867acb9810ec1e4d95bd173d3474cec5e922338b8cd45cdf43267c08214fca4893dc80c0dbb224b8885884a6694c4b6837e387d", 0xf5}, {&(0x7f00000008c0)="cb3a0d018e1533", 0x7}, {&(0x7f00000019c0)="b5c3eb0d462cd5b84d72f535ae2102ed7da642a977b5bfb82a11729a8c407747aa7006e519b42bc1acc104f325f8582ac9878829bad6f8576dfd91d719394188ddf89baebb8029eb6551c1ec561eec64b10add6cbf902c4976496853c9f945eca2f0898df3ba0fb99b49f3ac5c0b092b52860619e85057baae7a85b97ab694b89db9decac58a1e9b7bd38b0ef6d4f1f0f8fde930aed52fb1c2467ed78eeb6630d94468d367dcd3a7a9601bada727d09a383ab97e75442a68b4763c9bff5dc8529f95992e", 0xc4}, {&(0x7f0000001ac0)="bdc3c9415ec3564f4d892e76168cc71145404cf8471d97068e6010b5032aa6b6accf5489338741ba67ba0f800d3783f88ba34aa3e34b21cc28e678f8ef00b3612affc06220980339e92617062b1dc58e568a34ae1a5fd6d4604307606d51b1fbc8a81ee6ffcc1d33ece358ff1f1aa847ce457516c65aede51af91dacac45ed68c5744fe7b9437842c35875a5b28ec122b8965b0f7161bf533411a0c84e62884d3535dcbe2456425a0dc5e4aaa30f04339cdf0a8533299c8cc7e01626c6a67fd23b0f41c478393e903a5582fe04ccaeeb", 0xd0}, {&(0x7f0000001bc0)="d3094e2f5683a676eda2a11576bb4fd52a172da252476a46bef3ca7a7175b0c9413e0bcb23a7844ebfc5e8ab2c88825847d68c12fb9f58738306ee29111e2de388784d068dde57f54bdb3b5ec14e413d23423769c8f1acf331656cde44be93963fdc190fb2c4157bf5a95e1cf731c5d9f7e5ae77aef6f6e1a61017d830bb0b1a06ca8844bdbaf8e8fce087ee38629ed7200dad820f8c2e89d555a0b8727ddda5c2703c942a40a805a388a5a2f2ae62092c9944926bba6b01e8e7b9477c7ef9cd6eb152143cf8864482ecdf64796f2a8c90bd9264add1db534a400321407846a7764b65ce89057ecbc9c4583bc5e0", 0xee}, {&(0x7f0000001cc0)="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", 0xfe}, {&(0x7f0000001dc0)="6998ba6c5d7debe36c9f090a5574a95897129cc073fc1586ce05644a8e215a5d56f43e1fe3d9a4bf7ba7ae31ac47a13ce97b6fa4a856d24535800393c9c3dc80366b", 0x42}, {&(0x7f0000001e40)="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", 0xeb6}], 0x9}], 0x1, 0x0) 00:26:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 00:26:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20048090) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) setuid(0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 139.780132][ T6274] validate_nla: 3 callbacks suppressed [ 139.780143][ T6274] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 00:26:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='y', 0x1}], 0x1, &(0x7f0000000180)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x0, 0x2}}], 0x2c}, 0x0) 00:26:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x7ff, 0x4000) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x0) sendmsg$nl_route(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)=@ipmr_getroute={0x1c, 0x1a, 0x904, 0x70bd2d, 0x25dfdbfc, {0x80, 0x80, 0x0, 0x96, 0xfe, 0x0, 0xfe, 0x3, 0x100}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6f53e35b0b2dc53}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000104000100000475000000000000", @ANYRES32=r2, @ANYBLOB="82"], 0x20}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) socket(0x28, 0x805, 0x10000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0xb, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56}]}}]}, 0x8c}}, 0x0) 00:26:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='y', 0x1}], 0x1, &(0x7f0000000180)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x0, 0x2}}], 0x2c}, 0x0) [ 140.019058][ T6292] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 00:26:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='y', 0x1}], 0x1, &(0x7f0000000180)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x0, 0x2}}], 0x2c}, 0x0) 00:26:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000340000000000"]) 00:26:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x7ff, 0x4000) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x0) sendmsg$nl_route(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)=@ipmr_getroute={0x1c, 0x1a, 0x904, 0x70bd2d, 0x25dfdbfc, {0x80, 0x80, 0x0, 0x96, 0xfe, 0x0, 0xfe, 0x3, 0x100}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6f53e35b0b2dc53}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000104000100000475000000000000", @ANYRES32=r2, @ANYBLOB="82"], 0x20}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) socket(0x28, 0x805, 0x10000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0xb, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56}]}}]}, 0x8c}}, 0x0) [ 140.200093][ T6302] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 00:26:07 executing program 4: r0 = epoll_create(0x101) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) 00:26:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x7ff, 0x4000) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x0) sendmsg$nl_route(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)=@ipmr_getroute={0x1c, 0x1a, 0x904, 0x70bd2d, 0x25dfdbfc, {0x80, 0x80, 0x0, 0x96, 0xfe, 0x0, 0xfe, 0x3, 0x100}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6f53e35b0b2dc53}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000104000100000475000000000000", @ANYRES32=r2, @ANYBLOB="82"], 0x20}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) socket(0x28, 0x805, 0x10000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0xb, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56}]}}]}, 0x8c}}, 0x0) 00:26:07 executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:26:07 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x0) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/90}, 0x62, 0x0, 0x0) [ 140.610672][ T5101] [ 140.613038][ T5101] ===================================== [ 140.618567][ T5101] WARNING: bad unlock balance detected! [ 140.624092][ T5101] 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 Not tainted [ 140.631118][ T5101] ------------------------------------- [ 140.636646][ T5101] kworker/u5:6/5101 is trying to release lock (&conn->chan_lock) at: [ 140.644708][ T5101] [] l2cap_recv_frame+0x4ad8/0x9390 [ 140.651502][ T5101] but there are no more locks to release! [ 140.657199][ T5101] [ 140.657199][ T5101] other info that might help us debug this: [ 140.665248][ T5101] 2 locks held by kworker/u5:6/5101: [ 140.670523][ T5101] #0: ffff888079d59938 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 140.680892][ T5101] #1: ffffc90004a8fda8 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 140.692286][ T5101] [ 140.692286][ T5101] stack backtrace: [ 140.698224][ T5101] CPU: 1 PID: 5101 Comm: kworker/u5:6 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 140.708397][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 140.718471][ T5101] Workqueue: hci0 hci_rx_work [ 140.723159][ T5101] Call Trace: [ 140.726429][ T5101] [ 140.729350][ T5101] dump_stack_lvl+0xd9/0x150 [ 140.733939][ T5101] lock_release+0x4f1/0x670 [ 140.738438][ T5101] ? l2cap_recv_frame+0x4ad8/0x9390 [ 140.743645][ T5101] ? lock_downgrade+0x690/0x690 [ 140.748530][ T5101] ? __mutex_lock+0x231/0x1350 [ 140.753292][ T5101] __mutex_unlock_slowpath+0x99/0x5e0 [ 140.758662][ T5101] ? wait_for_completion_io_timeout+0x20/0x20 [ 140.764732][ T5101] l2cap_recv_frame+0x4ad8/0x9390 [ 140.769761][ T5101] ? hci_rx_work+0x6e5/0x1340 [ 140.774437][ T5101] ? lock_downgrade+0x690/0x690 [ 140.779293][ T5101] ? rcu_is_watching+0x12/0xb0 [ 140.784057][ T5101] ? l2cap_info_timeout+0x80/0x80 [ 140.789079][ T5101] ? __mutex_lock+0x231/0x1350 [ 140.793840][ T5101] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 140.799468][ T5101] ? wait_for_completion_io_timeout+0x20/0x20 [ 140.805646][ T5101] ? hci_rx_work+0x6b9/0x1340 [ 140.810333][ T5101] ? hci_conn_enter_active_mode+0x129/0x360 [ 140.816228][ T5101] ? lock_downgrade+0x690/0x690 [ 140.821117][ T5101] ? hci_conn_check_link_mode+0x550/0x550 [ 140.826864][ T5101] l2cap_recv_acldata+0xa80/0xbf0 [ 140.831901][ T5101] hci_rx_work+0x709/0x1340 [ 140.836413][ T5101] process_one_work+0x991/0x15c0 [ 140.841371][ T5101] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 140.846764][ T5101] ? spin_bug+0x1c0/0x1c0 [ 140.851088][ T5101] ? _raw_spin_lock_irq+0x45/0x50 [ 140.856116][ T5101] worker_thread+0x669/0x1090 00:26:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 00:26:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454d8, &(0x7f0000000040)) [ 140.860792][ T5101] ? process_one_work+0x15c0/0x15c0 [ 140.866003][ T5101] kthread+0x2e8/0x3a0 [ 140.870109][ T5101] ? kthread_complete_and_exit+0x40/0x40 [ 140.875766][ T5101] ret_from_fork+0x1f/0x30 [ 140.880226][ T5101] [ 140.891584][ T5101] Bluetooth: hci0: link tx timeout [ 140.896815][ T5101] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.909315][ T6314] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 00:26:08 executing program 4: r0 = epoll_create(0x101) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) 00:26:08 executing program 2: r0 = epoll_create(0x101) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) 00:26:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454d8, &(0x7f0000000040)) [ 140.967080][ T6313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:26:08 executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 141.067843][ T6326] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 00:26:08 executing program 4: r0 = epoll_create(0x101) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) 00:26:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454d8, &(0x7f0000000040)) 00:26:08 executing program 2: r0 = epoll_create(0x101) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) [ 141.139557][ T5101] Bluetooth: hci0: link tx timeout [ 141.141049][ T6340] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 141.144797][ T5101] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa 00:26:08 executing program 2: r0 = epoll_create(0x101) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) 00:26:08 executing program 4: r0 = epoll_create(0x101) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) [ 141.266063][ T6347] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 00:26:09 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x0) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/90}, 0x62, 0x0, 0x0) 00:26:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454d8, &(0x7f0000000040)) 00:26:09 executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:26:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 00:26:09 executing program 2: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:26:09 executing program 4: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 141.785560][ T5102] Bluetooth: hci0: link tx timeout [ 141.786886][ T6367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 141.790719][ T5102] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.808093][ T5101] Bluetooth: hci3: link tx timeout [ 141.813389][ T5101] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.830316][ T5098] Bluetooth: hci5: link tx timeout [ 141.836232][ T5098] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.856917][ T6369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.876832][ T6374] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 00:26:09 executing program 3: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:26:09 executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 141.891038][ T6372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:26:09 executing program 2: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:26:09 executing program 4: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 141.952701][ T6369] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.984682][ T6372] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.026200][ T5101] Bluetooth: hci0: link tx timeout [ 142.031363][ T5101] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.060272][ T5101] Bluetooth: hci4: link tx timeout [ 142.065610][ T5101] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.076371][ T5101] Bluetooth: hci3: link tx timeout [ 142.081572][ T5101] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.093801][ T5101] Bluetooth: hci5: link tx timeout [ 142.098968][ T5101] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa 00:26:09 executing program 4: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:26:09 executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 142.206980][ T5101] Bluetooth: hci5: link tx timeout [ 142.212512][ T5101] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.263903][ T5098] Bluetooth: hci0: link tx timeout [ 142.269107][ T5098] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa 00:26:10 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x0) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/90}, 0x62, 0x0, 0x0) 00:26:10 executing program 3: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:26:10 executing program 4: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:26:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 00:26:10 executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:26:10 executing program 2: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 142.668419][ T5098] Bluetooth: hci0: link tx timeout [ 142.673635][ T5098] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.681406][ T5098] Bluetooth: hci4: link tx timeout [ 142.686620][ T5101] Bluetooth: hci3: link tx timeout [ 142.691750][ T5101] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.699511][ T5098] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.712328][ T5098] Bluetooth: hci5: link tx timeout [ 142.717479][ T5098] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa 00:26:10 executing program 4: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:26:10 executing program 3: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:26:10 executing program 2: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:26:10 executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 142.842135][ T5098] Bluetooth: hci5: link tx timeout [ 142.848205][ T5098] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.891474][ T5098] Bluetooth: hci3: link tx timeout [ 142.896834][ T5098] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.912300][ T5098] Bluetooth: hci0: command 0x0406 tx timeout [ 142.924000][ T5098] Bluetooth: hci4: link tx timeout [ 142.929601][ T5098] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa 00:26:10 executing program 2: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 142.953037][ T5098] Bluetooth: hci0: link tx timeout [ 142.958202][ T5098] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa 00:26:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454d8, &(0x7f0000000040)) [ 143.125885][ T5098] Bluetooth: hci3: link tx timeout [ 143.131470][ T5098] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa 00:26:10 executing program 0: r0 = epoll_create(0x101) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) 00:26:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454d8, &(0x7f0000000040)) 00:26:10 executing program 4: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:26:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454d8, &(0x7f0000000040)) 00:26:10 executing program 2: openat$rtc(0xffffff9c, &(0x7f0000000200), 0x301200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x3, 0x7ff, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x8, [{@local, 0x2}]}, @generic={0x82, 0x4, "e22f"}]}}}}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8003400300001000708040000800200061f0400ff0004000ad7020004000700040007007e0b11ff020000000d5e0800080003000300070040e0bfa6498a733598b6adaef0faadfe30d66b91be0dd7974a52370391482434296335d1ecee8637e1af38193c2e1c0a126396d62125402fe6c6aeb90c008ba8bb5b50533b21c3f05f53a8083bdfe2c62086917cc3bb0d62af35f01c1fdf31f51665801b0b3a111cad6e628acb4b75b325249aebd34b2aabe9dce0214b83cbdeb3274e20b7"], 0x39) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffa0, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@delchain={0x24, 0x29, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:26:10 executing program 1: r0 = epoll_create(0x101) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) 00:26:11 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) [ 143.589760][ T5098] Bluetooth: hci5: link tx timeout [ 143.595145][ T5098] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.603617][ T5098] Bluetooth: hci3: link tx timeout [ 143.608783][ T5098] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa 00:26:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454d8, &(0x7f0000000040)) 00:26:11 executing program 1: r0 = epoll_create(0x101) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) 00:26:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454d8, &(0x7f0000000040)) 00:26:11 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 00:26:11 executing program 0: r0 = epoll_create(0x101) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) 00:26:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454d8, &(0x7f0000000040)) 00:26:11 executing program 0: r0 = epoll_create(0x101) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) 00:26:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) [ 143.872300][ T5098] Bluetooth: hci5: command 0x0406 tx timeout [ 143.878501][ T5101] Bluetooth: hci3: command 0x0406 tx timeout 00:26:11 executing program 1: r0 = epoll_create(0x101) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) 00:26:11 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 00:26:11 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) [ 144.112330][ T5102] Bluetooth: hci4: command 0x0406 tx timeout 00:26:12 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 00:26:12 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x0) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/90}, 0x62, 0x0, 0x0) 00:26:12 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 00:26:12 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 00:26:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 00:26:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 00:26:13 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x0) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/90}, 0x62, 0x0, 0x0) 00:26:13 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 00:26:13 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 00:26:13 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 00:26:13 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 00:26:13 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x0) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/90}, 0x62, 0x0, 0x0) 00:26:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3e80, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f00002ab000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x90e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0x259b, &(0x7f00000003c0)={0x0, 0xfac3, 0x0, 0x2, 0xc2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b0b000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r6 = open$dir(0x0, 0x40000400000806c1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) close(r6) truncate(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 00:26:14 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x0) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/90}, 0x62, 0x0, 0x0) 00:26:14 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x0) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/90}, 0x62, 0x0, 0x0) 00:26:14 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x0) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/90}, 0x62, 0x0, 0x0) 00:26:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 00:26:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 00:26:14 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x300, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) 00:26:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 00:26:14 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x300, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) 00:26:14 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x300, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) 00:26:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 00:26:14 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "dc5568", 0x18, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[@hopopts={0x0, 0x1, '\x00', [@jumbo, @pad1]}]}}}}}, 0x0) 00:26:14 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x300, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) 00:26:15 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x0) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/90}, 0x62, 0x0, 0x0) 00:26:15 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x0) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/90}, 0x62, 0x0, 0x0) 00:26:15 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000600), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) 00:26:15 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x0) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/90}, 0x62, 0x0, 0x0) 00:26:15 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "dc5568", 0x18, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[@hopopts={0x0, 0x1, '\x00', [@jumbo, @pad1]}]}}}}}, 0x0) 00:26:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) ioctl$TCSETSF2(r0, 0x404c4701, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x0, 0x0, "ebeed70000000000000000960000000800"}) 00:26:15 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "dc5568", 0x18, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[@hopopts={0x0, 0x1, '\x00', [@jumbo, @pad1]}]}}}}}, 0x0) 00:26:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) ioctl$TCSETSF2(r0, 0x404c4701, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x0, 0x0, "ebeed70000000000000000960000000800"}) 00:26:15 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000600), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) 00:26:15 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "dc5568", 0x18, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[@hopopts={0x0, 0x1, '\x00', [@jumbo, @pad1]}]}}}}}, 0x0) 00:26:15 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000600), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) 00:26:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) ioctl$TCSETSF2(r0, 0x404c4701, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x0, 0x0, "ebeed70000000000000000960000000800"}) 00:26:16 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x0) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/90}, 0x62, 0x0, 0x0) 00:26:16 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000600), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) 00:26:16 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x0) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/90}, 0x62, 0x0, 0x0) 00:26:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) ioctl$TCSETSF2(r0, 0x404c4701, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x0, 0x0, "ebeed70000000000000000960000000800"}) 00:26:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) ioctl$TCSETSF2(r0, 0x404c4701, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x0, 0x0, "ebeed70000000000000000960000000800"}) 00:26:16 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x0) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/90}, 0x62, 0x0, 0x0) 00:26:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) ioctl$TCSETSF2(r0, 0x404c4701, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x0, 0x0, "ebeed70000000000000000960000000800"}) 00:26:16 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000000400400bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000815d6405000000000067020000200000001704000009000a40b7040000000100006a0a00fe00000000850000001a000000b7000000000000009500000000000000a93e90832ff9d40a409f01f6147c8f6fd267bf410e76c540106f89ec68823ce3c4bcc4ce81e97719ea969f2a019a6137ad1efc966f1cfdd2f673efc20c07ec082bc6de68ab0a5ebf4ee60253516cc871311ab25868e1d9a014263697ca83c505c2ead0d85a2bcc922a3aa71489fa0000c1a6ec9aa2e28000004bcff56cf5a84cefb43ea72351190a711fd2b83a3596da0729476ab71406067983000000a313ea74c2cde2dedd424a4596f98e3e70a6f1d8abce75f01dbb60bdf731084fed35f16ae8b3aa4c6dd4880c76e5837f39a161b050abc5a34588ea19114caebb799d1084e7113c77ae25998e1e3c55707a209412cba0121de52e5e8cceddf2cb4b9895c0738fda3ea38c09e75b1f39be8af2c746fbb43e3530767d8ae296487c0e650ead9003d032008fee9b2b62fc202240219f497e89548a2977f86137ecb5753dfc87f148ed2392ef113cbe241a98b4e8f3bf878f1dc0e115dd1c328f54369bc8dfd3a4ea21259ed518ae80606ef83d69b9d0d972b2211d05b2e31d61bf49ca69bdb0f57d5f16769d1605e8045c6880b425f8575f863a7e1b7174281ab87fb59355bfaf7ff9b0146acffea06f3b0ba7b7357ba84c953523e92ee8cc4d8be00500000095e31139b76417432c305d59cb68bff089979504c71418bd62ec60351749c668f7a90669ee082da8cfb07d75ce2adc8d4b2eab37b47e0700000000170ac03c7ae91659fc79fc36c84dd1b2b8972c5c2544e3b50acd3b00000000000d62fae930c2308e2401bb761565ac4eda4ca118ebbe000000000000000000000000000000a52d598dbcfeb90dd310175435c84362ef27f7d55431a5756e4be9698bcd550c272c391cf24ea56d016e1f21b5999e1448f8784db6a9d4f36ec14cc67fcdd41c8ba146ed7d3fb07df9687b95efcd74ad8dfd14234dab4da83f91a2925b49f6040087cfaa9f83a6cdb0e031d9eb6cbff6eba616992f3ba67394a543c3210d8def880b2c07661cf7268ec32ac38db9d3062571ec8eb3290bb4a823674e89cf1716d4bc9fac0c47d854632a1d943a9dc58e6f4d0b687a055983a46fdd52f3c87506ae419c604f62b56ad1420eca5484ee0092563332124c612f4b79f2763a2288644bbe0d29c4d4cb1da9b7f9ded12465ed5ba385d6be8843ee4f48c9c913c00f1869c7d815313aa7081597811fe82a4e044e76d8cd4c3ee7460ec713f1048c453393734b3b4f9b972c7e85dbf2fff1bd790a1e39296d7aeb3784bf164f8dc4bfd5d8600ffaf68bc1c4f89b8c5aa510106f40bc45772239f3a3862d47003947a9e1d762d23cd779bf53c7bdb633024f4bec79315a1dd0137c813832cda25804c05496ee3c609ec77d5397a70008ae408560d5a9d8d9aa3a960de7aedd0f38b0c503025768bcbd102d3703534b99c39f9ab857da93bd5c13b98d84137e0fcfae94794528273c23fb67c14258304b5db243eff4d28dc0a1160000ff9a3e9b8627d93dfa4327777f319d117bbf62f77349053ff6108ae95c197bb96fcc09b1a70280c82447c59dafad6267dc4e262a14ff5b55824162dd2432248b2745ef2e6b201dc6d95ebf0cedc792706421503512f678f9e14f2460e69f341f19ca26746c3fcf31255c49be2df35a216f597dbb82230a0c6d8d58e5e96d7e89fbcfc3deba9b116ed7895348848cb3715d8501e136425c1cc6a21f38a683e208e0125f9ff20688e4a373be58fd962ab0cb5de65ca66463a85883eb3d525957062224275e36a71f138aff466df840e14b58e876b4b60d879769caf52258160fba5a25ddd0e6cac49bf8bacf1adb3c2b947eb1d874e56abc77e4492bcde4a0c2c7f69f759b3b9adf24c1a0f4226aadead690cad2b0ae527dde8f710ee36d02c7a86bf4895bacd3a0efb48066a9f32487cd105aec8e8457e3a57cf7ffc9174a8adf6bb40bb735bfe1368d10d52e90d2f38b79111b11942b66724b980d7b79b6b962409a9ad7857ede43ef54ed01b11748aad92c64c2d80247b820749c3dacea444dc07426101eef1debea31e73742cc3df8fad87acc06e67b99600c6e89de39267d45228f611cb7d3d85eda475b8c547e8242b0d6c8eb7b9d33a30295d489eaa06ff34339254651c18a6d8d76e365eb31"], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:26:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) ioctl$TCSETSF2(r0, 0x404c4701, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x0, 0x0, "ebeed70000000000000000960000000800"}) 00:26:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) ioctl$TCSETSF2(r0, 0x404c4701, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x0, 0x0, "ebeed70000000000000000960000000800"}) 00:26:16 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:26:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) ioctl$TCSETSF2(r0, 0x404c4701, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x0, 0x0, "ebeed70000000000000000960000000800"}) 00:26:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0xfff, 0x8}) 00:26:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) ioctl$TCSETSF2(r0, 0x404c4701, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x0, 0x0, "ebeed70000000000000000960000000800"}) 00:26:17 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008d00)=ANY=[@ANYBLOB="3c00000010004b0400dffffffff0000000000000", @ANYRES32=0x0, @ANYBLOB="800002000000000014000300776c616e30000000000000000000000008000a"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010004b040000000000f0000000000000", @ANYRES32=0x0, @ANYBLOB="800002000000000014000300776c616e30000000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 00:26:17 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:26:17 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa0, 0x8e, 0xfc, 0x8, 0x846, 0x1001, 0x2393, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0x3f, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 00:26:17 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}]}]}]}, 0x34}}, 0x0) [ 149.575348][ T6642] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 00:26:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xb, 0x1, 'pimreg\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 00:26:17 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}]}]}]}, 0x34}}, 0x0) 00:26:17 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:26:17 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}]}]}]}, 0x34}}, 0x0) 00:26:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xb, 0x1, 'pimreg\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) [ 149.709951][ T6650] team0: Port device wlan0 added 00:26:17 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}]}]}]}, 0x34}}, 0x0) 00:26:17 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}]}]}]}, 0x34}}, 0x0) 00:26:17 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008d00)=ANY=[@ANYBLOB="3c00000010004b0400dffffffff0000000000000", @ANYRES32=0x0, @ANYBLOB="800002000000000014000300776c616e30000000000000000000000008000a"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010004b040000000000f0000000000000", @ANYRES32=0x0, @ANYBLOB="800002000000000014000300776c616e30000000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 00:26:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0xfff, 0x8}) 00:26:17 executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008d00)=ANY=[@ANYBLOB="3c00000010004b0400dffffffff0000000000000", @ANYRES32=0x0, @ANYBLOB="800002000000000014000300776c616e30000000000000000000000008000a"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010004b040000000000f0000000000000", @ANYRES32=0x0, @ANYBLOB="800002000000000014000300776c616e30000000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) [ 149.832678][ T6665] team0: Port device wlan0 removed [ 149.862869][ T6670] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.907444][ T6671] team0: Port device wlan0 added [ 149.917916][ T6038] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 149.936530][ T6665] team0: Port device wlan0 added [ 150.192296][ T6038] usb 5-1: Using ep0 maxpacket: 8 [ 150.342830][ T6038] usb 5-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice=23.93 [ 150.351952][ T6038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.361075][ T6038] usb 5-1: config 0 descriptor??