, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}]}, 0x424}, 0x1, 0x0, 0x0, 0x8004}, 0x91) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$int_out(r5, 0x2, &(0x7f0000000840)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000880)={0x0}, &(0x7f00000008c0)=0xc) pidfd_open(r6, 0x0) r7 = shmget$private(0x0, 0x2000, 0x78000808, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r7, 0xc) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000900)='/dev/btrfs-control\x00', 0x400000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r8, 0x40806685, &(0x7f0000000ac0)={0x1, 0x2, 0x1000, 0x72, &(0x7f0000000940)="68b2788667b1fcfdfb4a4040fd86ea08ab5f71ddbf9199e18935e63a45cf454f58aa6c82ee2b2ea8a46561608967f7ba9c64ed553e6e2d51b42286698d3bcd91eed8d47cc9be48aa90e48477444392fa10e836a196a9bc97cb6e1d487652f20681381a9567f0eb42cf1cb00a15059b361372", 0xd7, 0x0, &(0x7f00000009c0)="d1874f6d44ca1b9900854bbb7f104f861b1c21991884a74a4aa5b0d4b3822143c80185033c5c36894db9a81894fa949d5b9791f4b7017f139de1e7544ba50c63cf4bfe2b84a205b4dd66f215b967e5501b5a302d2e4ea201a8afc958acdaaa692b2ca59f039a298e897422199bfd9d6d4dd0213af0b7ebd8ad9cf9f74929ee1972d21af0eb9e20644eb0fda9817c9212cd20fe9e3125d39de3c281ae9dce8d9e5841c40b0a70ffddac122e3a7ae1bca6244598dd105eb0a4ac463b8cd3cb80d216d7d42fe36872e0e6616f718754c846ec2982f6723f58"}) 15:36:05 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) r2 = dup3(r1, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2080, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x3, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000002a7b000000000000000000000000030000000000000000000000ecffffff00000000ffffffff0000000000000000000000000012c31aa8070000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000005bd3e7b4000000000000000000ffffff7f000000000000000000000000000000feffffff010000001900000009000000000000000000106cf4aa4ac99e8d3a5b0f2b000000006c6f0000000000000000000000000001000000000000000000000000100000fa000000000000000000000000a85f00cc99b4d1000000000005000010aaaaaaaaaa00000200000000000070000000d31d1dcd2f3ce1f5939e70000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000045d94e6412a5ba59d210ec60de0cfd8dd1349468417b260fb9314b0fec8442169e70d274ca84c23a8a1b269ce13ce635c4df65226b80813535c1941eacecbb84ff7c962ec4ff315f4f86d65d1d38c43fc6f7cfa065422d0ac6045b8726993d55a02a579ccddbed7d8d61308394eb0af30d1cec134ad4"]}, 0x228) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x0, 0x0, 0x1, 0x2, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0xff, 0x1}, 0x20) socket$inet6(0xa, 0x3, 0x80000000000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xa30000, 0x7fff, 0x100, r2, 0x0, &(0x7f0000000480)={0x990a7e, 0x4, [], @p_u32=&(0x7f0000000440)=0x8000}}) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="10002dbd7000fedbdf25020000000c00050023000000000000000c000300040000000000000008000100000000000c00030005000000000000000c000800ffffffff000000008911fad3a1c09214470c31c669120eace3fe716398ef2d"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmmsg(r4, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 1078.589912][ T7782] usb 3-1: new high-speed USB device number 54 using dummy_hcd 15:36:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x5, &(0x7f0000000080)=[{0x1, 0x6, 0xff, 0x7}, {0x5, 0x80, 0x8, 0x8}, {0x4, 0xf8, 0x3, 0x4f}, {0x9, 0x3, 0x40, 0x3ff}, {0x6, 0x86, 0x7, 0x10000}]}) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000240)=0xff, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0xa, 0x801, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000040)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000180)='#', 0x1}], 0x1, &(0x7f00000000c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x0) [ 1078.710154][ T7782] usb 3-1: Invalid ep0 maxpacket: 512 [ 1078.870015][ T7782] usb 3-1: new high-speed USB device number 55 using dummy_hcd 15:36:06 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffc00, 0x3f}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80000}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x9f2cb624abfa9b8a) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0]) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0xece) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000000)={0x2}) r7 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r4, 0x10200008) sendfile(r1, r7, 0x0, 0x80001d00c0d0) [ 1078.976007][ T7782] usb 3-1: Invalid ep0 maxpacket: 512 [ 1078.983428][ T7782] usb usb3-port1: unable to enumerate USB device 15:36:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x44280, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f00000000c0)={0x1, 0x4}, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x2840, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x100) r7 = dup(r0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000000)=0x2, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x151082, 0x0) finit_module(r1, &(0x7f0000000180)='\x00', 0x2) setsockopt$IPT_SO_SET_REPLACE(r7, 0x8000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x358, 0x1f0, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x56, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'ip6erspan0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x692) 15:36:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x10001, 0x0, &(0x7f0000ffc000/0x1000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}]}]}], {0x14}}, 0x80}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r8, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x8194}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', r8}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x43, 0x0) [ 1079.123749][ T7929] usbhid 6-1:0.0: can't add hid device: -71 [ 1079.131200][ T7929] usbhid: probe of 6-1:0.0 failed with error -71 [ 1079.165099][ T7929] usb 6-1: USB disconnect, device number 42 [ 1079.191897][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1079.214466][ T6246] xt_recent: Unsupported userspace flags (00000056) 15:36:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00004000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x10}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{}, {{0x0, 0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}}, 0x0) [ 1079.258932][ T6245] device bridge35 entered promiscuous mode [ 1079.275587][ T6253] device bridge35 left promiscuous mode [ 1079.289622][ T6245] device bridge35 entered promiscuous mode [ 1079.331083][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1079.692237][ T6261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1079.751679][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1079.774230][ T6261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:06 executing program 3: mlockall(0x1) clone(0x1818a000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getpgrp(0x0) shmdt(0x0) 15:36:07 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x600, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) 15:36:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SOUND_PCM_READ_BITS(r2, 0x80045005, &(0x7f0000000000)) dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8900, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0xfe4) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x30d}, 0x9c) 15:36:07 executing program 2: socketpair(0x29, 0x3, 0x802, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x240400) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000080)=[{&(0x7f0000000040)="2300000025000511d25a80648c63940d0424fc60340018000a001100022f000037153e", 0x23}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) io_setup(0x3b24, &(0x7f0000000740)=0x0) io_submit(r2, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0x2000, 0x0, 0x1, 0x0, r1, &(0x7f0000000780), 0x4009}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000100)="684ba7b71661cbf4b9202236f15d77fb336033683cdb80362408a59d99bbd86e3a34435898274d66eb0c23cd0685dd61663cc385d4c2f7ed01c0227622f20075a986a5efe8", 0x45, 0xde, 0x0, 0x1, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000240)="cf5db49c10344abbeb976fcb7564de528ad7176c65af04cb83769d04a1c7b586ea378ff41b2a026f8a237a953556d964f45e757dc99b032ff5d452cb8775658e446a3e928ed9d8aff5ebe0021715d2daa02aa1fe5d0d0ce5f3ce418ae7392eb054ad81e8a20d0b4f15a5b7f9430e13f0711b268edee06853aae94bf5205d6ed70334106a8758d9c5fdc098e0e0c6c0cddb7d389fc43801ee2d8107bc06a12df69061a8dd23fbd050affa48a4ead36a76583ebe707c2fce708aba94f6c79065ca7763a4011b8475818d29cba1d7f7c48967d9fac4", 0xd4, 0x80000001, 0x0, 0x3, r6}]) 15:36:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x4b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) memfd_create(&(0x7f0000000180)='\\-\x00', 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040)=0x8, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x6) write$cgroup_int(r4, &(0x7f0000000200), 0x400c00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xa, 0xf, 0x9, 0x790, 0x2c, 0xffffffffffffffff, 0x3, [], 0x0, r6, 0x1, 0x3, 0x1}, 0x40) [ 1080.157066][ T6280] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1080.306677][ T6280] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.2'. 15:36:07 executing program 2: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x499803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x80ac3000) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x341, 0x0) write$9p(r2, &(0x7f0000000100)="0600000000000000c9b90003060000002a1ff7adf576f3790f61bc2c198c4397a37cbf8d63735e09ab8383afd2de1a5587fe067fde18fa64249e1dbae8886cc4318c81733d8af5a72e2a678a537d233abc5afa4d18f8d88392cafbbf33b3aacfcf04f7b0bdd7868742", 0x69) write$FUSE_WRITE(r2, &(0x7f0000000040)={0x18, 0x0, 0x2, {0x400}}, 0x18) preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) [ 1080.888173][ T6308] dlm: no locking on control device 15:36:08 executing program 5: ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000d5bdeca6478e2b47937bbb"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x131000, 0x0) r3 = pidfd_getfd(r2, r1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3a6f], 0x0, 0x1803}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000180)={0x1f, 0x1, &(0x7f0000000040)=[0x8000], &(0x7f0000000080)=[0x200, 0xe9, 0x2, 0x9], &(0x7f0000000140)=[0x1c, 0x7]}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x40006, 0x0, 0x0, 0x7f, 0x5, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000000], 0x4, 0x81000}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) fsetxattr$security_evm(r7, &(0x7f0000000300)='security.evm\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="063320e8de0fce6d"], 0x1, 0x6) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1081.250935][ T6316] dlm: no locking on control device 15:36:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) writev(r0, &(0x7f00000023c0)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000040)="fdfca11e17ed05a4d54a36f0b49457c6ed4954571ff22946df4df7dfea89bf143d3a89a0e486e377bdcbabfbf95129c45c747a327b7fd4d5696338fbcb6194e4e41cc171cfccc1f11c9c9bc53660a153dbe3f351db4e44bce01a3ba4d3649fa0879e28afdad0d7455abd23755628ca0263aafe5f2aff1d5ec5efdb5178cb26fc6bec563a9424dc35b4", 0x89}, {&(0x7f0000001200)="5284a0075aa4bc7e2469231482c42bfa656f29b99ad3ab718270a4430e94d878c33fb707dffb83a77f179364ee64b47247b0f88cb635001069d61856f4558da82240a54a3972f7d1eea76603469d931a3a950fa4a8e3624f8554c14d804a2296add7e13ccb0b00e194cc2a5b76a78626dbc0ed4ea1fff06d6695361809036ad7ef72d504b07a839d69c8ed2dc86908b4da10c5dc24825cfde073cd33a38122e192cda60a510a8de927562ad4856cfecf5ec693894637", 0xb6}, {&(0x7f0000000100)="3228bfa57120910fc47ce65dfed28419856b0804b95c49e3859a041aca8819d8fef064394d8f9694c53a36fe2b793320c4c27b10dbcc2bcfe22ff8cd127c2a8b33bb7728cc7c51c74f0184a1ea8df83f3acde90ee8571ea8779566f4e3b12566f488db4da06afbb53a", 0x69}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="b68f6339e4df32875a339c532dbea3c66342b511baf741db34e70db947f0b17d3becfdbd003264b5b4a6dffcf724dc52ec3d67922b2a7c17a1566022a021685fc60053e3f93f0bee9c16f9bed913dd57104d66ec1435dc5702250ba00f7bda602fac463f827393c1b6c0b83263d584f58a15fe816b53c281e418018e7e298ce54b217ee0870532df77c385", 0x8b}, {&(0x7f0000002380)="e6756f88d435af9200f758e62920d8124f6408b056b24706d4e4d8e1e47a2197df21edb604701721", 0x28}], 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) move_pages(0x0, 0xe5, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 15:36:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f00000002c0)="ba4300ecf32ef0f750b50f012a163066b969025eea0f3266b99f0000400f3266654757b8ec111000b1b101c10f23c80f21f866350800a0000f23f8b82b000f20d86635080000000f22d80f01bd0050", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11e000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_NMI(r2, 0xae9a) fallocate(0xffffffffffffffff, 0x1, 0x1, 0x3f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:36:08 executing program 4: openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) gettid() r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x1410, 0x10, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004012}, 0x44000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) mmap(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x300, &(0x7f0000000380)={&(0x7f0000000200)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x307, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1b}]}, 0x24}, 0x1, 0x0, 0x0, 0x240009c4}, 0x4004010) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000200)=0x2) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000000)=0x1) [ 1081.689494][ T6332] ubi0: attaching mtd0 15:36:08 executing program 2: set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7ff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) inotify_init() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) sendfile(r2, r1, 0x0, 0x283) [ 1081.788188][ T6332] ubi0: scanning is finished [ 1081.803974][ T6332] ubi0: empty MTD device detected [ 1082.078551][ T6332] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1082.096558][ T6332] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1082.116456][ T6332] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 15:36:09 executing program 2: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000200)={[0x82100003]}, &(0x7f0000000380), 0x0, 0x8) r0 = memfd_create(&(0x7f0000000440)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2, 0x12, r0, 0x95a5d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') [ 1082.137028][ T6332] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1082.156368][ T6332] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1082.178707][ T6332] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 15:36:09 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) socket(0x2, 0x803, 0xff) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24004850, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) pipe(0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmget(0x2, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000267000/0x4000)=nil, 0x4000) flock(0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000100)) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun\x00', 0x280101) [ 1082.206226][ T6332] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3843785637 [ 1082.232642][ T6332] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1082.285030][ T6351] ubi0: background thread "ubi_bgt0d" started, PID 6351 15:36:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001300)={0x2c, &(0x7f0000001140)=ANY=[@ANYBLOB="4002550000005506671d8631af0b10504d5bc6"], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r5}}, 0xc) 15:36:09 executing program 4: open(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xf6, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {&(0x7f0000000880)="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", 0x13d, 0x34f9}], 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) [ 1082.528246][ T29] audit: type=1800 audit(1594136169.613:98): pid=6365 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15848 res=0 15:36:09 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="00000400000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x4, "de104595"}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r7, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x8194}}, 0x20}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)={0x144, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x25}, {0x6, 0x11, 0x2e}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}, {0x6}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x207}, {0x8, 0x13, 0x3f8}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x2}, {0x5}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8080}, 0x24048000) [ 1082.740099][T22614] usb 3-1: new high-speed USB device number 56 using dummy_hcd 15:36:09 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4091) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r5, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x500}}], 0xf, 0xa, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="0307000300fffffcfe000100000004000180"], 0x18}}, 0x0) 15:36:09 executing program 4: r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) pidfd_open(r2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000022, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x9) 15:36:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) [ 1083.040203][T16473] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1083.121484][T22614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.162421][T22614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.199577][T22614] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1083.275210][T22614] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1083.280326][T16473] usb 6-1: Using ep0 maxpacket: 16 [ 1083.321976][T22614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.354643][T22614] usb 3-1: config 0 descriptor?? 15:36:10 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x57, 0x59043a20, 0x5, 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x26}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0x46, 0x4000, &(0x7f0000000100)="4d50b441e692763513ef874565580000ff0d0000f000122e25d386dd227dcb6470faa27ed2a0ff3862c8112b9bd19802e274d7b70fe661176f27007b9631b3a0291d70d5f32d", 0x0, 0x1fd, 0x0, 0x66, 0xffffff02, &(0x7f0000000000), &(0x7f0000000380)="7045502c9fe7d72a5d725d07000000840c0fa18b214f01adde5b220866f34723aefcc876df83a6915a0a9aed8abea8fce9dca40354f218178eedfd571140c75e8aaafa38e2ecaa6ebfc27f5dc7301c0a85450d3cfc4ceee8968d0ab47f1d829da06a01f82ec4f14d3c692a59db27ece44a0e029488462d11e930e90d5deafb1b5af71d3cd3c053aa34bc8d000000"}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040), 0xc) [ 1083.410456][T16473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1083.466937][T16473] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1083.537117][T16473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.612194][T16473] usb 6-1: config 0 descriptor?? [ 1083.691098][T16473] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 15:36:10 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040), 0x4) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r2, &(0x7f0000000040)='/', 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = creat(&(0x7f0000002440)='./file0\x00', 0x0) r5 = creat(&(0x7f0000002440)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000240)='threaded\x00', 0xfb3f) fallocate(0xffffffffffffffff, 0x2, 0x7fff, 0x400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000}, 0x208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x8, 0x0, 0x8000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="cf86db2ada4d2e8b6d9066643d9a41ef05e334abdc85743e86c104f4367ee850b21cc10127bc7ca56decf60e40cf827c", @ANYRESHEX=r6, @ANYBLOB="2c722f6f746d6f646d3d303030303803000000f70000003f7da7a5b43030303070ef522e3a851ae7b800"/51, @ANYRESDEC, @ANYRES32=r1, @ANYRESDEC=0x0, @ANYBLOB="9d612eff01000000000000ff0123dee62e28b29bc9ea833e9aafca00"]) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @local}, 0xc) socket$inet(0x2, 0x3, 0x2) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xca, &(0x7f0000000000)=0x2, 0x4) [ 1083.841881][T22614] plantronics 0003:047F:FFFF.0010: unknown global tag 0xc [ 1083.849044][T22614] plantronics 0003:047F:FFFF.0010: item 0 2 1 12 parsing failed [ 1083.894118][ T7417] usb 6-1: USB disconnect, device number 43 [ 1083.902111][T22614] plantronics 0003:047F:FFFF.0010: parse failed [ 1083.947045][ T6398] fuse: Unknown parameter 'φÛ*ÚM.‹mfd' [ 1083.963885][T22614] plantronics: probe of 0003:047F:FFFF.0010 failed with error -22 [ 1084.005587][ T6398] fuse: Unknown parameter 'φÛ*ÚM.‹mfd' [ 1084.052701][T22614] usb 3-1: USB disconnect, device number 56 15:36:11 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040), 0x4) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r2, &(0x7f0000000040)='/', 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = creat(&(0x7f0000002440)='./file0\x00', 0x0) r5 = creat(&(0x7f0000002440)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000240)='threaded\x00', 0xfb3f) fallocate(0xffffffffffffffff, 0x2, 0x7fff, 0x400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000}, 0x208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x8, 0x0, 0x8000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="cf86db2ada4d2e8b6d9066643d9a41ef05e334abdc85743e86c104f4367ee850b21cc10127bc7ca56decf60e40cf827c", @ANYRESHEX=r6, @ANYBLOB="2c722f6f746d6f646d3d303030303803000000f70000003f7da7a5b43030303070ef522e3a851ae7b800"/51, @ANYRESDEC, @ANYRES32=r1, @ANYRESDEC=0x0, @ANYBLOB="9d612eff01000000000000ff0123dee62e28b29bc9ea833e9aafca00"]) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @local}, 0xc) socket$inet(0x2, 0x3, 0x2) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xca, &(0x7f0000000000)=0x2, 0x4) [ 1084.227821][ T6418] fuse: Unknown parameter 'φÛ*ÚM.‹mfd' 15:36:11 executing program 4: ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x210001, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000000080)={0x8, 0x0, 0xea54, 0x7fff}) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0xa30000, 0xffff5dba, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x990a7b, 0x1, [], @p_u8=&(0x7f00000000c0)=0x42}}) getsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x490100, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x7f}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) r3 = creat(&(0x7f0000000380)='./file0\x00', 0x4) ioctl$CAPI_GET_ERRCODE(r3, 0x80024321, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3f, 0x8a, 0x81, 0xe3, 0x0, 0x3, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x620d, 0x4bb4f7fc3a10a27, @perf_bp={&(0x7f0000000400), 0xa}, 0x800, 0x8, 0x60, 0x2, 0x8, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) io_setup(0x0, &(0x7f00000004c0)=0x0) io_pgetevents(r4, 0x4, 0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f00000005c0)={0x77359400}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000600)=0x5) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x190, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x190}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000900)='/dev/btrfs-control\x00', 0x606080, 0x0) getsockname$ax25(r6, &(0x7f0000000940)={{0x3, @null}, [@rose, @default, @remote, @default, @rose, @null, @netrom, @bcast]}, &(0x7f00000009c0)=0x48) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000a00)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000a80)={r7, 0x80000}) 15:36:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) munlockall() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x58, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xf5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008090}, 0x8042) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r8, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x8194}}, 0x20}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@private=0xa010100, @remote, r8}, 0xc) dup(r0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty=[0xf], @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0x7, @multicast1}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20020000}}}}}}, 0x0) [ 1084.459937][ T7417] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1084.537975][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:36:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040000000020001002002000000000000040000000000000000000", 0xffffffe5}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)={0x65, 0xc7, 0x4, "5c707a8042e3685c794638258496e71992547abcde41f8149867c0da81798bc3627088c6db6a4952290e372e4724b44f5264a40dfe90ddc9bf29a1412344124906e3c15553d956c3d3c5160922be74a63f76e6d226d334a8a314741f0ac36e4a72638ca00b"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x0, 0x12, r2, 0x82000000) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) [ 1084.629589][ T6426] device bridge36 entered promiscuous mode [ 1084.641008][ T6431] sit: Dst spoofed 0.0.0.7/:: -> 224.0.0.1/2002::700:0 [ 1084.679437][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1084.725511][ T7417] usb 6-1: Using ep0 maxpacket: 32 [ 1084.850523][T22614] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1084.851203][ T7417] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.885710][ T7417] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.908578][ T7417] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1084.931916][ T7417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.971521][ T7417] usb 6-1: config 0 descriptor?? [ 1085.021126][ T7417] hub 6-1:0.0: USB hub found [ 1085.237481][ T7417] hub 6-1:0.0: 1 port detected [ 1085.250561][T22614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.269554][T22614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.339950][T22614] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1085.390887][T22614] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1085.419914][T22614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.429274][T22614] usb 3-1: config 0 descriptor?? 15:36:12 executing program 2: ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0x0, 0xf0, 0xf0, 0xf0, 0xf0, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@unspec=@pkttype={{0x28, 'pkttype\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'ipvlan1\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0xd8, 0x8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) [ 1085.499988][T22614] usb 3-1: can't set config #0, error -71 [ 1085.515188][T22614] usb 3-1: USB disconnect, device number 57 15:36:12 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fb}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000008012005fffff0000550214f9f407", 0x11) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2, 0x1}, 0x6) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1085.620580][ T6450] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 1085.657778][ T6450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1085.870127][ T7417] hub 6-1:0.0: activate --> -90 [ 1086.293178][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1086.341936][ T6370] device bridge22 entered promiscuous mode [ 1086.361392][T16473] usb 6-1: USB disconnect, device number 44 [ 1087.139968][T16473] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1087.389979][T16473] usb 6-1: Using ep0 maxpacket: 16 [ 1087.510053][T16473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1087.530956][T16473] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1087.552661][T16473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.580487][T16473] usb 6-1: config 0 descriptor?? [ 1087.631126][T16473] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 15:36:14 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000011c0)="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") readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000080)=0x2) preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) [ 1087.736365][T22614] usb 6-1: USB disconnect, device number 45 15:36:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r6, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x8194}}, 0x20}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=r7, @ANYBLOB="00000000000000000c002b800800009b5e837e"], 0x34}}, 0x0) 15:36:14 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000200)=ANY=[@ANYBLOB="010000ab0c8771a80b2c739598d5a3173e1d9b28fe561adc2feeba3e23f569c8434fc924f533e39d9f879062f349ccd3c28aa50500d4f99973d96feafcaf2c1cde97616ca69f2d55b81b8607d8d7103163093c77b45bb74b7394a1a304c45972fa3fb65149ca25e7e733a7f292c9378822bf85ed640a33a6a71ac25e02e3ad583cf2886a04000000464008dd5b51f04952847bf9964b658fe50a7c6a9298789b8cb907464e1e3dc68e02a559c3b59b98d5d5b95e2bab9ea2464a473367674284"]) io_setup(0xc32f, &(0x7f0000001140)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x97fb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x100000e, 0x23012, r2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000033) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in6=@mcast2, 0x4e24, 0x7ff, 0x4e21, 0x0, 0x0, 0x0, 0xe0, 0x88}, {0x0, 0x0, 0x8, 0x1879ac5, 0x26, 0x0, 0x0, 0x5}, {0x1, 0xc8c, 0x0, 0x8}, 0x7, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@multicast2, 0x4d3, 0xaf}, 0xa, @in=@local, 0x3500, 0x0, 0x0, 0x0, 0x8}}, 0xe8) io_submit(r1, 0x25, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xd01000}]) 15:36:14 executing program 2: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) gettid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x150, 0x150, 0x0, 0x0, 0x360, 0x238, 0x238, 0x360, 0x238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x74], 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x8001}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) [ 1087.863801][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1087.905300][ T6501] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1087.936729][ T29] audit: type=1804 audit(1594136175.023:99): pid=6509 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir614112516/syzkaller.3TWdAt/779/bus" dev="sda1" ino=15902 res=1 [ 1087.940283][ T6499] device bridge37 entered promiscuous mode [ 1087.980959][ T6506] binder: 6488:6506 ioctl 41009432 200011c0 returned -22 [ 1087.981559][ T6502] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD 15:36:15 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x113000, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$unlink(0x9, 0x0, 0x0) pipe(0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x10) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(0x0, 0x164142, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, 0x0) unshare(0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000000)=0x4) flock(r0, 0xe) [ 1088.083875][ T29] audit: type=1804 audit(1594136175.063:100): pid=6509 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir614112516/syzkaller.3TWdAt/779/bus" dev="sda1" ino=15902 res=1 [ 1088.106839][ T6505] device bridge37 left promiscuous mode [ 1088.155231][ T6510] device bridge37 entered promiscuous mode [ 1088.211189][ T29] audit: type=1804 audit(1594136175.103:101): pid=6509 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir614112516/syzkaller.3TWdAt/779/bus" dev="sda1" ino=15902 res=1 15:36:15 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0xc000, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000140)=""/57) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f77657264696a78cf0361723d2e2f66696c65302c776f726b646907af2ea33186a93cc1487e5403ab723d2e2f6669"]) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x6d9, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000200)=0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f0000000300), 0x4) [ 1088.312632][ T6517] IPVS: ftp: loaded support on port[0] = 21 15:36:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0xb, {@remote={0xfe, 0x80, [0x2]}}}}], 0x28}}], 0x1, 0x0) [ 1088.347980][ T29] audit: type=1804 audit(1594136175.123:102): pid=6500 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir614112516/syzkaller.3TWdAt/779/bus" dev="sda1" ino=15902 res=1 [ 1088.450860][ T29] audit: type=1804 audit(1594136175.133:103): pid=6509 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir614112516/syzkaller.3TWdAt/779/bus" dev="sda1" ino=15902 res=1 [ 1088.511169][ T6526] overlayfs: unrecognized mount option "lowerdijxÏar=./file0" or missing value [ 1088.573389][ T29] audit: type=1804 audit(1594136175.133:104): pid=6509 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir614112516/syzkaller.3TWdAt/779/bus" dev="sda1" ino=15902 res=1 [ 1088.661292][ T29] audit: type=1804 audit(1594136175.133:105): pid=6500 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir614112516/syzkaller.3TWdAt/779/bus" dev="sda1" ino=15902 res=1 [ 1088.722798][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1088.770153][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1088.787703][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1088.812120][ T6517] lo speed is unknown, defaulting to 1000 [ 1088.824467][ T6526] overlayfs: unrecognized mount option "lowerdijxÏar=./file0" or missing value 15:36:15 executing program 4: unshare(0x40000000) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8918, &(0x7f0000000100)={'lo\x00', {0x2, 0xffff, @loopback}}) 15:36:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r4, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x8194}}, 0x20}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000240)=0x30) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000210007041dfff4946f610500020000e8fe02080100010800080003000400ff7e280000001100ff", 0x2b}], 0x1}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080)={0x8010000a}, 0x10) write(r7, &(0x7f0000000140)="240000001a005f0214f9f4070009040081000000fe000000000000000800040005000000", 0x1ff) [ 1088.999379][ T6539] IPVS: ftp: loaded support on port[0] = 21 15:36:16 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a15607081e04483092bc0000000109022400010000000009040000006c2b70000a24010000000201"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r2 = dup(r1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000040)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000140)={0x2, 'rose0\x00', {0xfb52}, 0x3}) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000000)={{0x16, 0xed}, 0x20}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 1089.074478][ T6518] IPVS: ftp: loaded support on port[0] = 21 [ 1089.459983][T22614] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1089.511972][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1089.572662][ T6550] device bridge38 entered promiscuous mode [ 1089.599790][ T6539] lo speed is unknown, defaulting to 1000 [ 1089.710015][T22614] usb 6-1: Using ep0 maxpacket: 8 [ 1089.767100][ T6547] IPVS: ftp: loaded support on port[0] = 21 [ 1089.840294][T22614] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.864566][T22614] usb 6-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice=bc.92 [ 1089.884072][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1089.907027][T22614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.942093][T22614] usb 6-1: config 0 descriptor?? [ 1090.001553][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1090.012426][T22614] usb 6-1: unknown interface protocol 0x70, assuming v1 [ 1090.070379][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1090.087500][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1090.175674][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:36:17 executing program 3: open_by_handle_at(0xffffffffffffff9c, 0x0, 0x2000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) syz_mount_image$f2fs(&(0x7f0000000200)='f2fs\x00', &(0x7f0000000300)='./bus\x00', 0xfffffffffffffe00, 0x4, &(0x7f0000001600)=[{&(0x7f0000000440)="adc342639a9348a600fedcfde4956e3423fafad3c9d194b3abba99994126d19803a3382b9778fd0b9c93bc63b7a926a61d6dd7ac6f2e1f6b727e95f339251bbbfdfcfc38d97955a822c5ef822d69f5ba622d2b7956bfea9f27ca37ef555711ef0df0d17c1e5e2abcc039a3265aeea404f78a2ddc4eba5890f94d4feb4ae30de552a7be3e070d02320e4f859d1c53ff641e8a28ea565163b198c9d9fe3a44e1e01ad745ab26ffec14", 0xa8, 0x7}, {&(0x7f0000000500)="bffee94418871f49d3f301e4575c4aa7364401deb4c52409e8c34ce159b7abdf5ee2d4ba8aecba1afadd2c0a1844def68e4fb432932749cb5f35a6c12e31a14b7e20aef0ba68fb1d0f4f54c4142d47b3", 0x50, 0x81}, {&(0x7f00000003c0)="f922ddbe3240", 0x6, 0x2}, {&(0x7f0000000580)="48e6af94dc1ef959361f81d6421c2e95ebc90a265d432eead077725479bdeef7d0baaa3ece2c24ddeb5fd844688e3787a24bb629127509d1d3560ce1d24a547d2f661db42814996e5fca3d942ecc6b0ab93203e304bb4217680ceb77aca1041e5c11e869bc96a804e77269735a373ab551167a7e661107cfe1bf73cf33920841e25325f2d34c5bbce5e7255def3ae3926401e5735ef7be3e46ebecec98d82d2a0360dd34b25a685b71376146e42c8eac2dda37f19dfe558cdb50ded0f806652f1b6343f0a920635225a437506e7bb9b93b5837c4322acc972dea1132a6f74802ee634ef6322409f6f03dfbb5fd18dce7741f3a7607b406c5c706a328e7e9339f78ac3b4a3f7d764116bb8f84588f810d7365a19a4218f92590d6ade11a470552b74b9625a716f3ace16878c05fc791a9ce9ce44d706a641b0265498e84cbc8f3f2c274f0897e95d6117b04d02336e5e7c5d6671b9026f92fdc93ee388f02963d9f6dddbd7c9efd69e8010f8fafd7387d1c68ae7c25204d512a8e8fd64a07a769d5bd88f9135a4a2ceb9cbd6fcb6c6b81978b75eae2567ac4b1a04953886991a37c0428afab4d4c164f36f9dcbe15f78b54c02016d7d8b556ff762feb74c07b4904bdd4854089483899c0a2868e360e72324e719276473cb65289c3c17958d10a1dedf0019e306511790d05e877521e47ef030e334423adcd47af3ce4f9159ffb3147133c5a5f10506dfe4ba4069caf58a9616f882b98342120749d643ee27b3c276d43cda55b5cd81b1f256214ad6f4e1d16803de6d64894f7608927b019308dc6ddeb38128597abce940814dce4ac4f50f8bc97cd47b1d592b0dfc9d2af012ecd756a433a8a7f2f4e5d6a3054be978107a9933b00aa88cde05a55894d9dce0937c6a77ca94afd39b102d2f865818e49b58ce79a6f1d2b1d83f87d90ba20ea9be8b43f9eff7cc4d98eef347820f4734ad580e72d6bee64b5223bada57dc333549c3d2addad7fdc9dc868e98923ae76cc5f7f3c3a96475929f80c90d6189678f0c5584045dfd103229d78e7b3fc5ceb360b02614ef85c6fabfc65fa9dc1a47c21a7cd37c08eac7f1f05a8f6201187c2ccd66839b13ab0ebeca04cce43ab6ccccbbbec5219a88eeb59c657c50bdff79cb7945f3275f771f28ac22d51cc595cb05db16c0db261f0cc38d1f31586408d00a4ad0153f3ec184a5fb172bcf0fd108424fc8b43fb144389c7902234385854bd75946f10ad5c34b01006fc3f84785a104ecd9dcf3a51f4566a36591ab451df469da51b1417e70d65009efa9056c42d75800c297c701904f33d9987c8a1c79f07af714fd0d0c5f9aba06d7c27c47bb73112b7b33d64cb68574db632cb5d7cb6404fbc4bb950fdfad1072c583f3390ca184b8ae7785095e17445c6b57c5b4284180f7c3b43239b5996b5c2e7cc6f1c8d00683a34b20c9c4573bfe1f541b8b2b930d1e2c8e40f9944037e9634946ae18cd0c68aaaee793a82e984ad43d25c7ab9defe192d7ec861e5453de389193e63b101b9a58460d0a65d836b97c816c91e77a3a060c0a051d60ebd13e80ed80f9ce08831ecc03dae52fd69b85efc16c38cad682d856c136e934865a93b2d87731bd490e4e2d73cb508b80dcc302b5e5332e7a82d654ddab5109a884ecbbf80cbce826c0d7a9154269d7fb83394a70e6d3b707dc579c8c049b8cad986ed79509b51c8cdd525dc930b5b4528f9fed7ad7c82123939bc4aee3e0e543638a80cbc18fa4bbf781664c7639afa338209ff50a4b51e14cdd87282e76dc0fff73d4446367b2c2000c4bcda429f603225a4f660ed6390d7d5e822611dfa01fb95fa8f9abf7be60dcd0e0da6918e76e1cce77fbdb71958582f46c6e484c193ace1913d19ebf2f2aaa4565a725d9a6507e3b6ca3c159b4ee70dbc06d3592d15087fd09265d76e9b994b6d97812efe552ec2bcde2fe9975ead5e9a2572775f3dea0a042c40c12f59782319d786bcfd7fa22b010138676ab78c2443154d3427fb43d0f981f8b8afe3445a9a72003ba6ddd25a42e146c058cf26190fce84413fe8df6aa651980c7dc0947a50bcc4d58c41916aa822b1a9ef0e3e61443589ef400b552ef53d5b25d6926106d68b85403365be6c91c3c00df741e865942b7caf70fffad27d9a5614d22a9f21f654e29cec61fe987e05e60dd583dc914f948c9f3c4a009fa2ccbadba595a38f8826862d86524eb2c7c6ec1775bb36ca18c85da38b607d0d2427b34d8131a4e317bf17796535d873970d995c6f0a0126e0997d0eb7301ac9ca833959a29bb621426f126f9ea0d4ea74124a18909e6c7c1451a61a7302d4c4f75049107568253709899facfa48c2984dd689ba7b0e57915098a0e7a142bd85b51a3f9c186c7131a9a4e6f391aa66db980f4b17305383a51b3ac4d74a64f1bb691af0e3a0e10112da4c7dd73fa8a03d67bd1425bae5ed19e6642b581df1ebcd982f95cd7d7ff2213881ea92a84dd8855a54918e0d7fc0c654b14196dabcb48a2c128e8e8f644f63f6e852192e29338f7a8c07918550ef18eab79d9b67c5e7ec12cfa137d6a259016ee3a0e8e56444ff764f493deddece60d976649581bc8af6be84dee76335344c2ee02bf79ebfe3860c75cb686c96fe7c559aa6843a652d15b7dd4415898f0bc5e2bbdc1c6ee955bfc02b709de97a719f44a38c0d709936cf790fd1c5fe9e6c7b89bae3359054cebc44b4086269ce986bfeee0d6140a62a53d667c17bac25b3aeebc3f53a4ca826734ff130dbebff7a2e377cfd14099a29376dfde7b9b3ca9ff13d9c69c22d7927ad99980488414e409c384cc4dc1529b3a469a77e447e320907f16d2028d7bf1dedced09700850aa4363685b5128deb1dd207530c417151da5a3854ede773ad16f66b73d2e75db67d5e317b2991010d93d9e01299855219cb40d5ae8c2addf930900ec379904614049e36f7d2e0f43a933a3dd27520cf4fe5a5eb5fb698fb40291cb97e91d6284b9bc877ab8f9cf798926121628a9e930bb7f5d0383692e539fdab1b9dea199965215b5a6f5a18676f89f88c7b0615338d09f9c5cbd1135fbf4cfe956527478134698443e75e6e960e61f2e3f7028a930db2af2a156873971819c1616fc43186ad4c934869d1ad6b6771f1f6894bd277a221bc9d4aec9cb4de849e4ab71678582046b443e4b7dcc5023d1efee2a979f067854925d7f9be24d7c2007bf262fa52d6c4599f9154c26b9444d2070e6daf6cf73b4dda1c7947bcf4c6b5e2526a3d95f5f7f594fc2c384b646880115b5673c95fc958aaaf52693aa14bfb96f437536a3f33b1a50006aa1cc8c6c8bfa491f71039353c1f218a7a2dccc0ee8ece61829f901539572df59154b0ca562e480d213a78af92b0cac4bec52a270ced28f40fef8324a1ad6ed39e58cd250f7bbcd5c0bcf2678f3efb573f7dac6e0047d5b8f3f402ede3702a6053cfeab60a82744d8a7db58198656fdffc2e79956e68af606e209289074ad19aa2d9c42ed19fa5854dc192732f4e25864096c126311c6727354ce84165602a575c36ebadfeae1b7c1417c49bd06e261a483093be81d20645124788d38437333839654e2b98683d6e0e1f0584b01c95cca16a910894c438e959afe72573cad83082e1e62c33b3c90c1e0734e73491febf59b17212021815e498c209fb01a56e8c6792ed46b4a21538b5867347241ec628de693ab5959957a41601b5706bc2d53317654a9ec7419b0fd3d47aea4e8e4414683e6ba736ca01306bd7b8d6e10dda5cc5cc5904081e87ad4628bac3f94f3a99b097885d33d3f44d1cd4c0909e8711db4c7a11e6abd3bcf68842d9a7d94227c25c93f9067089144b75d6187df943f50bd695c0dab6d1f24df37ad7885a4081647fdbd6704a6f8abf1eb3e3edce9ea93eedaf20b9b3ac227d5bc255e20730313db71c82e94364d562fe498049dfb8cc95b0569286a279d491d91ff938fd9aa0a7d0517e108d072c6ff5bc6b99cd19ee423808db82ff1e100a61fbd0a3c3bdb674e560668576eac942643e4ee92b1848da855bef9011e5c18fd400475320d99e2db03f54eec1a7040f8b8b4bcde6b673889372ae0dbda40606110d3c024a883b1df00c2c008019acd8a5c8cb6f7f4bbb7d60cda6ebb8922175f9caa01180906043966717549afc56db18865c6b69f956e4b6795e501dd865eb5e550afdb0bf118b09183aff757a343f95185813fe0637b8160c5e4f35b9963585ed85aa2ec308b3d100bdcdc8dfc5023d769e7835c8131fbc4c01e6eb06454a7c101a722bc9f6e9bb991e2101886516715db039523191840da1d28c6cb7b160dfb3cb19ae4f97c8c42aeb01ee51d943b16ba80182cf34438094804fb0338d793087309ae7f29f2ed9fa2f0d9e66454557493d3603ee1513aad10e64349267de5929d91e575133900b181a7063182ad4d75dd3cc8b5312d892ff6bec56ff16132f9110fbea7b8315f2247b43d1f58e60b5f833afcc23b9beffd7385fb34a26cae0dab000017d0b142ed3e0a903ce76ba3703c5a2b6ef1cc8d684adccf7b0350c618ccd808a2f21344ef02ff4ea747d7bec13c576bf86f329f153b70241118a07130f03a6a2431ba0f781b3941a36e9020c3ec466b7091fcd802a04c5ec508c0c2bf73a97c86f62c4b645aa35bae054611f3ca1b8fa3ca44264cc80caf4be7fed594b05897b7af4ed1806a8431580022736f831c55ca35a6d5e8504a2d2e19fccbd88f302410333b31e5704cabf3af2ab2c1375fe3991308ddef9b3e2bac1e3a008ad2b4567342bcc2f2cba51c80af46528d972b9d624e7e3e79d9fbcea38a903f3d095d1662bfae22a1010f8f4826e0bcf9b2ade15d9bdbb1dcea77a61e200ef5b869cf76d82979f1f655cae497c8c8a082ec3db184a5890701d64f18ec55d4aba7f57e67c551dcd072b726f74fcc0c197ad5ab437feb8b5a7fcfdec98f07a8e89291610fffba3e3351d54381cedea2fd0de7f82f15dc07c6e9e6d6c273bace3ccad5045f6184db634987e9fc1422ba5928763a4901e54183d1596c70d1fccb2b72a3952780cc8ad5b9eccf54428fd1405b15e048fb3330bfa7756defcacb58815bba25f8964572b6e1b52cd8197e3dc435b0129cb5523f000203defd104846ebc4786a0c7307aec27fc1ab56b1fd755feb8e67e77f9b9396e02b92709796ad418f3f321086dedac0dd39e8e0ec37b5a6f9cd218a09a6e7a76aa60c02b81fc9e93ff3611d1b50797b54ddc46e1a627573899bc9fe5829542702dc99040b15ae5b3e24c1a2d4bdb63a88b8ec709b89934a88d4be2398e2dafcd7218c96e8a0fef52a8a9442fba13abda223fcfe226503087bdd9e333b8b9a2ba6e7d078242b8ca0980de8000fc72ef4f4e47703b9df5e3e79250063513e0233be2657550f74e8d316007eed3b252a2096c09803b8a9bb8c67da0f9d86b36ba0112a00d06ce30112408580147ab532a8dae0b7015e6aec2c7d9215a69a832d85573e03e1d0ea30ed37ef3c9982d19d936ab55f8d02565a4ab5eff81dd6c73deb9a7c60f73ea0c30a0034161f86be6d1401745cfa70ca0a0cd49b850c463db4b311275716fad9039e3629e141cd44e8dd27b741ffa1e2d29b208fe70a20243e691692f9607c5472f0564de24d4104fc56f2b7f929a351682bf269c233f142fc20147477900b2bc8c053d5fb20e347158c0dd6a0c4cdc96df8b7c87bf1eed763179819ca1b1e215acb623b44666cb58d807171dc7830fccc1f8cc5bf7cb598ce20db33fd53698e8af623e78cc5c", 0x1000, 0x8}], 0x2000, &(0x7f0000001800)=ANY=[@ANYBLOB="61636c2c3a004e7d696a71666d743d76667376312c616c6c6f635f1b20d0c83d72657573652c6e6f666c7573685f6d657267652c6a7147c1fd05ad62666d743d66667376312c726f6f74636f6e746578743d756e636f6e66696e65645f752c61707072616973652c7365636c6162656c2c00b33696372284e7ed6657efcc7262179cea7039a9c5a01dee6ae2ab1e9ab6de1ad81ccee4b0778da61ace7d85e7ea387196f5417b5c94b55c6fa941b41c8f496683dff709551d8d4abd050a2f76b247a5912cc13c96a0d555afe702219e968e497b29dfc18e587426842b7e56c77e48d93a4e4673c399c9fc0dc806d1a85e78def580a345e78943a6bc356d9c7b488ecfcd903dae21b25a8a02ae5a6777bf6381000b8fe3c043f9ff37421cdfd63cc8c2e6a1e2bcbfc158ae1e09da555dcdffb3bb0781cf258c46d0f77710106b55d0a1a4b10dbf1e532c53da9a49d64a639acfd5e5969e25f6373a8f4fc4f84daeedb2559e996fde88e2c3601ce11e92a300"/378]) fstat(0xffffffffffffffff, 0x0) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x40045566, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f00000001c0)=0x4000000000007, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040)) [ 1090.323444][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1090.378942][ T6557] device bridge23 entered promiscuous mode [ 1090.513227][ T6602] overlayfs: failed to resolve './file0': -2 [ 1090.535954][ T7929] usb 6-1: USB disconnect, device number 46 [ 1091.419927][ T7929] usb 6-1: new high-speed USB device number 47 using dummy_hcd 15:36:18 executing program 3: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00'/11], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='ceph\x00', 0xa26000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) [ 1091.679941][ T7929] usb 6-1: Using ep0 maxpacket: 8 [ 1091.800258][ T7929] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 15:36:18 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001b00)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) dup(0xffffffffffffffff) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c6f636b70726f746f3d6c6f636b5f6e6f6c6f636b2c6c6f636b7461626c653d2a2c6e6fc92c73636172642c00"]) [ 1091.842702][ T7929] usb 6-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice=bc.92 [ 1091.912052][ T7929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.967082][ T7929] usb 6-1: config 0 descriptor?? [ 1092.017526][ T6656] gfs2: Unknown parameter 'noÉ' [ 1092.031476][ T7929] usb 6-1: unknown interface protocol 0x70, assuming v1 15:36:19 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x2000, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000400)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq'}}, {@common=@uname={'uname', 0x3d, ')'}}]}}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x481) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x3f, 0x5, [0x1, 0x5, 0x7, 0x7], [0x7, 0x4, 0xfdc], [0x9, 0x0, 0x2, 0xd85a], [0x3, 0x0, 0xdf2, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') syz_mount_image$tmpfs(&(0x7f0000000280)='tmpfs\x00', &(0x7f00000002c0)='./file0\x00', 0x2, 0x0, &(0x7f0000000380), 0x1010010, &(0x7f0000000640)=ANY=[@ANYBLOB="687567653d77697468696e5f73697a653d0c66736d616769633d307830303030303030303030302030303030ac646f6e745f61707072616973652c736d61636b64736465663d7472616e733d72646d612c2c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"]) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) [ 1092.228418][ T7417] usb 6-1: USB disconnect, device number 47 15:36:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x4, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6d0}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\f'], 0x1}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1092.472190][ T6678] tmpfs: Bad value for 'huge' 15:36:19 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000a80200000000000000000000000000000000000000000000100200001002000010020000100200001002000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000f0003801000000000000000000000000000000000000000048006c696d697400000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001d0000000000380074696d6500000000000000000000000000000000000000000000e7ff00000000000000000000000000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000440000800000000000000000000000000000000000000000000000000000000000000000000000000000006dc81b770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000000006800435400000000000000000000000000000000000000000000000000000002feff000000000400000000000000747000000000000000000000000073797a31000000000000000000000000f30000000000000000000000000000000000000000ef000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff157bfb4a5cd2ce9c602fe7cbe2c28cc574c39cf9618b8716a2ee317031b1c4b980881ede6f9dc49603"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000008c0)='sessionid\x00') [ 1092.847021][ T6697] xt_CT: No such helper "€" 15:36:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000000000e14246b9e3f895740d9611deda08c76d651fd744a6f31df8e7472d4ce2792daeb4f30384d4f1b94ffb620738e5a721ca4f"], 0x10}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x3, 0xf81, 0x6, 0x9, 0x7f}, &(0x7f0000000180)=0x14) 15:36:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x11) r2 = dup2(0xffffffffffffffff, r1) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f00000000c0)={0x8, 0x81, 0xcd, 0x1, 0x3, 0x3}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x3, 0x4, 0xffff}, 0xc) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6f5088f4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x705, 0x3c, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, 0x49040, 0x19244}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_PHYS_SWITCH_ID={0x5, 0x24, "81"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004085}, 0x20000000) 15:36:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(r0, 0x400000) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000040)) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000001c0)='trusted.overlay.origin\x00', 0x0, 0x0, 0x1) 15:36:24 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r4, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, r6, 0xf2b, 0x0, 0x0, {0x32}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r6, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bfb32cd05fd36fa754522a6b3d"}]}, 0x38}, 0x1, 0x0, 0x0, 0x14094}, 0x8000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x96, 0x2, 0x0, 0x0, 0x7, 0xfc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r10}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x40}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x3c, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_AP_ISOLATE, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0xfffffffffffffe79, 0x1d, 0x4}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x1, 0x2}}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, "370299d85aa429e626db98d04e130908d41cdab6ec67a19dd8d3fec922be8e67"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="8c5b0000", @ANYRES16=r3, @ANYBLOB="010000000000000000000600000014000800"/34], 0x28}}, 0x0) 15:36:24 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000d5c0)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/94, 0x5e}, {&(0x7f00000001c0)=""/76, 0x4c}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/158, 0x9e}, {&(0x7f0000001400)=""/150, 0x96}], 0x6}, 0x100}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001540)=""/27, 0x1b}, {&(0x7f0000001580)=""/41, 0x29}, {&(0x7f00000015c0)=""/11, 0xb}, {&(0x7f0000001600)=""/114, 0x72}, {&(0x7f0000001680)}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/187, 0xbb}, {&(0x7f0000002780)=""/33, 0x21}, {&(0x7f00000027c0)=""/201, 0xc9}], 0x9, &(0x7f0000002980)=""/4096, 0x1000}, 0x40}, {{&(0x7f0000003980)=@hci, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003a00)=""/129, 0x81}, {&(0x7f0000003ac0)=""/50, 0x32}, {&(0x7f0000003b00)=""/206, 0xce}, {&(0x7f0000003c00)=""/210, 0xd2}, {&(0x7f0000003d00)=""/29, 0x1d}], 0x5, &(0x7f0000003dc0)=""/159, 0x9f}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000003e80)=""/4096, 0x1000}], 0x1, &(0x7f0000004ec0)=""/94, 0x5e}, 0x8}, {{&(0x7f0000004f40)=@generic, 0x80, &(0x7f00000085c0)=[{&(0x7f0000004fc0)=""/205, 0xcd}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f00000060c0)=""/200, 0xc8}, {&(0x7f00000061c0)=""/4096, 0x1000}, {&(0x7f00000071c0)=""/252, 0xfc}, {&(0x7f00000072c0)=""/136, 0x88}, {&(0x7f0000007380)=""/204, 0xcc}, {&(0x7f0000007480)=""/159, 0x9f}, {&(0x7f0000007540)=""/4096, 0x1000}, {&(0x7f0000008540)=""/112, 0x70}], 0xa, &(0x7f0000008680)=""/27, 0x1b}, 0x3ff}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f00000086c0)=""/9, 0x9}, {&(0x7f0000008700)=""/4096, 0x1000}, {&(0x7f0000009700)=""/160, 0xa0}, {&(0x7f00000097c0)=""/139, 0x8b}, {&(0x7f0000009880)=""/166, 0xa6}, {&(0x7f0000009940)=""/4096, 0x1000}, {&(0x7f000000a940)=""/228, 0xe4}, {&(0x7f000000aa40)=""/215, 0xd7}], 0x8, &(0x7f000000abc0)=""/18, 0x12}, 0x5}, {{&(0x7f000000ac00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f000000cf00)=[{&(0x7f000000ac80)=""/31, 0x1f}, {&(0x7f000000acc0)=""/87, 0x57}, {&(0x7f000000ad40)=""/101, 0x65}, {&(0x7f000000adc0)=""/114, 0x72}, {&(0x7f000000ae40)=""/4096, 0x1000}, {&(0x7f000000be40)=""/192, 0xc0}, {&(0x7f000000bf00)=""/4096, 0x1000}], 0x7, &(0x7f000000cf80)=""/39, 0x27}, 0x80000000}, {{&(0x7f000000cfc0)=@vsock, 0x80, &(0x7f000000d480)=[{&(0x7f000000d040)=""/102, 0x66}, {&(0x7f000000d0c0)=""/222, 0xde}, {&(0x7f000000d1c0)=""/27, 0x1b}, {&(0x7f000000d200)=""/177, 0xb1}, {&(0x7f000000d2c0)=""/248, 0xf8}, {&(0x7f000000d3c0)=""/169, 0xa9}], 0x6, &(0x7f000000d500)=""/165, 0xa5}, 0x5}], 0x8, 0x0, &(0x7f000000d7c0)={0x77359400}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f000000d840)='nl80211\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r8, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x8194}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f000000e100)={&(0x7f000000d800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f000000e0c0)={&(0x7f000000d880)={0x83c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0x8, 0x0, [0x2, 0x14, 0x1b, 0x9]}, {0x5, 0x0, [0x5]}, {0xd, 0x0, [0xd, 0x19, 0x15, 0x0, 0xe, 0x7, 0x18, 0x6, 0x1d]}, {0x5, 0x0, [0x1d]}, {0xc, 0x0, [0x8, 0x4, 0x20, 0xf, 0xb, 0xb, 0x16, 0x11]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x673}, {0x8, 0x0, 0x800}, {0x8, 0x0, 0x80}, {0x8, 0x0, 0x7f}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}]}, @NL80211_ATTR_IE={0x79b, 0x2a, "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"}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xfffffffb}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_BSSID={0xa, 0xf5, @local}]}, 0x83c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setgroups(0x400000000000033d, &(0x7f0000000100)=[0x0]) 15:36:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x42420, 0x0, 0x0, 0x7, 0xd, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) io_setup(0x0, 0x0) creat(0x0, 0x199) dup(0xffffffffffffffff) open$dir(0x0, 0x250400, 0xc0) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x8) modify_ldt$write2(0x11, &(0x7f0000000080)={0xb2db, 0x100000, 0x4000, 0x1, 0x3, 0x1, 0x0, 0x1}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000100)=0x8143, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x2000000, 0x110, 0xffffffffffffffff, 0xfffe9000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 15:36:24 executing program 2: set_mempolicy(0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff}, 0x2a08, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000004800), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) dup(0xffffffffffffffff) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100)) sched_getparam(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}], 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') preadv(r2, 0x0, 0x0, 0x3) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000180)={0x14, 0x49, 0x2, {0x1, 0x4, 0x1}}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000080)={0xcb, 0x1}) [ 1097.168833][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:36:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 15:36:24 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="1a00659ff11361290c9fdfce00000000000000000000ff7083f6390dc4960cf3fcf1f80be5fda5e94886e4055be2c582416ed7a0529a0e96626d153988c978b554cce2547981b0c2b0d74a20cd383f82d053b2855abefa957394a4a0fec869e2724574648b70a167150a940774e2b3d31dcc747228"], 0x14}}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x10000004ffe6, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r9, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r9, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x24}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48845) 15:36:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="440f001506000000c7442400d7000000c744240200800000c7442406000000000f011c24c7442400821b0000c74424027dd20000c7442406000000000f01142467450f22c0f20f01b7ffffffff476a8066baf80cb8de56448bef66bafc0c66edf3470fe6e466b869008ed8440f01c5", 0x6f}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$FBIOGET_VSCREENINFO(r7, 0x4600, &(0x7f0000000280)) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1097.490813][ T6729] device bridge28 entered promiscuous mode 15:36:24 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000d5c0)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/94, 0x5e}, {&(0x7f00000001c0)=""/76, 0x4c}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/158, 0x9e}, {&(0x7f0000001400)=""/150, 0x96}], 0x6}, 0x100}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001540)=""/27, 0x1b}, {&(0x7f0000001580)=""/41, 0x29}, {&(0x7f00000015c0)=""/11, 0xb}, {&(0x7f0000001600)=""/114, 0x72}, {&(0x7f0000001680)}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/187, 0xbb}, {&(0x7f0000002780)=""/33, 0x21}, {&(0x7f00000027c0)=""/201, 0xc9}], 0x9, &(0x7f0000002980)=""/4096, 0x1000}, 0x40}, {{&(0x7f0000003980)=@hci, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003a00)=""/129, 0x81}, {&(0x7f0000003ac0)=""/50, 0x32}, {&(0x7f0000003b00)=""/206, 0xce}, {&(0x7f0000003c00)=""/210, 0xd2}, {&(0x7f0000003d00)=""/29, 0x1d}], 0x5, &(0x7f0000003dc0)=""/159, 0x9f}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000003e80)=""/4096, 0x1000}], 0x1, &(0x7f0000004ec0)=""/94, 0x5e}, 0x8}, {{&(0x7f0000004f40)=@generic, 0x80, &(0x7f00000085c0)=[{&(0x7f0000004fc0)=""/205, 0xcd}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f00000060c0)=""/200, 0xc8}, {&(0x7f00000061c0)=""/4096, 0x1000}, {&(0x7f00000071c0)=""/252, 0xfc}, {&(0x7f00000072c0)=""/136, 0x88}, {&(0x7f0000007380)=""/204, 0xcc}, {&(0x7f0000007480)=""/159, 0x9f}, {&(0x7f0000007540)=""/4096, 0x1000}, {&(0x7f0000008540)=""/112, 0x70}], 0xa, &(0x7f0000008680)=""/27, 0x1b}, 0x3ff}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f00000086c0)=""/9, 0x9}, {&(0x7f0000008700)=""/4096, 0x1000}, {&(0x7f0000009700)=""/160, 0xa0}, {&(0x7f00000097c0)=""/139, 0x8b}, {&(0x7f0000009880)=""/166, 0xa6}, {&(0x7f0000009940)=""/4096, 0x1000}, {&(0x7f000000a940)=""/228, 0xe4}, {&(0x7f000000aa40)=""/215, 0xd7}], 0x8, &(0x7f000000abc0)=""/18, 0x12}, 0x5}, {{&(0x7f000000ac00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f000000cf00)=[{&(0x7f000000ac80)=""/31, 0x1f}, {&(0x7f000000acc0)=""/87, 0x57}, {&(0x7f000000ad40)=""/101, 0x65}, {&(0x7f000000adc0)=""/114, 0x72}, {&(0x7f000000ae40)=""/4096, 0x1000}, {&(0x7f000000be40)=""/192, 0xc0}, {&(0x7f000000bf00)=""/4096, 0x1000}], 0x7, &(0x7f000000cf80)=""/39, 0x27}, 0x80000000}, {{&(0x7f000000cfc0)=@vsock, 0x80, &(0x7f000000d480)=[{&(0x7f000000d040)=""/102, 0x66}, {&(0x7f000000d0c0)=""/222, 0xde}, {&(0x7f000000d1c0)=""/27, 0x1b}, {&(0x7f000000d200)=""/177, 0xb1}, {&(0x7f000000d2c0)=""/248, 0xf8}, {&(0x7f000000d3c0)=""/169, 0xa9}], 0x6, &(0x7f000000d500)=""/165, 0xa5}, 0x5}], 0x8, 0x0, &(0x7f000000d7c0)={0x77359400}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f000000d840)='nl80211\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r8, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x8194}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f000000e100)={&(0x7f000000d800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f000000e0c0)={&(0x7f000000d880)={0x83c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0x8, 0x0, [0x2, 0x14, 0x1b, 0x9]}, {0x5, 0x0, [0x5]}, {0xd, 0x0, [0xd, 0x19, 0x15, 0x0, 0xe, 0x7, 0x18, 0x6, 0x1d]}, {0x5, 0x0, [0x1d]}, {0xc, 0x0, [0x8, 0x4, 0x20, 0xf, 0xb, 0xb, 0x16, 0x11]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x673}, {0x8, 0x0, 0x800}, {0x8, 0x0, 0x80}, {0x8, 0x0, 0x7f}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}]}, @NL80211_ATTR_IE={0x79b, 0x2a, "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"}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xfffffffb}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_BSSID={0xa, 0xf5, @local}]}, 0x83c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setgroups(0x400000000000033d, &(0x7f0000000100)=[0x0]) [ 1097.614753][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1097.683298][ T6755] device bridge39 entered promiscuous mode [ 1097.705391][ T6757] device bridge39 left promiscuous mode [ 1097.768426][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1097.993903][ T6761] device bridge29 entered promiscuous mode 15:36:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) syncfs(r0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, 0x0) pipe(0x0) 15:36:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="67727069642c001a643271ec0dcea5ad6f8ce4154c0b92c251d2c7fd5bcdf000d5058147700626354282bc1ef8874e1f67d36fd6b097b28f71f06811471cea990f38b7ed364432d3d407fbaba5840c7971d6a2eac2fcee0c12441efbb0c2b8ffaf67bdecd35805a97a2b8c103f00aeb07e70df8b37bf4ee6bad730d82078f01ada7514fd9c72832ba3e6e4522b7cdaf60a01586537a69bf07b98c7deecebf3347a97d0cef5b345c28c88fd4400cf49130c349ed34464ad287a"]) [ 1098.248377][ T6750] debugfs: Directory '6750-7' with parent 'kvm' already present! 15:36:25 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket(0x40000000002, 0x3, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x58060) splice(r0, 0x0, r2, 0x0, 0x1ffeb, 0x0) 15:36:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f00000000c0)) [ 1098.521822][ T6784] XFS (loop5): Invalid superblock magic number 15:36:25 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000100)={0x6d98, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff1000/0x6000)=nil, 0x6000, 0x1000009, 0x1010, r2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 15:36:25 executing program 4: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) clone(0x4a040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0xa10000, 0x7, 0x8, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x9a0910, 0x2, [], @string=&(0x7f0000001080)=0x7f}}) read$FUSE(r0, &(0x7f0000000080), 0x1000) 15:36:26 executing program 4: r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r2, 0x4) close(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) syncfs(r0) r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3) close(r3) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r1) 15:36:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = gettid() socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresgid(0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) prctl$PR_SET_DUMPABLE(0x4, 0x1) setresuid(0x0, r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000000)=r1) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) 15:36:26 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) io_uring_setup(0x672, &(0x7f0000002b00)={0x0, 0x0, 0xa, 0x4, 0x3b}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x40000000) r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x80000000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="2e00000010008108040f35ecdb4cb92e0a480e002a000000e8bd6efb250309000e0001", 0x23}], 0x1}, 0x0) ioctl$sock_proto_private(r2, 0x89ea, &(0x7f0000000040)="6cfc33a24d0e7ef8a52b6e93955b192f3817897b27b7") openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffff, &(0x7f00000002c0)="6950ba083e3df322f10ef57332926f53c9832186a3a8420aff16b90741a53730f932cef1984313c63208ed757f276a1eb898e2f9af27171c905c0fe22789628dfd8dc7af4d7eab53d7d9270b14c924eed3c412bac464f42d69a9ad0839d85326d6d319c3477d47e4") pipe(&(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00') ioctl$EVIOCGMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) poll(&(0x7f0000000340)=[{0xffffffffffffffff, 0xc1}, {0xffffffffffffffff, 0x801}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x9060}, {r2, 0x1080}], 0x9, 0x4) [ 1099.142430][ T6832] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1099.315049][ T6838] IPVS: ftp: loaded support on port[0] = 21 15:36:26 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x824b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mq_notify(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000140)={0x3, @capture={0x1000, 0xe4791853c210370c, {0x6, 0x10001}, 0x20, 0x3f}}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000080)={0x0, &(0x7f0000000240)="1b1a34d8ec77b7c9a6046b4193d4bc7e9d282b7bc12fd711f22ad2922d45fe503dcada0bc8c94124b639d57841559fe8cda83d97fd3d8fb8b94359f2e85f84ec86a74a07db10a3745c476b9787f0893924764bf7a71ce5fbd3df1f31a3f8dcec3e6e71ad465ee04530bab1b38ee00195b280cee401914e8c07986482b01b080fe7cd2524711545eedefe2f9797b508a9a6f3936b9a829a4470bd7563", 0x9c}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0xc3a0000000) write$P9_RREADLINK(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="100000001752a7cbd122a0ad2c6c6530"], 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffef2, 0x2004076e, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 1099.428062][ T6838] lo speed is unknown, defaulting to 1000 15:36:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000250000/0x3000)=nil, 0x3000, 0x15) sendmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)=[{0x0}], 0x1}, 0x0) [ 1099.821584][ T6838] IPVS: ftp: loaded support on port[0] = 21 [ 1099.838153][ T6838] lo speed is unknown, defaulting to 1000 15:36:27 executing program 3: unshare(0x40000000) socket(0x0, 0x0, 0x1) r0 = socket$inet(0x2, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000000)={0x13, "c3b4b8006c31130b025c8033935b47a09b2dbe"}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8918, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty=0xfe000000}}) 15:36:27 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x6) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2, 0x1b071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000024afb8365125322d33a334ef2cab5ae1d3d99772e2745dc49793818ea1564d9bdd0b3f0d3df2d54c699266dca23d9197e95a1e9271c7b4cd33c17270e31e19137cb91ad042464457fbb11b0247d9e3418efe5181441867a2c845c4cb72966b1f58042c24ee2dc1dc7634ded389301a9610faf383da0b02ff78a6f40adf81441712fdfd8bc6eaa70bb28eae05", @ANYRES16=r4, @ANYBLOB="01000000000040000000030000000800090002000000"], 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="d5b3aa31", @ANYRES16=r4, @ANYBLOB="00012bbd7000fbdbdf2501000000050005000000000006000e00bc770000050004000100000008001700881d112d0037ef5bc019da", @ANYRES32=r1, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000200)=0x8001, 0x4) [ 1100.092901][ T6894] IPVS: ftp: loaded support on port[0] = 21 15:36:27 executing program 5: clone(0x40040200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000100)='systemem0md5sum$\x05\x00^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xd5\xb1V\x95N\x19*\x13\x99\a\xfd#\x9f\xa4j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\x00\x02~\x80O\xe0\xfc\xb3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbc\x01\x00hb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xdayu\x12\x9a \xcd\xeb<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88l\x1f-JN+2a4\xfc\a=&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1-\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13\xf0>\x12\xf8\x1d\xdf\x15\xa8#\xcd\xaa\t\x00\xbfV\x9f\xd3\x06:\xbc}\x96T\x84|\xb9x\xae *\'\xc2 \x97)\x88%\xf0\\\xff\x01\x00\x00\x00\x00\x00\x00\b\xdfi|\x1a,\x82\xc9\xed\x1d\x8c\x1bO.\x16k{\x84\x83\xc1\xbfs\x11\x1bI!\xfd+^\x81\b\xed\xe1a=\xf8\x84\a\xedEL\x0fM\xdf\x8e\x95\xb2\xd58[qG\xa3plm\x8cz2\xea\xdcq4\xb0\xf0?\x85\xd6\xa9\xe7}jCm9\x1aYMg\xea\xd8\xbe\x89\xefq\xe3\\\x00\x00\x00\x00\xae\t\xa39\xc74\x1d.\xf14\xd6\xea\xf5\xccxKn\xa5\xd8\\\x81\x97\xc6\xbfc\tl\xba\x97j}\xdc\xa9\x1b\xb4.\xb5R\xee\xde\xea\x86Oc\xce\xcct\xaa\xa3\xd8:\xc0\xa2\x91\xc65\'\xe9Z\v_@\xf3a\xe1\x11nB\xe4Z\x98\x80\xb7\x9e\xef\xeei\xab}\x11\x9f \x8d\tlFJ\v\xd9\xb9\xb7\xa5\xa4_\x0f\xeb\x14\x80*7(|\x8b|\x9e\xb1\xe59\x11\xaca^Y\xecO\xce L\xd3\x93\xaf\xbe\xfeS\x9f\x82+\xd5\x91\v\xe5Y\xb6\x19Z1\x05\xf6\xe2\b\xa1PT\xe3\x85\xe8\xfb\xcc\x8d\n\xa5 \xb8b\a@\xe6\xc8@3o\x1b:~\x8a\x8e\xdd<>\x03\xce(\xd9\xd9\x14\xaa\x81\t\xf7\x00\xb6?f\xcbzv\xa3>\xf1\xe9d\r\xfe\xc4\xa9\x9bcI\xffiz\xc8q\xd0\xf9\xbd3\x04RE\xcc\x03\x00\x1f\xabFy\xa33\xde\x84\x17\xfdu;\x14q^B\x9d\xca[u0\xbd\xb7\x1dng\xd5p_U\xda', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') [ 1100.149957][ T7940] tipc: TX() has been purged, node left! [ 1100.285390][ T6904] IPVS: ftp: loaded support on port[0] = 21 15:36:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000001900000028001200090001007665746800000000", @ANYRES32, @ANYBLOB="191e6ceed3ee01963f603133ccbbe5a1e91b26184e4ee111a42e424178979556dc1dd4a5d3b2191a5737712c1e8dc3a8f6a32d1d3496ec9347f54a17feb494bdcb0601ab2e5ea7ad"], 0x50}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 1100.772092][ T6894] lo speed is unknown, defaulting to 1000 [ 1100.870371][ T6895] IPVS: ftp: loaded support on port[0] = 21 [ 1101.234059][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1101.249100][ T6913] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:36:28 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x40000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="dd0400130000000000010005000000000000000200002000"], 0x28) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) 15:36:29 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x3) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r2, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x8194}}, 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000300)={0x0, 0x401, 0x40, &(0x7f00000002c0)=0x1c00000}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) creat(&(0x7f0000000080)='./bus\x00', 0x160) 15:36:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r3, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x8, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004004}, 0x20008851) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040094}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x100000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="03f1316de822b530aa5783b846e35caa", 0x10}]) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1102.689681][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1102.775161][ T6968] device bridge30 entered promiscuous mode [ 1102.811055][ T6969] device bridge30 left promiscuous mode 15:36:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0xc01, 0x3, 0x2e8, 0x250, 0x5002004a, 0x0, 0x198, 0x0, 0x250, 0x3c8, 0x3c8, 0x250, 0x3c8, 0x3, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:setrans_var_run_t:s0\x00'}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348) r2 = memfd_create(&(0x7f0000000140)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000001, 0x0}, 0x0, 0x8, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x54, 0x0, 0x1, 0x4, 0x0, {0x45}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="43eab50e4267edfb21fd36a53006f9", @ANYRES16=0x0, @ANYBLOB="00002cbd7000fedfdf2506000000080001007063690011000200303030303a30303a31302e3000000000080003000000000006000400030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000600040000000000080001007063690011000200303030303a30303a31302e3000000000b4fe0300020000000600040001000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400020000000e0001006e657464657673696d000000020002006e657464657673696d30000008000300000000000600040000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x1000}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$sock_void(r6, 0x1, 0x24, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/connector\x00') 15:36:30 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000019500)=""/102388, 0x18ff4}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x47, &(0x7f0000000380)="26270e0000007f58480aa4cefd3b79e77d0076cc03592a160500000232a56f72590900249950f30c82a1cef20d94c30e478947c990ab9493646d6c0b001d3b114d9246a8f65426"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1103.744642][ T6979] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' 15:36:31 executing program 4: creat(0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000580)={0x4, 0x97b2, {}, {r1}, 0x8, 0x4cf}) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='fuseblk\x00', 0x24, &(0x7f00000005c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x20}}], [{@euid_gt={'euid>'}}, {@obj_user={'obj_user', 0x3d, '9p\x00'}}, {@fowner_lt={'fowner<', r2}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x71c5}}]}}) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) mount$9p_xen(&(0x7f0000000000)='syz\x00', &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000100)='9p\x00', 0x20400, &(0x7f00000001c0)={'trans=xen,', {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@version_L='version=9p2000.L'}, {@debug={'debug', 0x3d, 0x80}}], [{@appraise='appraise'}]}}) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x38432, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 15:36:31 executing program 4: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044941a4976e252922cb1996e2e34ba800000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3fedb1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cubic\x00', 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x10000, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getpeername$l2tp(r6, &(0x7f0000000140), &(0x7f0000000180)=0x10) r7 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setgroups(0x1, &(0x7f0000000080)=[0x0]) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="028a359ba518265183567bbcf78597be5eb108e67004000000000002", @ANYRES32=0x0, @ANYBLOB="03000000", @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="5e5f828b29a265f8529b54bb121c2273081cbb1ce782ad40c3f1c94f7ec1ed09b5c3b575bd59d6f9b214a1a97edee5a0b62ba0463632f592ef949617e9c9418be189f293a001f7ffffffe48967d723cfb43286827ab9da6845379616710953eb02a0f3c7c1266c2774e1de7d79f7d551b8000037ef3add3355e5", @ANYRES32=0x0, @ANYBLOB="100008000000000056bb7445a7c3167b", @ANYRESDEC=r3, @ANYRES32, @ANYRES32], 0x44, 0x2) sendto$inet(r1, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 15:36:32 executing program 4: r0 = socket(0x10, 0x80002, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x8000, 0x100) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 15:36:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x40, 0x3, 0x7, 0x9, 0x0, 0xbb8a97d, 0x8000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x1, @perf_config_ext={0x7, 0x80000000}, 0x80, 0x6, 0x4, 0x2, 0x0, 0x1, 0x62}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) accept4$rose(r2, 0x0, &(0x7f0000000200), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000400)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq'}}, {@common=@uname={'uname', 0x3d, ')'}}]}}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f0000000240)=""/168) 15:36:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x5a, 0x2, 0x0, 0x0, 0x3}, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x54, r5, 0x1, 0x0, 0x0, {0x45}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x8000}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x810) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x10000) 15:36:34 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc087, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "42da7f2b"}]}}, 0x0}, 0x0) r1 = io_uring_setup(0xa25, &(0x7f0000000040)={0x0, 0x0, 0xc, 0x0, 0x289}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r1, r4, 0xffffffffffffffff, r5, r6, r1], 0x6) 15:36:34 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ftruncate(r1, 0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x200400c0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x7, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000500)={0x5, 0xfff, 0x5, 0x2, 0x9, "3428eb9b7cfeec3b18a6b848b3044c23b96b99", 0x3ff, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000004c0)=[@mss={0x2, 0x3}, @mss={0x2, 0x401}, @window={0x3, 0x1, 0x5}, @timestamp, @timestamp, @mss={0x2, 0x9}, @mss={0x2, 0x6}, @timestamp], 0x8) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000400)="9d9d1617497fad90e47b468152cbb143b3f117d58a5249277903963cebe9b5ece2e8eb30dfefa6441c25fe10db80692279760a46759a9a1af921db401224a8dc1ec5455608b080bde7f4193bd2a7858e7b350e3cd44966a381be1488b67a067f94d8eb7dbe4da2804fe0cb764d071f0d793b6152823663ea62b103214c0afc9705690819c4ab7c473a8ad7a34dca49e17415eeacce5cb90f", 0x98, 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000540)={&(0x7f0000000580)="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", 0x177, r6}) getsockname$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @null}, [@null, @bcast, @rose, @remote, @netrom, @netrom, @netrom, @default]}, &(0x7f0000000140)=0x48) 15:36:34 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x20800, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) socket$caif_stream(0x25, 0x1, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000200)={r4, r5, 0x7}) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r6+10000000}, &(0x7f00000002c0)) 15:36:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40080, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000200)={0x30003}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1107.859484][ T29] audit: type=1804 audit(1594136194.943:106): pid=7084 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir520981870/syzkaller.MSIU5P/885/file0" dev="sda1" ino=15978 res=1 [ 1107.923768][ T7940] tipc: TX() has been purged, node left! [ 1108.084700][ T29] audit: type=1800 audit(1594136194.943:107): pid=7084 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=15978 res=0 [ 1108.319956][ T2485] usb 6-1: new high-speed USB device number 48 using dummy_hcd 15:36:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=0x0, @ANYBLOB="0800aa4d4db72772b2b86a0b2c265094997e9d78a49fefad6456d6b9648f3df843cfcf01bc5ce1"], 0x40}}, 0x0) 15:36:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x400000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xffffff0d) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010000000000000000003d030000", @ANYRES32=r8, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x8194}}, 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) statx(r10, &(0x7f0000000480)='./file0\x00', 0x100, 0x80, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=@newpolicy={0x13c, 0x13, 0x20, 0x70bd27, 0x25dfdbfd, {{@in6=@mcast1, @in=@remote, 0x4e23, 0x1f, 0x4e22, 0x7, 0xa, 0x40, 0x0, 0x3b, r8, r11}, {0x2, 0x7, 0xbbdb, 0x3f, 0x6, 0x7, 0x401, 0x1}, {0x3, 0xd9, 0x1000, 0x4}, 0x400, 0x0, 0x2, 0x0, 0x1, 0x1}, [@algo_comp={0x81, 0x3, {{'lzjh\x00'}, 0x1c8, "a0ea38c42871b644db0a840c1d304184c7407db10d046725aa5db17644c31caba4329ad8199b48e3efc84c688cd0985f1bc310c165433bc920"}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4004}, 0x40d0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="4800000000000000001b08000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800a001400ffffffffffff000005000700ff000000"], 0x48}}, 0x0) 15:36:35 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x8}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0xa1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4050, r3, 0x0) 15:36:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000080)={0xa20000, 0x8000, 0x185, r4, 0x0, &(0x7f0000000040)={0x990a67, 0x2, [], @string=&(0x7f0000000000)=0x8}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3a3dd4008400af81, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf8, 0x208, 0xf0, 0xf8, 0x200, 0x208, 0x208, 0x200, 0x208, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a], 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "8c6f"}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a], 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 15:36:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r2 = dup(0xffffffffffffffff) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000180)=""/120) ioctl$EVIOCGMASK(r1, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) dup3(r0, r1, 0x80000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffce8}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={'veth0_virt_wifi\x00', {0x2, 0x4e21, @multicast1}}) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000001300)={r7, 0x2, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @dev}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') [ 1108.570028][ T2485] usb 6-1: Using ep0 maxpacket: 8 [ 1108.579186][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1108.690230][ T2485] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.707834][ T7125] device bridge31 entered promiscuous mode [ 1108.732468][ T2485] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.733818][ T7128] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 1108.769016][ T7135] device lo entered promiscuous mode 15:36:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000280)=0x29) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xba0745a6b3c9be24}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3cad742ee8cd019700", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf25070000000c009900000008000100ffffffff0c009900ff7f0000ffffffff0800050006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x48055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d40000001900190500000000570c000002200000ff02ff000000000008000000ac14140018009400111a8200040090f7c10f4b71692346a6d4dc17ad3d1f096d1f00000080ce6f7287fdfc7700080000000000001806162110bd16669318d8b5fff79e9f5bf01f375b569f4fa6d2a46bd32ce8b33c5338441d94ea9315f6ce191c57ba5485b2e8fc45ed8cf5658e76eabbbc8afe0d332080c6681549a9d04edb74b6363affdd2480ac3f744f75d57c591046084e34cc7df673deae04cbcbd29dd06dad10f87766c5e514cb23eb1edf71e4e20f782b5bfd6fec47f5ef4d6070c6f99cccc985e0dab28a80e576546c42469874c5070ee0f15d5f2157a266f3b2354e69ae855a8cef454dd045506edb165f59ed02ed1f8089e673926b9c608a290657dff3e2ec9612f8448db168dd1c2c2e3e542d23a20a83653d4bccc354ef4a144c93ee3e860008a5a64f7dded16ac6f3f820c4bd21aad930b7aeb75d59cb058079074bdf034683f13f4b5f632c190eced0108e634990d348f65f7f6004bc"], 0x1}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r8, 0xc040564b, &(0x7f0000000300)={0x7, 0x0, 0x1015, 0x1f, 0x6, {0x5, 0x10000}, 0x1}) bind$rxrpc(r8, &(0x7f00000002c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) r9 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r9, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) write$binfmt_misc(r5, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r9, @ANYRES64=r5, @ANYRES64=r2, @ANYRESOCT], 0x4240a2a0) splice(r4, 0x0, r6, 0x0, 0x84ffe0, 0x0) [ 1108.788367][ T2485] usb 6-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.40 [ 1108.802488][ T7128] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1108.826795][ T2485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:36:35 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x240400) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="2300000025000511d25a80648c63940d0424fc60040018000a001100022f000037153e", 0x23}], 0x1}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x101200) r1 = syz_usb_connect(0x3, 0x1da, &(0x7f0000000e80)={{0x12, 0x1, 0x200, 0xf9, 0xde, 0x13, 0x10, 0x3f0, 0x2116, 0x8b94, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa20, 0x3, 0x1, 0x1, 0x0, 0x3f, [{{0x9, 0x4, 0xdd, 0x3f, 0x5, 0xf4, 0x96, 0x74, 0x3, [@generic={0xe9, 0x2, "667372709f219595ebd09e748eb47622382926464814e77cba5982fb2a5f0961348803af52f0aab29c24ccd4bde3aa1240cb0342dd7f4b810015a3c2836cd15e5fa6be375397a89f9efa4dc9e6c1d4dd7ed634a53fd28c55db46e9ac2fc9e6f7c727a40f2d4d6f20e677397865ab4d7792fa3e99bd4995a42462287ec918d3fde7253b6bb99dde710b4c3e6f7ea4acf41e752a4c62fc913993bcec45948c275aa81c301747856b473cf3e4dbf8e3dbc4f9b0241bd9653b0833927a64611ad3802ef19d9ea4ae122090c81fa76b9f89322b8dccd3df680e39d984e9f93f31e49610b8ea72510604"}], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x9f, 0x23}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0xf9, 0x2, 0x81}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x7, 0x2, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x101}]}}, {{0x9, 0x5, 0xc, 0x5, 0x10, 0x9, 0x3, 0x1f, [@generic={0x93, 0x23, "f94a78c8e6a574e878bbb77a2e2a13d1e4c537d2ba0dda25ef3b2d73c1216b16709191f04350d9ecd396a859e02c75be0c213ce777f56a0bf77debe44de6e082a8588b9ef3b754e4a09aab1c257aedcfbe987aa68328e5dd8a6df00aecafb5102c9601584b097c60ee6345eae55b3d11df39f4cf25c4dbff96051255c64fd8bab2ac032196a4ab0cdddff4890c027224c3"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x0, 0x2, 0x5, [@generic={0x16, 0x10, "2f60057a39c00831192e65ea4e6925316dd69672"}, @generic={0x83, 0x23, "c0ccc3a5431837bc4194e4930ca4674247adc8b12d4efc54595b1cf4d3155267a1b84fc2f8fb34f0938f59d15438319c311b76a319f9509c51107bb4272e7eeaca7db74927464c331fcb536019cd25609aca860cb038e30fcb2e0ebac89c6754c39f5a78e70b777efc00e4177ac6a3ae3672cd895e0af0a8a5b4c7818871490801"}]}}]}}, {{0x9, 0x4, 0x87, 0x7f, 0x10, 0xff, 0xff, 0xff, 0xf6, [@generic={0x49, 0x21, "8143806ba256c12228b2f326ad7735e8b031214e22ecd71cd0941e75001b6f6a4e5efae2521f13c7d6a2c49649aa828e07a99cca91cc2f8c07ab68100e350209e0f9edf966c4a5"}], [{{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x4, 0x7, 0x8b, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x7f}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xff, 0xa6, 0x7f, [@generic={0x42, 0x22, "e149101f89f75ab33d8a2977cf6084adbc4df2d141100a690d711641f61c420bf8bea04474d6d59cdfde4cf616d78568b3ad42f6457c372124d4f0b4e723a37f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8000}]}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0x80, 0x6c, 0x7f}}, {{0x9, 0x5, 0xf, 0x12, 0x200, 0x6, 0xe1}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x81, 0x20, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x100}]}}, {{0x9, 0x5, 0xc, 0x14, 0x3ff, 0x1, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x101}]}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x10, 0xc1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x101}]}}, {{0x9, 0x5, 0x1, 0x8, 0x3ff, 0x40, 0x3, 0xbb, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x81, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x40}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x3f, 0x8, 0x7, [@generic={0x16, 0x9, "706d0c5222fe0c083f07a01f50178842831474dc"}, @generic={0xe0, 0x5, "cb79c9f01c2b3910dd8de82a4c80f5e3ea6fce71c1e5d8a9aab2261a3503c3e3250fcc025a5fb8e0baad2cb13c0aeb5164c8876220c28a2713a613b91e66a83e242d549e12cc46ae8e10bfd80079683fd878407424498693e6f4a7bc8d01df30f3178fac5278903dc1449596ee4adeac985ae576d48a354cd641c774704d776a101da8d664ccb7cd7fcf163bfb53cb73d1d2b4923afe62a960add41e76734c13619e7c0d9a6b41c3c4d60a0147d7b2b0856d62a4f1ff9ea75b55b38397464696c015b7d84cde7c3b72aca1c19af737740d5e58c0d000678296cfe7f5b220"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x6, 0x8, 0xc0, [@generic={0xba, 0x19, "e7f2ce3959b04c17fb015a0b72090426fc50959ea0ff5c358bc6e465a6312c6caed8fe86c7fc9ed90a8f5d71cc9ffd4a1b0037cc28911041ddb870fd3b052344edfa4bc09a650534525655b33516e76ed08afd192727b4aff1473e25f6ffe753ecc340861d7527fe207640f5e41bc938f8346bfedb71c9d9000918f516010c6716aeb158bfaebb10b3fa4ffe3cd1225fcd389a41cbeaeeb0dc16e2cede33e6e732f4955eb03b09a04e19d9151fab230b6ca1fe5fdc66e483"}, @generic={0x93, 0x23, "6e6755b670d2846c29a2958fb7680f1648d712db56016752139d31f75746464366c70764b01ff5355d1ae4d39cf610170712455590f968c9cd279e37bd481a93ef54f8d1dc35a337bb00c5b8e11d24f2d48e424434aa043336e8b1e4596d7a71324e7293aba93e64d6ab16fbeee9b541e18b4c6dc7cd703cc0ce5bd73bbcbb28832cddc5b552de9037c1a3dfccadc7081d"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x5, 0x10, 0x3f}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x1f, 0x1f, 0x40}}, {{0x9, 0x5, 0xb, 0x1, 0x8, 0x61, 0x1f, 0xa9, [@generic={0x55, 0xb, "0fefc23921ce761761384e188c6cc7efdd394417c8038a8f49f8b83c04340bc4027a570c9be9e558483e05c4239f59fb3846e20d225c1833b63b7cf3dbfa8b7443ef934285f2f752945f004134fd907d191afa"}, @generic={0x33, 0x3, "1aa1aa333b0beadbe7d941510b2f41ccbb4fee4ea2ac0a6e077d3c7213f5a72b0b91653ce3aa3fa90e9dff57937e8f8c62"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x81, 0xea, [@generic={0x55, 0x21, "bc4fe6aaa20eef867fa85238d9c5cf82dc999ee337af9e1d04cf660c47cd4896b674eb0ecef64ffbb23d1d9759ce13503a6a300b04b18e134697247e7557f426ed2421068c11ca81cdaea53c9ba7f4345d05e7"}, @generic={0x51, 0x6, "12872e08242e38fd3f3ff06142670ea26dd457f3e8f57088b246a0fcf3083b41062e23d0b2f14e66d4d4092555e79201d240e36a3b776cd29822d305555508fba5ae7faf9191a26158dcd5381a9a54"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x8, 0x5, 0x4, [@generic={0xfb, 0x4, "3595e612d2766c2e5b674852c210df2d5c4dfab152ef642df9bf5c4bb72a9add6714d08083eb429c86615e6272acf4b53db8276f3e3d3005a8b367027fbc379b5ce9f691bb0a50fb8fe907e59a9c7b963bed1aa65acf49616b5474706d78db0a23c8705075747b293dec5f2d109f9109ca5f62ecaaf53851e5a70da9c48fab185cefbc7ea56b986bfa694bac0d2cd45bfe5c4485080b459fbee0dbca2a68c5f9913f1dadb0e7abf6b1b18133a124f9442d932a469d7e9b6f04ee0390e0e270c92a2aca13dbacd025c8ad0d98ae04244656dab100e9054e93f84479ecbf7f4dc6f1b59e42e8b25f1878b9152351a7061c827d04a4a04a54b2eb"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xfa, 0x5}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x5, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x20, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7f}]}}]}}, {{0x9, 0x4, 0xc, 0x7f, 0x9, 0xf, 0x13, 0x60, 0x63, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x1, 0x6, 0x5}]}], [{{0x9, 0x5, 0x0, 0x8, 0x8, 0x0, 0x0, 0x8}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x20, 0xa1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x6, 0x9}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0xff, 0x40, 0xef}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x7, 0x63, 0x9, [@generic={0x8c, 0x4, "4e99af19214ece1f96393a3954c639f7e27ec7f5bb09b11c1bca4d39ad7f8c0e266b686a439d66f21848c13b6f1cd4317075df1b241bc6db0566a32a57d75243d1595d06749780b31925c86051359c2b6d6bfee917357b4e03d14b9bad47cff25e9bfcdf66d54c9b08809c9aebb3bcd433a0da04934d175f8bf0e22d15eff36ea74cbafa4e6a8696ab03"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x200, 0x7, 0xa9, 0x4, [@generic={0xdf, 0x10, "2466cc799126f06f936fe1b8cb20861ba17809fbc5532e3aa76bc460d0a714a87bcc6d1e23b4f58217d1c78f5dd0909e3689c825e72bbbe743cc541fa53c9f8115620e818392a0d043c3fd71349aa4a3086088e033c76f126b7fa89306450ec5d72f19bee1ad28057e29f9d5b53c1f6018abccee387983777fff45745d02d9ee73cba93cc3005bae47822df7f787cbb7ac86834604f8647445f3766400b6a5251f1efff773af1554df76cae96ad4ee4ac6e099b853a05614aaf8c9d7a4acaeb94f956a4df4ede8dc73b1aefcab632ede86160c6c9e59332a7c817d6920"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0xfffa}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x3f, 0xa5, 0x1, [@generic={0x3, 0x5, "8a"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9b, 0x892}]}}, {{0x9, 0x5, 0x80, 0x8, 0x8, 0x81, 0x7}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x6, 0x40, 0xd6}}, {{0x9, 0x5, 0x80, 0x10, 0x376ad11af4d51d49, 0x3, 0xf9, 0x6}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x201, 0xce, 0x5, 0x5, 0x8, 0x3}, 0xf, &(0x7f00000002c0)={0x5, 0xf, 0xf, 0x1}, 0x3, [{0x7b, &(0x7f0000000240)=@string={0x7b, 0x3, "4e55a28feaaa23a2c54b9ec2393b67dd9a5d15259f9cdc6d0b3035dcd85408ba7239d3f40c75e49f38087ea3e1211acb615f8fa2ac0a9835e5e81e8dbd85eb4267e4c1868a55dbc4bfd75fd2a373abc41592e41770d9ed96e5d9af8f43385ce9d285a192b1478f369f42e22779f573185e2ab6d0da1b00fc9e"}}, {0x97, &(0x7f0000000c80)=@string={0x97, 0x3, "aedd79d399cfb23c3a47ec6ae9ede4789ccd651afbb4b4357edda87d281e31927cd4db0a5257829bbc144273ad95a01719ddf58d7114f437135d9158279e56c0eb438667d21991bcfad1c15818e4e5b00a2a00dbc168664605c762ab237bd458311e071b0fa502772a71efdbb6e7f8bacf76c743109aa455a4c4bfc9629788ad89773d64fe7f1fbedc3eca9e250e2cc7831b32fdce"}}, {0xa1, &(0x7f0000000d40)=@string={0xa1, 0x3, "551c4b11212191cfaff91cb9a6a4071b8e8189cafe43b54f38ee394d27ea4eb2f1d0e3e95d44addcc602916450e2005ed502fdbed4ecb74977573f118bb278ce653a37a8c638a32dad4934fe771fe5076a63dc0e62740439b44a3bd35c9e92d87c8d474afac84c013acaf8486f90e7fea1c06c50afc6ab900b8ec28d3d5988f5413ad46f83907cb14cb0f9e8255e3a7078592d264610df8c7affe06474fa82"}}]}) syz_usb_ep_read(r1, 0x3f, 0x2b, &(0x7f0000000e40)=""/43) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000200)={0x0, 0x10, [0x8, 0x20000000, 0x4, 0x3]}) [ 1108.882777][ T2485] usb 6-1: config 0 descriptor?? 15:36:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000140)={0x5, &(0x7f0000000040)=[{0x8, 0x1}, {0xe000, 0x1}, {0x7ff, 0x101}, {0x3f, 0x4800}, {0x5f, 0x8001}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) uname(0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000002) [ 1109.014210][ T7155] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1109.066154][ T7158] udc-core: couldn't find an available UDC or it's busy [ 1109.070263][ T7155] CPU: 0 PID: 7155 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0 [ 1109.081697][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1109.089678][ T7158] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1109.091753][ T7155] Call Trace: [ 1109.102480][ T7155] dump_stack+0x18f/0x20d [ 1109.106930][ T7155] sysfs_warn_dup.cold+0x1c/0x2d [ 1109.111875][ T7155] sysfs_do_create_link_sd+0x11e/0x140 [ 1109.117349][ T7155] sysfs_create_link+0x5f/0xc0 [ 1109.122154][ T7155] device_add+0x6ff/0x1b00 [ 1109.126587][ T7155] ? device_check_offline+0x280/0x280 [ 1109.131986][ T7155] ? ieee80211_set_bitrate_flags+0x20b/0x5c0 [ 1109.137978][ T7155] wiphy_register+0x1d5b/0x2840 [ 1109.142851][ T7155] ? wiphy_unregister+0xc10/0xc10 [ 1109.147927][ T7155] ? default_device_exit_batch+0x3d0/0x3d0 [ 1109.153750][ T7155] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1109.159831][ T7155] ieee80211_register_hw+0x2291/0x3950 [ 1109.165347][ T7155] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1109.170734][ T7155] ? lock_downgrade+0x820/0x820 [ 1109.175596][ T7155] ? lock_is_held_type+0xb0/0xe0 [ 1109.180545][ T7155] ? memset+0x20/0x40 [ 1109.184538][ T7155] ? __hrtimer_init+0x12c/0x260 [ 1109.189423][ T7155] mac80211_hwsim_new_radio+0x2351/0x4540 [ 1109.195173][ T7155] ? hwsim_virtio_rx_work+0x350/0x350 [ 1109.200558][ T7155] ? memcpy+0x39/0x60 [ 1109.204553][ T7155] hwsim_new_radio_nl+0x93e/0xf8c [ 1109.209588][ T7155] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1109.215524][ T7155] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b3/0x310 [ 1109.222464][ T7155] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1bd/0x310 [ 1109.229418][ T7155] genl_rcv_msg+0x61d/0x9e0 [ 1109.233937][ T7155] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 1109.240894][ T7155] ? lock_release+0x8d0/0x8d0 [ 1109.245581][ T7155] ? __lockdep_free_key_range+0x110/0x110 [ 1109.251313][ T7155] netlink_rcv_skb+0x15a/0x430 [ 1109.256087][ T7155] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 1109.263027][ T7155] ? netlink_ack+0xa10/0xa10 [ 1109.267645][ T7155] genl_rcv+0x24/0x40 [ 1109.267885][ T29] audit: type=1804 audit(1594136196.353:108): pid=7164 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir520981870/syzkaller.MSIU5P/887/cgroup.controllers" dev="sda1" ino=15950 res=1 [ 1109.271630][ T7155] netlink_unicast+0x533/0x7d0 [ 1109.271654][ T7155] ? netlink_attachskb+0x810/0x810 [ 1109.271671][ T7155] ? _copy_from_iter_full+0x247/0x890 [ 1109.271689][ T7155] ? __phys_addr+0x9a/0x110 [ 1109.271704][ T7155] ? __phys_addr_symbol+0x2c/0x70 [ 1109.271721][ T7155] ? __check_object_size+0x171/0x3e4 [ 1109.271741][ T7155] netlink_sendmsg+0x856/0xd90 [ 1109.271772][ T7155] ? netlink_unicast+0x7d0/0x7d0 [ 1109.308820][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1109.311103][ T7155] ? netlink_unicast+0x7d0/0x7d0 [ 1109.311146][ T7155] sock_sendmsg+0xcf/0x120 [ 1109.311167][ T7155] ____sys_sendmsg+0x6e8/0x810 [ 1109.311189][ T7155] ? kernel_sendmsg+0x50/0x50 [ 1109.311202][ T7155] ? do_recvmmsg+0x6d0/0x6d0 [ 1109.311226][ T7155] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1109.311248][ T7155] ? __lockdep_free_key_range+0x110/0x110 [ 1109.379919][ T7155] ___sys_sendmsg+0xf3/0x170 [ 1109.384525][ T7155] ? sendmsg_copy_msghdr+0x160/0x160 [ 1109.389816][ T7155] ? __fget_files+0x272/0x400 [ 1109.394516][ T7155] ? lock_downgrade+0x820/0x820 [ 1109.399377][ T7155] ? find_held_lock+0x2d/0x110 [ 1109.404147][ T7155] ? __might_fault+0x11f/0x1d0 [ 1109.408928][ T7155] ? __fget_files+0x294/0x400 [ 1109.413622][ T7155] ? __fget_light+0xea/0x280 [ 1109.418230][ T7155] __sys_sendmsg+0xe5/0x1b0 [ 1109.422739][ T7155] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1109.427789][ T7155] ? __x64_sys_futex+0x382/0x4e0 [ 1109.432772][ T7155] ? do_syscall_64+0x1c/0xe0 [ 1109.437373][ T7155] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1109.443364][ T7155] do_syscall_64+0x60/0xe0 [ 1109.447799][ T7155] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1109.453704][ T7155] RIP: 0033:0x45cb29 [ 1109.457594][ T7155] Code: Bad RIP value. 15:36:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x0, 0xffff, 0x0, 0x0, 0xc2, 0x7, 0x2}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e25, 0x0, @empty}, 0x1c) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000100)) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES64, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r3, @ANYBLOB="ad518a3ad63e6c7c55722abfcf69b04842257d46ae5e06b9885eeceda39e200f40b628cc8cc438e835546822d513e88aedac4a7d8f0d3941c2254d684912a3f4269f592b845fd2de5b44cd333a703d54f5cf45a7fff09a6c6268b9aedd53b045b9f73fca13611dd36fd7d23f076e911cf68fd009efa79f5cb9eeff4faf9493a0f0d890f3fcd20ec7de83e67a14a5032441ce01"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x8194}}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x4c, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @local}}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_L2SPEC_LEN={0x1, 0x6, 0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_RECV_SEQ={0x0, 0x12, 0x20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48010}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0xf0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xe}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x9400}], 0x1) [ 1109.461662][ T7155] RSP: 002b:00007f9d497e0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1109.470082][ T7155] RAX: ffffffffffffffda RBX: 00000000005025a0 RCX: 000000000045cb29 [ 1109.478057][ T7155] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 1109.486031][ T7155] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1109.494004][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1109.501982][ T7155] R13: 0000000000000a3c R14: 00000000004cd22e R15: 00007f9d497e16d4 [ 1109.772129][ T2485] logitech-hidpp-device 0003:046D:C087.0011: item fetching failed at offset 0/1 [ 1109.801421][ T2485] logitech-hidpp-device 0003:046D:C087.0011: hidpp_probe:parse failed [ 1109.841516][ T2485] logitech-hidpp-device: probe of 0003:046D:C087.0011 failed with error -22 [ 1109.882286][ T7131] device lo left promiscuous mode [ 1109.889451][ T7167] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1110.010362][ T7180] device lo entered promiscuous mode 15:36:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc00040034734debf24254318edca4bfd5c38ed4532ffbbd0fb973007d23ae65cb02c4c12ac902465fb9f87777667c10f76986901a3a21db48b18658ff1f00"/80, @ANYRES16=r3, @ANYBLOB="00022abd7000fedbdf250400000008003a00f6a5000005002e0000000000050029000000000008000300", @ANYRES32=0x0, @ANYBLOB="08002c000100000008003b00020000000800340006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000040) syz_emit_ethernet(0xd2, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa32970b4fa59586dd6059e9f7009c1100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000009c90780100000000000000d42468f56384d6b631eeb96b8a66f9dcd49f3174026b6dc87eb65a56d11cf2a32eabfff1c5855b0cea83881ad8d33baba80d246c694ecbf94cc509587f409c4a138f97ac9cd72cac34a2c96d9eeda6a93a7356cc8e349d4e4b6678c46c9a251ff4627c6d71e9357162ef3bc290ecbd3a602464aa1e3b106246bfb42059529b2408d2ad128ef20067dc85dfafbe2d41cd3689486f536074a9dde8a8ab"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r8, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x8194}}, 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000084c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000008480)={&(0x7f0000008400)={0x58, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000880}, 0x10) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 15:36:37 executing program 2: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x5a91) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24060084, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x0, 0x63, 0x80000000, 0x1000, 0x10001, 0x401, 0x2, 0x0, 0x6}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) 15:36:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x3c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, r5}}, {@access_uid={'access', 0x3d, r7}}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x62, 0x38, 0x32, 0x35, 0x33, 0x61, 0x36], 0x2d, [0x31, 0x35, 0x37, 0x62], 0x2d, [0x34, 0x64, 0x38, 0x38], 0x2d, [0x36, 0x31, 0x35, 0x36], 0x2d, [0x64, 0x37, 0x38, 0x31, 0x65, 0x33, 0x37, 0x31]}}}]}}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x11, r0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/219) [ 1110.061510][T16473] usb 6-1: USB disconnect, device number 48 [ 1110.067695][ T7131] device lo left promiscuous mode 15:36:37 executing program 2: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x5a91) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24060084, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x0, 0x63, 0x80000000, 0x1000, 0x10001, 0x401, 0x2, 0x0, 0x6}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) [ 1110.163042][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:36:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = eventfd2(0x8001, 0x800) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000000c0)=0x9eb4e281b44c4fe0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000ffffffffffffffffffffffff86dd60aa329500442f00fc010000000000000000000000000000ff020000000000000000000000000001"], 0x7e) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r3, 0x0, r5, 0x0, 0x18102, 0x0) [ 1110.243957][ T7195] device bridge40 entered promiscuous mode 15:36:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c1b00006ec3111ea3e4e00c2ca8029cf80a3eb30aa3cd1e7ecb67301ae363601378667a7d01ca10349cc08679ebd8edf2173cb5d2f349ef9e93228796569f897fe8a16e28d131ef4640e83dbf5022bd8bb483c7a9ae262332a036083cc9b7cac6a75805df461beaf2a3a78dddce48d721d7452496dbbd20ddece7bf027b0850754540d6ced870d04a0ec73baeb7c40a704d44077dcc05c247c8a2027e76843ab80e0a3efda4e8b9d4", @ANYRES16=r3, @ANYBLOB="0500000000000000000001000300050005000000000008000300040000000500060000000000"], 0x2c}, 0x1, 0x6c}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 15:36:37 executing program 3: socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x81, 0x6, 0x1, 0x0, 0x10000000000}, 0x0) io_uring_setup(0x672, &(0x7f0000002b00)={0x0, 0x0, 0xa, 0x4, 0x3b}) gettid() perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x77, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff225b, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) unshare(0x40000000) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x10005e, 0x2) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) mmap$usbfs(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x3, 0x4010, 0xffffffffffffffff, 0xe6) close(0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x20040864) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ea, 0x0) pipe(&(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00') 15:36:37 executing program 5: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) lremovexattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.origin\x00') getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000180)=0x84) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="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"/347, @ANYRES32, @ANYRESDEC, @ANYRESDEC=r0], &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) socket(0x22, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000340)={0x0, 0x3ff, 0xfffffffc, 0x1, 0x0, 0x4, 0x1, 0x2, 0x2d4, 0x4, 0x2, 0x4}) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x77a0d300c6042580) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000002}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="340934fc49508c3382407d54b515a9d9822d2094683bee12bfffa98223bde78d415ba08c3d63076ef785ae65bd28d88250e6d06ba0040033e7e01895c739efb927695f9e0f4d5ed400"]) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 1110.494514][ T7158] udc-core: couldn't find an available UDC or it's busy [ 1110.518914][ T7158] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1110.699447][ T29] audit: type=1804 audit(1594136197.783:109): pid=7225 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir520981870/syzkaller.MSIU5P/890/cgroup.controllers" dev="sda1" ino=15959 res=1 15:36:37 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) fcntl$getflags(r0, 0x40a) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x400000, 0x0) r6 = socket(0x29, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000480)={r5, r6, 0x9b9}) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xc60}]}, 0x10) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) openat$full(0xffffffffffffff9c, 0x0, 0x19400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r3, 0x0, 0x2019407, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0xe665, @remote}, @in6={0xa, 0x4e24, 0x3, @empty, 0x10000}, @in={0x2, 0x4e21, @local}], 0x3c) 15:36:38 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x2e5542) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000001c0)={0x4, 0x100, 0x7fffffff}, 0xc) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='=\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002abd7000fbdbdf2508000000050033000100000005002f000000000005002e0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x400c1c1) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000000480)={0x0, 0x0, {0x1, 0x80000000, 0xfffffff8, 0x80}}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 15:36:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000440)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x37) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0xffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000080)='(\x81]\x00', 0x4) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f00000002c0)={0x1, 0xffffffff, 0x1, 'queue1\x00', 0x6e}) socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x4, &(0x7f0000000480)=[{&(0x7f00000001c0)="914518e0ae765499904f4bcb9272c501a3d5ef7c911e", 0x16, 0x5}, {&(0x7f0000000240)="c1f0242705", 0x5, 0x360}, {&(0x7f0000000380)="a4d282e02d831afd6c91b01fa223fb055ca997", 0x13, 0xff29}, {&(0x7f00000003c0)="007896ad3c5cf117dfbcccb68e12b5c3625d0f3225ce40e12bdd9497ff634bc7c8eb023b7be595c39eda8df926b88e04150daf93736dce0ef0c2fb29f73f334822e8da4b415a0bcc782ac3f70749fb6483f86e94ccc0ae72babfd4c1bdc42ff2589bc6a517c3b73c23", 0x69, 0x7f}], 0x0, &(0x7f0000000500)={[{@nodots='nodots'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '$)\''}}, {@euid_lt={'euid<', r7}}]}) [ 1111.611451][ T7255] FAT-fs (loop2): Unrecognized mount option "smackfsfloor=$)'" or missing value 15:36:38 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000140)={0x1}) fcntl$lock(r1, 0x24, &(0x7f0000000180)={0x0, 0x0, 0x9}) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0) r2 = syz_open_pts(r0, 0x2) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000080)={0x0, 0x0, 0xb}) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup\x00', 0x0, &(0x7f0000000280)='cpuset\x00') 15:36:38 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xf79d4dea9be898a7, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 15:36:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000240)="66baf80cb8d46bbf8aef66bafc0ced64400f01df48b83a0b0000000000000f23c80f21f835080040000f23f82ef3420f1ec966baf80cb85656d185ef66bafc0cec0f01ca8f69f001e566baf80cb85bac2d81ef66bafc0cb079ee470f01ca0f01cb", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11e000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SCSI_IOCTL_DOORUNLOCK(r6, 0x5381) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x0, 0xc0000000, 0x0, 0x7}) 15:36:39 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000035000511d25a806c8c63940d0124fc601003d0400a0002000200000037153e370400088004000000d1bd", 0x2e}], 0x1}, 0x0) 15:36:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000040)=0x2020c00) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000080)=[{}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000706010100000000000000000000000005000100070000000aa9da528ae0222e54916e6bb95a632d00b24e12b69552fb5453a3854b70ae248406537e5114cd68e48b8847927a35cabed1b81f889d8c68008bf1b8a6c5a63055fff69999ff6f0055a7eb1d1980a429c1d969cf0bfe84b626ef0bb9844fc8ad2c6f6f9e2f2a797079278155d61597f418af3f3cbf3f10608ea818ffd653c9e1a5117984d76b6f16dacb054392a5a0be9e0915280f2721f5d783"], 0x1c}}, 0x0) 15:36:39 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000140)={0x1}) fcntl$lock(r1, 0x24, &(0x7f0000000180)={0x0, 0x0, 0x9}) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0) r2 = syz_open_pts(r0, 0x2) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000080)={0x0, 0x0, 0xb}) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup\x00', 0x0, &(0x7f0000000280)='cpuset\x00') 15:36:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r7, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x804010}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x60, 0x0, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffd4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x1) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000040)=""/121) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r9, @ANYBLOB="00000000000000f9b7f3de07f9f78f002fc42f9f4917ed063fde3f8b2207b463cd7b96497abe0666b48940b12a20ff8f545624f39b0ddea24689d442b6816326cf54887ac48e897ed65ef17e63e4d65ec6bc7d1a9e8caeb3517f31225a69b58ea728f3ac30cc80a5335195e141f6420ca4ab70973cd43f8a4e402d383d4a951771b2a94c8e2d6ffe915e748d11b404124bec49e6b478ccbd5ee249eee535e8caa38569b545b20da7e0fedfe886bba27cbe29cd3df153d0f7db7fc880585a5c646d9b8ec01f102e0f98413e00"/218], 0x28}}, 0x0) [ 1112.621587][ T7292] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1112.685346][ T7297] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1112.789618][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:36:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r3, @in={{0x2, 0x0, @rand_addr=0x40}}}, 0x9c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x1f, 0x5, 0x8000, 0xffff7fff, 0x4, 0x0, 0xfffffffb, 0x101, r3}, &(0x7f00000000c0)=0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x2, 0x20040) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000000780)=0x8000) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r7, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffff52}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r2, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000180)="e1e06b7e8a1eb013cdf1be03e940099a4058554642325fa2d62cbd33121d1dda1c2cba2ab5ddf84c9a99332a0aa1b88862081812e1b779370bda0e9169bcabd4e5044fbe61e0d1d96fda94cc50ecf6a6b0c703f5d91a0c02bfa16234b30c26bf7bfee3c68682095f32ff2776d2985a81703f634fe3abaa9ac0aeed3b3148b1aef0f872fb871a8500338e9de6b4ee1e17eb5847937a83b0358ef8ab6692d2b1538741dab7a9f609e75b6e55a120da346312cab143f90ebb6da62d0fc550b733200c75f715ce01bb70bc23e70dd262ef91215822298fee9709e2d1ea327aa8a6a4314e9b91dbf58300a7917cc3e4f26283937694d3a4c146", 0x8056a}, {&(0x7f00000002c0)="c18af54e7facd931e259615d3a032b165331b3657a111037325376ecdcd7cdb565e908e3f8ed1619f36e1d9542c99c64517c889681a7be921d530aa430c15dda300d9af19cdb598be1b47a3270b2a1164ebd669a64db6fe8c93739fd45325fe94f075eb0f9b0e9f93dfe77af28d06043eb76c521af1f865c2d52eae2c88f2a33646df1d8d300ccdb466c2071b66192d92f3b8c1623c6c46f8baa6b50ee5cfc2456f5b68b8ec89acf489738abc1790a1a2f73de8902794554964c18b0ad5245dbd4c5afbba32d91fab46da4b75f73", 0xce}, {&(0x7f0000000040)="c39a00bb15b4d145723f765d602ef1e9ee36", 0x7ffff}, {&(0x7f00000003c0)="5683eb186eaf89d39dcfafa4e796554c67e389d4526f1202ce7e4b2da420d47a58d28c3a80a467f347ab84023a82b4a6d86659d01f5caf15e20c5d8986f18ef00cafe40e866419b00a2dceff7623c1aa9cb838fa3608f48974b4d78fe37fae1e577235d7af3d3b105f0b77a5da237b80615ed4a95fae798adfb3aa15119146bcda665356e91113231ded3948684b39093f3f8031d652fefc1d77fe94e3fccb4c4086e22fe32f63285d5d6f0faa603609e5ed282499a9c13ba06b99f837eb09ca142dec8b3c2a5e3791f0a7e1ac323f8f9dc521b145ad811a6d4fe37f04497d78281a1dcf220fe0526d52a75e0a3c13", 0xef}, {&(0x7f00000004c0)="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", 0x2b7}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 1112.902150][ T7300] device bridge32 entered promiscuous mode [ 1112.945273][ T7302] device bridge32 left promiscuous mode [ 1112.960879][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:36:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) pipe2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1007ffffffd) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000aa", @ANYRES16=r6, @ANYBLOB="000426bd7000fedbdf250700000008002c001c0f00000800320004000000"], 0x24}}, 0x80) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) 15:36:42 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040)=0x38a11da7, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) 15:36:42 executing program 3: unshare(0x8020000) semget$private(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvfrom$l2tp(r1, &(0x7f0000000000)=""/152, 0x98, 0x20, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') semop(0x0, &(0x7f00000001c0)=[{0x0, 0x6, 0x1000}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, &(0x7f0000000200)=0x9) setns(r4, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) 15:36:42 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r4, @ANYBLOB='#'], 0x20}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r5, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x4109}, {0x3, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r5, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x35ffa830, 0xff3, 0x7, 0x6a}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x22000081) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00012}}], 0x8d00, 0x50000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000026000102"], 0x24}}, 0x0) 15:36:42 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000009058102f1000000000904010000020d00000904010102020d0000090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket(0xa, 0x803, 0xfffffffd) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0x0) getegid() setgroups(0x3, &(0x7f0000001840)=[r3, 0x0, 0x0]) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000240)='tmpfs\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x1, &(0x7f0000000300)=[{&(0x7f00000002c0)="9bf61723f2aacf64fac0de705bfa18e75d0af5e49fa333", 0x17, 0x100000000}], 0x4000051, &(0x7f0000000440)={[{@nr_inodes={'nr_inodes', 0x3d, [0x2d, 0x25]}}, {@gid={'gid', 0x3d, r3}}, {@gid={'gid', 0x3d, r4}}, {@huge_never={'huge=never', 0x3d, '\''}}, {@huge_never={'huge=never', 0x3d, ')\x8e},(\xcc@-'}}], [{@dont_measure='dont_measure'}]}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000001800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r5, @ANYBLOB="00012cbd7000fbdbdf25040000000c0002800800010014000000a00005803c00026608000249ec875150f9a3000800000008000300f50d000008000400030000000800020003000000080002000104000008000300ffffffff08000400000200003400028008000200fe200000000000080001000e0000000800040002000000080002000300000008000100657468002400028008000300ff7f000008000000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x5}, 0x20040850) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x400, 0x8) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000580)={'team0\x00', {0x2, 0x4e20, @broadcast}}) sendmsg$nfc_llcp(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x27, 0x1, 0x0, 0x6, 0x20, 0x0, "7da90b4f29d0ef0b662c644471a129313fee3322d37602c3f7f7f1c5aa934414dab1905cb3e43790d58c634fac574db9f3e43b87b63a69133f523b3bbd67f4", 0x6}, 0x60, &(0x7f0000000180)=[{&(0x7f0000000080)="69a659fd8227edc2f428804f18739e5bc3057eb29998c7e52bf74dcd76600497adb4131b42c25671603a4777012462ac782fb0bfc8f8a0e5455118a6e7beed785b6696c986cf50883c18a31a43697ec0564af356b9d7f4319a2ff258b525a811f6efd7c3edaf55a52e1c9fb5780c6890d458db8ff714dc870de2ed0fc0f69ca04688634429cb7e3b7c35163f4a46a349a6cdc4", 0x93}, {&(0x7f0000000140)="708261a958625094487fd4ef72", 0xd}], 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1010, 0x81}, 0x40040810) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 15:36:42 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x80a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000002c0)={r5, 0x1}) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000100001046af700040000000000000000", @ANYRES32=r10, @ANYBLOB="000002001840703408000a09", @ANYRES32=r7], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r11 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r11, 0x0, 0x4ffe0, 0x0) [ 1115.204778][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1115.237422][ T7326] device bridge20 entered promiscuous mode 15:36:42 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r3, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x5, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40400}, 0x4e840) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, [], 0x2e}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xde}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) [ 1115.266956][ T7326] device bridge20 left promiscuous mode 15:36:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000a80)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000003c0)) open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = geteuid() sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYRES16, @ANYRESOCT, @ANYBLOB="d842f0d382e08b6ea80550b4afaf27a6fc75893fe90235f8c3beb191db7b89c0e9bf45a46a11cf7aeac19c798da9", @ANYRES16=r2, @ANYRESHEX, @ANYBLOB="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"/380], 0x6}, 0x1, 0x0, 0x0, 0x4050}, 0x40) quotactl(0x8, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="36baecc123798975f5fa5a11afb87d91c3f4") fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000403cb3d4f751004246cc8ca8ed54e3e12adc47afda", @ANYRES16, @ANYBLOB="b72300000000000000000c00000008000300", @ANYRES32=r4], 0x1c}}, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESHEX, @ANYRES64=r5], 0x4c4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000480), 0xa198) [ 1115.375835][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1115.407728][ T7341] device bridge20 entered promiscuous mode [ 1115.470068][ T7782] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1115.615683][ T29] audit: type=1800 audit(1594136202.703:110): pid=7357 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16309 res=0 [ 1115.652961][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1115.760040][ T7782] usb 3-1: Using ep0 maxpacket: 16 [ 1115.762418][ T7350] device bridge24 entered promiscuous mode [ 1115.794638][ T7353] device bridge24 left promiscuous mode 15:36:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x8c, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$rxrpc(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000080)) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000180)={0x0, 0x13d3, 0x8b, r4, 0x0, &(0x7f0000000140)={0x9909d2, 0x80000000, [], @string=&(0x7f00000000c0)=0x1}}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r7, @in={{0x2, 0x0, @rand_addr=0x40}}}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000001c0)={0x7, 0x7, 0x4, 0x5, 0x4, 0x0, 0x3, 0x7, r7}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bind$rxrpc(r9, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) [ 1115.812944][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1115.855053][ T7353] device bridge24 entered promiscuous mode [ 1115.890766][ T7782] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.914260][ T7782] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 241 [ 1115.982106][ T7782] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 15:36:43 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009006900000000000000ab0080001f00000046000107070000141900010010", 0x25}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x8b05}, @void, @arp=@generic={0x305, 0x4305, 0x6, 0xf, 0x1, @random="cd5180d8f6a2", "edd06e74952610352068fdbd23babb", @broadcast, "6923f250d21a6b5feb43ce57d559"}}, 0x35) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38d700000207008000000000000500800000000028df07980800094000e90000180002"], 0x1}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280004001c00010da017e700118f0000020871e901000000"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="0840000014"], 0x1}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 1116.210928][ T7782] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1116.245788][ T7782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.291566][ T7782] usb 3-1: Product: syz [ 1116.316673][ T7782] usb 3-1: Manufacturer: syz [ 1116.338008][ T7782] usb 3-1: SerialNumber: syz 15:36:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x1001}, &(0x7f00000003c0)=0xc) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000600)=0x14) openat$sndseq(0xffffffffffffff9c, 0x0, 0x80) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dri/renderD128\x00', 0x202, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[]) socketpair(0x1e, 0x0, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x60000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000002c0)={{0xa, 0x4e24, 0x401, @empty, 0x17ef}, {0xa, 0x4e23, 0x1, @empty, 0x2}, 0x0, [0x0, 0xff, 0x7f, 0x103, 0x8, 0xec6d, 0x4f]}, 0x5c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0185879, &(0x7f0000000080)) [ 1116.370907][ T7378] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1116.381021][ T7378] netlink: 16397 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1116.402341][ T7323] raw-gadget gadget: fail, usb_ep_enable returned -22 15:36:43 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x10900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe43) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108050f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000107240248ff050005001201", 0x2e}], 0x1}, 0x0) socket$kcm(0x2, 0x0, 0x84) socket$kcm(0x29, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x6a, 0x5, 0x0, "cec8f3a94cc862aa7e326084b0116a9b", "953e5496791f187e3670238987cff27cf0ffb5b9dcae2f1e1fc46ee024094121e3fb4c902547b4d5f88e3f41ffa168d6ff6c3b0269c3e0a9f949025abbc998ef0ca1f2bb2a7dbb40c586452cfec03e36b92544befd"}, 0x6a, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 15:36:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="460f34440f3536430f79630066ba400066ed650f01c3400f23308f2978db320f0054b4cd410f01c9470f01df", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x403, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:36:43 executing program 0: mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket(0x11, 0x800000003, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x100000001) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='c', 0xfffff, r0) 15:36:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x46, 0x5}, 0x0, 0x5, 0x0, 0x7, 0x0, 0x1ffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000070603000000000000000000000000000500010006"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 1116.561051][ T7384] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1116.598181][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.605623][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.640079][ T7384] device bridge0 entered promiscuous mode [ 1117.053829][ T7323] tmpfs: Bad value for 'nr_inodes' [ 1117.120690][ T7384] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1117.138850][ T7384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.146100][ T7384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1117.153645][ T7384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.160851][ T7384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.281868][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.289142][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.570260][ T7782] cdc_ncm 3-1:1.0: bind() failure [ 1117.615723][ T7782] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1117.660146][ T7782] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1117.684672][ T7782] usb 3-1: USB disconnect, device number 58 [ 1118.339959][ T6936] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1118.579949][ T6936] usb 3-1: Using ep0 maxpacket: 16 [ 1118.700096][ T6936] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.710777][ T6936] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 241 [ 1118.721429][ T6936] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1118.890115][ T6936] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1118.899449][ T6936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.909205][ T6936] usb 3-1: Product: syz [ 1118.913718][ T6936] usb 3-1: Manufacturer: syz [ 1118.918433][ T6936] usb 3-1: SerialNumber: syz 15:36:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x1, 0x2b, 0x6}, {0x0, 0x0, 0x80, 0x1ff}, {0x1, 0x8, 0x4, 0x4}, {0x8, 0x93, 0x7, 0x8e8b}]}) fchdir(r0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x4001) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setgid(0x0) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) getresuid(&(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000400)) write$9p(r1, &(0x7f0000001400)=';', 0xb00c) [ 1118.952082][ T7323] raw-gadget gadget: fail, usb_ep_enable returned -22 15:36:46 executing program 0: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000, 0x0, &(0x7f000077f000/0x3000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x3000002, 0xb4972, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@mcast2}, &(0x7f0000000040)=0x14) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000087fff8)) 15:36:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xf, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x9) 15:36:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) symlinkat(&(0x7f0000000140)='./file1/file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file1\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4e1240, 0x100) mkdirat(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x3, 0x75, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x80000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x24004091}, 0x44084) syz_open_dev$midi(0x0, 0x957, 0x80000) listen(r1, 0x200000000002) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$inet6(0xa, 0x80000, 0x600000) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) prctl$PR_SET_FP_MODE(0x2d, 0x1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f00000001c0)='\x00', 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:36:46 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ed115d400120021a9bf80000000109021200010000000009040000002e5d8b0083f69c0ccb2b4a0a69bdad77626531927145330ce7c7374575103bd09c6e1597"], 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010800090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021ace0211b0316b4f9825ef7dd30963b204915f43eabb9c2a6892c4de3bd9d6c9f22acc5521e7dd03a92fc8d7bd5af99db22d9d5487bca5225914b5629c1094d034c2a39f4a625be07bb545a96a37ae77cdb119c1d6352363a95f127ee519aaece2aa4498472e8f995deb62b38c7ca716bbc45887ecd28753f71173e6f48ff52d77f6ff65f0731d3e10231723d71c404dbb5e3ca480d45f94d960344ea53557db8fb0dc"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d40)={0x44, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x480, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000040)={0x5, 0x5, 0x7, 0x12000, 'syz0\x00', 0x3}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100), 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 15:36:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3800, &(0x7f0000000400)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_ADDRESS={0xa, 0x1, @random="903abb0756cf"}]}, 0x4c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x878a8000}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20088001) [ 1119.036554][ T6936] cdc_ncm 3-1:1.0: bind() failure [ 1119.060470][ T6936] cdc_ncm 3-1:1.1: bind() failure [ 1119.089298][ T7459] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1119.116184][ T6936] usb 3-1: USB disconnect, device number 59 [ 1119.193601][ T7459] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 15:36:46 executing program 0: socket$kcm(0x29, 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x440100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x80108906, 0x0) 15:36:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) symlinkat(&(0x7f0000000140)='./file1/file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file1\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4e1240, 0x100) mkdirat(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x3, 0x75, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x80000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x24004091}, 0x44084) syz_open_dev$midi(0x0, 0x957, 0x80000) listen(r1, 0x200000000002) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$inet6(0xa, 0x80000, 0x600000) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) prctl$PR_SET_FP_MODE(0x2d, 0x1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f00000001c0)='\x00', 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1119.430331][T16473] usb 4-1: new high-speed USB device number 38 using dummy_hcd 15:36:46 executing program 5: syz_usb_connect(0x0, 0x10b, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b24b4a10e60405007701002a6801090224000101001c000904000002ccb8280009050b02000000000009058a022c"], 0x0) 15:36:46 executing program 0: lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) renameat(r0, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff5}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x121000, 0x0) 15:36:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e23, @broadcast}], 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r3, 0x1, '!'}, &(0x7f0000000000)=0x3e2) 15:36:46 executing program 1: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x280040, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000004c0)={0x7fffffff, 0x6}) recvfrom$phonet(r0, &(0x7f0000000080)=""/123, 0x7b, 0x40000040, &(0x7f0000000000)={0x23, 0x4, 0x5, 0x1}, 0x10) r2 = socket(0x22, 0x2, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) listen(r3, 0xfffffffe) ioctl$IMGETCOUNT(r2, 0x5452, &(0x7f0000000040)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9febad51a28b000000000000000c000000026f1951d54358bdb5102c2e7486570000000000000000000004000000000000000000"], 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000001000000000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r5, 0x8c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x1c}, @in6=@empty, 0x4e24, 0x400, 0x4e24, 0x64, 0x8, 0x0, 0x80, 0x1d, 0x0, r7}, {0xe35, 0x9, 0x5, 0x10001, 0x2, 0x3, 0x2, 0x8}, {0x304f647f, 0x7fff, 0x6}, 0x0, 0x6e6bba, 0x2, 0x1}, {{@in=@local, 0x4d5, 0x33}, 0xa, @in=@multicast2, 0x3502, 0x0, 0x2, 0xfb, 0x9, 0xffff0001, 0xd88}}, 0xe8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x0, r6}, 0x8) 15:36:46 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r7, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x8194}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', r7}) dup3(r0, r1, 0x0) [ 1119.790208][T16473] usb 4-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1119.810899][T16473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.856606][T16473] usb 4-1: config 0 descriptor?? [ 1119.934599][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1119.967205][ T7519] device bridge21 entered promiscuous mode 15:36:47 executing program 1: socketpair(0x3, 0x20000000000001, 0x8, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000580)={0x2, 0x2, 0x1, 'queue1\x00', 0x6}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000004c0)={0x0, 0x70, 0x82, 0x8, 0xf7, 0x5, 0x0, 0x40, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1db6}, 0x2000, 0x2, 0x3, 0x8, 0xfff, 0x1, 0x3f}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/30) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x3, 0x70, 0x7f, 0x0, 0x81, 0xa7, 0x0, 0x8000000000000008, 0x40004, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0x800, 0x2, 0x7, 0x6, 0x100, 0x3f}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) gettid() r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x1062, 0x0, 0x0, 0x9}, r1, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg(r3, &(0x7f00000001c0)={&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="c7", 0x1}], 0x1, &(0x7f0000000540)=ANY=[@ANYRES32], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000300)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7o\x80\xb2\xcf\x8a\xc9(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 1120.000079][ T7417] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1120.076208][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1120.102018][ T7457] udc-core: couldn't find an available UDC or it's busy [ 1120.116716][ T7457] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:36:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_GETXATTR(r4, &(0x7f0000000100)={0x18, 0x0, 0x3, {0x3}}, 0x18) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) 15:36:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x200, 0x4) poll(&(0x7f00000002c0)=[{r4, 0xa000}, {r5, 0x4410}, {r6, 0x110}, {r7, 0x8050}, {r8}], 0x5, 0x5) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) getpid() [ 1120.249968][ T7417] usb 6-1: Using ep0 maxpacket: 16 [ 1120.360911][T16473] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1120.371591][ T7417] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1120.396234][ T7417] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1120.420844][T16473] asix: probe of 4-1:0.0 failed with error -32 [ 1120.455355][ T7417] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 44 [ 1120.580199][ T7417] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 1120.593834][ T7417] usb 6-1: New USB device strings: Mfr=0, Product=42, SerialNumber=104 [ 1120.619912][ T7417] usb 6-1: Product: syz [ 1120.653695][ T7417] usb 6-1: SerialNumber: syz [ 1120.730745][ T7500] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1120.751385][ T7417] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1120.813963][ T7417] usb-storage 6-1:1.0: Quirks match for vid 04e6 pid 0005: 1 [ 1120.869740][ T7417] scsi host1: usb-storage 6-1:1.0 [ 1120.996156][ T7417] usb 6-1: USB disconnect, device number 49 [ 1121.749880][ T7417] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1121.999912][ T7417] usb 6-1: Using ep0 maxpacket: 16 15:36:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000180)={0x1, 0x0, [{0x3000, 0xcf, &(0x7f00000002c0)=""/207}]}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0003000200008037153e370a", 0x25}], 0x1}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x1000, 0x400000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x6030, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_client='access=client'}, {@privport='privport'}, {@posixacl='posixacl'}]}}) 15:36:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x9, 0x400, 0x1e}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[]}) 15:36:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fstat(0xffffffffffffffff, 0x0) setuid(0x0) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000300)='overlay\x00', 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x3ff, 0x2, 0x2, 0x6754}, 0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) [ 1122.053574][ T7929] usb 4-1: USB disconnect, device number 38 15:36:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x400000000000000}, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(0x0, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) [ 1122.120551][ T7417] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1122.150162][ T7417] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1122.207309][ T7417] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 44 [ 1122.246902][ T29] audit: type=1804 audit(1594136209.333:111): pid=7580 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir614112516/syzkaller.3TWdAt/811/bus" dev="sda1" ino=16332 res=1 [ 1122.460411][ T7417] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 1122.498826][ T7417] usb 6-1: New USB device strings: Mfr=0, Product=42, SerialNumber=104 [ 1122.594904][ T7417] usb 6-1: Product: syz [ 1122.615619][ T7583] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1122.642303][ T7417] usb 6-1: SerialNumber: syz 15:36:49 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) write(r0, &(0x7f0000000740)="b85d81a1db4a", 0x6) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}, 0xfffffff9}, {{&(0x7f0000000000)=@pppol2tpv3, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)=""/171, 0xab}, {&(0x7f0000000140)=""/76, 0x4c}, {&(0x7f00000001c0)=""/220, 0xdc}, {&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/89, 0x59}, {&(0x7f00000004c0)=""/226, 0xe2}, {&(0x7f00000005c0)=""/126, 0x7e}], 0x8}, 0xff}], 0x2, 0x0, 0x0) getpid() link(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/icmp\x00') preadv(r3, &(0x7f00000017c0), 0x1a2, 0xf0ff7f) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000800)={0x5, 0x1ff, 0xe68, 0x9, 0x1}) [ 1122.699976][ T7417] usb 6-1: can't set config #1, error -71 15:36:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0100000056971479052e2ba19b98484d5a24810456a41d0ebfbf2f514ba8b9df5fec57a891fe753c6077f3a0d7a6ecfefdcf2c09da343b29bc57d603069d0da87ffbebb68766aa59c775a8694d21993d0ac717477a243040df61f78935e3f9afc500756a71ed408561e7efc69296f36b0f1decfff508eb64b941875a7580fdb2a014afd77277f8d769aae5d2e819609bad386cbe82f4bc1d7be3b84757a356ff2524f2a6f9493d1bc04d1c1e3f51d9fea3d6121952bfeae42520c33067baa2cf2a839ac9e7c9a4e9a224092e8a073ebe611a87142788eaba78eec6732aed62833f9d10ad8f9ede3106750b0db60a32f4d84607546e6e"], &(0x7f0000000380)=0x9) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000003c0)={r3, 0x7}, &(0x7f0000000400)=0x8) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34006}}, @ip_pktinfo={{0x1c, 0xfd0098a8, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0xb84e0000, 0x8, {0x0, @empty}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11, 0xedf8, 0x7}}], 0x98, 0xa8980000}, 0x0) [ 1122.741119][ T7417] usb 6-1: USB disconnect, device number 50 15:36:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$vhost_msg(r1, &(0x7f0000000380)={0x1, {&(0x7f00000001c0)=""/150, 0x96, &(0x7f0000000280)=""/214, 0x2, 0x1}}, 0x48) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x30400, 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x28000080) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000440), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='cpu.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r8) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x2, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040010) [ 1122.981677][ T29] audit: type=1326 audit(1594136210.063:112): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7597 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x7fc00000 15:36:50 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x9d71e610352e67f7, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000500)) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x581000, 0x0) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001080)=[{&(0x7f0000000300)=0x2, 0x1}, {&(0x7f0000000340)=0x2, 0x1}, {&(0x7f0000000540)=0x2, 0x1}, {&(0x7f0000000580)=0x1, 0x2}, {&(0x7f00000005c0)=0x1, 0x2}, {&(0x7f0000000600), 0x1}, {&(0x7f0000000640)=0x2}, {&(0x7f0000000680), 0x1}, {&(0x7f00000006c0)=0x2, 0x1}, {&(0x7f0000000700)=0x1, 0x1}, {&(0x7f0000000740)}, {&(0x7f0000000780)=0x1, 0x1}, {&(0x7f00000007c0)=0x1, 0x1}, {&(0x7f0000000800)=0x2, 0x1}, {&(0x7f0000000840)=0x2, 0x2}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=0x1, 0x1}, {&(0x7f0000000900)=0x1, 0x1}, {&(0x7f0000000940)=0x1, 0x2}, {&(0x7f0000000980)=0x2, 0x2}, {&(0x7f00000009c0)=0x1, 0x1}, {&(0x7f0000000a00)=0x1}, {&(0x7f0000000a40)=0x1, 0x2}, {&(0x7f0000000a80)=0x1, 0x2}, {&(0x7f0000000ac0)=0x2, 0x2}, {&(0x7f0000000b00)=0x1, 0x2}, {&(0x7f0000000b40)=0x1, 0x1}, {&(0x7f0000000b80)=0x2, 0x2}, {&(0x7f0000000bc0)=0x1, 0x2}, {&(0x7f0000000c00), 0x74a538c1}, {&(0x7f0000000c40)=0x2, 0x1}, {&(0x7f0000000c80)=0x1, 0x1}, {&(0x7f0000000cc0)}, {&(0x7f0000000d00), 0x2}, {&(0x7f0000000d40)=0x1, 0x1}, {&(0x7f0000000d80), 0x1}, {&(0x7f0000000dc0), 0x2}, {&(0x7f0000000e00)=0x1}, {&(0x7f0000000e40), 0x2}, {&(0x7f0000000e80)=0x2}, {&(0x7f0000000ec0), 0x2}, {&(0x7f0000000f00)=0x1}, {&(0x7f0000000f40)=0x1, 0x2}, {&(0x7f0000000f80), 0x1}, {&(0x7f0000000fc0), 0x1}, {&(0x7f0000001000)=0x1}, {&(0x7f0000001040)=0x1}], 0xd, 0x2f, &(0x7f0000001380), 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000025000511d25a802a8c63940d0424fc6004000e00160011000200008037153e370a000c8000000000d1bdb7b92ffd4e57edfeec72d4495a4495ec6b4e893e6d6bad0c7a36af8f286473df611e75ea906a36869ee440069f767cd39fa4afbc8fe22c18db814865e1a7b4efe57609779b03fc5aaea7f071d843dba1cd65c46ce3269d5f201dd49ab4b941fe3457fe9dbd", 0x93}], 0x1}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80000, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0x8) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x800) 15:36:50 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE(r3, 0x125d, 0x745000) write$binfmt_aout(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="0b010601160300000000000005000000d1010000990d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f01d15a244d4d2b4d4f95a469312e70000f28ae64fbbd696c7246dd400"/1568], 0x620) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x7fffffff, 0x2694}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) [ 1123.124175][ T29] audit: type=1326 audit(1594136210.073:113): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7597 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416661 code=0x7fc00000 15:36:50 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20008040) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r2, @in={{0x2, 0x0, @rand_addr=0x40}}}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e20, @multicast2}}, 0xdf58, 0x6, 0x4, 0x0, 0x12, 0x41a2, 0x4}, 0x9c) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) pivot_root(0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat2(r4, &(0x7f0000000300)='./file0\x00', &(0x7f0000001940)={0x400, 0x80}, 0x18) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a00)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001b40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0x9c, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:crond_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x24000080) [ 1123.192265][ T29] audit: type=1326 audit(1594136210.073:114): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7597 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416661 code=0x7fc00000 15:36:50 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f00000001c0)='wchan\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="ff6a186a3d35a8000000000000", @ANYRES16=0x0, @ANYBLOB="000226bd700000000000130000000600ab000700000006001201000000007400ac007d4a94b27e39f037e3fb70ebd75eb5912fe97f609e3570149bb4fdfcae3eb80c0c1f4a32a22c0d72c20b01ecbac7cae181b835480aa9376d823056e684e17d098361399c4a5eb23c43b805ea48a75e67ccbd780a08ed533b722074f4aacbcf30e3ff5c82367b3c69b0144bc35a23b5311a467ed3d90361e0c4cf675f62ee851008000100ffffffff0600"], 0xa8}}, 0x20000084) r1 = socket(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x4b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000140)=0x480100000001, 0x49) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 15:36:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x400000000000000}, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(0x0, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) [ 1123.355999][ T29] audit: type=1326 audit(1594136210.073:115): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7597 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=231 compat=0 ip=0x45cb29 code=0x7fc00000 [ 1123.542128][ T29] audit: type=1804 audit(1594136210.123:116): pid=7604 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir614112516/syzkaller.3TWdAt/811/bus" dev="sda1" ino=16332 res=1 [ 1123.779061][ T7625] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1123.779078][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1123.787161][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1123.797384][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1123.797552][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1123.800748][ T29] audit: type=1804 audit(1594136210.613:117): pid=7620 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir614112516/syzkaller.3TWdAt/812/bus" dev="sda1" ino=15979 res=1 [ 1123.800986][ T29] audit: type=1326 audit(1594136210.743:118): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7597 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x7fc00000 [ 1123.811600][ T29] audit: type=1326 audit(1594136210.743:119): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7597 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416661 code=0x7fc00000 15:36:51 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x802000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000500)={0x6, 0x1, 0x1, r3}) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000540)=ANY=[@ANYBLOB="0104000000000000ffffff7f000000000300000000000000", @ANYRES32=r5, @ANYBLOB="00000000030000000010000098e60908d8f2004d9a73000000000000", @ANYRES32=r0, @ANYBLOB="00000000fffffffffeffffff00"/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00X\x00'/28]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r8 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_udp_encap(r8, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x2, 0x30c, [0x0, 0x200000c0, 0x2000033c, 0x2000036c], 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x6, 0x20, 0x88b5, 'veth1_to_hsr\x00', 'macvlan1\x00', 'bond0\x00', 'bond0\x00', @local, [0xff], @remote, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x9e, 0x9e, 0xd6, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0xf8, 0xf74, 0x5, 0x2}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@remote, 0x10}}}}, {0x3, 0x1c, 0x11, 'batadv_slave_1\x00', 'dummy0\x00', 'veth1_to_batadv\x00', 'team_slave_0\x00', @multicast, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0xff], 0xf6, 0x146, 0x176, [@ip={{'ip\x00', 0x0, 0x20}, {{@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff0000ff, 0x40, 0x2f, 0x18, 0x2b, 0x4e24, 0x4e22, 0x4e22, 0x4e23}}}, @statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x1, 0x2, 0xe1, 0x9, {0x7}}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xd32, 'syz1\x00', {0x5}}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x384) 15:36:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) ioctl$int_out(r1, 0x2, &(0x7f0000000140)) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f00000000c0)) 15:36:51 executing program 5: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x13}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002e80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[], 0x1}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="95f4319f19ffb6d4d722a83d306439728e10290bfbfb2f3be3e311c5ef005a2d1860ace9a8b305655cac5aa35278bf3d2608f7a25da2e9cc3611d9aec62fa8b5f34928b496b01835cb2c12a8"], 0x14}, 0x0) poll(&(0x7f00000007c0)=[{r1}], 0x1, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}, {}, {}]}, 0x4c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x8d002, &(0x7f0000000300)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@appraise_type='appraise_type=imasig'}, {@subj_type={'subj_type', 0x3d, 'workdir'}}, {@seclabel='seclabel'}, {@euid_lt={'euid<', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x34, 0x30, 0x0, 0x0, 0x61, 0x35], 0x2d, [0x0, 0x34, 0x0, 0x30], 0x2d, [0x39, 0x66, 0x37, 0x62], 0x2d, [0x30, 0x39, 0x30, 0x38], 0x2d, [0x30, 0x62, 0x63, 0x0, 0x61, 0x63, 0x31, 0x32]}}}]}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000)={r5}, 0x8) socket$inet(0x2, 0x80001, 0x84) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) [ 1123.811681][ T29] audit: type=1326 audit(1594136210.743:120): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7597 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416661 code=0x7fc00000 15:36:51 executing program 0: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = dup(0xffffffffffffffff) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000200)=r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r2, 0x0) getpid() r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r5 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x12890}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f0000000100)={0x2, 0x3f}, 0x2) [ 1124.737592][ T7661] overlayfs: conflicting lowerdir path [ 1124.766243][ T7664] overlayfs: workdir and upperdir must reside under the same mount 15:36:52 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="6fcb2efc1d16d1cc2e22612db50bf39554c0579852eb39c70f4d881a95948a3f35e6415538f5782877e4cf8879700b94a98d68e5565c3edd8e063232f26828cdf7bb576a098d41422ea4524d014df7156a1c911645c3dbe9671b7e5a183c3c75060d6875bc61a6c842b57fe231bd9eab3dfe6ee3e9a216d6698954eb", @ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB="6d0145f7642e94348f382018af909042d3876e27e821ec4ffd88da4f4d59f2899262f7d9d0ba5d419dcae0cba66e3c1ce1ea56f13eb110eca4463ca90f0eae1690933e5c1d00d4a16fc086c37f1781c103f0a80b1007e6", @ANYRES16, @ANYRESDEC=r0, @ANYRES64], 0x0) 15:36:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000740)={@private=0xa010101, @remote}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/503], 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x40) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) syz_open_procfs(r6, &(0x7f00000000c0)='net/ptype\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f0000000080)={0x138, 0x7ff, 0x8cdf}) 15:36:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xeee0554389bded95, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x19, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r6, @ANYRES32=r7, @ANYRESOCT], 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r7, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x8194}}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000c284685c1bbb20001317abc8dc2e97d9de94f14ecb0808670e718e992f00dc0a958e70427c7db95fbf75abbc21ca1422b01b2b21011d84a054601faf83810a658e4fab38f7d6766858a4540f0490fc2d6de7e36f49551ef36f798efcc9b18edb3a58652794b0760499a844f52b5a4fe0a64cc9aee793ce1cfc93fa8c7cab9cff20aa72a418af9d25e80ba7fb4fcd9c7ac9321cb0d24a4d96cd695b653aeb02ae2f77e8917be7dfa4fab1f2e1d26d8bf26bf711ce2aaa01a8481a77c55fa07442f444e70c31d2c26597aa997c5913a05a70be2a5683070e5c2a218e05deadb58bbc57eae387304fd320", @ANYRES16=0x0, @ANYBLOB="880026bd7000ff020000000000001c00018008000700", @ANYRES32=r7, @ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80885) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000)=0x5, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[], 0x0) [ 1125.309946][T22614] usb 3-1: new high-speed USB device number 60 using dummy_hcd 15:36:52 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x8141, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x70, 0xf9, 0x2, 0x3f, 0x4, 0x0, 0x6, 0x800, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x104c1, 0x5, 0x6, 0x8, 0x7, 0x1, 0x1ff}, r1, 0x3, r2, 0xf) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {&(0x7f0000000880)="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", 0x309, 0x34f9}], 0x0, 0x0) acct(&(0x7f0000000480)='./file0\x00') umount2(&(0x7f0000000500)='./file0\x00', 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="6d69373107f9949d640940cb9f248506b3c94619e3235ad4b133d77b00a3d6a02ce43fca6fd270414a9ef296870f57550d", 0x31, 0x0, &(0x7f00000000c0)={0x1d, 0x0, @dev}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x400, 0x0) 15:36:52 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x401000000001, 0x0) close(r3) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x9, @local, 0x1}}, 0x88, 0x1000, 0xb1, 0x0, 0x8}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000080)={r8, 0x5}, &(0x7f00000000c0)=0x8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r10, 0x208200) sendfile(r3, r9, 0x0, 0x8000fffffffe) [ 1125.599892][T22614] usb 3-1: device descriptor read/64, error 18 [ 1125.599903][ T7417] usb 6-1: new high-speed USB device number 51 using dummy_hcd 15:36:53 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x78}}, 0x0) [ 1125.959991][ T7417] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1125.960039][ T7417] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1125.960058][ T7417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.961627][ T7417] usb 6-1: config 0 descriptor?? [ 1126.004886][ T7417] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1126.018953][ T7695] Process accounting resumed [ 1126.060379][T22614] usb 3-1: device descriptor read/64, error 18 [ 1126.166475][ T7696] Process accounting resumed 15:36:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1ff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = socket(0x18, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getpeername$netrom(r3, &(0x7f0000000000)={{0x3, @bcast}, [@netrom, @remote, @remote, @null, @null, @null, @remote, @default]}, &(0x7f0000000080)=0x48) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="05034a0000303e0000000200c52cf7c25975e605b02f80357f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x3054, 0x0, 0x0, 0x1d3) 15:36:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e24, 0x5, @mcast1, 0xffffffb5}}}, 0x9c) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x81, 0x2, 0xffffffff, 0x36, r5}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000200)=0xc6) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) syz_open_dev$video(0x0, 0x0, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r0, 0x0, 0x6) [ 1126.210758][ T7678] udc-core: couldn't find an available UDC or it's busy [ 1126.217835][ T7678] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:36:53 executing program 3: socket$kcm(0x10, 0x2, 0x10) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xa0e00, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x22400, 0x0) r2 = pkey_alloc(0x0, 0x0) pkey_free(r2) pkey_free(r2) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="450000002b000535a4abd32b8018007a022482c104003e372d0004800125d124000000b3e9d3dfd08304000000000000", 0x30}, {&(0x7f0000000040)="6a2a261bb49c3cf3a3d05f89b8f2818aa9859d58f4", 0x15}], 0x2}, 0x8000) [ 1126.293998][T16473] usb 6-1: USB disconnect, device number 51 [ 1126.410205][T22614] usb 3-1: new high-speed USB device number 61 using dummy_hcd 15:36:53 executing program 3: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='#!\n'], 0x191) close(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 15:36:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000200)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000040)=0x7, 0x4) [ 1126.700599][T22614] usb 3-1: device descriptor read/64, error 18 15:36:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0001000000000000240012000c0001006272696467650000140042000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r4, @ANYBLOB='#'], 0x20}, 0x1, 0x0, 0x0, 0x400}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x8194}}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000840)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000040)={0x8001, 0xfffffffffffffffa, 0x0, 0x9, 0x8001, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7, 0x1050c1) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f00000000c0)={0x101ff, 0x0, &(0x7f0000ffd000/0x1000)=nil}) [ 1127.035015][ T7736] device bridge22 entered promiscuous mode [ 1127.048484][ T7736] device bridge22 left promiscuous mode [ 1127.086064][ T7736] device bridge22 entered promiscuous mode [ 1127.110040][T22614] usb 3-1: device descriptor read/64, error 18 [ 1127.230241][T22614] usb usb3-port1: attempt power cycle [ 1127.949935][T22614] usb 3-1: new high-speed USB device number 62 using dummy_hcd 15:36:55 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0xfd, 0x40, 0x0, 0x50a, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa89, 0x80000001f}, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r3, &(0x7f0000000000), 0x0, 0x4008000, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f00000001c0), &(0x7f0000000240)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x3b, 0x2}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYBLOB="4a98573262f86d893958c5a8b6796d19c5d4576ba00ffb9c184b6f189d81a13f451a68dbcf3ef9b863e2949709f7185d70b3b6a47f269ea63bc41b846c899dc81af9f9bb544a74568e74188b711e26d13285d6a368f3d8c1d7f9d7c8fc3463f9183999d19b75c7a71302a376a0a2fedac2a005000000dcf6ab25da9c2f92930214b3e51e36ac74bb42e123f86ec0d0812d0c33a3362e3e1ffd3b01089e161c69f20947a2aa4fb67e8c5994"], 0x14}}, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=[0x0, &(0x7f0000000140)='#selinux[/vmnet0GPL\x00', 0x0], &(0x7f0000000400)=[&(0x7f0000000480)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa0\xa6\xbf\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bhGZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y', 0x0]) ptrace$setopts(0xffffffffffffffff, r0, 0x2a1, 0x50) 15:36:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x2820c0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x5, 0x6, 0x1, r1}) r2 = dup2(r0, r1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0xff, 0x5}, 0x20) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$FIOCLEX(r3, 0x5451) dup2(r2, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKRRPART(r5, 0x125f, 0x0) 15:36:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x91b, 0x0, 0x9, 0x5, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340), 0x0, 0x81801) perf_event_open(&(0x7f0000000740)={0x3, 0x70, 0x0, 0x20, 0x0, 0x3, 0x0, 0x4, 0x4a71, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x38, 0x2, @perf_config_ext={0x200, 0x5}, 0x0, 0x8000, 0x5, 0x7, 0x2, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)={0x0, 'bond_slave_1\x00', {0x2}, 0x7fbf}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000380)={0x8, 0x1, 0x7f, 0x80000000, 0x6, 0x81}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x5, 0x7, 0x0, 0x0, 0x9a, 0x6476, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$sock(r2, &(0x7f0000000700)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x4, @private2, 0x80000001, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000d80)="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", 0x1da}, {&(0x7f0000000140)="86bdbf51d171a7e7a736cfa53a4a0fe95e84018c7f007abbaf38480287457ed92f2bcafd9aae5a50fab08f35e9dfd73ddb42c3dc52ef5763ce484410293958a7f243a1001b75", 0x46}, {&(0x7f0000000a80)="04178d710fafaafc43baef95251f0a07348cd4b9c44e8098cfa7777a1279cf00b75b087e67eda8e65e4d6ca0049de639c0c2079935522c61aeecc9859fee0200000000000000df9fb87ffc6382669369540a153a237d95e562e46a70ba0dd572b3288429dc0d0b536f8ad668d54dcea3bd83d969ff1a97d7fab6bc4e62b28e41d7784ba34de1ae65ecc371f5893879ba19f06fd9b0a97206b1d174f2a35dab5f3b267c775952cb73f033478ae0643022076fab73b736e6ec17ebf7e23828614a9b4f7e08a68f4f20d6da938068bbdae588279ac0328acc39a324b8a529e181fc0d7c839316ae93e384", 0xe9}, {&(0x7f0000000600)="b750452fe687776b58b7084967e1ea7c5e500377e14850593c00c6db6181d4af8b45d5a8400c5fc42ae4eee63a0e87f18b500e418d665b2e422daae175f6e72547e42b97335840d9f4923e13971b461d1b5696241d94", 0x56}, {&(0x7f0000000680)="8de844629e07c4b281f47ba7f6a0188e28d1f01ccf2e4a00bc2f45f8a5f817ac068593a7477e50feda16283e7a234805c6f8b167ec49c6ef5afa06e1a8f00ae249180caee0c54f9d76e06a81ac1aa3", 0x4f}, {&(0x7f0000000480)="ae3ebc94457cbab347eb6f2930c5bff119e6ff11e49e628aac67181ad5aeb7b12be567868a2666a85f4bac4a600e435b45d69f49cd117f30ba67bd1f91cd7c05feb1e7578997df4ebe2d9852450dc136ecd43804911caa6dfbaeef03512700bcbc56279a1024184c7daf183150f4", 0x6e}], 0x6, &(0x7f0000000140)}, 0x24000000) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f00000007c0)) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x20, 0x2, 0x68, 0x3, 0x0, 0x2, 0x10, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x8}, 0x50, 0x4, 0xc78, 0x3, 0x1, 0x7ff, 0x5}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xa) ioctl(r4, 0x8, &(0x7f00000009c0)="cbc417ee84db3307") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) close(0xffffffffffffffff) 15:36:55 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) fsetxattr(r1, &(0x7f0000000040)=@known='com.apple.system.Security\x00', &(0x7f00000000c0)='!&-@%\x01\x00', 0x7, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x2040) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000140)={0x0, {0x7, 0x7}}) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x0) 15:36:55 executing program 0: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x3, 0x0) dup2(r0, r1) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000000)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x76}) r3 = gettid() tkill(r3, 0x1000000000016) [ 1128.059996][T22614] usb 3-1: device descriptor read/8, error -71 15:36:55 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) unshare(0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200010}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x1c}}, 0x4000011) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_COMPAT_NAME={0x6, 0x1, '\xd6\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x15ee1d53ec40bbb7}, 0x880) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000380)) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) splice(r2, 0x0, r6, 0x0, 0x8100004, 0x0) 15:36:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x3}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = semget$private(0x0, 0x2, 0x0) semop(r3, &(0x7f0000000240), 0x6) semctl$SEM_STAT_ANY(r3, 0x1, 0x14, &(0x7f0000000100)=""/66) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000000), 0x4) [ 1128.269952][T22614] usb 3-1: device descriptor read/8, error -71 15:37:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x100000080000000) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000)) 15:37:24 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x2000, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733d72646d612c70000000000100000030060000000000000030303030302c72713d3078303030303030303030303030303030302c00"]) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4f36, 0x481) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x3f, 0x5, [0x1, 0x5, 0x7], [0x7, 0x4, 0xfdc], [0x9, 0x0, 0x0, 0xd85a], [0x3, 0x0, 0xdf2, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x2, 0x0, &(0x7f0000000380), 0x1010010, &(0x7f0000000640)={[{@huge_within_size={'huge=within_size'}}], [{@fsmagic={'fsmagic'}}, {@dont_appraise='dont_appraise'}, {@smackfsdef={'smackfsdef', 0x3d, 'trans=rdma,'}}, {@appraise='appraise'}]}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) 15:37:24 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0xfffffd9c, 0x0, 0x1, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x380, 0xe4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) acct(&(0x7f0000000480)='./file0\x00') umount2(&(0x7f0000000500)='./file0\x00', 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=""/75, 0x4b) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="6d69373107f9949d640940cb9f248506b3c94619e3235ad4b133d77b00a3d6a02ce43fca6fd270414a9ef296870f57550d", 0x31, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r1, @in={{0x2, 0x0, @rand_addr=0x40}}}, 0x9c) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r1, 0x100}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={r2, @in6={{0xa, 0x1ff, 0x2, @remote, 0x2}}, 0x1f, 0x5}, &(0x7f00000001c0)=0x90) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000002c0), &(0x7f0000000440)=0x4) socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="00040000000000000000010000001400020077673100000000000000000000000000600008805c0000805800098028000080060001000a0000001400020000000000000000000000ffffac1e0001050003000000000028000080060001000a00000014000200fe8000000000000000000000000000aa0500030000000000040000801ed52533e6e6e8ae6e13128a698f868a3d0438c2a0e4ce9eaa6d628a24a211e349d24d2bbbd97926539ab0fe164914656866c2e9030bab8efb61dd569b37bc5341c9156b703c1cc9b68e41055d6f4f030ba0f33299ece20aa8ab"], 0x88}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x400, 0x0) 15:37:24 executing program 2: mlock2(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r3 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x7, 0x210000) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f00000005c0)) setuid(r2) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x90, 0x5, &(0x7f0000000400)=[{&(0x7f00000000c0)="8f236b4110403183496733e427c12c8f766a0d05f954dee9f5a53e30865ae29368385880824922284dc7c31edcedf83d492a4dd27ce45d6785ab8757cd73c25076d1606f84241c9798dbf4da2ac9e0364f3bf840e727255b876d4f6b25f992eb7e7efb973a176c9e2ff0c7ca05a4b35ab6470508bb98ee71fe35ac4dfcb61f5bc172", 0x82, 0x1000}, {&(0x7f0000000180)="6953e1c11759c0c2642caa78fda17ab81abb0c6c178be8644d77a9ac7ad9a537fa01f86d4e094c8ef960a2cfffb504bf1ddefe087798f2c24cf094b572e2ed6a2813f00fbb7e224529d1aac5691e86ec3ad4914cc18ae95c0c2a5a7cdb42e83891510df7f17cc7f48bbc0c06ac8e6b11d5679330987c1a104173ff0d3720e6d48c84bd51c462abd18f5a80f6b7fc6ed0ad52083a14f007ceb775a24bad49d78bfb0c784d1252917cf3fa64196d088fce1e8c999e4bc6cc370dc5c83d08c55fa18cad", 0xc2, 0x77d}, {&(0x7f0000000280)="2117ef492eaaa9897dda01738acc5729078d7ff9ba0fd8650f8f847da9edf574d1ba5ea8fd80ea0374027c12a1d46dc47bed81e8108623558051bd7b8240c9c6307ea374453e44b92960f0072fb1cf19812a9acd05832add28dd6ccec02a21615e7c47699eda474f52efe0b10ebafc0a92c7d88ec96e2d07d53f20", 0x7b, 0x8}, {&(0x7f0000000300)="ce9c61f9b04cb44bae5eaebcf8a31a2a36f27e0cb62d60f4e08be069a2cdcf9ee17ab3a6a130b429619214e354601386ced48ada4b7d9a", 0x37}, {&(0x7f0000000340)="ef6de26c3491b029c6a1f22b507d77aaf59974d09dfa0d370f963ebf20f07a2913271b69c792b6b435d9101fca92fcb3f7db70bc9d27b9fc34ee693e2389822632fdb2b0b48d3c0a80773e2e982218c4884bd370efd63800e8e7076ddfab401fadcbb07f14f26cce47e80400f2101ec2987d7d85ea78284d9e4f4f8e8532d5492774d8b6844874cc51b12dffa65d615f0b727e9f0e1f7a09645930ef56d7", 0x9e, 0x20}], 0x1000000, &(0x7f0000000480)=ANY=[@ANYBLOB="72657265652c6d657461646174615f726174696f3d307830303030303030305785045230f52a622c667a61676d656e743d6d657461646174612c6e6f73706163655f6361636801fcffffffffffff3d33653061615534392d326462662d3336325d2d366362362d39383963643264622c666f776e65723d", @ANYRESDEC=r2, @ANYBLOB="2c61756469742c736d61636b6673726f6f743d262c3a945b7b274f262c66756e633d46494c455f4d4d41502c7063723d30303030303030303030303030303030303032362c00"]) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) 15:37:24 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000007c0)="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", 0x1000, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r2}) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x24000810) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x18, r4, 0xffff, 0x0, 0x0, {0x4}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 15:37:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000020e511000c00020076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socketpair(0xb, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000100001040000000000af405e044a75f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) accept$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@ipmr_delroute={0x0, 0x19, 0x200, 0x70bd29, 0x25dfdbff, {0x80, 0x10, 0x14, 0x3f, 0xfc, 0x4, 0xff, 0x9, 0x400}, [@RTA_MULTIPATH={0x0, 0x9, {0xff, 0xff, 0x7f, r10}}, @RTA_GATEWAY={0x0, 0x5, @empty}, @RTA_PRIORITY={0x0, 0x6, 0x4}, @RTA_MULTIPATH={0x0, 0x9, {0x3, 0x2, 0x6}}, @RTA_PREFSRC={0x0, 0x7, @multicast1}, @RTA_PREFSRC={0x0, 0x7, @private=0xa010100}, @RTA_PREFSRC={0x0, 0x7, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0xc00000000000000}, 0x0) [ 1157.231894][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1157.231909][ T29] audit: type=1800 audit(1594136244.323:124): pid=7805 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15967 res=0 [ 1157.242416][ T7806] Process accounting resumed [ 1157.369692][ T7815] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1157.431115][ T7806] Process accounting resumed 15:37:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0x1f5, 0x3}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvfrom$x25(r1, &(0x7f0000000040)=""/151, 0x97, 0x2000, 0x0, 0x0) 15:37:24 executing program 2: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) r0 = memfd_create(&(0x7f0000000640)='\x00\x00\x00\x7f\xc9\xe9\x0e\xff\x8b\xe8\xd0\xb8\x80\xc7\xf5\xe2Z\x03\x00\x00\x00z\x9b\xb0\xe8t%\xfc\vw\x82\xdb\xf1^\xe8\xf8\xc1-9Q\x00\x04\x00\x00\x8b[\xaa\x91\xef\x7f@\xd2z\xb3T\x9e\xefn7%E\x00(\x1e\xd1P\x0f\x9f\xca\xff\xcf\xc9c\x97\xb3\x81\xa04\x03\x1b\xf5\xce\xfa\xdc\xf6\xf2\'\x83\x82\"#K\x02eU\xae\xd4P\xc0iH\xf2g\xc9}\xf4I\xb0}\x9er#y\x0e\xcb\xa3\x80\xb5q\x1c\xef0\xbd\x87\xe8\x8e\x88\xe6^\xdc\f\x1e\xd0\x97\xce\xdc\x13\xce\x8a\xb3\b\xee\xd8I\xbck\xec\x80\xfa\xce\x86\x85\"\x1d\xa2\xc2\x1d\xf0\xc3\x9cm\xcf\x8a\x00\x00\x00\xe31\xe6\xc3\xa5\xb1\x1c\r8%\x06\xc3c\xe0\x7f\x88W\x18u\xdcbl\xe5(\x97c\x1a\xfd\xe0\xfa\xc0\x97\xc8\x95\x82u\x82e\xf3\xe7e\xf59\xf9S2\xd1\x98\x81\x8f\xbfwr\x97\xee\a\x8a \x1c%o\xed\x9e\x11\xd1', 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)={0x1000, 0xffff, 0x3, 0x0, 0x9, 0x6, 0x1000}, 0xc) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0x3c) execveat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000080)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = dup(r0) write$P9_RGETATTR(r2, &(0x7f0000000400)={0xa0, 0x19, 0x0, {0x0, {}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}, 0xa0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_SET_DUMPABLE(0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='attr/exec\x00') [ 1157.522465][ T7818] batman_adv: batadv0: Adding interface: ipvlan2 [ 1157.639902][ T7818] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1157.669969][ T7818] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active 15:37:24 executing program 2: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810308000000000904010000020d00420600000102020d0000090582020002220000090503020000000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) [ 1157.692906][ T7830] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.2 proc:/self/fd/4' not defined. 15:37:24 executing program 3: open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', 0x0, 0x200000000, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x34f9}], 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000100)=@generic={0x0, 0xe97}) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[], 0x4c4) r3 = socket$inet6(0xa, 0x3, 0x3a) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) sendfile(r3, r4, 0x0, 0x6) setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000480), 0xa198) readahead(0xffffffffffffffff, 0x10000, 0x2e) [ 1157.775953][ T7818] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1157.840242][ T7818] batman_adv: batadv0: Adding interface: ipvlan3 [ 1157.862333][ T7818] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1157.901347][ T7818] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 1157.993648][ T29] audit: type=1800 audit(1594136245.083:125): pid=7843 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15993 res=0 15:37:25 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x2, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd", 0x15}], 0x1}, 0x0) sendto(r0, &(0x7f0000000100)="ca300f27b9bc3ff783390c7ab82bdbba6f22ea73db5292cfea0668c0e92fe8c5fac444d753a626af7dbb8cf37db0014ee18c7ff3dd85588b64d4061b8113b50b9d98", 0x42, 0x20008010, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x2d, 0x77, "010e793ab391b804f4e21e6fff398ecde2628f9dde9d741a86024c501e4449a6457cc7939dda47f646ad59d2f0bce15532df0001028434648f6f8753c25f8b", 0x14}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) [ 1158.329966][ T7782] usb 3-1: new high-speed USB device number 64 using dummy_hcd 15:37:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000280)=0x4) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x44000) ioctl$EVIOCGMASK(r2, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000240)={0x8, 0x2, 0x0, 0x0, 0x10001, 0x80, 0x6, 0xca, 0x5, 0x3, 0x4, 0x0, 0x0, 0x1f, 0x5, 0x4, 0xb4, 0x4, 0x31, [], 0x80, 0x8}) fsetxattr(r2, &(0x7f0000000040)=@known='security.apparmor\x00', &(0x7f0000000080)='\x00', 0x1, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000efffffff0030009000300000000200000000020000183900060400000000000000000000020000000000000000f9ff00840000000a0000000002000000000000000000877354f79bf84c2bbc4a6fd46d59a47c5d81c6aad15e0dec9d3eee00e125465bbddf3881a4b4324c802a5195dd80b96751c24cecf52392b5de8596a5f818ff21ed48470632e2e3b74706623b3064848b3d7cd57e8777f8d2cffcf8dab2b64cc11341535189ac1edff62c35"], &(0x7f0000004600)=""/200, 0x4a, 0xc8, 0x8}, 0x20) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x22000, 0x0) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000000140)={'ip6gretap0\x00', 0x1f, 0x6}) [ 1158.620174][ T7782] usb 3-1: Using ep0 maxpacket: 16 [ 1158.800046][ T7782] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.853812][ T7782] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.087500][ T7782] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1159.110679][ T7782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.118719][ T7782] usb 3-1: Product: syz [ 1159.180066][ T7782] usb 3-1: Manufacturer: syz [ 1159.184743][ T7782] usb 3-1: SerialNumber: syz [ 1159.261368][ T7782] usb 3-1: selecting invalid altsetting 1 [ 1159.740038][ T7782] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 1159.746105][ T7782] cdc_ncm 3-1:1.0: bind() failure [ 1159.890089][ T7782] cdc_ncm 3-1:1.1: skipping garbage [ 1159.895340][ T7782] cdc_ncm 3-1:1.1: skipping garbage [ 1159.959926][ T7782] cdc_ncm 3-1:1.1: skipping garbage [ 1159.965187][ T7782] cdc_ncm 3-1:1.1: bind() failure [ 1160.026795][ T7782] usb 3-1: USB disconnect, device number 64 15:37:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000280)=[{&(0x7f0000000140)="0400000900000000666174000404090a0200007400f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@umask={'umask', 0x3d, 0x8001}}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000080)='map_files\x00') r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r0, r2, 0x0, 0x800000080004103) 15:37:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x810000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x10, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x4dc5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x40fffb) write$9p(r1, &(0x7f0000001400)=';', 0xb00c) 15:37:27 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_thread_area(&(0x7f0000000100)={0x9, 0xffffffffffffffff, 0x400, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}) mbind(&(0x7f00008ae000/0x1000)=nil, 0x1000, 0x2, 0x0, 0xfffffffffffffffd, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) fgetxattr(r0, &(0x7f0000000280)=@known='security.apparmor\x00', &(0x7f00000002c0)=""/57, 0x39) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="d0010000", @ANYRES16, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x4000}, 0x40895) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) 15:37:27 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='xfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = dup(r0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0x6) 15:37:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 1160.635893][ T29] audit: type=1800 audit(1594136247.723:126): pid=7905 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="hugetlb.2MB.usage_in_bytes" dev="sda1" ino=16000 res=0 15:37:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000080)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x91\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) ftruncate(r3, 0x40001) r4 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0xffffeffe, 0x2) chdir(&(0x7f00000002c0)='./file0\x00') ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000300)={0x0, 0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000340), 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000340)=0x6, 0xfffffffffffffffc) r5 = perf_event_open$cgroup(&(0x7f0000000440)={0x5, 0x70, 0x87, 0x1b, 0x80, 0x8a, 0x0, 0x80000003, 0x45ec0bc3e5774c9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x1b, 0x803}, 0x1d512, 0x10001, 0x1, 0x0, 0xa405, 0x47, 0x8004}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f00000004c0)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendfile(r2, r3, 0x0, 0xffe4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) name_to_handle_at(r7, &(0x7f0000000280)='./file0\x00', &(0x7f0000000940)=ANY=[@ANYRES32=r5], &(0x7f00000003c0), 0x400) getrlimit(0x0, &(0x7f0000000380)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000500)=0xc) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_MASTER={0x8, 0x4, r8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 15:37:28 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) flistxattr(r0, &(0x7f0000000040)=""/34, 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xe, 0x24}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) 15:37:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000140)=0xffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x11}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x48}}, 0x0) 15:37:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000000)={0x1d, 0x1, 0xc00000}) syz_emit_ethernet(0xb6, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x80, 0x3a, 0xff, @local={0xfe, 0x80, [0x4, 0x10, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xb, "a78ce540cd4f7911d2acdea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42cac43246e77adac15084dbaf736b41e5a81803"}, {0x0, 0x2, "84f0da52ef2457131396805037f55924f4dffba7"}]}}}}}}, 0x0) 15:37:28 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) getpid() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440), 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x24004880) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x381c, 0x0, 0x0, 0x0, 0x84, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0x0, "3237fb"}}}}}, 0xfdef) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) [ 1161.027961][ T7923] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 15:37:28 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000240)) write$cgroup_int(r2, &(0x7f0000000080)=0x4, 0x12) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8020001) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x41000070}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0)=0x40, 0x4) 15:37:28 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x0) getpid() r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000007c0)={'syz'}, &(0x7f0000000680)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c363d225f7cc2317e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615cb31be0028f5f9222013ffe51246078", 0x79, r2) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={r2, 0x2c, 0x8d}, &(0x7f0000000800)=ANY=[@ANYBLOB="23d18ab6db1b25656e63286f61657020686173683d736841334b3232342d6346d81207cea085d80000000000000000000000000000000000000000000000000000000000040000000000000000c0786c1064825f1919b2ec4c2a517a7bef4b320a0b3bb8f54bc0d7fdd738f215444c0a305f00050eed3b232dc3c99e0b1b1dbb0bddb2c46c29d5f96a5a68ab3751bd5b60de0d0e4d3e6d524289922300797c0c0ecbd7c75f62aa5855f21ca71391a32186af4a23c0388b4d0d75f456926425a186cef3b0b2eee5fe524290b5d8625bf1f794"], &(0x7f00000001c0)="43dab25ca6a4ab60020bc064bda4bcf177a5cb951fdfc149e94440734a7987f3848d0ee79cc4f9e60096e877", &(0x7f00000003c0)=""/141) capset(&(0x7f0000000040)={0x20071026, r1}, &(0x7f0000000080)={0x7f, 0x4, 0x1, 0x2, 0x1000, 0x6}) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000300)=""/123) ptrace$cont(0xffffffffffffffff, 0x0, 0x3, 0xfffffffffffffffd) socket$inet_icmp(0x2, 0x2, 0x1) getpid() setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='hsr0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) 15:37:28 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = getpgid(r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080fffffffe) r4 = socket(0x2, 0x803, 0xff) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r6 = dup(r5) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r7 = dup(r4) r8 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x53) 15:37:28 executing program 1: fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x7fffffffffffffff, 0x4}) 15:37:28 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007a40)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001740)=""/199, 0xc7}, {0x0}], 0x6}, 0x2}, {{&(0x7f0000001180)=@generic, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d40)=""/68, 0x44}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f0000007c80)={0x0, 0x3938700}) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003c40)=ANY=[@ANYBLOB="44da000010000104000013c411ff000000000080078c2c604628a2920e934b411dbb5d9511d49757f2136df893d882d8fce26787216dffdbd320894cc4aef3c25e9642c82c253d91d018085208dc305132f4c601f137be2db0add9debad381745526817c0fdf238a476f2c13ea485a4234ef9306ce28d7eabf2e873e3f3b32e8ec52205b861b6b3f536baef99597731d3a8932354abb75ea6ced27fdd712f96745496f42db", @ANYRES32=r5, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r5, @ANYBLOB='#'], 0x20}}, 0x0) sendmmsg$sock(r2, &(0x7f0000003b00)=[{{&(0x7f0000001240)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x2}, 0x3}}, 0x80, &(0x7f0000003840)=[{&(0x7f0000001380)="4a72b734eb014fa3f67dafd54ff77dafbbf42d5d5a07461084dc6549bcb5cfaa94f1de209d549f5d7f1dbc4fd37108bfe81b36b0ad60232430ffad7d781cfa8ba6160d57ab9e4d038b0ad6c317271073ae1b3ffa46d3f7ee54f3545b3e", 0x5d}, {&(0x7f0000001400)="85e510b81d06fe7792338fb5d159ec7bcf57f30d6326a4e0ed1ec46cc7786736f2cbbb3ef4c97a4df497", 0x2a}, {&(0x7f0000001440)="c8c1aaf2ae26d7bbaafe012f022cff8f8588c48e3c7081e633df334597d482048a99db646c7946b5973642e7760b84a91cc96954a20aeb243f9f7d4a06d91ad21fdaaddc3fe2cb2c744ea2d9a753eb862a487c4f0c0cf425c5e9afd66e05c5f1b3ece5b08025a240868504bbfe6b1595e550df09517c85f150a2ab7afe5fa063b2b0a14fa68715bb314b51ac4b603e4d8743be662825a1445b10013cf0e9f7578d748efd40cd724af6848703b882775b0dbf80d5e450", 0xb6}, {&(0x7f0000001500)="249e1250e1f2bdea70edeea4386c01b69423225f415be1ffc4210fb5c5b3c7fab7cb93eca3c57e3fe04ba7258bd617a6d74eff61855006c1f174af8a3282e8b76cdebacbab3f3c7abda99308eac9fd4fefc6ebe9eeec7858cf2919008ccc93846d4ab15861ddbb3a39c8a27de4b5ae1e0654886cc95c35bd228d47bdac49bf2828fa6dc434c2412a58952986f704bc75bb27fe67dab1b8b2250de8c206c1cde4f7e367582f6ef6bf7ba05d446e7ec98fa2a9a194d6ed94be115f594584096b4f73a5dcebf46e04c69a99d19d0717875ac76f9624e6c1", 0xd6}, {&(0x7f0000001600)="333a6fa90d17908e9826bcde4634e2c642ac0638d903f870d51e15559524346c3676022f1e5f57170578955aaa022323772929bff07edf3fdf3b2fa1ccbaa648bb5fa5d8246d51598aa0d13591535faf80153c1320ba0e0b3ca8f9365f7b4de9743d8545292ab604566bbbb158c20e81da8fe53adfe30cdb9cdd6749245c360563bfa05f96684a537ad1c1ac051489cb7d4559fad3a08a73c23e06b49f05ad64beadb23501bbac95988817219ab62139f1", 0xb1}, {&(0x7f0000001840)="106f640816193230fb3aa8604a61e5c5ecce36c2afbf13d790797a5d17bb0e99c16bcce626e69458bff37f840addcec654b2a9c2e8417616da772d9a76ccd38b39a1a2915b1ce8709e8bcd30ee3bdb892c5727d712766f3fb8e0b16c8e721c3bd6816533673f79a865717d5e164fb8fb5d9eeca8464323da4648111a1db79ca470a5e45cd203e4abf08f52022dc9a5afb040218abade9ad0047f6a479761e7bb9456b9a206d600108218971e16a93bdd577bcb0f472c91f08eedefdce6b50af7901fae3e080fed330c65818e56bfe0b20fb607abeeecbf5a060fcc24f308f80d614dfc6d75da121d8e05d9abda320a0dc2ce585606aee2cb32dee5f90be439894ca893fb94fa0d68275ca895e87c17bdb3c7db42c3e2c5726d75f752f3534bafc33bbdfcad98ad0050e848a4761848db2d46d917977e477213fa2d472788c1837472b8fe4b540ad34c989abbe133791c4a61ca9dff1f51aab1c8e3635a7532e045a1124ed67a5120f86b05be555079dd08ba78499bc06fe79e25ed1ebc5abd37c5ed419649db1a106f055a7074633ba50fbf188a39bdf853afb629ebd3cad1bd370a089021dec55ba6c3319e81070bf4d325e451c8c3b4464564dfd9cb1ce115e050eca12e5d822615c35a2652e9e52957e737b4b79d6998352f89f9b8807ed030eef5e7e61e8e8b14ad57878399e01d7ab2a7870e470fa371eeb55ac116452bc7d0d994feffe5414680c75936912963b303acea6750ab662a35dd8225ceb6f7a1c0a377202a2ceacea47a5a1294b3e1170d8e38ce6f44b314dab4c6e9d0131c7cb8b99c559e33e677c15eecf5dabdc33f210851876275a5896ed18ca11cfe8a8cae6ae1b732504ce45a282ec43f3a1faf7b64c10eea51e19a72c81d7a63ea3a49d5a19e2f30182fdb1daaf7fb8a2111e96faf29d8bff2f5889d9fd13d47ee7547b25174a7212d96de7de61827af53fd145ee21b07901e7e3c572fbf119e42e17538584c91426b1ab8c2c3f62884173fb4cdf833e45138c96f26dd78ddee8d55ce3b4309b79b4959278832b6c25d2f2e115179afc680ee920a7ff4efe96a5575743354ad5d0e5791bc080ccb03fcf49da793e021c190f0732f355cae0f4089ba826241b4f95483b8ccacc434410581c6ada96b9164df8432f99bc86e620ba1142f137b0412e08dd3b9ed858ff9f4ddd5ead50fbf4b376965c45dba6ad02f630a6bd21d9d4b94cb9c023203ba08b9dab25167f12dc47ca4bdc1dcac1b810feefd5b6c781159bbeaa2cae3163f36c23f188023ec381d76a22b290865d17fbc0e9684a26dfb7ee3923e8d22598104b76439d712505093f8ccdf5fc2e0408d5a90989f26adb99559b116e9411685108a7c4b9cee82f40c0129093fa5e07f50e5bcdc2cf564410eff61a7ceca9751db19949d14e7c67dc7b0eef91051740680931b663919e29b8e8bdb95553b1d76f6f45f289a58851d7012559df69be1d8e8e511d4ed93340e7e43b706368a5bae97f46ae0a1b916f85263ecb9e755a57cb4c0d5b1b5a39051b0f26b99e050234c0843281cc6d69b894b2284fec16e4746a63e1fa5a6c4690ebf3079afe68cb6f0fcf992170d18bc84edf6fbf6d2e0b52989bfb07b72f4df1257f06672623c36bfaf34f1060be9a546819e6fff7d7fa9000f49dfbbd039bf41d7505c1aed88f45bac3d804db78df3f55df3881cac5faffa9e0241f0e841f40782e444b13987f0a480c7793f1403e8bba3e73a4c89b25f90e8fac5c6203d8db12424300527e99ddc0a72f7a54bdc1f3c0100f5ea456e9bd598c98fdb4f655b6d9ef546cd76f76a9bb6d3912fc51c35ea2cac0917ed85fb2e1539d5d561f3a51660dc2d0d60ba910a5c0024c5a1e5c6195fb60c262c1402399c2549391ce5c3ce939bbd14421a0c67dae4eee7032f5357d19f857618d43f0cb75db99c501b84f898a3b34007ce394b439adbc63886e52b9eafa4a8e5423bc53185b315794eccb5d971afc7a29615f72e0a865e24de8643f2dc235f0e2aab99ca5149201a87eeb7270e7228ec020ea3f4ec1fca90dff90a7940b62177a7f3c48a0f47ec1fd52a3e8929908b4eb019b7b379b59258d96eb88326a1068de6a372b46fc5d4ac8c1541778e8a052f9ff19553271345e90c76ab28c750590e8dbb1d9918087c47b9d79d1f933e820c9ef09f8cfd0266eea0b6ef666bd4a68f5637f7f6466c315572d5ca43ddc3f359030a0bb8918472c3e3e7b11789e56cb3413ae2f018dd50bb0627d519c15edbf1c465de5330c25e20e2628a7e8294cd66b6208cfbf54a2800e6cae1e3ad34dbb2354b3601168653f5d539f50bed41aadce9a72130556fc95a6d95646f55b5da3241f1d2b99b6555ce90461f19c52b961d4713c9b704bc3b02b52f36365d7503b03176b3ddf36d10f7b5113adaab0d34963449b4e21491c58efaedb83bf3f09cad2e97efbe1c275404db591835841f626c04d9a37764f4278737ecc6a9ea990443c4a653a6a575d1be51d397e0e78d0784d9a001de32e3e47fa94e4dfc85e13de203e8675a1966c0093bae3491a8b0ebe2bc998ea2cdedeba7e2a739d3aa1d0e2d7ffbb8bf708580353d2e78b27e2a4ca5b994f3067d57a5af51950cd6488f0d56501d4454e8be292cda4228d50eaba4498c99fea7e20c12c47c500180c54f0bc4d052d6608d240f4436d0f68eecc42261ad63606fd7ebe7479aec99d138fba1646df30321541b11ae2086f51b7c7ce2ee357b8ef703d4813b925edabbd6da6db129afedada5ebbf6b550c01d6bcd38dd8f03e2e11968fbd2b7baea9dd8dec1403d07f8d4fbddbca4c74268c68df9cd5dfe8f3c9747231a0a3d191328ae44cc1f981fb08adfdc219060d7bdea3cd4aa82eee5e70a4f0c69058ac09fba5520f790a927c95edfdfc73c379b3c88db2a659e5d5c77277a20585953479385e2134ff9bfc744c08586045c4169b2b6075b1abf5d1f1af278544310d4b7fa6063c8359ec974ee71b19c341b226fcbdd326a29d9a126db65d5c6406e2037861bc1491b8423a2c25fbaa49fbb27a6bb66d556bde61fcc8481dccbf7a82190114d451df1e266bb81cf1f449afcb2f4b0323b7a5aee29f50e31cfea5d617d5f59fb779586da65413cebeba61f5649d1ddc5d50a34024d2b5abe2f8cdeca63637efae0a9785c32326404497ea85936571ba961e38c8fdaaf2b0e2be873537e1d896e11ebace17d0bbad64d9c80030eaf0abf8b57b69090c4ab20d6939c5ce3544b13b18d0fadaa5a23b631200bd456ae7e3a7b386a6ae53475ea97fc38b6eb131efbb7e4f54877dc4868f9ef70a61ef4cafbd7d84a003759febb1fc80e77db1dc4515f979f56f9b2498549d560383e0e2608e934307338c982d19fefd43ea0173f843b56484a08279c8d0c31d6e419138090a6cff7375dbc9cff2e995f0dd59b43f618a64995e5db487b8a24cf4b8b192b392fe9d85d7ba5fbe994999f901603b224cb2c4fcffffe4a5ccdb28d2b159fecbae631da2f93f52bbb1cbcc2571b59f9da2ad5b681076a9163907081222762cc5dc732df83226839617307e31207fff42f291c09d36f1ae1405fdcf3556bdd7f3125d00a904925eb3b0395b03938fc5ab81d2232c92b8faf858f829a41adb371a6e0fa6a9eb18d3b3d2f3d02c39f413c47193c88a762ee0971c85490fff943d9ace57532e3d7b4638f9c13f9adbf321d793093e7d21fe7d4ce8741586f4f88f7f125fa2a8e4ce0cc9891b2dafb08cdc88b29d0d4d9ab021862b1572c1bc9ec901abea0e4a5968f5f06ad549b2a2bbca962a3e6b9b6fe928d127522e5a06798414b41335596a500cdc0cfdd45a3f385899ef1658891c26a17ad75d8a4b1ffe1e0f49ee505e0e6db6410230e10ad52abbbadf3f1c60dc26644d66fac67ea0dd6c0cf30d8bbd64d9bfc6e3f8828b2b248b0116bc915364eb42758a61e049616c8322f99840a23c86d5ca13aad4e70b4c5d8e6d6bcba6fd17601d6d122fc0a0b06c22fb251347ff4864ddf126e5cfda51cbe525059469cd1158184abc786391aaaeaae3a95bc63468dec256a3ba80f1d82a1fb888266bfff928ab12c1c26f84cb9e1a8d0f72478a6cb18ab62239e4bc38aaca98e35a7c4d86096fdb89d973199770833b3943bca1e20fcb05eea1e173ee8d857ffb3e95c71eef848f61dfaba1ef6a8713afde6e100ed4d9cea73aac0be3be9a0e2d08a5f58ee9617a6301583b2198e62c331d8b15b453ba78d5a0744c92f761c4ad72f1e1873586051f9e239c0e33c627dfb2913ca5f55737fceba4d8541cce9657a6ea1a1960786930ed3b3dbdd71effb442690dc3a9dcbe235ae1aa9c8ecfd5be943fa1202ca1a53b7c864009170cf18b0dc4e650d311e93a37a1763f4e0ecf578e24bda85e9de4f93808460716a85952fec79051a77049c9ee98e390eda13ca34792b7e27ce3c026d9103ec8cc3d7db8312bfd5eacd9e56ec455ff4a7720ecb03c050084650983dfc753c0f35318d93f8c45952139dc63abb513682d5ce11604c3baea81792c504ffea075b0885bdcd32a7c100e56e846cefcbb9ec3c6fd91522c006d8e5abd4de32e2ea49b63d1fab0d5ec730157727ca713b2e417a94b843a81b83c373a7fd0eb965c131694a24bd3f7cc5ad678a05b4fd140de67a55e04937a227a65771daa6557f21e5d68d1e1ccb1103a26f56d763e8a2c739557c734573d5e8fae3d8139486e7ae0c8acd7bd261da2ac57622ed1874652b0fcc3f64b0dece9eb4b9e390cb0b8d87ee24c411c5b14f2fd7d6f41966785642cd1082d64eaa662b2d3c632d129124f0466b3e7397c4683198dad8f8e950de45c9c573aa8485f2f425d7c19ec142f65056b6c734600f73b4d6561563069aea2a58bd9781e6ea95a57ed398498db0f47bd16d7408b72caf823c944d0cf0ad0f079a0d040e4033e297539b969aa083e81873dde530d049ab76c1e1910df86c8ea674e66fbb5552c23737c7133fb561b2c49559ae585c8f7229b4b02406e71cc094ba09b139e8a68bfea495b08023bfa733049eeb90de3028a304e3e45c5e41163d5ddf877ffea71a69f248870d17796c54e0c7c83fb52e35313e269b656d9bdbb0dd72a71843017fe2ae2de684d70abe260e3c2ebd5fe9f298fe0a3d535f754912c9bb0e298c2462e0c5df5d87183a2c22204ef08e1a653b3265caf85552c0bbdec923589a5cdbce8a4452e53cb0a1b4eee74a949c5b60d457f166f655424b5a5a553793ccad424b5e4ac0346506971f4a9bc3332cb1c3639abff5e834d8674f2d7abb813e4d30582db9fad05f6a91b0fb846de4df9162e3b8821139fd86e5d3dcbfe5dcb0449099b3cd1289cf0a7da88ddba67403b429bc145ac58d4deb1698459a637b1e94982e2a4157752906c1242bad3fc78e7c80679cd4131a2d6fff69937f647800c3ae46f198b0c8c28f313b6fe38aef228d5d7e4a8f6960418e4297bdcf85700be7c0b1f8a4e6239a2ed36d0d1a17a76447cfc71d5a3833ab71fb1894a0642c77e5020198e06fe4e3a8de973ef956d92ae49d3805502cb6b16fbb0165879cb24601f05e36264dee9cec4a6eb85986af3afc3706840067300db115dcb4ab16bf457b29ff8911d4f7b160cfc3488f1959598dfc6213353ee99aed5ce9ec6b2e9981d717fe90d713130ac5fd679598b92f18f2a561e0f882f3b9a038e78ac1080879658457199043bffb307d463a93872a3cbfc8456009d2859059e497f13b63385aee49cf3af7e31f1b0eef8279a31e6c223b441a5abe9e5475d605c8b", 0x1000}, {&(0x7f00000016c0)="e07b25f17bb287aadcaa15807dd6154a5484a6f2", 0x14}, {&(0x7f0000002840)="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", 0x1000}, {&(0x7f0000003dc0)="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", 0x1000}, {&(0x7f0000004dc0)="145a80dbf43e35d0f5c1f45fd221dac19a72257cee900b0e361500aafcb6003011ce5d62ed89562f056ea921020cd0b4b2deaed9382706f489d1507bb5ec7565b2f0708ac19e8043c31f89fd80086e1971a16eb54a955109c0451c8315410608e6dcf29ce5dbdedbfb35eddb33f263f88288f79d0bdd51908b3e76455095cd9ef3c6a9998b57a67f113695c033fabb614f62d37e4445a1edc00ea8e392e20c69dfd2ae94aaf38a0262c6792cf8e7a94cf4f51417de25c958f1749b2ffa150c2d57288ca78e97745f3a366e50d46232dcf1bdd56bdc56d594fdefd09c12310b8153550cb7ae8fd2d387580d4c16df27854eae2d4198f7f8f855bfe4068665efc8353a43014fd464e817174e1efb715f4d31cf4835ca9ba13f7b6a646001b826600eb2edffc0b3e35eec08edfa3a45663f682bb2b94db5efdce909e6d22dcfe1b30e2456763d13999f49518cbe54e492b4c05abcb74ac8a3499a09e47b1add3dd6033ba9244ba2bc0130c1b9d3dccb1431f3ccd63d231098ac247cdaa1f7743901460e2eeeb76509cdda4da86db1af1db1160e14c7c730e5b1c3dba1a43816121cb06c1ec684c703fbdbf0d4b976491f4c3a6af1e19b799538056a7a636137815e5734ddeaf92483f32d765cb18da82b7259473ff7cbffb093a2c8643e70a70bddab0e840b188064a3b318213d9cad58e16c403b512a305044ca7e2aa22a8b1f4055282068f981be924c600bea41ccc8a1decee06792fcee9619f6f6a603514bd50fe3afb1778268b053d85bf8694c73fdf8c38af4151e25fe40fac5b95460ecdbcb947dc846f7058ec3f4c5abcc6d5a6549caa9060595efffec9ebe344ea8c5a60f4136b1f58098980b8f69b69cf49ed74829b797b456b1f317306cb58addfb2500502ec3c77a409d1ace9dddaec828ece0f5e86716be5a929e2bc95d5a2715d0a28798d6664874a8d14dd922aca62f84be1f22685cd5d1c340f773e9fb7c5105292c06d6bd7955916ef346ae55c52f04e64fd1e8c74bb50f31a3bcad465a461e3903e0cb4f717ec2ca388998392b085a3f7f8cc850b96d24b25bfbb420a81737b31ad5e544b532b30b44ab2289d3d813366a3fff8dc3d9b007e78f05004ef91fc96b766ffe075b28cc8847ca08352d3c92e54f8b074c1765a023756d2974cdc653047a3983e8f2ac564d47dc997ce53b8af9d615bf3ff05b4ea8fa4b11bb358fa08dccf9da697e06163abcb9a6adf5f7765776004d97c014026ff06a6fc354ad8a3629774b98b59dfb042ba7faf01c6451b20a7c79b7572aa601a0cbac8f7b3710366c257aaf5da3e32be91d41ecdbd62a5f3fe39f09910fb2b6c8f3ffea7c33bf68446e0b19d70185f9cb50b50fae44d1ff6a2ae65526790d49943e228ec67513153e894dd0188f5dda116d5c640c5d2d4ecba7fc3423429e6cdcc1ae4c48b9c75e46118f53b54914861572fd3ff451a2a4fc705edaee381e85a70c590b322f481354392411b7062763991cad2cc153670962416eaf9bfdf131c6b7711312d94a16f0670c6bf0ca7dc160111a81553a078e56a569d32cbc2b80f07167b8bd3b63aa61d0967ed13cbb59933b17da5d145e81f45ef5c80097fd0ce0c00bf18304da2508ed83b54813ec5d6759b6e2c04d70152b3e967096f598c1be7f07e6cce8f9cf7a50747f461a1e6bad6c3906f5c501b93c71ba69ae4942a26037c60793ea186010356338a29c9e1b6c65e89ec2c55c7600f8c5bc0cee31f1af562eb035ae9500c332a527f24147ab2642064a7aa66bfb7d5447a763b7bb26376c957234aee4c52531ef70dcf48f778e8868ded007d9eac7a2e76017f641887010ef4f451d7ea97bb9eab36b5c2c6533fdd28810197f1afb1c84d921e9aae310e077f34afb5747d4b1b2ed7165357ac900e37a6e5259d7de40207a90a326797581ba32b90855dc739a5a9c873801d7a379453fccf3a5a3a9ef94702ed8244a5e948a11fa2780d4f0f26650f1cc1f44d7e8f5392e15ea2ab1103a9a1ae83662cb90cd84a91352eb4eae26881dec43df9d57fcec2256e1d0e53a8f64da95c318b7bf286e969553cdb316db3870c583ff5c06e5bbfe09418e605dcd244ca40b8e85dc293c4b4cfc85ee4b907a5a08f35d98a9474b1486609f7d3ce9fc519942e777d3d282828bddd721f703a44b47e3a444795870495f0e23a9c43b817f8faa586a8d73e411906f1d58d2bcbe619cf00cd9251f9d94171de8d3620e102d79a5c0a3568c98fe232ebda349ed9d697ec3bb506d448351774a22efd1e6d52f0fd1123c784c2c3436b19fe86e94d6c3a5293beb73c1af835bad514cd17548d5a5bda9e4fc85776f1406fadcce004b76563cbd670cc04b656130e2155fa2014ee2fde6fc49fc0812792cda91be7c2b6498a99773e61222beb0a1a891b8825345496c3351040fb927850142a07bb960a095ee5654cf998583f517472ca8dfdbd06dd264bf67f868c0d92f4a7ce4131537390273e73bbfe98abc6227c384bc2670f2cab1dc9f8f13330e56dbeff1bc30176f04f054b0dac84884451948db61b2ee8de943dc0b81ec5b61c01e580dfcdd1d1eaa17be522c35aa6d0770161d8ec9ac938e9f6308d5544b2918e01b798901517424cc03aaa0073f691fab11eaf0505524a5fb27e6e07932353d6f54df41c3cabe86609ba4561d330e207842cfcfaccc042e9a4bdac206cd0205280a3685e0a5010af1a7b6859591ee2f021761a7213521394d9ddf000a46bca90594c84c1366845dc7e7dfc46b5b6c500b1bb2380dce8a121f182e18cb2b138d1543ec55098b47200fad9744dbaccd29ab3135ece838c5e04debdee094ac03c9073a92f8d1a7f0b1a94cb4a1267eaa03e15bb77e2dfd6d9bce03b5c069fddca8b1d5ea0dd912b4d26708d98cb26a14de3b167e5696c5da87bbaf7c1f705d9b52f8302414d177718c4649c1c680f59df0217c2631498128ac2ff4e78f7882a6f3f5bba698e9d1a0f12748aa53eadbacc9951d0575da9a945c9ba0d62c23921c4040a3148f3b9838c9ea7480572ad94059e7348f60c1527517f1ee0e8968aea32b784afe8d3149bc1107bf6b78571eeaebd98a1947b2594ac2ae47334f83b9c0abd24b04ff119ff8dc8abae262518291df99d67b9e7b223896993f340cf8a20c0b397aaf88fbb2f8c5fd92d9dd9c27d864d9e6b8342aaf49f0050c330fb3f0b3c806793281633e75824859ab2a45f5dde6df66dc9447b3a5d7adf349bcb4a0ab85959fd8e2e2c6a7050fb416d77e1a9f843969573d52237fe7236c1892b4386b577fb7cfdff62cb431db8a4901a26575e37ea010ffe53e49d64bad412a875924e86c058f3b6882849b946bb4d11a34e4ceb77a77cc08db9b51cdc7d8bd86f83188b987d9358c499f84b04c7a9e75a7d736891c04c67dc9817ca5f5f56cb28b995fb2f4316c7ddffc8cd5441a4333d6b5134196d9c73ac5d75c750f95bfc38136cb0652141a99277e17c658e83a8eedd96cbcbd3b55543545f404709b5b9586bf003378183e683aa998313d96513f06c2844d08495b5500e19311d855e0aa9e2d016f106c99da2cba3a98bb91c8a0a11fb5df672053b68477c220275ab671029fe27ba8b3f0fbcb116cbe8db7b41720f1b7a047d7e5b16dd8c61d3dcde20392a7b4c725be61c999438f95bab0f43f82611689b4a3b718bc0d011cba6bddaea62f7c1e1199e1a7d5f0f322ff4e68a9325d05442383bd38d61e529f4a2b1dcef6dd95a4a18851dfbcae035aa7548a279bd76c9e37dd70fb67d15b332d6beafc10f9cf67ad31d53eef55c7c567bc7562507cbadcd8257aeea68c2c81bdd392c5dac9abcee82ec299dab6ffa41f63809a704acce80bc7eeb52d831ab79d850bccab2d190fd14d77ee8dfe2f6884c7c535d6e0a635c2d9da90dd519a8640c6feffe3323bcf4c967ba51212e9527c50acfe9489068c88581ff324ee6882cb0a1582604cf200e46731f3af60017d038aab3802e138b9f6462e133362aaacf299af56242b2a3150d0d398a933d658f71a6909dbf6819b805ae910128a499cc8ca63e4f34a678fbb3506f68d3e555bc7e4b1d38b8d0fe3faa5e0954dad9ee66cbc020955b8f3a51c066684dfdb2d07b521aa376d7b16fffbdfda745fa4d170723908c293f356236d17d49daf98ade57c2f0e5071f3787077ad161488c5a075069243cf8739e8bf6c138efd72422198358eedc7aaa9812646b5369e352c84c67dddea79ccf80353c241543854b13466313bfab3a4e2b7361398cb406f09a3245ef17a51ce35929b662f57b98d6a27dea183fad4b5f674d1a914d0407c6e87f9e83c142d35609058a0a2f146713cb5c16a0599025bcc09b03c3abc6738a36572195f1f32f80314b1d235ae69bccc94e84344d9b619a879337bac26d4793c44aeadd7c50837dd659207193415ca4c22042d916a0504a82acfb00feb8a6d505f7db57d55b3726e09b797eba0aba6ba6b2c9d21d423fa0c593b7c02b7d35ca6f96bd497243cdf22433cbe5da874b8ee398c2066798b24a97c0ac6252f90aab1b467515addb580ee1289095854ec057be8a0c46f3c762d8d7d0c43294c651bc5e16bc4535de4a43f4d23ae9794f34c39862b1b0704855038963b31333cbb0aafe561d11c380bac74496467e9d6bb9637cf0be1d453cbce88116bc1e01dfd46b9ebe5b23449d59e60c55cff6badabf77c13a75c69d6847702489c208e581eca8bf4524676d2453075dcdafdb4284966670be939df94f5129f38d78aacc68cbb5753d4ae4144bce95578c6c9f75138e7628fc1ff59d659923d69eeea260c590433cfee0f4313cb51f7a90f37e2029beb6fcd620761b65794ab2800fdc6fed40e51665ec64d78f84f253ea90b4f9a610732fef0863ea1003360bdc397a76ebaff018a0256844b6cd68c38383fcc1bbccf000d7c4c032d69428fd20d2fe9eea299a462555cc778912e20329913a9ad2c4149cc978d6e8acb5fbb3e4902890cf3971ea9f86523ca9879a65c045205d0eb53b7956290df6daaff25e4c0127efe5e8136add69d25a3da04b7487e7e50de904068522173a0fbf37e1f860c11360ae3d77b43918446e2a37c7b560bdd74c7acd0fff1268e412a7627e7abf072c9f498530a8c6adab431622ba53a9e07e16654f7e236f458a916f9b35d2721da9a38cea76e5b78fd13870cba22950990dc6d7e96baf43af3a8466f975aa7e64af3493b3e50e1e6c12693ae5aa95cfb35ac2fbba0a239aaa39f0491a1c959ba563124149e4ce1acc84b46d8de99f3c5ddccbd39072106b893c1895015005ce9482b57890c2e7dc2faa1b6a0d84b4669f8cf95945c05d0007631ea739e875bae9bca7c0ad23bb4a02fb2ab6aeda3f8fca6abfdc4e2d1aaca5edfafef41f6b1222981967b9d081fe7bc6e95ee9811aeee19676a04da6ad77245d99bd06781c38ba8cbb5f95522d31674d185a033cb4235a4a629571c5da75e9989cc32db13b7873e192fd15cb561c342c64cd7eb714c13da48848bd022156d3e2e7fffeb3c10fc7f24dfad0ee3c7e828a17eb45a79ba268d88462f4abb15b8e1d498ff0e02beb598e9fb380a8a0c3bb0c5ee76e47434a59a723dafa34a3a1bc6551ca54e9280e7a8fc39ea12f477e8ece75cede7198f22b1a86a0b772d0de1069fa5d8164787ddecea25c26cd61015fca78cdb47bf1093cb4ac642f9da918424b1f94b4b004b442ff7a4a4e6c363964dee293998dd3166fe362b843dd12b3aded1b3dfcaaa6690a41465fcc66dd4014eaa4c857b7a", 0x1000}], 0xa, &(0x7f0000003900)=[@txtime={{0x18, 0x1, 0x3d, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x100}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}], 0x90}}, {{&(0x7f00000039c0)=@in6={0xa, 0x4e22, 0x80000001, @private1={0xfc, 0x1, [], 0x1}, 0xde}, 0x80, &(0x7f0000001700)=[{&(0x7f0000003a40)="704cfccf315e92d8a705c17ef8b393e20883b633bb8f4c5db51f1560043b892495fcd4e085cc5d986b1dab8d4c9afec377157a640e9c296095cb37fcb09a7ddb3c165e9064a76e8f0b90b92fb414d0f7b8474b883187c80f5030cd49e8cf9102e00f4b0e3b6abde976127ad3a60af58dac5ffbab5118ba5968bc7c611003be42172436efa55a8615850592dbc152abb75f54f4a8fc81f15eb245461f6d06365280cb02f1978898224ac9d01e7ef48625", 0xb0}], 0x1}}], 0x2, 0x4000840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) semop(0x0, &(0x7f0000000240), 0x6) semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f0000003b80)=""/173) r7 = dup(r6) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0xde) sendmmsg(r1, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001100)="7f8187bbe7ae57f9708da4177ba207ca40dc611f76bffa177757215e4174bee52acebdfa38c1df5f84f2f5f92c60e4814e6f0d311bb1780365d99e73d12b5fdb4a5f1311b2912c8bdebb3fc514b6", 0x4e}, {&(0x7f0000001200)="a9a210e9d28a84756402047efda9bcfcdc26667c776a9226b4b99d9f66fa073bd546", 0x22}], 0x2}}], 0x500, 0x0) 15:37:29 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) clone3(0x0, 0xfffffffffffffd9c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0xc16000, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000480)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r0}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r0, @ANYRES64], &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x0, 0x20, 0x86, 0x7fffffff}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000680)={r3, @in6={{0xa, 0x4e23, 0x400, @private2={0xfc, 0x2, [], 0x1}, 0x3}}}, &(0x7f0000000040)=0x84) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000340)={0x1, 0x0, {0xfffffffb, 0x7ff, 0x2010, 0x0, 0x8, 0x3, 0x0, 0x5}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f00000000c0)) unshare(0x40000000) 15:37:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) unlink(&(0x7f00000003c0)='./file0\x00') sendmsg$sock(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000880)={&(0x7f0000000840)='./file0\x00', 0x0, 0x10}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="a7ad7bbf2053976906000000000400", @ANYRES32=r4, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r4, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x28, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x40, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '-0!\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}]}, 0x6c}}, 0xc00) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r5, 0x4000a0, 0x23, 0x5ac484bb51fa106a, &(0x7f0000000040)="4d50b441e692763513ef874565020007000112bbf3469fd0880f892fd398e4020a00001375bc847d142d1523389037a1d4f5631813cf7037fd584b4af7507a849ce80deea1a57733a5e3730fbef42ab9bedd390775bf809fbcf2a71f32d41a1f7ff3b5483107766a8bd0033d44e6ef7b526c8c67aa9847e283c6cdccbd627ad1094342b1840b506814cb319132533f6d740d9643d0c6dc8481d0c9643dd3e0aa6e1be581aca3ea9377136ce8dd480207fba7af225672c63802beb9647a5fbe90781e147e92eae8d9d79d0d", 0x0, 0x23, 0x0, 0x22d, 0x1000000}, 0x28) [ 1162.334664][ T7960] IPVS: ftp: loaded support on port[0] = 21 15:37:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000010000507550000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001d00b80000000a0005003c000000000000001400030069703665727370616e3000000000000008001f0077ff00000a002400a8322b6131840000"], 0x5c}}, 0x4c094) [ 1162.426029][ T7968] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1162.432761][ T7968] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1162.974731][ T7975] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1162.989317][ T7960] lo speed is unknown, defaulting to 1000 [ 1163.002122][ T7975] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 15:37:30 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="dd04001300000000000100050000000000000002000020000004010000000000000000b49f1cf4ce3aef8929b6fe2355b0806cbdf4c5bf40596937a77fe52d4061b8fa206f7385e135e3148cfda57c4a61cf56fed6d5dd30f2312d3040b01d5db56301000000254c42e854936bf6da4d83a19afc3ccfc76dfa696f7e6f9b664133f5fce5ca95ef0001000013b489dbd82e64540309cf2a93b1699b09d7931a12b3ba1ea14c04a0bfacefa38f76a6c7e92104a07ac04e2eb9d3917bdd6c568ff90b06e106a8abe7d5d4969281347bf0a1"], 0x28) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x3e8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket(0x15, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r5, &(0x7f0000000240)={0x11, 0xc, r7}, 0x14) getsockname$packet(r5, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) r9 = getpid() sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x70, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x48, 0x16, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0xe5d, 0x8, 0x8100}}, {0x14, 0x1, {0x1000, 0x71a, 0x400, 0x8100}}, {0x14, 0x1, {0xa9f9, 0xf3d, 0xe7, 0x88a8}}]}]}]}, @IFLA_NET_NS_PID={0x8, 0x13, r9}]}, 0x70}}, 0x80c2) accept4(0xffffffffffffffff, &(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, &(0x7f0000000400)=0x80, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00', r8}) bind(r3, &(0x7f00000001c0)=@ll={0x11, 0x8, r7, 0x1, 0x0, 0x6, @random="f2b4ee8406fe"}, 0x53) syz_genetlink_get_family_id$ipvs(0x0) 15:37:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x4, 0x4, 0x800, 0x9, 0x500}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffffffff, 0x11, r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0xffffffff}, 0x40) umount2(&(0x7f0000000000)='./file0\x00', 0xe) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfee5) 15:37:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="660f382b1a0f01df0f01902f1f0f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x28}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x40}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket(0x1000000010, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) chdir(&(0x7f0000000100)='./file0\x00') ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0xa05], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1163.325438][ T8010] kvm [8003]: vcpu0, guest rIP: 0x8d Hyper-V unhandled rdmsr: 0x40000006 15:37:30 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x15300, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1163.382591][ T8010] kvm [8003]: vcpu0, guest rIP: 0x8d Hyper-V unhandled rdmsr: 0x40000088 [ 1163.484360][ T8010] kvm [8003]: vcpu0, guest rIP: 0x8d Hyper-V unhandled rdmsr: 0x4000000a [ 1163.555351][ T8010] kvm [8003]: vcpu0, guest rIP: 0x8d Hyper-V unhandled rdmsr: 0x4000008c [ 1163.620444][ T8010] kvm [8003]: vcpu0, guest rIP: 0x8d Hyper-V unhandled rdmsr: 0x4000000e [ 1163.629951][ T3539] tipc: TX() has been purged, node left! 15:37:30 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x400000, 0x0) r5 = socket(0x29, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000480)={r4, r5, 0x9b9}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xc60}]}, 0x10) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r6 = socket(0x27, 0x1, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000240)={r6, r2, 0x2, 0x42, &(0x7f00000001c0)="d91dc6ef52f87ed7ed8885376562326f01d5eb75385c60f33e858c20300aaace56f9df06ab6c6d4c2698dd521b8a4fb2b67283b2ff540052298e915e4a395067b2d0", 0x7f, 0x66, 0x3, 0x1, 0x3, 0x2, 0x8e18, 'syz1\x00'}) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) openat$full(0xffffffffffffff9c, 0x0, 0x19400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x2019407, 0x0) 15:37:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)=0xfffff89a) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='ns\x00') getpid() r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') fchdir(r4) r5 = gettid() ptrace$getsig(0x4202, r5, 0x7, &(0x7f0000000240)) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) [ 1163.699026][ T8010] kvm [8003]: vcpu0, guest rIP: 0x8d Hyper-V unhandled rdmsr: 0x40000012 [ 1163.769162][ T8010] kvm [8003]: vcpu0, guest rIP: 0x8d Hyper-V unhandled rdmsr: 0x40000016 [ 1163.815932][ T8020] sctp: [Deprecated]: syz-executor.2 (pid 8020) Use of int in maxseg socket option. [ 1163.815932][ T8020] Use struct sctp_assoc_value instead [ 1163.836296][ T8010] kvm [8003]: vcpu0, guest rIP: 0x8d Hyper-V unhandled rdmsr: 0x4000001a [ 1163.927192][ T8020] sctp: [Deprecated]: syz-executor.2 (pid 8020) Use of int in maxseg socket option. [ 1163.927192][ T8020] Use struct sctp_assoc_value instead [ 1163.927420][ T8010] kvm [8003]: vcpu0, guest rIP: 0x8d Hyper-V unhandled rdmsr: 0x4000001e 15:37:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000001b00008008000100670b88001c000280080001000000000000afee2753bb2e54d1746371c085f64de4d7149c239fa7273cbf0057d48fea1db19d60e1bdd08d85b9fcd45d61b3b2d82e7cf91aae9f81b99a2248bc9cc49589e61d4ca63b49baead36095624e40e39578b4fc868be74267992008bad43b0e8b00"/134, @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1164.110014][ T8010] kvm [8003]: vcpu0, guest rIP: 0x8d Hyper-V unhandled rdmsr: 0x40000026 [ 1164.124414][ T8035] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 15:37:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x18010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0xc00, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000000c0)={0x8001, 0x7, 0x8, 0x4, 0xfff}) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x96, 0x2, 0x0, 0x0, 0x7, 0xfc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x40}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xa4, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x88, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, "35b390d5373765a9f09a705bfb656ea506f5d67ca8018f09589d92b1bb"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xe, 0x1, "98dab832de295676830b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, "5e6a16936d2e4211a51d133cdda4d0db34f15653bc658f0b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3ff}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x8, 0x1, "0599ee73"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @local}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x801) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r7 = dup(r6) ioctl$SG_GET_KEEP_ORPHAN(r7, 0x2288, &(0x7f0000000100)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) [ 1164.198322][ T8037] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 15:37:31 executing program 0: pwritev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000002c0)="8411ac9e95b2a6801dfcf6d8fe5dabe0046e2168c0e68c05000000b66283f66571e754ec3ed52dad078b6adac167dc99d2697c4fbc4480e692f8b22b74a7cace5fdd84584a68d514000001009c5052012d", 0x51}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000440)=""/151, 0x97}, {&(0x7f0000000240)=""/72, 0x48}, {&(0x7f0000000500)=""/14, 0xe}, {&(0x7f0000000540)=""/79, 0x4f}], 0x4, &(0x7f0000001640)=""/4096, 0x1000}, 0xf}, {{&(0x7f0000002640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f00000026c0)=""/59, 0x3b}, {&(0x7f0000002700)=""/86, 0x56}, {&(0x7f0000002780)=""/234, 0xea}, {&(0x7f0000002880)=""/182, 0xb6}, {&(0x7f0000002940)=""/225, 0xe1}, {&(0x7f0000002a40)=""/213, 0xd5}, {&(0x7f0000002b40)=""/160, 0xa0}, {&(0x7f0000002c00)=""/254, 0xfe}, {&(0x7f0000002d00)=""/145, 0x91}], 0x9, &(0x7f0000002e80)=""/135, 0x87}}, {{&(0x7f0000002f40)=@caif, 0x80, &(0x7f0000003240)=[{&(0x7f0000002fc0)=""/41, 0x29}, {&(0x7f0000003000)=""/168, 0xa8}, {&(0x7f00000030c0)=""/182, 0xb6}, {&(0x7f0000003180)=""/40, 0x28}, {&(0x7f00000031c0)=""/108, 0x6c}], 0x5, &(0x7f00000032c0)=""/4096, 0x1000}, 0x903c}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f00000042c0)=""/248, 0xf8}, {&(0x7f00000043c0)=""/215, 0xd7}, {&(0x7f00000044c0)=""/248, 0xf8}], 0x3, &(0x7f0000004600)=""/162, 0xa2}, 0x101}], 0x4, 0xf0092df0d0c2a0b1, &(0x7f00000047c0)={0x77359400}) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000004800)='westwood\x00', 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x1) clone(0x98e900, 0x0, 0x0, 0x0, &(0x7f0000000040)="d35f7e258a178400100000000020f60ab6") 15:37:31 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$TUNSETSNDBUF(r0, 0xb702, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000300)=0xff, 0x4) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r7, @ANYBLOB="db5a2fae655b00"], 0x20}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="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"], 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x164, r9, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7c0}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x17}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffd}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffff8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa897}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8a1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb2}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x85}, 0x24000000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040)=0xc8, 0x4) [ 1164.665794][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:37:31 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x480041, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x1}], 0x100488, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 15:37:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x18010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0xc00, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000000c0)={0x8001, 0x7, 0x8, 0x4, 0xfff}) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x96, 0x2, 0x0, 0x0, 0x7, 0xfc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x40}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xa4, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x88, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, "35b390d5373765a9f09a705bfb656ea506f5d67ca8018f09589d92b1bb"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xe, 0x1, "98dab832de295676830b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, "5e6a16936d2e4211a51d133cdda4d0db34f15653bc658f0b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3ff}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x8, 0x1, "0599ee73"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @local}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x801) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r7 = dup(r6) ioctl$SG_GET_KEEP_ORPHAN(r7, 0x2288, &(0x7f0000000100)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) [ 1164.779235][ T8053] device bridge31 entered promiscuous mode [ 1164.858662][ T8055] device bridge31 left promiscuous mode 15:37:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000040)="5523b9cc32d48aee4852e08d86cf68d01f269b1dce92608c9ee69bf8eb55602e14745d8ada323929d2a27f979d073180b4ae91e926a5e9e883054c752eec47c934bdf9dfe214f05b9fd299d62d356153d06a1aceac65b1b6e195a18c171c3ae5dde748dce2759b314600000000000000000000007eb08aa8531b5d35d81e7c95403f7356a6c6fd78ec8118", 0x8b}], 0x1) 15:37:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x18010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0xc00, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000000c0)={0x8001, 0x7, 0x8, 0x4, 0xfff}) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x96, 0x2, 0x0, 0x0, 0x7, 0xfc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x40}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xa4, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x88, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, "35b390d5373765a9f09a705bfb656ea506f5d67ca8018f09589d92b1bb"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xe, 0x1, "98dab832de295676830b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, "5e6a16936d2e4211a51d133cdda4d0db34f15653bc658f0b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3ff}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x8, 0x1, "0599ee73"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @local}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x801) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r7 = dup(r6) ioctl$SG_GET_KEEP_ORPHAN(r7, 0x2288, &(0x7f0000000100)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) 15:37:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x2000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) 15:37:32 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x40802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2300000025000511d25a80638c63940d0424fc60040018000a001100022f000037153e", 0x23}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)) mkdir(0x0, 0x104) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000940)=@ethernet={0x1, @random="8de58d13d9dc"}, 0x80, 0x0, 0x0, &(0x7f0000001200)}, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) mount$9p_virtio(&(0x7f00000002c0)='syz\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x808, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB=',defcontext=unconfined_u,euid=', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=0x0, @ANYBLOB='\b\x00']) perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x70, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x4, @perf_bp={&(0x7f0000000100)}, 0x10, 0x40, 0x2, 0x7, 0x1ff, 0x2e89}, r3, 0x10, 0xffffffffffffffff, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000003c0)={0x9, 0x1, "14"}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000340), 0x4) 15:37:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) ioctl$SNDCTL_DSP_GETFMTS(r2, 0x8010500d, &(0x7f0000000080)) 15:37:32 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x10040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000000)={0x2f, 0x34, 0x3, 0x11, 0x1, 0x4, 0x5, 0x3a}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x3) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 1165.478331][ T8081] hub 9-0:1.0: USB hub found [ 1165.537088][ T8081] hub 9-0:1.0: 8 ports detected [ 1165.594083][ T8092] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1165.648685][ T8092] CPU: 1 PID: 8092 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 [ 1165.657324][ T8092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1165.667369][ T8092] Call Trace: [ 1165.670663][ T8092] dump_stack+0x18f/0x20d [ 1165.674995][ T8092] sysfs_warn_dup.cold+0x1c/0x2d [ 1165.679939][ T8092] sysfs_do_create_link_sd+0x11e/0x140 [ 1165.685408][ T8092] sysfs_create_link+0x5f/0xc0 [ 1165.690171][ T8092] device_add+0x6ff/0x1b00 [ 1165.694599][ T8092] ? device_check_offline+0x280/0x280 [ 1165.699968][ T8092] ? ieee80211_set_bitrate_flags+0x20b/0x5c0 [ 1165.711246][ T8092] wiphy_register+0x1d5b/0x2840 [ 1165.716102][ T8092] ? wiphy_unregister+0xc10/0xc10 [ 1165.721125][ T8092] ? default_device_exit_batch+0x3d0/0x3d0 [ 1165.726957][ T8092] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1165.733027][ T8092] ieee80211_register_hw+0x2291/0x3950 [ 1165.738496][ T8092] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1165.743873][ T8092] ? lock_downgrade+0x820/0x820 [ 1165.748724][ T8092] ? lock_is_held_type+0xb0/0xe0 [ 1165.753668][ T8092] ? memset+0x20/0x40 [ 1165.757646][ T8092] ? __hrtimer_init+0x12c/0x260 [ 1165.762500][ T8092] mac80211_hwsim_new_radio+0x2351/0x4540 [ 1165.768244][ T8092] ? hwsim_virtio_rx_work+0x350/0x350 [ 1165.773617][ T8092] ? memcpy+0x39/0x60 [ 1165.777682][ T8092] hwsim_new_radio_nl+0x93e/0xf8c [ 1165.782712][ T8092] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1165.789024][ T8092] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b3/0x310 [ 1165.795954][ T8092] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1bd/0x310 [ 1165.802889][ T8092] genl_rcv_msg+0x61d/0x9e0 [ 1165.807397][ T8092] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 1165.814340][ T8092] ? lock_release+0x8d0/0x8d0 [ 1165.819007][ T8092] ? __lockdep_free_key_range+0x110/0x110 [ 1165.824726][ T8092] netlink_rcv_skb+0x15a/0x430 [ 1165.829485][ T8092] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 1165.836418][ T8092] ? netlink_ack+0xa10/0xa10 [ 1165.841029][ T8092] genl_rcv+0x24/0x40 [ 1165.845006][ T8092] netlink_unicast+0x533/0x7d0 [ 1165.849767][ T8092] ? netlink_attachskb+0x810/0x810 [ 1165.854871][ T8092] ? _copy_from_iter_full+0x247/0x890 [ 1165.860232][ T8092] ? __phys_addr+0x9a/0x110 [ 1165.864725][ T8092] ? __phys_addr_symbol+0x2c/0x70 [ 1165.869740][ T8092] ? __check_object_size+0x171/0x3e4 [ 1165.875044][ T8092] netlink_sendmsg+0x856/0xd90 [ 1165.879821][ T8092] ? netlink_unicast+0x7d0/0x7d0 [ 1165.884761][ T8092] ? netlink_unicast+0x7d0/0x7d0 [ 1165.889691][ T8092] sock_sendmsg+0xcf/0x120 [ 1165.894103][ T8092] ____sys_sendmsg+0x6e8/0x810 [ 1165.898862][ T8092] ? kernel_sendmsg+0x50/0x50 [ 1165.903528][ T8092] ? do_recvmmsg+0x6d0/0x6d0 [ 1165.908132][ T8092] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1165.914108][ T8092] ? __lockdep_free_key_range+0x110/0x110 [ 1165.919824][ T8092] ___sys_sendmsg+0xf3/0x170 [ 1165.924409][ T8092] ? sendmsg_copy_msghdr+0x160/0x160 [ 1165.929702][ T8092] ? __fget_files+0x272/0x400 [ 1165.934377][ T8092] ? lock_downgrade+0x820/0x820 [ 1165.939214][ T8092] ? find_held_lock+0x2d/0x110 [ 1165.943971][ T8092] ? __might_fault+0x11f/0x1d0 [ 1165.948735][ T8092] ? __fget_files+0x294/0x400 [ 1165.953437][ T8092] ? __fget_light+0xea/0x280 [ 1165.958023][ T8092] __sys_sendmsg+0xe5/0x1b0 [ 1165.962526][ T8092] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1165.967548][ T8092] ? __x64_sys_futex+0x382/0x4e0 [ 1165.972508][ T8092] ? do_syscall_64+0x1c/0xe0 [ 1165.977090][ T8092] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1165.983077][ T8092] do_syscall_64+0x60/0xe0 [ 1165.987506][ T8092] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1165.993387][ T8092] RIP: 0033:0x45cb29 [ 1165.997275][ T8092] Code: Bad RIP value. [ 1166.001346][ T8092] RSP: 002b:00007f55346a6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1166.009749][ T8092] RAX: ffffffffffffffda RBX: 00000000005025a0 RCX: 000000000045cb29 [ 1166.017715][ T8092] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1166.025680][ T8092] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1166.033648][ T8092] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1166.041612][ T8092] R13: 0000000000000a3c R14: 00000000004cd22e R15: 00007f55346a76d4 15:37:33 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x7d) prctl$PR_SET_PTRACER(0x59616d61, r0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0x0, 0x4080) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/mice\x00', 0x1a1200) write$P9_RVERSION(r3, &(0x7f0000000440)={0x13, 0x65, 0xffff, 0x1, 0x6, '9P2000'}, 0x13) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x331100, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f0000000140)) close(0xffffffffffffffff) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000400)=0x1, 0x4) close(r1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000580)={0xa00, 0x240, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffd}, {0x10000, 0x7}, {0x81, 0x8}, 0x0, 0x10, 0x2, 0x3, 0x1, 0x2, 0x3, 0x40, 0x0, 0xd3, 0xfff, 0x7fff, 0x30, 0x200, 0x0, 0x4}) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000840), &(0x7f0000000380)=[&(0x7f0000000480)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa4\xa6\xbf\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xa6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bh\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\xa9\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@FD\xf7\xa9\x89\x7f\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x8d\xc8\xec\x00Ag@\n\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000003c0)='[\xa3\xb60\xf8cmd5su\x00', &(0x7f0000000100)='[$procmd5sum(wlan1^vboxnet0\x00', &(0x7f0000000300)='\xcfcpuset&GPL)bdev-GPL%\x00', &(0x7f0000000640)='\x1f\x00\xbbt8\xea\x8fWI\xc5)\xc7\xe0_v\xb5x\xe9@\xe1\x88\xb9\xa6S\x06F`\x16O\x00\x00\xbb\xcac,\x1e\x83\x95D\xbc}\xf7\xc0\xe13\xc8p\xb1\xd8\xe7Xi\xf6%\xc3\xd0\xc0\xfc\x12G\x91S\x9e\xa4\x9d\xbf\xee\xcb\x82\x8d\xfb\x81\x8b,\x82\xe4\x05\xb5\xd3\xc1U\xe8\xbd\xfd\x9c&Cl\\\xc4\x975\xd3\xef,\x95F~\x8f.\xbcR_l\xafCy\xc7\xd4[Ye\x93\xff\xf8|\xd4\rz\x8fN\xf3\xc5\xb5x;\xd8\xf8\x12\x81p\xda\f\xa1\x01\a\xab\x10\x11\xb7\xe6\xe5[\x18\x95\x06j)zP\xe1\x06F^\x0fu \xf1\x9e\x83f\xe1\xb0\x90\xda#v\xaa\xf8\x9d\x8aA\xe1\xf2\x8a\xaa\x84|\xe8\xe1\xb4\'s\x9a\x1c\r\xcf\x9b\xfd\xbe\t\x01\xaa\x01\xab\x83g\xbc\xcb\xca:\xf9']) ptrace$setopts(0x4206, r0, 0x0, 0x0) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4295599bdccd99534830b61c20152a769ccccba87188a5f1fceba95fb9a50acf0306cc1f67c2fb372e1d72597c29fd8fc63cbd774829b64845f83648c837fb4d8fc08ab9fca42626aa3d3708551b79cc035e8c02af71f29aec3fb5be8299c5191e087ba637839c1f2ac19d4a7bdd9a53fa2af67b8fe27c0a5e8e33d4424dd4c226a1a357c7a05e02ba21e794eaaecea00c5fc0fe07870bb8089e5b01351026306444ad154f15288fcb6492774e2a0934e36f86802874e639375de6", 0xbb}, {&(0x7f0000000740)="c3d06e1aee19645053d61a08ec91ee2432a07cfe16e77cd6a76a474c061c99ad095358642793759042db7fbfdfec48252a6563b99231a9e0f916369a28fd388796deae64cf9f", 0x46}], 0x2, 0x4) 15:37:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x18010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0xc00, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000000c0)={0x8001, 0x7, 0x8, 0x4, 0xfff}) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x96, 0x2, 0x0, 0x0, 0x7, 0xfc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x40}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xa4, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x88, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, "35b390d5373765a9f09a705bfb656ea506f5d67ca8018f09589d92b1bb"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xe, 0x1, "98dab832de295676830b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, "5e6a16936d2e4211a51d133cdda4d0db34f15653bc658f0b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3ff}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x8, 0x1, "0599ee73"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @local}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x801) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r7 = dup(r6) ioctl$SG_GET_KEEP_ORPHAN(r7, 0x2288, &(0x7f0000000100)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) [ 1166.572092][ T8113] hub 9-0:1.0: USB hub found [ 1166.585358][ T8113] hub 9-0:1.0: 8 ports detected 15:37:33 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000003c0)={{0x0, 0x1, 0x573, 0x3, 0x7}, 0x1000, 0x80000000, 'id0\x00', 'timer1\x00', 0x0, 0x3, 0x100, 0x5, 0x25}) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2300000025000511d25a80638c63940d0424fc60040018000a001100022f000037153e", 0x23}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x104) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80), 0x1000012c, 0x0, 0x2f}, 0x2000c083) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000940)=@ethernet={0x1, @random="8de58d13d9dc"}, 0x80, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000001240)}, {&(0x7f0000001140)="3447a2b32cc7913fb4c57481b90d79057312bc09c9aea7b2089dd713e11d0230f7d09afe5b87e84a6b6567128c2b29a8296891d9d32322650748d0006f3509ab4300fd8c58e2c38a1ce5fd2dbf9855aea2bd75e10759e60d7f584361bc0f3838368de3471a00aa9d196700d1cee4054d8f602baff199ba4aa314f056c3af1da2bdaaf90c1e92f1a3ddf257fde014e273af024cc743cd6e68c7", 0x99}, {&(0x7f00000013c0)="2d347ac73b1fa3033f99a0bc290a83bd262800d715204a22e35051c3e3d70a39a2bec9d0fe9882e08eddfe945812024c502937368cc9ebf76d3cf4df8a77ef926c563453fcd50ad65bf4fd1af4ec1c3ac4ecc47a40d44fc330a5680bfbafc218116946fa242c3249f84c2af084741fd07579965601810630edcc5e502dccaabc7860ba921220de891c548860bf15b343", 0x90}], 0x4, &(0x7f0000001200)=[@txtime={{0x18, 0x1, 0x3d, 0x401}}], 0x18}, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) r4 = perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x70, 0x7e, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x53187862969f7b8d}, 0x10, 0x1, 0x2, 0x7, 0x1ff, 0x2e89}, r3, 0x10, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0xa, 0x0, @broadcast}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 1167.236694][ T8099] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1167.258609][ T8099] CPU: 1 PID: 8099 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 [ 1167.267216][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1167.277272][ T8099] Call Trace: [ 1167.280569][ T8099] dump_stack+0x18f/0x20d [ 1167.284908][ T8099] sysfs_warn_dup.cold+0x1c/0x2d [ 1167.289849][ T8099] sysfs_do_create_link_sd+0x11e/0x140 [ 1167.295309][ T8099] sysfs_create_link+0x5f/0xc0 [ 1167.300073][ T8099] device_add+0x6ff/0x1b00 [ 1167.304492][ T8099] ? device_check_offline+0x280/0x280 [ 1167.309864][ T8099] ? ieee80211_set_bitrate_flags+0x20b/0x5c0 [ 1167.315848][ T8099] wiphy_register+0x1d5b/0x2840 [ 1167.320709][ T8099] ? wiphy_unregister+0xc10/0xc10 [ 1167.325750][ T8099] ? default_device_exit_batch+0x3d0/0x3d0 [ 1167.331586][ T8099] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1167.337672][ T8099] ieee80211_register_hw+0x2291/0x3950 [ 1167.343148][ T8099] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1167.348539][ T8099] ? lock_downgrade+0x820/0x820 [ 1167.353405][ T8099] ? lock_is_held_type+0xb0/0xe0 [ 1167.358366][ T8099] ? memset+0x20/0x40 [ 1167.362348][ T8099] ? __hrtimer_init+0x12c/0x260 [ 1167.367201][ T8099] mac80211_hwsim_new_radio+0x2351/0x4540 [ 1167.372936][ T8099] ? hwsim_virtio_rx_work+0x350/0x350 [ 1167.378395][ T8099] ? memcpy+0x39/0x60 [ 1167.382378][ T8099] hwsim_new_radio_nl+0x93e/0xf8c [ 1167.387434][ T8099] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1167.393338][ T8099] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b3/0x310 [ 1167.400263][ T8099] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1bd/0x310 [ 1167.407197][ T8099] genl_rcv_msg+0x61d/0x9e0 [ 1167.411705][ T8099] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 1167.418659][ T8099] ? lock_release+0x8d0/0x8d0 [ 1167.423329][ T8099] ? __lockdep_free_key_range+0x110/0x110 [ 1167.429052][ T8099] netlink_rcv_skb+0x15a/0x430 [ 1167.433816][ T8099] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 1167.440750][ T8099] ? netlink_ack+0xa10/0xa10 [ 1167.445353][ T8099] genl_rcv+0x24/0x40 [ 1167.449330][ T8099] netlink_unicast+0x533/0x7d0 [ 1167.454098][ T8099] ? netlink_attachskb+0x810/0x810 [ 1167.459199][ T8099] ? _copy_from_iter_full+0x247/0x890 [ 1167.464564][ T8099] ? __phys_addr+0x9a/0x110 [ 1167.469058][ T8099] ? __phys_addr_symbol+0x2c/0x70 [ 1167.474077][ T8099] ? __check_object_size+0x171/0x3e4 [ 1167.479358][ T8099] netlink_sendmsg+0x856/0xd90 [ 1167.484122][ T8099] ? netlink_unicast+0x7d0/0x7d0 [ 1167.489064][ T8099] ? netlink_unicast+0x7d0/0x7d0 [ 1167.493996][ T8099] sock_sendmsg+0xcf/0x120 [ 1167.498408][ T8099] ____sys_sendmsg+0x6e8/0x810 [ 1167.503175][ T8099] ? kernel_sendmsg+0x50/0x50 [ 1167.507841][ T8099] ? do_recvmmsg+0x6d0/0x6d0 [ 1167.512448][ T8099] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1167.518432][ T8099] ? __lockdep_free_key_range+0x110/0x110 [ 1167.524147][ T8099] ___sys_sendmsg+0xf3/0x170 [ 1167.528736][ T8099] ? sendmsg_copy_msghdr+0x160/0x160 [ 1167.534014][ T8099] ? __fget_files+0x272/0x400 [ 1167.538688][ T8099] ? lock_downgrade+0x820/0x820 [ 1167.543529][ T8099] ? find_held_lock+0x2d/0x110 [ 1167.548283][ T8099] ? __might_fault+0x11f/0x1d0 [ 1167.553051][ T8099] ? __fget_files+0x294/0x400 [ 1167.557726][ T8099] ? __fget_light+0xea/0x280 [ 1167.562318][ T8099] __sys_sendmsg+0xe5/0x1b0 [ 1167.566814][ T8099] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1167.571833][ T8099] ? __x64_sys_futex+0x382/0x4e0 [ 1167.576776][ T8099] ? do_syscall_64+0x1c/0xe0 [ 1167.581362][ T8099] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1167.587340][ T8099] do_syscall_64+0x60/0xe0 [ 1167.591762][ T8099] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1167.597688][ T8099] RIP: 0033:0x45cb29 [ 1167.601568][ T8099] Code: Bad RIP value. [ 1167.605622][ T8099] RSP: 002b:00007f5534664c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1167.614032][ T8099] RAX: ffffffffffffffda RBX: 00000000005025a0 RCX: 000000000045cb29 [ 1167.622017][ T8099] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1167.629978][ T8099] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 1167.637940][ T8099] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1167.645901][ T8099] R13: 0000000000000a3c R14: 00000000004cd22e R15: 00007f55346656d4 15:37:34 executing program 4: syz_emit_ethernet(0x343, &(0x7f0000000680)={@link_local, @remote, @val={@val={0x9100, 0x5, 0x1, 0x1}, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x305, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0x10, "ba0d5767c36437f2dd6f1d2a444e1517b41d8879b8de61aeb44f45e568770490b94e2be68fb141059261835b30b628bf298e8e615c21f2abf81fea10f0fba534129c81179b2a346bb46852b18c5dd2dcdb43faa7491edb1f2ea6a6f58187b4a3201215502c1ed2d0851802c3cd68a9180caad906eba9229768b5320b3ff4"}, {0x25, 0x1, "40401fa490e6"}, {0x19, 0x1, "a36b4f44904a"}, {0xe, 0x0, "bfa5493146"}, {0x5, 0x2, "91e140f17bd5e1ff503fed26a586eace9c00"}, {0xe, 0x16, "7b9193f6c4f3ad3fee8d9f352366dcd1a2f7307226f1c1b4ce86b685713739503a567c49e844ac9cb88ea101af462080ec901ee85e51df0d6c9cdb12d3d043afabd7913b25d3ff6666b3508a1a371eb3e81280819b609b7fa197705ff33168021fdb6dbdcbb070da6de6db39680f015ae570ce594d3ca57ba7e54f98a2dcd368127a25111176dc28066a17fb2e0305439ff5b347c1b26a009070855000ffd351029b9912c88a1bd6e3153abcb6c64865d1fe"}, {0x18, 0x17, "1aa37056d54d807d1fa0209510a494d289f724dda297b52c4f05b330affe823ab52ccdf5e24f2be4470a55ae5001994f39aa0dbcb5e104405b3d3d29408aef5ba2715f6c1016bfd19722203eccb493066a4f1e508e67229615d611f6ca21a9462ee6902bdfc39427fefcbf16be14af21ff33624be7276793d42b3080a0b873795d5f135f8b9c4f9de978e149cbfcc9137be0659a40270ce8fb5d9fef0ab7801865075a94646fc0b4496ed5ea1e91ad10f71c93580d2beaca28"}, {0x2, 0x4, "f4ee216a5ab5fa5724e5df37a4778382714e10ae6d300f755584a31e3b79c4d7eac5ef"}, {0x2, 0xf, "9b6c7944ca0af0cba7fa9b01a033f3ca033062bcc0e3a38fe3bad42b04563fd800eed4c99e8a1830d1ba24720731eac8b3df77df395d75e5e4eeb7f382fa2d863f7b35da5ce7af4b7536c1250b5e160a51d237969e30ce8f3449446d6af2a826075fa966e7c1f6b1cde4a67686670a8d7199d93574d01226cb"}, {0x22, 0x7, "6c9ba0ddd69f87d0b6cb6614a66cf488beda87798f53df6d6a24f568d837a6053d7dfa414063ab79e0fbdcdf467897aea20590467b2521"}, {0xe}]}}}}}}, 0x0) 15:37:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x44, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c4}, 0x20000804) pipe(0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffd4e) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r6 = syz_open_procfs(0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbd) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ff000000000008001f00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 1168.759492][ T8141] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1168.797675][ T8141] bond4 (uninitialized): Released all slaves 15:37:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.low\x00', 0x2, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) fallocate(r3, 0x0, 0x0, 0x10000101) [ 1168.834079][ T8142] bridge31: port 1(veth13) entered blocking state [ 1168.870023][ T8142] bridge31: port 1(veth13) entered disabled state [ 1168.877890][ T8142] device veth13 entered promiscuous mode [ 1168.927828][ T8122] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1168.954268][ T8122] CPU: 1 PID: 8122 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0 [ 1168.962877][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1168.972932][ T8122] Call Trace: [ 1168.976241][ T8122] dump_stack+0x18f/0x20d [ 1168.980587][ T8122] sysfs_warn_dup.cold+0x1c/0x2d [ 1168.985540][ T8122] sysfs_do_create_link_sd+0x11e/0x140 [ 1168.991010][ T8122] sysfs_create_link+0x5f/0xc0 [ 1168.995786][ T8122] device_add+0x6ff/0x1b00 [ 1169.000215][ T8122] ? device_check_offline+0x280/0x280 [ 1169.005597][ T8122] ? ieee80211_set_bitrate_flags+0x20b/0x5c0 [ 1169.011590][ T8122] wiphy_register+0x1d5b/0x2840 [ 1169.016459][ T8122] ? wiphy_unregister+0xc10/0xc10 [ 1169.021530][ T8122] ? default_device_exit_batch+0x3d0/0x3d0 [ 1169.027353][ T8122] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1169.033438][ T8122] ieee80211_register_hw+0x2291/0x3950 [ 1169.038923][ T8122] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1169.044328][ T8122] ? lock_downgrade+0x820/0x820 [ 1169.049189][ T8122] ? lock_is_held_type+0xb0/0xe0 [ 1169.054138][ T8122] ? memset+0x20/0x40 [ 1169.058128][ T8122] ? __hrtimer_init+0x12c/0x260 [ 1169.062994][ T8122] mac80211_hwsim_new_radio+0x2351/0x4540 [ 1169.068757][ T8122] ? hwsim_virtio_rx_work+0x350/0x350 [ 1169.074139][ T8122] ? memcpy+0x39/0x60 [ 1169.078132][ T8122] hwsim_new_radio_nl+0x93e/0xf8c [ 1169.083164][ T8122] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1169.089075][ T8122] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b3/0x310 [ 1169.096013][ T8122] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1bd/0x310 [ 1169.102957][ T8122] genl_rcv_msg+0x61d/0x9e0 [ 1169.107476][ T8122] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 1169.114449][ T8122] ? lock_release+0x8d0/0x8d0 [ 1169.119127][ T8122] ? __lockdep_free_key_range+0x110/0x110 [ 1169.124850][ T8122] netlink_rcv_skb+0x15a/0x430 [ 1169.129622][ T8122] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 1169.136565][ T8122] ? netlink_ack+0xa10/0xa10 [ 1169.141176][ T8122] genl_rcv+0x24/0x40 [ 1169.145182][ T8122] netlink_unicast+0x533/0x7d0 [ 1169.149956][ T8122] ? netlink_attachskb+0x810/0x810 [ 1169.155088][ T8122] ? _copy_from_iter_full+0x247/0x890 [ 1169.160505][ T8122] ? __phys_addr+0x9a/0x110 [ 1169.165040][ T8122] ? __phys_addr_symbol+0x2c/0x70 [ 1169.170079][ T8122] ? __check_object_size+0x171/0x3e4 [ 1169.175387][ T8122] netlink_sendmsg+0x856/0xd90 [ 1169.180177][ T8122] ? netlink_unicast+0x7d0/0x7d0 [ 1169.185165][ T8122] ? netlink_unicast+0x7d0/0x7d0 [ 1169.190120][ T8122] sock_sendmsg+0xcf/0x120 [ 1169.194555][ T8122] ____sys_sendmsg+0x6e8/0x810 [ 1169.199344][ T8122] ? kernel_sendmsg+0x50/0x50 [ 1169.204074][ T8122] ? do_recvmmsg+0x6d0/0x6d0 [ 1169.208689][ T8122] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1169.214690][ T8122] ? __lockdep_free_key_range+0x110/0x110 [ 1169.220428][ T8122] ___sys_sendmsg+0xf3/0x170 [ 1169.225042][ T8122] ? sendmsg_copy_msghdr+0x160/0x160 [ 1169.230338][ T8122] ? __fget_files+0x272/0x400 [ 1169.235085][ T8122] ? lock_downgrade+0x820/0x820 [ 1169.239976][ T8122] ? find_held_lock+0x2d/0x110 [ 1169.244786][ T8122] ? __might_fault+0x11f/0x1d0 [ 1169.249572][ T8122] ? __fget_files+0x294/0x400 [ 1169.254292][ T8122] ? __fget_light+0xea/0x280 [ 1169.258898][ T8122] __sys_sendmsg+0xe5/0x1b0 [ 1169.263414][ T8122] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1169.268474][ T8122] ? do_syscall_64+0x1c/0xe0 [ 1169.273076][ T8122] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 15:37:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0xff, 0x4) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000000c0)) unshare(0x16070000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x420882, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) read$char_usb(r5, &(0x7f0000000140)=""/104, 0x68) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)={0x18, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="c80000008b3477c7677b7ba30f1e07611c06d4e75b10917767fd63f66bdce6367af79ee23dc4287663c7b5a080d6b4ab6d3e3a0351350ca996efd29bc3beb52dd65fcf585c2f29d7375e664de7e365978e00", @ANYRES16=r6, @ANYBLOB="00012bbd70000400000009000000b40004801c0007800800040006000000080003000600000008000200090000000c00078008000100070000005400078008000200ff0100000800040051ee0000080001001100000008000400c0ffffff080004000300000008000400ff00000008000400060000000800040002000000080001001b00000008000300040000001400078008000400fcffffff0800040060a901000c00078008000300ba0d00001300010062726f6164636173742d6c696e6b0000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x4048020) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r7 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 1169.279106][ T8122] do_syscall_64+0x60/0xe0 [ 1169.283556][ T8122] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1169.289483][ T8122] RIP: 0033:0x45cb29 [ 1169.293372][ T8122] Code: Bad RIP value. [ 1169.297439][ T8122] RSP: 002b:00007fe05eadac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1169.305855][ T8122] RAX: ffffffffffffffda RBX: 00000000005025a0 RCX: 000000000045cb29 [ 1169.313829][ T8122] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 1169.321807][ T8122] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1169.329783][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1169.337752][ T8122] R13: 0000000000000a3c R14: 00000000004cd22e R15: 00007fe05eadb6d4 15:37:36 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3f, 0x10040) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000100)={0x5834bc27, 0xfffffbff, 0x0, 0xffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000020000000300000000000000000000000000000105000000080000000000000001000084ffffe9000000000002"], &(0x7f0000000340)=""/142, 0x5a, 0x8e, 0x8}, 0x20) [ 1169.472825][ T8145] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1169.515497][ T8156] bridge31: port 2(veth15) entered blocking state [ 1169.553855][ T8156] bridge31: port 2(veth15) entered disabled state [ 1169.586467][ T8156] device veth15 entered promiscuous mode [ 1169.617376][ T8133] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1169.658988][ T8182] BPF:[1] ARRAY (anon) [ 1169.665582][ T8133] CPU: 0 PID: 8133 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0 [ 1169.674204][ T8133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1169.684261][ T8133] Call Trace: [ 1169.687565][ T8133] dump_stack+0x18f/0x20d [ 1169.691916][ T8133] sysfs_warn_dup.cold+0x1c/0x2d [ 1169.696865][ T8133] sysfs_do_create_link_sd+0x11e/0x140 [ 1169.702343][ T8133] sysfs_create_link+0x5f/0xc0 [ 1169.707119][ T8133] device_add+0x6ff/0x1b00 [ 1169.711561][ T8133] ? device_check_offline+0x280/0x280 [ 1169.716943][ T8133] ? ieee80211_set_bitrate_flags+0x20b/0x5c0 [ 1169.722941][ T8133] wiphy_register+0x1d5b/0x2840 [ 1169.727834][ T8133] ? wiphy_unregister+0xc10/0xc10 [ 1169.732872][ T8133] ? default_device_exit_batch+0x3d0/0x3d0 [ 1169.738698][ T8133] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1169.738819][ T8182] BPF:type_id=2 index_type_id=3 nr_elems=0 [ 1169.744779][ T8133] ieee80211_register_hw+0x2291/0x3950 [ 1169.744818][ T8133] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1169.744845][ T8133] ? lock_downgrade+0x820/0x820 [ 1169.744864][ T8133] ? lock_is_held_type+0xb0/0xe0 [ 1169.744884][ T8133] ? memset+0x20/0x40 [ 1169.744905][ T8133] ? __hrtimer_init+0x12c/0x260 [ 1169.744931][ T8133] mac80211_hwsim_new_radio+0x2351/0x4540 [ 1169.744969][ T8133] ? hwsim_virtio_rx_work+0x350/0x350 [ 1169.744991][ T8133] ? memcpy+0x39/0x60 [ 1169.795197][ T8133] hwsim_new_radio_nl+0x93e/0xf8c [ 1169.800233][ T8133] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1169.806146][ T8133] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b3/0x310 [ 1169.807265][ T8182] BPF: [ 1169.813087][ T8133] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1bd/0x310 [ 1169.813111][ T8133] genl_rcv_msg+0x61d/0x9e0 [ 1169.813139][ T8133] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 1169.813169][ T8133] ? lock_release+0x8d0/0x8d0 [ 1169.813184][ T8133] ? __lockdep_free_key_range+0x110/0x110 [ 1169.813204][ T8133] netlink_rcv_skb+0x15a/0x430 [ 1169.813224][ T8133] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 1169.813240][ T8133] ? netlink_ack+0xa10/0xa10 [ 1169.813274][ T8133] genl_rcv+0x24/0x40 [ 1169.813295][ T8133] netlink_unicast+0x533/0x7d0 [ 1169.846220][ T8182] BPF:Invalid index [ 1169.849506][ T8133] ? netlink_attachskb+0x810/0x810 [ 1169.849531][ T8133] ? _copy_from_iter_full+0x247/0x890 [ 1169.849548][ T8133] ? __phys_addr+0x9a/0x110 [ 1169.849567][ T8133] ? __phys_addr_symbol+0x2c/0x70 [ 1169.893549][ T8133] ? __check_object_size+0x171/0x3e4 [ 1169.898846][ T8133] netlink_sendmsg+0x856/0xd90 [ 1169.901234][ T8182] BPF: [ 1169.901234][ T8182] [ 1169.903623][ T8133] ? netlink_unicast+0x7d0/0x7d0 [ 1169.903653][ T8133] ? netlink_unicast+0x7d0/0x7d0 [ 1169.903673][ T8133] sock_sendmsg+0xcf/0x120 [ 1169.903698][ T8133] ____sys_sendmsg+0x6e8/0x810 [ 1169.927535][ T8133] ? kernel_sendmsg+0x50/0x50 [ 1169.932214][ T8133] ? do_recvmmsg+0x6d0/0x6d0 [ 1169.936823][ T8133] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1169.942816][ T8133] ? __lockdep_free_key_range+0x110/0x110 [ 1169.948551][ T8133] ___sys_sendmsg+0xf3/0x170 [ 1169.953149][ T8133] ? sendmsg_copy_msghdr+0x160/0x160 [ 1169.958441][ T8133] ? __fget_files+0x272/0x400 [ 1169.963128][ T8133] ? lock_downgrade+0x820/0x820 [ 1169.967979][ T8133] ? find_held_lock+0x2d/0x110 [ 1169.972749][ T8133] ? __might_fault+0x11f/0x1d0 [ 1169.977560][ T8133] ? __fget_files+0x294/0x400 [ 1169.982278][ T8133] ? __fget_light+0xea/0x280 [ 1169.986910][ T8133] __sys_sendmsg+0xe5/0x1b0 [ 1169.991444][ T8133] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1169.996548][ T8133] ? kcov_ioctl+0x192/0x640 [ 1170.001078][ T8133] ? do_syscall_64+0x1c/0xe0 [ 1170.005678][ T8133] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1170.011669][ T8133] do_syscall_64+0x60/0xe0 [ 1170.016099][ T8133] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1170.021997][ T8133] RIP: 0033:0x45cb29 [ 1170.025886][ T8133] Code: Bad RIP value. [ 1170.029949][ T8133] RSP: 002b:00007fe05ea77c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1170.038363][ T8133] RAX: ffffffffffffffda RBX: 00000000005025a0 RCX: 000000000045cb29 [ 1170.046337][ T8133] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 1170.054313][ T8133] RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1170.062289][ T8133] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1170.070259][ T8133] R13: 0000000000000a3c R14: 00000000004cd22e R15: 00007fe05ea786d4 15:37:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3dc}, 0x16000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fb82, 0x0) dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x1, 0x0, 0x2, 0x3, 0x3f, "2680c1a7faf1f173439b728f7635eec022c50b504eb742dcb923a963b5305357a1e8ba640e046751dec53bb1a35544bf00d639e74b0d55e886d73266237eed", 0x2b}, 0x60) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x3e) socket$nl_route(0x10, 0x3, 0x0) [ 1170.355470][ T8195] BPF:[1] ARRAY (anon) [ 1170.365539][ T8195] BPF:type_id=2 index_type_id=3 nr_elems=0 [ 1170.378527][ T8195] BPF: [ 1170.386030][ T8195] BPF:Invalid index [ 1170.394684][ T8195] BPF: [ 1170.394684][ T8195] 15:37:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in=@remote}, 0x0, @in=@empty}}, 0xe8) r0 = open(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f0000000100)={0x2, &(0x7f0000000440)="9937c3e013fa43eda7d7fb46d5d55e1cd774efed7785f2e49a3e1462a40d006a028ec56d8b373b47769aacfe2763007dadb99c19e1f18e0713ade4d914f8d8f8eca97d03e50e8d4b18e0d7163cd4c8809ac4cf421e4a85960156173369677eea66437b098b8db6e29edee71fa30636212ae28d11aa621575703f0d7bda8dc4247162f01f22f9b2146472e6878be5fc5b1cd3c95e6dc8315a245da837aab292c8317217ef502ae5678a26ed52a767437c454fff96dd5f91e0ed14da94daa6a497d208dcd85916fa50de15f571ef230ffc9134e2ef47e212fd1d9a85d98bcf9bfe486cdd5897b3122c232164811e726b379a65a717c3d4a09855ed8b75ea8d4b2f514e269fffac23332b13a405a3ffd75b1460062b7992ae2ca737f5b9cd710d09f29c8884808fd4433b48e8f12650a709a4161487b548bb7d5bb22fabf6e1e49b96d775395d489df5aebed4d4a5473033143f3894cd4996f67b1e15b60b49167c5b89fc6e2254c1c31594fdef03b9be434e7bae3a89117e4c92e471b2affea7e95b42f8f1519a788a79019e1b7339709bd4aad6b76412257bc842dd199075d6bce860147b1c833574f8f0c9f6c496e487417ef38c793d85b882adfe5009941ef7ebec40dbddfec802a562a71e6fd0628d09d91769ebbac49a68ec8d7add8e65d5e82f4b381b0331e092aec977d2ab4b2b1d421255049bf88cfebe77b5743fa17fc631420edc358e14b7e5f7349978485c9ffa28d0677553a1336e57bd7981e5942e1920993523537707222105afb1c6e320065a82f59dfdcf3fd37b07ead43cb4bef5157de1fdbc744225fb5920612aae89249f67349c01b899831a43d18004ca6bd71f4c8f11373dce7664ea8c6a66eef04b7673f315395b0229f6a1fc0424c0d114e93a71c459f4e73ee29915b07c54a3f85cdae3dfa18c385edbb2134b325d4552aebcc6f25e3d5c9f591aee58f57181b7a232c6a11936ca1024325e43804acbbd877f192f2024966acca1563fb649d978fdea3df3733941b2de82ac33f4d4eff9f839639dcf280c4e73185fdae981a8b28eb8004c5e563d3be5742a64747c9e3432637fe90283b2ec111e1db8bce6cfc5c8206e6d167b29927ad1db3d101a657bd281e661c531b628df47e0897e77c91108677c472070118cfbacd44bb00f50fd5ef23507ca21f0a3559979550bd719650cd95182951161ce9ae6e66b917cfcafc39f1358cf2dcc3e88bd42a9dc192b710398df3d3dde75c430325b9974598a79cff703c85874a4ea1b1df2a40dc8d7e59c9e822c42b4a717e9d87af94b122c1831ba2381d54f4a0d3281f9447f479d7de77c055ce8d95c7156646405d451fa7d25c58787652ecbc80027eb1c86cfc679f71090977cb308081c7ca0fd29118bd26a4f85b67ded3be0cd51bb1dcec97fc6b15d4c8819986be968048e3596d2e1bd2eaa3b36c156470631aa0b0eecb5fa92c0aca105a28530b13d1bb33cafa7d20fa1a61f376fbbded0b1e9a23dcb19f37ce5be3cabfb2e1d43a2bcd5465e66a71449246bad28b21fdb04ce581f77cd526253638d2e94c8e06859cad91bd5d2085c74e90ee0964df75803345f2ec8307724802a1466f9029b23fb023f283d0b324b0b39bc32b4450196c9e0e3227c945fe5fcc494019797481ff205f12f58cbbdec637d9b3fa085d9a2700a3aa5a8d537cb7f655624396fd364500402fe0eea1fbcca768e3d9ab750c05be2cfcbf3c59c71f019dac0e36758c269fd2c0fdd58e4afb468d5ea8c64f1eba1322d1c52cc0ae8ac4d2e2642b64c1692e19dee7b131c2d82774fabc67538c404565c84a6178984f0f44b556c8c676b3990ed8b59b8738211dadbc22a38effd52945a69858820d0fade999370b16ebc535d1c9711bb12ecb6485c0cd3087c915c0197bfc7071935cc4971c90466ee044f2f32cc9c160184c6d34d8fb147b5f18677829501a498d17ce356245cbfe0712ade726f482dab4aa6668cda98b02b7b6bdc8bbd9f071c3bb38781dca3c6d2fd439e2c9332cc92bed732cc5e22883b9db96b5afd067231cac6b4ff3151025374895776cb22a485fa6b93be265205ad5b2292adde17395b2255a9b4cc1c0f7b81f2b77c43247e3f6b68f3e13335875273df5ca139d8b43e804e3695179e337bdbc31c2c792f7ee53ba3d0ce04768dc37f988b251c35189104aa88d4388422e68f29685b31d6a194af49777bb0833754679324ac745b1f326a92a272587532400c79f392847b115a8b1f7f941780ab913b0e0e7aeb609181c44a03d175a53ff1e495eb372d91a9c448df087f32204c6d20af5a3d1f8197a8c23067d9ef15e2f8f20d3ab4313dd3b439779b1ac6e03a90915bcc1b3d893ca99108e3118709b6f4cd384122ea24461b655f1e35a98fc2a1d6cb9bbda360842fe6226560612703f09567938730cf0fcea6b3d495967f485b56a8e8853efb99c9062580f9b729ee29a85e61baebe94a85665c11db68111da64561d6daf9d884643b30fdf479cb7da74478d08bfa0595a1a1feea76359c77d6ece6fec1d44e664a65a1f9f5087349f113839a8a340754d45c7b38c56ff0d5e34272f8334ff6721285c924385f17dbf9be64bf3489cc40cee6d3688cfebd671de23ea60fe45185fa07d94ea6d6cdcdc2231dacfdf5ff7dbe043c9aae97ebdd04f63bf270dd451b2db43c2a5decbf87b7a6b09ce696d7f519ba9c0c2a032804df4b8767a439ba5ea3af17112e8b774ef6e3ef78632df89c285fd964efe58f854751cfcf00eaf23e7ce8afd0e8390f7dc7f106fd675aba6208f5b96ff512a8ddf4770dea2988d467e04b890af9f1555fba85341b58ce6ba7e36f6cb15a9167546a9485ea1e5af2068638eeddee7f2ee31ae9e38d690cc66a433c6dfd5c1701071b61b0d3cd916c37606756fe1bc737efec5f435cc9e378d461b5f85f1f470d20a514a63079a26d62772a052f04e17f6c56d6f9ee3b58ce35de7a78aa586de66a4fd81a06f90c3e0bc01c1d687f2b313942e1fe6b203e6236c19dd8a8521c63914c5baf42c9330e9182688c11d233bad16d2e5e9723467fdacb772cb8dbe12413ee4bca5c1142b5095fac5c0e659f356911593e19ec1f4b15e9c32eab28af37098a05f26964c4be7a607262aada9425816add3c06fd9293b6865bf12e0308857c9e764c431de8f16224395d925f0af4a1cf02b1c11b665c89a057e6a4d0d92be6f116525059e10a1438ec527e3963475c22a2d5a7d443a10e6be65723877d41d0bae584a131ca90f55065a1ce5f831af19d83f437039ca03bde133ceb949b0f92469547c99ac57d41da8735f216493636c90375601b63ecf2c9d33ce19815ff25b2b8acd3e814dc32710f786d2424eb8eaec7a9a600ffa2e0acbf06939e1ba2072528dfbf3f6fa5ad9c6296cdb0c56555a5cff53a76d088e3edfda15280c3099d13df2692e719b99160949c6417f2bd1dd2530bffe6dd8284ef3314e90d2206534b4f004efd3da5451cc211d582f67dfa2da7b1ef5f63427d7e9c0c1142c5722a78a5cfade342aec16bc2854e1bc28f3d224e1333d9f4dd0a1cc1458795870ed3ec576a56fbd5c5ff38b768152f482822c9e08eb67d527d337412504264c9e98fadf171d691c7811df61ab63f5d97fb09c1c0e3ebfbeb2c99eb0ad496e007600f68ab6d1dbfd8048186681d35ddeafaca187ab09f98056d60b1473990837e9da0cb4eed94bb0d69732bb7b12a60c6f9190f954516dfae7f1f6ede0dd485252b07ef5e9a76386d36024703bd225ad50b8f666984a9a3b843076295c1b615bee60a694b006edce432ff0df22da534ff2f5f740dce62eab54f970cd83ff4d1fe5d0cf6ed59040b25e943a00c9b93143e5b493549bb208d607466e2f56b63f1e687c955dcea7a236df5c4e60baddf44fc97df58d63df3f3631d7938987a61303fd67e89edab24758ffd3db679d0ab27cbf01f2c2b70567646eaaec3676391c56751b227bc49f37a3cccdda5d7bd2bd78a4b546deaf76e69257e0778e749ba47e314997f0e0400d4ed4e51d2499c34a0d5a930111a6d89841b61a4d96c0cee0f08d0ece06bcb0980a21aa64c04c672f4cbdabf43a0f6c2d75c1bd55982db38a7a296b4ff933777e070a4cf8410ad6c589f16c98ae3969d13d9a8151584ef52be6a685124ae321f6f20f91e8e9787d8ff4bf5af0edfac1bd1c8d7fcd349d4c5bb3325e11820e1b676c7e8c1a784466318bd8c0bd3a0935903ae059502a7a039afb74581721509fa8f320d11c879c21b28563b2d994a16604aab51e2c1875d2ea34d9aabbf7e69240dacf47d0ed4fc9254ed5da9d194ed9202f813ed70ca62ddcd2e1f3c6f2c796d941b8b0771d43ce68742617f5ad8aca956bcba4b7ab2e8fff049b4c3fa3d97dbb117e6e9c9fe36647dd72037e89341def4b2f86a1218d132bbafa895877b70685e491b9a5c42823c36372b99cc6f21495bfed68fb89d462b3cde5b88b0b4778889587a12ef0fc238d0a3ab5875e27f33620c0990da59a68d74b9af7f74f8015675175a2e7d33b9cc3cb93481ccd44eca24dc81aa65c7280b569decc0fefb7368293b3b02b48573348bb44c34775e36c164f5e657a0b459cb8844c47c6a6e17cbc73ab04d99c0cafa0fba46aceaf7beadb2d23970a68a2fd7da0f61a57899b9f3457daa5ed5ee2c912ed2ad0eb88de154da5d4401564dc9ce91b1f954962a98f8b8eb3bb4fa0c5e761c297854862a4c06ce08826efcdc372ecc0f0cb65c4453cf174c81a05628922dfb88290c9a37308a3ecf911f82445f66a45456a92494b7b76df2f0aee4e3c3f9feacced5c1f8d2e6af49f8de02c0d347a388ea525615629c8527db7b6675c81db58732c872a723e0ad075ff3fa39ca091be43c2b677ae35320b05ddcd9778d46621de9c099e1818571d7bc339b8a21c9d50ca515ec97decf6d3e82cdae2c3a1cd7315c2f61f5be4ac4451094858fbe1bd622694bc8aed5173108c56b674d21b16b9f0d4e60010c2aa46f4fc6d288128865780b6a5b1d162ecdacf1c8082d622f23cfbe6f8425b58bbb1c7a7ea8a9b3e7c454b4c52e9944571bc21eeb869db0e18b1ebdcdf429849ca7be813e5c9a460d2d62aaea6a8f25dc38db194ae7bef86084083da50173a49d7a682f4227b356357a9533e98b045c3d37334d9ff47ed7b35401fd273e1126baaf81df607946c191271ee93e023a6566013b5069b33fa65b8a0507442b02bfb9583f73552e4f75b9676a4b2c060983d5f894f129f2319e48e13c1b25bea958d806181b70f4abaa49f50bb3713c094adfcf8d7219751dc6570000a671840de039cd43cd3b6af55776fa32b90de4d87d47a33f5800a447c88ebe827bdf2e47e237243a999fc50ddb966a1a1e824661578242fe9dcdf98b544e419af9d83fa9e83b0a4e57578f3038b9cc0f90bd6bf88ddfc6f71f2e031bde3f9c11882c23655aa84d021abea0df693926509a283c0bf44bd7580c1afe279555c7740f95e2293cd8af724cc0d51796d270e6adb63fbb66e91b25c704315445850728a4eb776c58369a7b35a3ecbd4d68654d559352d60adfa5eb36d96dd8bdddbaa0736f694f40346f83a94d46eb6d726b96bb63887ed1d605d9e0c97ec07c71419176e6643794c1a589b4736e5197429c37e640b97660c6caf6c7ff54b8a4a8f6c4e174690eeff928c76c74d949656ae0ea53fc87e7a96661a9bf34b133120dfe2dfb2bb407b82b4f033252396f51e472fbade359129a03e88117721753543eb354dbb863c8e7c95aff3238"}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000140)=0xfffffbff, 0x4) 15:37:37 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)="c6c76706dad7083fcc682d48db10eedf9324f0c492eb52e3", 0x0, 0x18}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x33) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) 15:37:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000140)='macvtap0\x00') r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f00000000c0)=0x5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000000)={0x0, @ctrl}) r5 = dup(r0) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) 15:37:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r3, @in={{0x2, 0x0, @rand_addr=0x40}}}, 0x9c) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000040)=r3, 0x4) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00000000c0)={0xfffff193, 0x1ff, 0xf25, 0x8, &(0x7f0000000080)=""/8, 0xff, &(0x7f0000000140)=""/255, 0xb2, &(0x7f0000000300)=""/178}) 15:37:38 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10d401, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x10000) 15:37:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0xc00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) dup(r5) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000000000004010000000000000000000000000003b7001c00fbff"]) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000200)={@bcast, @default}) 15:37:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_SEQ={0x6, 0xa, "09fd"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x44840) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mlockall(0x2) shmat(0x0, &(0x7f00003f9000/0x4000)=nil, 0x6000) 15:37:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x8) close(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = open(&(0x7f0000002000)='./bus\x00', 0x46042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 15:37:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000440)="9b93cbd2bcc6aeefe10f2dd55b2515ab087fc47912daf658d369ce9b8de69f4aa0556bb5ddc31e85c2564fc5e910d6600eb2c5bf2d93ccdcc5817e2910239c0f6f49fed40654d4eb405079cdb62d", 0x4e, r7) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x40443) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r8, @ANYBLOB="0000000038bd104c135ab7f8000000001465b11af5cf776b226ab9a8470ee10e0168b072c355d3622d0a1ed616af6f"], 0x34}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="001500000000000000000a00", @ANYRES32=r8, @ANYBLOB="19729d7aa53d78c13d5e3fc30722968aa7352ccb51710300000000000000feb694da"], 0x28}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x8009}}, 0x20}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 15:37:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x4}]}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) r5 = openat$cgroup_ro(r3, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xffffffff, 0x6000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000100)=0x2) [ 1171.594547][ T29] audit: type=1800 audit(1594136258.683:127): pid=8235 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15974 res=0 [ 1171.654021][ T8238] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1171.677359][ T29] audit: type=1800 audit(1594136258.763:128): pid=8235 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15974 res=0 [ 1171.721489][ T8246] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1171.737563][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:37:38 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000040)) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x9) 15:37:39 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000300)="32db96df", 0x4) bind(r3, &(0x7f0000000040)=@generic={0x11, "0000010000000000080044944eeba71a49f6e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce85f163ee340b7679501013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100ef030000000049740000000000365592548e5ecc326d3a09ffc2c65400000000000000000000000001"}, 0x80) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8194}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@ipv4={[], [], @local}, 0x4e20, 0x3ff, 0x4e22, 0x0, 0xa, 0x20, 0x20, 0x33, r5, r7}, {0xe3b, 0x8, 0xf3d, 0xb8000000000000, 0xfff, 0x0, 0x81, 0x5}, {0x6, 0x6, 0x2, 0xcbeb}, 0x5, 0x6e6bb4, 0x2, 0x0, 0x4bfb6f5fe578de02}, {{@in6=@dev={0xfe, 0x80, [], 0xf}, 0x4d2, 0x2b}, 0xa, @in6=@mcast1, 0x3500, 0x0, 0x2, 0x1f, 0x8, 0x7f}}, 0xe8) ioctl$int_out(r4, 0x3, &(0x7f0000000000)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="1b843100a6"], 0x5) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000180)={{0x4, @dev, 0x0, 0x0, 'ovf\x00'}, {@local}}, 0xffffffffffffff9d) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) splice(r0, 0x0, r2, 0x0, 0x10002, 0x0) 15:37:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x96, 0x2, 0x0, 0x0, 0x7, 0xfc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x40}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="f36faf22a52b"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x840) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000400006dd5686a538d497980000000005c", @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r8, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x8194}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', r3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000400100001000001000000000000000000007ba9fc16dfafdcdbef93dbdfe789a38a119cfc383265fe1aedff60193acf00fb574a75390b2ea0e1427aeb62b8afd09bef47c7aad0cd97929546b2541819d751751277089ae290b8b0299d7df8505fc5745689243075e095a23d3da52feb89b679756a48b667dfeb91cfc148c9dd4d5cca28f201f7285a", @ANYRES32=r9, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800600020000000000"], 0x3c}}, 0x0) [ 1172.512921][ T8272] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1172.632519][ T8266] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1172.653986][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:37:39 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x48, 0x0, 0x0, "3baca0f92c8d683822cb3ea0a6cc83999a2bb0d5ab50dbc9da34c7afb354688267e433a5ef4ec7fa06dce89f3294badd37b3"}], 0x48}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r0, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="7a7c630883afd462d44352c5a6b5d0d68f02d6759371b7bdc7f0837006011a4cd30e871f6811ecc4b67d0278d21f44eb83697f1ea2c0091c4ff7ec4955f5f5c6d382fdd8c9875b35822d4d64164663a41a0145e469b3d8dcc34639110fd1e85c3f9f1a705fc27cdf5e1ab2ba7f9df7445f3227406e20584ab259c0b46569", 0x7e}, {&(0x7f0000000140)="b922ec8d2fbe07f76997c46d1fd40d65897d53655711d34c1f2c7ae1ff092e4d02bcee68f2aa50d2b119d34f9d5afa4b374fc3f4e911d6a0d552bd0b8a427f22f475a68256ca31464a3b869ffe20f0ecb7de26e803c76b390017292936b19919137cd610c0dbbc7d", 0x68}, {&(0x7f0000000380)="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", 0xfd}, {&(0x7f0000000480)="8f9e5dc32542ea303b1651a8f26262eae636ff2d21f4ac389bda284602e6c420b115392b2ffc2090ab2acfde6a9bb64b353dba8040b6af4b56e13db21d01d4a8f945889b741004133beb4377d37e916615397690f3ebae6807d0bc2ca8dddb9ce6eb768d3aee25cdac14ae5d6461d08d48477b2e2b610b1fb1f61035c6460bfe2925f951394fa2b1e8df7e61c533a7dcc10f86d57176e5c5d7f047e7199590b4e170b145b47132ed8ed7321c5c251fd778d3a029c65184eb572c68d030276927641ac247635ca214", 0xc8}], 0x4, &(0x7f0000000280)}}, {{&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @multicast, 'dummy0\x00'}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)}, {&(0x7f00000005c0)="7ab1a8061ff9a88251d98e0bca12dcbf3bb4cc22331723f601fdb0f286ac6a270abdb855f01adb37bba1cd409e3bacbce6c899ccaac5e1305223e66724590c36b28740304a6471b8a022acb1c91b55a3d0aaf3", 0x53}], 0x2, &(0x7f0000000980)=[{0x1010, 0x84, 0x7f, "562da6371edd984e1e4d77b2352bfedeaadfa1aff0e614d316a7c17f9a7cd07d95e376c5a2b3a0ebeb38e696654c1d3cb1387f03b737c47612354362296f0ae2a899b712127ebcea6fad810a7249436834c8310e4644ee5c0906f5848b335a442fca760759bf8d68647f2fec5f37c65e30eb6818ec12deffdffce337d99a1bd42c829f2c6253a699b8ae5b17889bbe4a26503b7381d3cad627d7a274d45a6a06d4f137fae20135a934875778e2247f4174f4f73344775066a6f344a0935f9d150a1076df3af2c7344bb3cc8abe88de28ea196cafc6b462d11b85a002f7ae61d3bd7fee6a8d22a03725cc18bd551fe7744807b28d472aee613a65cdd4f1a00d9a755295669472958e76b92f78c543059ed5e78b8b8d699905a039cdb9b7febb9c3b6e04e49a21222b25bf9a24e28562067dc3056b71da4e7b13313bcd5a85fd3275dc677c2348e3ee46f09fde1874a5479c29d96ec15dd59e2822cb83df1a4289f0d03d42125a7fda9f81da7415f24894bbbfbd61b6c2c65d2490270cc8fb1db2d4bd26573db9bef2ad3d61450766e3634f5aad003781049daaed74a22387c5e343778a8b1533bca954899cd61cb01b7a8caa62ade0a7d825f11ba0ed089705eff2b9a8686631052798c24f6ac06bd871b634d6c864254af39c1ce4f3f4e5ecf8eb327dc851db4166c458843a78c481ef1df2042b9cb4268cfc87cd7c11cfd1907a68005b1098037d6c0477a9942c55d9bda96ab85d95704681fc669aa0cf00bef3c60166c2490b66453f747a769ec65469e634e514ed4408924a19a65a940da337c828772311fdfb2cdc4d90702b30f1c6d1fc0c20c62f594a5b1946ff6ebffb744360f84b59acf3eb9fd500afddf9ed6892802e29272e9681610074f0e570de783184601456adb2960a278c58e538cfeb53c0dd8f0130d128f09f8ab411498cfc076cc07ff46c744b2bf8e7eb66f0faac7586d0cf048fc6b04a0d280976f44b4503b2bc6d6d103da520070025cff536db5ad2957b4431e5247cfa2804db3f04f45560381b0bbf02a2f8336c8fb230124926a5fe9c1cb1693e67cd5895e3ca56e154ede62dd15e5a1354ffb0a091104584729b45d260ffa970b1a40b08324260e93389a4ab24cabcfa4d8724227ef7ebd76075c71a251b26ece6426c28d77284d45851c207b4256ad5ab086ec5410955abea566fa112733760fab03f317ec5a6445b37907fb554a61379d4df89050c94e200ceee61e55e4d2cb9588dfe6a7a345b6c761a504b5353551b85e2f953eceda17e9df53b63d1c1e4d1d881125617adab53d0e42672f077c2c7cfb7ff5a58e5b5d6762e1e5492949616aed7022defe0cae9b8992b4fde2f478abe231a520baf0a0364687e34cb34cecc2dcffb4282c9f302b20f4f3a37df2385c1018fe83e8f5ea25698ba20a969f0179a56f35596748ad3b2bb3159c506f2da3ee909b15d57004302cd8e06f74f75b3420747a68103ff2ddb0176d888986cbf1b6476e0a3f894c0fceecaf51866d8de417c0a0e76e31d5529c7a25c8bdf7f7121ba30aac78f77d884ed762e4021f1a2271a3e96d284bdac456608a490e03bd8a3456c8758824fae149426f0fcd5a3791374ae8ac3005ae46690386d4ca48da133ce2bc5bfe41b90528b079553e69e6fc1df7706f623b6c9f5c107385ffe9d326148ad4348de7fa860f0aa56cc3ad2db0ecf25be55cd2916cec187cb477e336b175eb5fb1a58734b18e1c159e5609048ffae088a3083e18f6379bf2ce6613ff55986b433116d1db3e041107f0b5fd0c2107613d8743b96cb62d58c2694f494e8ff85bde34f42ea10a482c0c120755000034760fdfca35ab3ff6f3a9e439c707db367d63cdc5c5ed1c25746a8bdad1466e82040b6e4984ef5f817f989f7bb5e0c4ad12e3b20bf0ac353c6e354c5c9474ccab69efb00a9e464bfb1bed5885476f152c7ab4fdb57f758f118c6084e0091e0e4ac77aee742b6d953bfb9f0acf6232a9e35f2a6759b60d0ab81b55393388ad00e5ca69e49933d6c52593f2c002891a7dd8721805ca20d0c3996d37b70bff94e7193c772ea8d3ab638dfa6fffcdfb3a6bb97d4325338cef70430a7e61874378cf816c8303076c5ea65682c14ad3b7c162bf901f478d1017e859edd91edcb3217776cddcce1bdc1ee9706b400f6cd279f7a0fd06bbe29120cf9812a1fba2b0b43c001b3adc41a2ca2aacfd19ff068000e231e996bad07a6be1c7ea306d312689e4cafa95906cf5f10e011917d87e132d66877087f45433aa48eb237a3f2e8d2f8633e26c4b0aa93bc7e851fa85ab8a48535d367fc5201ece7324db7b525fe07b8f89a6e2c52da85d25a68f04fa0bbc0ad455b8d1ba77c02b2c71db5d15684d465a6a944688992f08a974edd413213aaac8b3f066e2ec16bc159c888804ef1cbb8c11b1ef404194e5372423b645bac989c93dd1a1ff5393c4e4b5ecfa3d59f59c71a6a229832ad1c34883c9ef38ba6166a5b24db87154b0617756dfd7ffb4baa3ef5a200f8182f9af73f8dd73c8f8bfd946024af26aa606521de425c803bc9a9356ea0ce2639e73fe1ce814c719dee9622a176fdce05386544846c28b70081b0ffbd2ca9caef8f960938dbaa8a671207c22501e3bbc623833f52f1919cdc57a3424d7b507cbbdb0e9d791ad8cc9887d0d17e202275079abb373e3f46401eaab8a8cd95d1649facb4eb566decfb52957bbb1fcfd64a89b1ac4829a010aefcb521a9cd861172b3f572facac1a7ad8cb5911f36d5e46428945644507aa2a30b7a5f7463293a061712252b72189e10d4c4e21d806d6afa4bfc72406b394a8a65ec8c7c490b8b0161ac128f0e044f7c99f9caf7fd0c109834927dc8b63d8f322c167724c702c3251b52b75871b59afda88cf288c517235c9a263bd48d130847fb88da6e27279799b3e4179d018542595fee6f64cd43d2215e07df4411766865e6d47a8f386aa62d44cb23cbacb081d5f27c97dbf9bf20229bf10d1ba8156c97559a2a7f2e02cec57888111b4506f1886903f71e521ee70fa6cde8071ea33993f7a3cb90d332cee790333d65070fdf37a81eb9dcc667017e6b466bd06afa73bf0dbb34c86ac828dd1ae9c28c59ba1d988f2f8c8921d60556b5ee9900ad026499955fadf45e5c9a940fbb50d5c97023fc5bafff9547cb258c0804fa577829cec30edc7cdbb8ef99bdd5d1cecca85b89eb45259ad2d7d626337e645fdaadc3d5a5016e5e70a041759a2b241c1516947fc245d6c20263cd70f1e686131121f936e8ef7345b4a3e40c2875e979ae16c97763f394256e4b41478dd3ef3362fcd12817f8b8b68aceefdc04ce7b3c6781b069f30cfd3fd6b413f2bb784be29938aa307c219dba8d7ef9b7395136e84da87f51fc23532f8aa4de287826ddaaf05ea2862d52133866bf204520f7e5aeb7886b15d6818ec56d07d000d420f577c1d22fc7dfb8581e77086f31f00d0250a3ac1485dbd2157d59c94e83ef009e28147deb57faef3372da047253c032c38b131b86cefc2165312c1581d2a12fcaf38e1410b041a71457cc2b182fc538bcf050c4642520598a989bab8f39236f8119f86db80a85a166cf6758e848d929f05f299b5470625a928e944685a69e2e81696d8fb9378a3ca44a252c9ed488040cb1852abf090bacd291c5210ede5824e729e5e86153dc5080106e79d743a939e67e41664b4dc210c2afb397df8710974c43f2a510e29609832206d877390d0e30a4534fd2a8d808142580a5a155525f8d0a7561b1c74d85fdc156b23b78db5d3d7bac76a0fbe51bc27706a99141a328d629c02df0d0fcabfc1dfdd7adfe459f43c024725305b95c503418362992cde11b1df8b918acdb76fc94ac5c9813fc7812b96e1a6f74c1fde751c4f8ec81f98d1bcbaab75519c59fecf6055ee36862d46c30fa9ef448586061f01e332c979a0ba48d5a4b382432db8d520364d36c540c310d73b38b5199b52ef0f03e5e3ffdc7c3f00c2bffee05c20886edf1e019b5597f5633ddb2b5933a3c3a92f1522adc8cfe642aaff88318e829ae49b4bbccb329f3b4d240714c9802ea52e8459f0bc10e98c02c043cf14e316e3350f50c7ab335b462598624d3276ccc8686d449691f942142c64c85ba974c4dc8c964b1c9cb3bd93c213ed914bae1ab6b0d98fac84ccb909f777d9eb7f39dd24c45f58696101f653eab7097e4ddf9ead3d111c969779081dcf9cea2cf265717ddb311ed63e303c969c6780a15cf2ea586388b841139d922031710a19cc6d4364d10e43d0d78de3bd35415cc2c9b536559fdd55eb888584b2e022a65d301b17fd8f98e651da59c5b473a6ed113f64759e71c51e8c36df235468b5e0b8541cd2708f562911f71c153d60b92fafc0f6af3359c6ec381497f4d0e6b438df45da7910865ab201763997c4f288fd419dca380c459d9eede3b3442ec228b4bf6eefed252abd18d7934b16dc25c80749f4ce1bf0379d59baaa9349e21f113beaf10ccb7f2b224a8d16d2c46a66c865691676ade13e9d74209eeb365be248292b5643bf219e4e5dba3023349d206c3cb61c7b64d86e3257d972e5d6257e3bb522ded601cf0ab494ad677a735d52bcb767bd73a7c9882546740c2700e3fca773f589accf0fb397403606e7755ce7ab70b86b8884c3cf7a226e1354f08fc0145e6c9d798716231abd4a457cc196fa055301f3051e6970f222032ffc1ba5300531aac89f2dc0543b465e43b80aca360fad2cc83281feb00e1e48aac8d8dfd8e60acbf9cfc61f99380d62655b6b048ac5f8ce555bf98b03c9243bb220727d69b61b307f56af583292d4543eb6d42b5a0addce5ab1cefc2900a118b41f7a279ed5c6e7a615468acf459ef5104288ad2ffa4c951e94c064ae3044f855d6c90705664096e79901828c7a4a3f632e16837ff95cf2ab84f8edb5f83f19cb19bf375d642b41a9236ea9e7bf09f30cce3bfbcde088f7a9abae6a2c5f4b26a6b99eafb21b1860ec8250245fc331e327b9cac2f7ea48cfa394537fe93333c4f2bff16cd4c196fff248ad591327e3937019b8db36c9829c3c3c16b4373fb154b35d9a9123e42245677472f99a8fc850336c92a81cc0b68e9db2e791590c7c59fbd5e83c4b3019799a1b9762fd03eee5d69e860e1125b8c471301565ecff2385f7fa1e4b37212328d97d498923ea1b0e8587e4f61456c75aa4e4e5112d511f0b23620b3cd14ab321db2d224e4252129834d94ceae0be8587ee5558a041bb8db38d15236f5168c9926f97a546cf5031cb21fdabbb9002a7ee611fa557101b683df2b74cd8ac34a8cbd298aa139acecfd254e1f5d50f64be200fb52396373179b48646b05b1cf9db79f4652ac99c66ec52096b13f56827742ed79a638ec1d3f3c0de5e15ad1b2105af1352c5f1be46ed73f8275d11d90177a37b67210b8b7af15679463f3706fbec61723dfb2168dbed28cf36aaed4deb5befc91f3dfb2ee103c48744408f5f90b6303b5cc2ab28994283416132cfe7cbf884f21edf66dd2f62024ac71e46127f82464df8564870aa396902c99118508a33263df7d6ba7b55ed3afa912d250b55f19fe9d2b5394c63af52c33e2c313c8e778b545d1be25c60aacd610db915c0fb7a8f57a464e1d84f2df30ee819ae354a272eee5922a91fe38bf3eba47b1561ab4317350077e7e9e46f96e4c6d2a6d379f2f38d9184d3244be783e1df1984bac65c6445563fe2ebd6368a071ef3d045598eea0eb4d9c909e16f3238c262196bb8ce6bc7e91ce0090c1366fee4d19"}, {0xa0, 0x117, 0xd26, "da76eba86045320c6da0108ca956e0e24a5320d179ff3961d10a82770b3f283d26dd66d08664c386219439dce60d42b8e52174879985059d48eccabee6c6e453342de07817ebbeaddaf67f29eb0b2e21bf3a2551fa50bbe7254ac9d8831feecb69d5ac4fc82dfaa9ab0e1614a33a610978d4949e5c1d49f52d1640e45c8cdab38ab7a777155f80196f"}, {0x20, 0x19c, 0x220b, "bd515fd2d3340df6873009c27d246932"}, {0x1010, 0x119, 0x1, "80c1a11953908ff9308eff3b3e1969bce20bfefd73546d41c6d2ec9fa43305e3ab99df6819e7989b3af2a8e55490eebfe81b40b99193bac913fe48df21c13972f8b7d303d0b613a061e4bcd8dca5f23f649de2fdb4ab9cfb5aa837c7e1f442462d5ea70384a4459f454e4f04ef6e309e7fb37ea348e5d060beee6533e948c9513c2d5981561c221a289a40f22698f3773ac9a808ae2dbd0567c8064a71909122741febaf36d90073c285b2aa9510c167dfc7d861569655ace13618aa8a04862a8b9d8ac00425e083d64e81c98da9bf20fec158c9c97884c1f0c6b6b523369eafa2066529d38585d91387a4d2e39cdc00df415b58b0c1a74d7ef8e3583db028eb0f862e25d9c7065eca298f5b5e55dd8efbab1535e08e85bb2d1252130325911e02b3c923c47d004351a16448af5cdbfa5df2e8fded0bc6c88abc8d8b3af602dda57b46d1b8ca52f9835aaf9ff9d5f2acc2003552a116b082ecce0e2a0f7cd52a187deb15417224da184b41827346ba869b915dd6c0e70de510348c545a885dd18acd4f0e415fd9f4ece410fcee752e85d0cefb5a111752920976b39a58a8d306b8fed167a7843847dfddb4aeaab6c29e90143077598cb9e3be16a5842494492238e949506c96be92d2bf9de830eec80d4c20d667a611679968f7c2096213af5c69eb8c16af8f5dd7f51ea62fcc0ef44b8998858f15dfb3a7994dadf5cd3458c4262a0a33dbcfaf72b753a432206baad1961e9c43c9142910d79ebe2db77c9ed2bc11ecfa916d683845e4bac92963a6aa8ebeb5588879e51602c25e08004b5b97f12e98060eab5d259a5df19b82c1260b9f239faf0466eb6ab68e03a5628934736e641a89e23110e010ec0a4d437839b736177b5f69afb4eaad04ebe5b6792a65207bfa77bd588247d8b81ae0e4494746eccb86e1a2fb28ecf234c431bd28e7273da3d1cb1025b8b376c54e903f4be737a39afb8612447f93ef17a595a3edfcf0fd3818b41c9e2cfe310e1b95f35433c9d6b78d92353df67d8038f38630f940053aa5a12d83c92c9033a8eae9a1568ae92612f43b436d95c4a0fb6817c05d31696b7448bc681653762c4cf842058e9c378bfe8b60c9307c91a9d0fd2f37a796366f21dfa168a998ff5e58674bd7779d9d9314dab573152e59fffc99ddffc71248b1f3e789de0d53f89da69542a4dc4c3bd84d8648c7b5f8dc1e7eb62e4baaad3692cd4879760ac5b59445ea61fb3f172f1f8399fa1767ec3ef363ff0d72d5973b6bff3b3fdd6af2058c114d9a42917388580979e88384210d03654454d6e726edc1339c3eabf5f4ab46a2d3bd07b0d5a92772f673e2c1a7a48285f05e0c147600b58fb03df9371e98de309a18dc5d7398825a0ed99b29833d33bd62751d5025bd9626c5cef10f32e2619034e1fb5f7f10d435ffb345d65c3507e7434391745c42e8f8799cbf7cb474a154aa13ce82fbc17e9beca14921f9118cd2d11cd64eb1d521d54ef8f688c34e5046b92e1d00b4e257458886b3d04301f72162ca5f86d406891f2a8a45d0ed2477a62b65ecf4139be03783fd6892b4ec464a9b6276fda07265e38062187728b02fc3b0d79af67c43542e11118ea01a9c545273a1dd9911d3410b7e2b6880a03122ae2d2871198025fa2058c3b8c280f5c7ea194ee69d2865b6f0108793e1a9bc6bf401c616fdf3c61060e2a1a5975fab3a4a4736463c23430d41fbd8a4f3a2b8908cd234d645ccac1730ee19ecad22cc9cca16509107c394147cd2cc321e705cf54d9d47bf659712881d0767ca19fb241726c2f20ae287bcb4a50110d8fd89d2fb5678828f79ac00dde47f8ce03e0fa38c47ea4d00cb73f9fa9750083f75202a20a768c4710a17888cae688435ec05438743ccea285e06ee88f8730c50df6077a9e20a0320e970fb187d5a6ef7da948e20e0bdebc31d5d7f1029f3eb13bc08e1393f8ca1f112352c71f0434a939409d1802df2e87e312deb6433d079bb269f79f4bb9e4a197a37a5e71cc1f14196da9f2dbb8b2cf083613219e1a936d10cba1d9b5d2cbe2a32d801b33d38d83c8cbdc83a21234d71c333859358da59ab6a4cf3f024ab42765e6b43c7a73c13409131961b909a45096e8137ac536fcb83dfb3aeddea6458e2058f1b9d8e645650542b74c13aa2742ee5525845255bb35cbfc542c7ebe3caa2df8caf2faa19e4d27fa20c58ebb48497057962908d2179c3ffd6eed4265fc7ab7463f5540870eb31c3b254e8821d861597c7aeae517d599467cf66d4bc25c74aa86fda2488acb8e2ac14675fed259c787d2c58f392191aeaab4f36e3caf38c6ebfdfdb1bfccb3c0c0cce95b40a5c63f0a2e75701c0e93ad256e359173a5b10e832138431edb98349fe27979a5686fdd0ed81c0c412a607c12fbb514559217820041f42699cdf12c986f9016837bfa3bbcba53ee4339f504f643ced8bebf8be43ee0687b4a56968f9c606a04563c689dc8731ad4e45d3a493e1c2544448b80c5e8a937b580416288e03d47b98f6384bf60b6b460bad15f838fa109669c301b87121ab63b827c6014bbb6b008d0e212a06c6229af12a83bed8753832992a208aca64b291927ea70e26e5cb73b8eb76f1cf6e08787226d4a30aa21fa8a185cadcebaca950cbb6b84873908ce78c97ae30a9d1642380259984b56c7f10bed770b415257e0a3c731ef958f94fdb7dce18f457e1b8d9726b050bb22d37ee3c1ccecd6d082b73056a451f27d79a6a9de324836eee219c7da4f90963aa76d179a55aa7e641e89a3d1f809ee255bddb320344e4967e832f6b5d87f2ced1683241f5d9b0b5f1f7162e287e32e45836bd1a7dd477ef71d96abb841e258f9940fb5ce3aedf04142d19c91037153b6d80f00fd075a98fbfbcad5d013be834492170d8c4b4637dcf0c1e8343855284f5c24bb88c10737ba4a73fbb9381726c97ae5b25395197887209ea412d3dc34f090b53c334702af94b9b5ee4024a2aedda93a85e1d4459f65e89a606d77d25f73517e1e344f9f8c13e04ee75276a150839d254d27061500f368094ce990a6b045779d7fc725c07ba8f870e975eece1f82fe82402dc95c368bbd70ce2e35737ce64811f715aa2e46435b6d9c583c3d986f73e6e26c3ab6e2bdec94524295cdcb67712d5bf9f41d3251399dc2c57396b49318ba1a62590b3a3755a9f2c369a94ff9d661c3c9d59c9539d48f9d718635088c7b24df7768dbcaa03f50a5775086823b731da52e3e07fcd86d4f12c7017f844f6bfc649314896adae01264a3c14046e2d4a89a79768702e220df1522294d5b7c1e24d37b14b5361822c5be425fc7b397338f4bfebc22e1fba1f572f15d2d1a4125d509c7c40ceb48dc7f362fb2ad92ec1552c9e96683a6462a495531ccfb51f08cc80a4e4fc6b1a6da1bd163c28b5d073396062f49b681732d072be5157e2e03c8a13021cfd266b6c201a8d3f6c13c7c4a3a00f79ce653171344932b78661daee0c23a53b368e910e8681907dcc376913decb06d5f3553f9001496bbdae12493588d0ac2f5457f8a31dd64f4a519265990d096fbe19e7945c4fcd0a32414dc1368ba3380b6bc7d17e114e631c378a28233250311cfafcabcb9f72af517f6b129989ab80ad8ac7c0b5201211ac0ef94e02d2f1ca8e16de1431de6d84d22ee3d5d7608b7e81481d6125393c1ad055792eed7efdca0b283bc53bede8e0034a8b14796e95d76ecbc7424cd3e868662a0e3f25026d201125cf8e713a24f59de35f2250312df153fae60a718027d9d96f53aae153840db4587810c1ac5d5097ae954d7fcf5e99b48c24da201c12a0fc14a7ecec904d477246f67207ca041cd86a59ed5b6c01be53d2c5c3bb173a20b0dc7d97f1d0f0679f34f8cd95fcfca9fa93d4703c67b03c6826028bc025cfe37529b269c20d844208370ee680b1b5343c2c49c14dbd0fe6048182a36b6832b0616910b14356fdfedbf0d0fc8858d6d127f6be8166925913dd8a26da7510c49c0b2e35e3256e484ac280afdb5a924d694a18572bdaa378175a42b9546ed00ba31e662d803cf39d29d84a9cbba91f10547d21de41e03b767458c8d23eba46455de86b6e434654c178b8ed984d163eff587f5f6f05feeb4c9f69a8d37e9097846109a1528d6cdad9c559c428081862d34a6dae26148d2e8b365808b9fa3c1c91824d12e80885738e4a5ce2acdef9784c2772cdb9b94a3c2cc98740fb833afb2dff47b1981b43880b98268e362768506a57ef65fb86637274d4630a4e656f531238d2af6348aa9ccaa5d7d03d355b32e3203b580aeff4d60fa03f2fa37b079a3ef4a050f40e64eecd88b46ab3f3d7b59bea37c343febe66fb39346a81de8309e8549e5e5fd26032982e0732cab7dcbe7c824a1d776b6bf51b789e197952f830e298badc7df138e312373142d716a43bdb3de56c28640be02ca9959f1c1accf8822d8c08490173316d926e55739dde2df596dc537e08cdf1d46e037fae4e6e294fac6678ad72d7f0b6dbb548bc055dfd1b568fec772aeef8595a0e77254e42547ca3a0e6dd14938bf9965e93cdf4e724fc95cdd92761771b4bfd152325f9b2e1e0b352810ddebcb85d3eef57cf6cbe5ef0cbe3a7d3e94c71795f920c99a7a7902944c64310ddd9e87f292ddc1a1012cca4a9e767fce31708367f31fbaa5d516ed3e035e244f67f421d81e736a1aa460bb6165ef93d507a66ac215a792d6e0a12d54bc7b55a35ceaecd9b6d2c3717db7fb3e2e772cf9c39116e00550abd8adcaca2f1abfc873a78ef3823afad00f904ae641ec5049ecbaf47c917b8b3e5437ed7ec3da6f51d6bba09de0899659ba473a2c9aa234a8aaf93cd454a1d942fe9aea2ca01c51236a377153b96efb35a08e0bb939ac5bea488155007101d6f9d2bd568a03abdbd6cb41d8b2231a5aa32cf6d52a9fac47e28be4f09ff525e31d2883a2d82e5003b1c6db5389403eaae713c37b23a5f12c2860cca0957c7e6c2d65f0343bffa6d36343fc32636d223ba15b10a7adb97f3ed579e0c641ed832e6d6572da44ff1bccf6f8257a6539262dedaa3d59d9546aeee9b8f33ac0ca5c2e2b9dba5730bfdc7f71580d886fed2b091a096be756ac5b0c33bbea7438331a5bc92a66aedb785924bba793804b645d0923f19bdc0cddd4ab6eb7c10879077525228079342a2046eb91203b97cd07e816ca7bdf819c12400eaf3dcd2b64213721b441eae5bf66709831ceae12bfc4c7ce74b0ca72a24141f3c7da298928ddab068065338c2534d7642afdc6b28873952f5854267b0a585a6e62278954a34b7d0c1c5fec7f08036030d7f9befbd9c6da7d2ceb0b630c45e387f44e95e8aa7978298fcdf65875ea0d8c0345efc80e40c0fa3c7335c1f9a4fe6e46023381c81454949095706871e7b7ed001ea2905fb7d6c00dbbe7b2a391ccae331e79ea2a368b687d78c85b650e8c7bbcd584791ebfbfd914e783a963eefa49ae062f251e591df49394826e8ba3008c0a014a7276cb00dc0cca5720e979fec8f2ed2826e83e8417aef908791a002bf8fac6bbe2e0877aef4fc6e13495800feac098d69659e2bf7afdab2d0ce6488d95b20c28ba051b03fa9321f9e613edddad81f56fb502c51563a7227b84a1cd011a677f691d1b53d87b1610a019ce11852140d5e24354040ed3838031953ee4c7bc451dd817352ce1d6c6538a1919ba4808dbd13683407ba02d7bb7d52803189716f22bbff9a20964bdda1dc9af821235e7c484aae0490027cadce9d9cfd5a570d53997eae5a4d26ef7c1977aab081"}, {0xc0, 0x111, 0x6, "3e8815ebfe0f3a58e751e71f32a58e1627c30f3ebf1563aa4ec797619e58d1bed3f052bbfa90ac26d9daa4882824084cf4fa43c3017fad1d605eac79c6ff9f97e417f949c200536f5c118578d501e6c61c1ec52e1dd74ff15b1ee017cbd3ca5968d0a2e21e4720f8132de21368374ebc984599273a93154b141ac8050fd1f76cd2509c0c56e6d0289551575bb296fce3965430e785276686fd23887d2148088fb0b8f44da4a050d16517c6dbf4b3"}, {0xb8, 0x100, 0x10001, "2494c486c5e9618b139497f9a4279d789f3f658184a14ee363a7779550c6ef11bb4d8d74d1fe5231d99fee4697660e59b372353ee3f801f0354e4282003e2fcc2ec8e3121ee8b57ae0682ae684f17a417e0e9196ff2b7dee3f45af5d48b99cd1b071c7ca2827120729969d5fee23dfacc41846ab687586074c71564a779086fc13c00a6e6e51554c00cae27dfd7d1e4a88b274436b9f72a3932382dfca37a043af"}], 0x2258}}, {{&(0x7f0000000680)=@rc, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000000780)="b3657102c6d05ca8e00a39210eecbbd8751f33f9f91797f5e16c81e16b9cd6ec29c1ef72c0dfb73977c2aba4f5d35f5767d3c6df9bd877d327dbc18887e7f53368e2b68699f7fc8c1ecc3ea6a59ffcdbf3812b7920ab718646c6fe8164504a57312cc4e574c66e1c802975d275d37c46f373f06bb6d8bf13759badc347a6f73de5a38c03cafc82605c3375800699ac746d7de9b3752b1c30040a893c8efdc5900c4ea11bb22f8a4eee1b7203ce6612ae8daab2164b99d7e6fa40bf7739ceb7", 0xbf}, {&(0x7f0000000840)="4a925d1506c8efa221b8c1be6b6b295ac9a94927164323a449ccae57ca2905ab6d0e315eea6bcdf6b04cc577a30c703fb10acef1a928888f9133bc38b1888863e2cdaa55df31ade86291e2b0ecd2561504cad485a44cfb9c04c9cd34c5957dfe485701450b9239a46e018f88fc3598a387ef1257c3cf33c085abf7653071dce0a9c8c562f4969855f898d77942141380ad8a51f35fcc2f01ea86c69db22abd07e963c8dc43b7206e019297b065641f373b96dde198beb98d7f5ba39e69ce9e4e268668996e13435d20d42acda41ac663", 0xd0}, {&(0x7f0000002c00)="59ac3a55a9d716d0d8fec4", 0xb}, {&(0x7f0000002c40)="9c7421bf126021e5002bc56c66b4a01228e09c90156282b36ba7f6048a4ecd0f349aede7ba4aa1b854c7ffbdc998a55ebf635c6737a18e90685028cdc51f9c8f078c4128067972e6cccdec879757cd8f802c1913644b352196d1b6f1e58a7fd1480af96f9867ce3fee7b76d48238f92aacf5", 0x72}, {&(0x7f0000002cc0)="5a4486c280059099966f5bb032490bac986df24e405dbbc2a83d08b6c6539b58920387ebff0da747bd4b18ca5ab1ca6762564364762e06742104fce77f33009d3914d4fe37e238f67a8582735aad9b40d76822f97281762849f100e27a5fd22423a2506c2f6d9c8e250eaafc75951a10816431752f02f5d1a2652dc15ee06d95ee05e6a8bb20000cfc7cea5ecd08e6cb0794507cb6cdb3f24566c29247e6a806d95fa34a51751d9e93788687ef4fb8113ed755283f243cf7fe3e38c50c5a005d56f765fffbbe3ca36c24a928bce5bdc46a170f9601fc9c3a43084f0532a9712d1002ae74ca927c", 0xe7}, {&(0x7f0000002dc0)="e941afb7680180be39f0fde3657e903d951ce1e1e069d9274578bd33522d53838b88c2fb9957897cfc4781ec71b9f35f18a4d8488d2f50e239a0a60b87c06e164c3914b0be684f43504c63a31918876e55e6bc04d953f6f489009c28b78ed703d1a73c5f64ad869ca6b6af24b48f0b7e4f57f8fffa97dcdc31ef2d3817f3269249022886f10bc991a3dff52ca23531acfebc5439644dd0061029da5f74d2b24b2df324537606ebe79dbe22fe34148da9063c512cd515ccf11a161968f771f92eca8a6f8b9dc875daf23afbb7d93cd5cf0e6468880e719fbe33f8c6a9f2db4624c5a15f7b6d44bb76cc90cd9fd8020631fab4826820126e422e", 0xf9}], 0x6, &(0x7f0000002f40)=[{0x1010, 0x117, 0xffffffff, "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"}], 0x1010}}, {{&(0x7f0000003f80)=@ethernet={0x306, @multicast}, 0x80, &(0x7f0000004180)=[{&(0x7f0000004000)="a15b726505965428bd9b4f6d0c042201c11884f721033b580ac88564d3de253280dae7c3a124b44d9d4f6096a128280fe350330dc3a177f56c3896b40b902ccf86e2bebf98bf80867f047500b7bce54e7847f94fec2506864aa94f053033701f4ca968c578ca634a73d01fc81418b76d8eed1d3486f8d381e78b2a22f0749a4f1c3b67260bc670458a18b601b270b9ac6ddf1ade97d07561ebfb71bb15734231a29c0cd24c85175e3bef969f53132c4ee3ddd3782953d2ec74092e0c967489b7b5023766b735b7a426b0ab1c0c9e4ff54c03d278608339ab5a142a4591754a21df90a0245d80c593490b193f318130af45233c6e5ce8", 0xf6}, {&(0x7f0000004100)="7d49204b87c76b775b5af277a226a6fcb5c726a0516c61f2295f5323fe4d88508495192957a3c1fb7d043aafe3a0081840ca4572010a5b094a77fabd84db3b8558548e03dcc666fa5dafde9e2ea8097e90c7d489d3b58ec7ed7f0bcdab3e7dfcc07cc854334d5f8858018afb69501cfcdff193f44fcb", 0x76}], 0x2}}, {{&(0x7f00000041c0)=@caif=@rfm={0x25, 0x0, "b24099254076098c2ffb629ae13de114"}, 0x80, &(0x7f0000005480)=[{&(0x7f0000004240)="9f91b67e59f1f12bf74a8ddf2d2384505ff8d6d8477bc4bdee83c5d95cc5da5b5f537b1912ba2d3d0f3c13ec889b34860e4aaed8ea716226db17d25cf011190aae9df421c25e7ce4dc7b802f", 0x4c}, {&(0x7f00000042c0)="6b1c9d2d3318e7e9aa6cb8dfcd714283919a724191031c29097a0f559a94efec97c7795aed405bb9768c9f64e601a2cb2c90e05393546d2fd819e091cc0d6c24c7ee8896795e2872ac050ae401867923dc05346139c67dd31028cea0665d44936f759005dda7da938a37e850f4e1f749e79e2d3ea171c37a3cfec264dc351dc957e9395385a222d4fb194c2e88cc77350f770d4f228e36c2", 0x98}, {&(0x7f0000004380)="43c4711a824b8063a36d658eec3237da4f4bdb68a80890a9174fd17357061ad3951f34a17b3a2f5d514e3eda7870306c4b449b1271fc985947c2fd4d010e663d89f50dcce42604c818f4e37504a00e2e0528043f09c2742b7e34d0bef249b2053ac3d18b61354515c400e833a407fc937d33a0d942064b367cc5048e49d4a6dd74f541b373252ea6458d171b7a64f910aea8aec03dcf759af1834112472d7fbbacfa5a8b59802ec7470bc80b115588c5fd9e6b5c6171cac101f7fc97d3ccc0304f7576d19b036ca559beba8b111c1b420dd2e78ef3d893b2fe61c6cbf8090880089c7ca962c042f920b543986a77f2c6e8042ea17ebb80498d7683efab2480af6557e07038318c7b47fe062f3eda9bafc7b5c67c768b96f85d60f241c9728b8c685328a1cea3654088b67e797cd697e1a81ef2e9304228ae691efa7c577530ac349f78e971fa5599e4422b4d6afdee57d17e45d8726006d009f293785d7e5ab8e145c22a807fcc005b7a966ba02f2bc6aaaf6f85d700c6fb941ef1d95e9b528a72aa562429a2fe210fc340c84b38586bb7d1ba1b0ed379a9c0574845598aa10dfd3644e2474c192373dbf4a338234552179c0b7495081e23e90a6945f0eed108f41c3504c77d0ef8f41adfe5413f85a0fec1b7fa633575ae375cdbe3958b2c70dca2c2d425bb52eda03ebd7f4185a86c670a3e48d5f2a1968c7423727084588492f67152696c4417c2eb9ef59cb02f64b0ecd0044c3e65edb50e7cd93f66a93c1625fa59ebeb1b9bd5053b85cb015adb814a4a71886dd0a4e1fa79f8b57a98fcbedd3bbc41197c7b330b40ce7871c25e350117aef8e907a4bc7279eda84f7f311c4398c824f3c3a93e6e8180ab9559a904bcae6a321129e3502ceeee72ba03c0e6de50ebc0065e174ad2f86a498f079dcf0ebdc821c1fb46e40d1142d6b176e161c49e9f42139c929ea4cd4de667b8a63602764ea5bb789857439ae7edeb297f15e8276ca9db1ee223d13d0e4ced824e3c94f6780a13b48bbdf8a828bae71df9953f752b2091dcbb3b4f7856488f9cda198a63ffa39a554371e15005adc0415466c29698c803bae9a1548035c8f8495522fd52d3c4342e450ebf8271c25de17fda27be6b07b9e4beac6f998df55ba8b70ffeb3ed327e9d1afd9bd0348fd3826377fdf3ac32cb66f05a2592e470a8418101ec7fba78c1620af2b7fbecf3f82027b6167250df85654fa3c2a1b7c844ff47e7e3bf0f53baeb200a31af4af23621c1fd2c5d7c0d9851b19acea56ac40a9cabdfd9c8802de8b5c836444f50df7a3c3c3d48f82ec3765adf89105b7b3fc4094760a69d10ff48e4a584321d2bcb402099ebf82cf6ce72bcd313eeaf3a1618b2d32e856efe6d70d7b30115aa9ca99f77f5f993b91f1a0835c34ffec1f4601253d4cb505b83ff993b9d128494d1e0e99d9a115e6dab4cbcbec81f66858928f21258f172372ba1e626a3f30b9a702399013e7257021a51d32c2360eea5c4b147fddf40912121a17d671c1b87522f1921cc8559d1d2d9a9846c3d59ba1a12ba383fea6eb645c99fd461f3657d980268c92cd377723fe827bcd925f590ac989d225dd014871abf8e44721a5d1f9be01e7180156ce23cabfa6f56c12646b77b4c4d12a20c479ee6eade3d33ac13c75be55d065b891b95099aaa64e9d47713c7c1a1d9713e54f6f118cb1b175202fe04cbbff6268af96ec104c3f2231305b2c8c024e924569a635f08f7560cff01dd22f41ad998b27f702e05cc882185fa7ff42bb13c4703b65bdbe0164e19d1614097a6d6f4b49869f09e979b2bd941e0d17a39988fd39c88ac1366c455150cb94d73755272284118dfe007bfc94a743119e75ea5e83dd368cf0c2d055eea1c08165fabce41931fb5bd41b27e38a36b94dd9abeb5fce50fbcd17674fec8de1faabfc8d2fb8da6ad044f0ecc59bd0348e6b260fbb11f4ed1c945031c5502e8e477026ff57ea137f8d2f2227872031f89f7ad913bc7298f1420cf6f2a988a535cf77a464eceb08aa000f3d1b251cf97583ef8370426de074709d50dcbfcb556a0d06306c0e1c99088b0a4d6767d1abfd9f3bac648ca07de094908c27cf0e4fc54c350a4ffe1e6e751b31771f859a9f0daa56ba22c91c6b9717a009e16bb94bf66d54b5f6f67ee7a8ffce51f523bf6d72a2cdd805caf1e545a357af0e67b41b00b5e0b9cba5a327bccc87f7a8523986804bcf3648b2726a1adaf174c51de72cb5f1fcdc386d59ae1d08c88e91462c9aee9ddfd7772ffa20ce47b39bddbed1b4b270065be845c500e447d671d3332c7e845a434e8bae5547e18e430f0f5f3fdb00ee257d6fafdf091a6d3e497d6497862d6893cb4b6f35ee1c919f3949fe08e1fa7dc26c6b2084c8260e7f979f396d6e30d7709347e8eb81f41e5c992a514443415f141600130fa567987f2fccaa421aae74d6800281db2dd17a26f331be99778df75d4d838c8e073c046f40232d2b10a420b3e9cf11284f22ef09a014f358d5504a10151ff32ec50d406849a497ba46836799c0d0149d92cce85edfdea6d5248da2830a84053d6a84dc9f77eb3d89e55b6be27cbc1a47e88152f278772dc2f9869e2dee87f65bfd8211ede1c19dafff8c5df13f974c31c9e972c686900637c9a0f2975a34e67b33b76d419d15807c75c2bf87b9f561330ec97f090cee28848d3a19218a93a2d0d9696f7c537b0be3e71e228c9b57ce33ac3fa75df119d3534946bece9e782f8877e97865ba612d884fab38577e57cafed5b3f315d6e77bc75f58ecd3fdc300c34652390f496ec62178c1ac7513d12207fcc1fbf8a0e51cc8c0522e9bc5e7fc954aab00ac4e8a51e08216f8c06109f6258f49490b51f9bbc260e01bd528d6aa29d24f221c14d521ecce594fcd90577de3a3459a9144f97fed145389a7f5cefcbd961dc735b647a052d2c3b94ef78724732dff2568c736f97d5f318066227ada78cd03c2ca11fe11bcc093dd5840b7a461e305321bcf5d8ad9966cd113e8261623dab9a7c4bbaa4f63ba6c7eca9d2536cbc0e70f0c5004c9ab7d2bb369536f9898ffcb4166b16f17af04d9095f7a3d061cebb46ad441616238a9d91afec4f8a17c40b50825ff47467e31d7268645be725056bf9d14436932d23acfb1943fb41ccbe32d9a64f90a03fa4ba9ac2b5fac1848a4c495481e98ae913266e719e4c3a02b126a004576158ca2e628f5e9d7251ddab1dc4a39e64c9343daffd9552b918ebe4b8dc8d09a9b671a034850af2d11b23c1de0abcb466619653e2d7d65dda367134b4bb4ba6def3b9a8b892a19ba879a1a8f0044ca6774d127d0ca10f6c284153bbf325e758be4620a218ff57a2543a329abac0d72ef0556e71d1ab3f26843e6696f237d7bc05707c16d0df6a1e3fcc3a8f0c31887a3628f73e15cff794e92629140ad8676f79d9ebef6d90e30257db7811a52cdc9dddf320125a2f6e7e77099039efd924ca5df0151c507ca4a96013a7b55c37b8eb6058f102f247e70bb2c29a607b4013a29d3e5a8a4fa476b99a0f72b8552269753118e812464db26bf027cf1a20440e8c32a7c85bf54f38271a2f74c5ac9b8015f4968d5f994f7846206bd95b43a41f49b13c4d2ff135747bce68064723ea39fb81652b672e01c5e722dd5089e56ffe52a1c979236ea928136ffab63e5473465af7ab80bfcba24eff1a72ce4c59fac9354c955633ec98a71f0c8a99484f84db06f47a6c2ea3d551e50df7d7578ddc8124800f225406ce84449d62789bf09c4c26540342c24f6b5fc70d0aa59c6b808decf43b55247aa9bf6f07305909066064dade11aedf0774f30bb0fe67484dd1cdfc7ff9c02a502fb37af8bd27c08d119619a20b8a7ce961bb270ac3505350d9837390569398c9def0ba5f1e7ea9d06b0513ef37f62d46853aadb2239e6e6d6c8e8066ab0936a3dc45563c51f58b60ce8825a2553266eda53b88b131f480162ffb748a5b79aad102b3d32d4570445414e856dddf60f92a0a786fbd9a273821ca39c99cc00ae602f0b6bfa8a7689cd23af0e7dd8bdd9f91e048744d71acdcde58caa7b3c2d9e34e2940c151f71eeb10fc982dfe81d3063182eb6037f86f5224dd8e84bc661ba0b4aec8230130b9b5614990e8861763042bdc2b5f7a0f972c563c422b1a0dacfb54f0060841afb395a0b826043907b962c58a16e7b15bec4c2eeeb92221ffb3c7de5f164845e299210925ffbe52ed6b91d58f5537b85f541af865cd9c891f225b5b547ffbf345525d84d853b99c8895a967c073dae08832898138db7eecdb2663be298891882b34439b4a0a6b7387be6365115abc60cc8be5658499e616b87282e3914e9c9b59e750b7ce1b5bcd7b5d6cf2b90d6596c7a5eb8467b785943869af9ea1c3127f2f537d5b8b3f6be285d35033b55ca6e678c188e0e1c6238fa6e7d3efc90762a4c23758775e6ebf3e40217333c66f612c2a53618f30464a6a4bb0c43ba6feb9c93d40923d5dd90feae8ce49a17995ea0051b99e24609c32b2ff3ad1ae53ef9a59304deca09c973ad69bcc779da2f0207a0ffb0c9069ed729a8f3aa6fa6da923724aa33bd00af4ad9d8d2e579c2f4423401c3a26fd8a4980ce7441715f5ad4f39a30fb45b7448b229fcce171c6bb1b8d0699e1bedd12c448f5f1ac0f5327307b0b399139e9e513b98f9bba2ed7b2353990f07482156847896533b20f93188c5379888c18f6fb9e3cf1a1345be39eb95960ecac372a3b42abb26114264be2736d84157176578a7ba6bc8b66b035d94e76361d9ec0e9e90ba617ecbb762c790c98f7dc04225769076879c10cd4782a52b99398424d8873d3f81ab7ebf375e69a9da69d6fa77677862429ca45dbceb316bb54f175615d762775d0f4ced03a58383e9268ed8cd915487abd909fccb2f6c83d0b060d2c446b444afcb07f1ba1de64411898fa0b092997ebf46d966c29e6cee11ce19dc8185f8eb113b82de20664534554f9d29c708e73d09832786c4d8ab94f03315d5181f96fa62f4cc73661ccc35c3cb92f82760317fe4fae5472996a0ee1d6f786c027a20734b94362988deefb7a1b29117da715279976d0c5889fe95044b3cea2857dc497285b13fc90b06399ad9eb24931107df5de34470a7ce7bebd54f5b79ef2af32086781e3ef25dabd6ad7a16b61390af3557f2ed550208887356d6482c169a7f04f1d20eb43ef66c7c6ed127ae8fa1ca3cea0747724ddac834c31644c88f30f2dfd1b5d937ae37d92c695eba76ed0ec9de20afba445028696fe1fb754f1ce6e9f39d820a5638e96b9586dff435e848ab32a828b1d23b2e2103f916c6bfa8a3b50730137a432d112279f981f5c74da25f16f7999e101cf5c9c4f54970d98f7fc0dc026cfd20426c03d251380501dfdee19334542fcc465d951ed3d6b37c6bfec6476b18e8a554fe0438d812c793257ca1c4fa5c1e79affc8d2123b9756500f08f195f60db74225e273dcea75ae1359c909e637f43d85c24bccf09f467f712643d4c5ead0e1575ea31739c88d87f087d8c2ec98033b11c7d70ff6fbc716ed76a2517dbab3e0e5e33914daaff5f19bb865462d41be5547278e202126d9beb213355e4e8001889e6fc020f0d147d6c3e07d8bd3baa6c343afbdcc08fcb2896858baf843f9f6b61a727b932ef6fbbb7649377507b2992c79dcb9e872ec054290e6f85dab443a761199997dade62edb137002c2749ccc7c80018528e3f48995bed1514d673f6e68b23c2794dbe1bc859a710d45877eb66e9fb61c897a31198d7d6268", 0x1000}, {&(0x7f0000005380)="f6c11765433d9305d66643d0e8834f6a1f24f67e35ae25aa62ca414bb659cd635defcaa1631b18663569f2c19e7cc1", 0x2f}, {&(0x7f00000053c0)="248faf9cc2df1cd200955339b01684bb73e68f0f282c597601e82a5bd215992453f1c9b2f90fbf1348182ae0f6a5db65d49fb5d3891225d993958bc9ebf38b786884cc89598e7d9876187cfd6e8855bae5f78b28cdbfd922efc2902a3d83c80c04852d7d74e688e5c8721286f3559d95e91d6d27a3aa6713c2734c0f7771cf47d7a3f9b100", 0x85}], 0x5, &(0x7f0000005500)=[{0xf0, 0x102, 0x6, "a47fd58467ee3cac8ac6fe20bc5e53be1ce6ae1233b6cf239effddd12f4660fd934bbdce9cf866ab6e335862e3b36a38d226b49235ae530810461da7231afd357075f67a747812071593b5ef4d1974fa7583ceff71d0f07e205b85870f52f508a5d5474406d6a4673c25d266445fbe263db36faf74cd61eece5fa291002cace5cdd5b043303ad0eeae867ff21248214c387c4c94642035ed4ca10c609fee73343457332689f26b12347985b88d76649c71c70e206975e99c8720bff8abcd9d4bf7a973ce3c91f23f22633463c6da7d30c37bc8143f4b49339756150d641f6b"}, {0x48, 0x109, 0x1, "fe1ef691ae5cc12c64236bc0558964c5c9ca2b52b42a10b7d460f58414758a6467c9517de405ab00c5a6af421901720bd94700a9"}, {0xd0, 0x10b, 0xfffffa2b, "849572f51ec99b477057055020a3b22d4f18fe25e6cc011caf4eacf88b7d18f8b6d49df6b61ee261fbbc045f0a65c1d7ef655fb20d772369fcdb8541f24195f851048f537a3188c9d1d9c4a8f6b5a36440cff69be6bb18952c340e3f6e3455dd59009fe3c96e4706c9d0ad9c392112b675b42aad648acb8223faa7f01d719c0c2c85956ca8e3590195f0ca3e216c01dce2a75717c8b88a2e438a5b378718484ee87ed05d4de8ba888fa13c264579d279b81f3ac10c3feca822"}, {0xc8, 0x117, 0x3, "10345996760516b69197802ba4fa5b654d1294b577484454ea152eb0bc55a3bb38f7991162de8dfa2df287d3f01e0c63db90d3cd8580d232dc929c485c0f0cade0fb9153f33fdbb168a9d3a1c7561a7e9063456d46af8319789c301b24fc96efa11f97cc94956d74ca331310419594f07d9b36f467c9eaf8b1e9d163e2944db91dcff425369db3aaa8dff11f672898658de7c6ee5666c9406f16290d0648f4392f6e0c6fabcbdb881650b451fc0173fdd5533e65c17a42e2"}, {0x70, 0x6, 0x200, "cbf3f4ea261179f6231b7e7a9e127e2a9e076c94327b463e682142667d547c273aa211eb4a05e6bbda4f152ab52a2298fdb9ca712bd4ccf8c58c014087f9888c800d42c02f80159bca0b9da6ec458b8dbd00f881c8c51105e4"}], 0x340}}, {{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000005840)="a3d6e0be2ef17236eea86823400630a00cdf9f6f803a4f56bc36b7f98a939e0c9be2c4cb1b6573e9b255c02f78557d62d75561b849519da8f2985805773fbcc769d906040d7d3e65fa4676b0c1ff59f3f8c218aae3fe2e9adc62bf79999c7d60dda3aae2eb6abcc218638bef1bcdfbdcab1b1f934af75752aba3fc9b8e8356830d5ead6b1a6013c8565d1e461920fb6f291ffa77d3139469ad08d09e69b4f435a0617e7fa1ec1a74a4c6676341369c465256a67836dd67a6724828abd2f5d09a47fb78cc148ae81fab7f3718de4c396d11546eb1505a7e5ac414", 0xda}], 0x1}}, {{&(0x7f0000005980)=@nl=@kern={0x10, 0x0, 0x0, 0x1000}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000005a00)="836d7ab7aea512c50bb07bb433dea01c22c74fa10a4ed09f8c22adcb36a235c7ede88b888889ba4908e7613bf5b50abb84d62638808eeeeb299c81db96c5b322d07555f1ba96d38ab4be6d06ff8ff3dc556188793facaf14d9dd6b1749e0d2c94cecf4bd5289d3723eb11e5aee22acee2250ea31e9b8986a56d74f13d7d686018bfa6f22552a6f4be65e75dcbe7d07041e287039d0175f4ecfebf7d0fcf4caf91902be7b2bf1c9c4c9bce2c7e4b6902eec53f30ee739b8c804bf8c6e420627a5aa429cc11b04eae89d694b76318bbe7e5738142181112bc27def0a512116cf860d9ae18d38b9bb", 0xe7}, {&(0x7f0000005b00)="c5b83c2ab4f525f37371474c59a819dc2ff7c8a00fcf57c587d8c44b328934a4a4b01c197723e888fda2dcd18d6b90ffa466da445797403d46ca401ccdfa3d948e42fdb1e974300f2af206dd05e184abf84d85fa9bc595d4eb51edabb086e9e266f3076a92ace75d769679b41f600bc1002d357fa58fa760fe2e6684383cd1d9d5ede00ff1d7ad7e5db4bf126477491f6f4c4b61599a978a732a381a59a54af547cf4d272c433842f4f9b6f4360b", 0xae}, {&(0x7f0000005bc0)="91423166ba5adf58e98f4e7a36a431a340229a9cbd91710735bae8b9329dcfc1f045221c8b756304b4", 0x29}, {&(0x7f0000005c00)="b18a1d696f6c71a103076abc365d9965c88b474c36e1ed4dd7e2e2282fef7cedd6de9c83554878687a290a356f", 0x2d}], 0x4}}, {{&(0x7f0000005c80)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000005d00)="53433a8d9243bc82c71353", 0xb}, {&(0x7f0000005d40)="09bcd72764f18cb881d3ebb223459d368e1be950ec3fd97818dfc13778da4341ebcae069e918c010b614f6b660a3cde5d094f36827083f404b1635f35d49a8045560da6fc3e445121ddae8b749cd9e5452151a6115243b8b7a2a1086", 0x5c}, {&(0x7f0000005dc0)="d69cc757f701097d3623c4", 0xb}, {&(0x7f0000005e00)="0c8f15d7dfc03906e63e795c6d5eaa5a6501551cdd71bec3f4b927068242cbd1dd950149fcb88e34af908a7febc99ab12920360ebc1be25997953e6253131048ed20f464e9a9852f5abf8e5af8e3bb2ab013f1103fdb5f95ee6da6ac8389da304145f3732dfe778c1160cde44b2601240bb4e8f26cff531cf8464ecbbdc1d56c7f491371817ce8856161da5305860065fd96aa7ee05e465222c64a0bc0425481960a3201b4", 0xa5}], 0x4, &(0x7f0000005f00)=ANY=[@ANYBLOB="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"], 0x2c8}}, {{&(0x7f0000006200)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000006280), 0x0, &(0x7f00000062c0)=[{0xb8, 0x101, 0xc, "ebc87575b305c8dbe177777cb1bcc4a9a9ba475218a5e7dffb59763ee4aea4ffae378122f7672de4c91d5d5205b0b70f2f6d748f23796202f4d940640ca065dd42817d604f494f8f3782c2124b01d5472a43b375096f27d8bb61dea859305306f0561a8c577b18264926f1eed3a2ee109eb7c0f1d23e9581d78a2691bb353425ea02042dec51b587cd8df8ca44adeef6e814dd56fae3685fe64e71eb48afb255b0"}, {0xa8, 0x155, 0x4, "e925018c5ee1e4bebed6caa59b4ed7ce4c602c4245c296440dcaff7c0e43209e93be58d8b6385a20e6ea945fb31c7ccb6335aeac3d3e2216e71464f615b0d4a20661653576cb58d1e82ba63e2d06da637c6a8170f3b324374db9a55a03fe4213454bf86be3cac016567c1f5ae737cda3dd00709aca01a2f23ba65caede4f92a5f5783871bd8be38ab220526b474e69067eb013fc"}, {0x1010, 0x13, 0x800, "149239969cfcbc4136b9243f48a6219e6979e2c83a045a0b0aea075fedc8f2bb582591bc4730738d1e1654b17c7af97b654acca522553ab06a212f0fef6cd699e8c0dea2e70ce0f32bd57ab3c09fdaf2572637c5bef7d1c85ff7910d71fcd419234ef23dc1a64e2a6e4cc6d40b76010d97e05cad759c1080d2b1d827e927d626c8aa11fa76d9ad41aec28a094a3d936df72d7eebe272d1db9f243f81f3b9f68a20f29ea6425c9a77023027655f5cdc5a71fd496cf6e2be6f6137f48da892f8f1d4a8592f3ffbb91463c7a929967db4e70033644c3abae33fef2fc635696e0b9761b2b560b6700c50f46981d41099bae5bbcc8e621ec6e27c7b8d9938217445a680ee1f09068b2a0f68fe1d53522221f73fbd3cf3deef15612915b57eb5868bcf4268271a4a5dfcc239efb325bd40cda2726854ff31d654ecf0210b2df1e18699e1438c4e2283a484fffa59b1d201b7d76f30ea22565d15501a0491dc9168f90a465d178de04a4e4ce18540b7fe5fd0770734eca9fdb3798dc0f02451fa9c323641bdcb5fb1a2886235597f661fb46c8315be9225d8cdd490a90da8d87a3685421f4cdd88b3c956f0382cea6e4bf8df9c162f2aafd279965c0bec5628f2bd3ec1182fd314129130963eae9721d0ed558f36e27258ab4e3ed9b2f68601024cb60f08e71df8abeed7600b526474e1a7ac2dad49c71a57cc21e0f3facbe60a876413b7a3f835a04ccdbcdff7f81ba914276addcda8c4630a896d22ad4a15be35ede10e953a5c4dc627e3050615261880882dc27e0f84c928ac8f682e67eb967accb12d2589a66b7825bdf36ed11e2abf3bd3cc22d4a2c52c22c7c0dbd5ff210e7ccb6aa8c7871e129e4c0a3f43d982b3066284292651923a565937e8e52e7ff11b299c99f133da714197a314a1a1cbf41897800e62edb4ec53f28365696ed2f64d5544f3617a31b8c0006524c168785529dd6957129c808592b6e7ca395c6b201103ea096ceb5621a404a9d1c0619ff4cbd5a175dd49b02212024817d58149a6141d3947dde932598fed9b3c00d03f95baae3d86d3006a7dc977844ad4582ed831cc204cef0976f14324111b602a43e7e1d5100010ee175fbb2ef4d485a1ada206fb1337fce8c01d1fec34cbd7e093731ded1472e2741731051612cb3c7f942417eae077dec5f4d579a0f9e90378855060877ebc87a76c4df4a04b8da7f2926f65bbc2ec2cdb2df03b8ac6dd2e27224205bc88a79ca5763474c861bfbdf9600d8249cbab4370ae8ffd8f48ea0da26e4d938d91f098220a2f5e31b9ae429282528df9da0d5d8570597052ecdd173b708acebc862f15b7d84609db04f60052d171606f3b81e5f2e6cfd2743b288138bb3b971937d7b36a9fcfae64f4cd23bbfdd12a0d926cd48eeb3984475cc77df536b62a29dbcc6cb5b606e939fb44157b07c4d8dafa1a0f86cac16d02a36fb820500d7548fc4afbc1830c4d4e10674452e882a8fa05e415228048f5fadd8cf6568e03313cdd858fa836fff6d2e3bbcdd92d4a8325d5326a8e62ee91116977401e274051c533a891359116b66d9ac4d00e00e964172b76f128f3390ad49844a85107bada43896bb090e5b65d5e3810f3ed5d0f241452c303e96b9d1779cf77e5d679e93b45c8da2f0c995b1f65bdb0d6a31d3bfec1b31a97049a2fed51a08bcd6c52be265a1cafaf23b29221302dc2dd3849ed5538654db634c97792131a48d08305d8d4e49861d2772d3d28095c20560129d66434b3280a8edbe0675279966eeeaf1569ab1bf559887a3e2c08adc53650ec830b6f1d3d479e6e76064f5ebcad8dd030a242310db6900c5d7755ccddcb234061105f51693652e32810f620d0c8e346b3584a6fe32dc644924a3e11b30e3ffda3206b84bb6fc201c6ec920fe38c0c6fe7f8c0aca832d50c2c66165b3ecf6ff6580d721122b20727d43ac788faee14f5e1bf74183b640987af68ffa91de555f30db5ed7a855371ad05a3922910f187607afd398634371a1b71b42a450bf77afa90d31cbca79f24e213fb184ec1285bf47dc27d7d3ac204528fd038de487e60dcb87ae846488adc13ee1de70e5ce9ff7b4faadee001f32d683e3ff4d3d841319188229f90dcd281072acc71f46ac2c54ebd64f6254c4a15bd39112000bc28f1413c0f43b9797bcae2eb9119e5c400a7daba40919e33f41fe577510b465f0e7eff319fddc316ff9d5fded1b37d4e16875fd87b483705d3d521918c05c4438cc6b471c0eab7437119ffc9daa7058fa944f527ccfc38f17025c8eb00e8d7245f93d047c1f3dabc2ffc977a2e0a85145e1f7d6ba10abd0de4361474224b2fcc4dd6969edcc5592d5de4517daa458b9f747358244a93730a2d8a70a4d7864ef6e91ed2e49fd26bf1c39a09ac831ea1852a1ebb4c5606c44edd313a988096dc1fcf28455895eef36f63b63e5d64687c8699851ab6fb0354f6d87093714c56f80249460fa063fca1e3eb5fcb80b70e6cb8aeba1acccdea79c0e86bdc268f8a21ca0ee0004d7f1811bc50e545aa8bb2abce287aaf67972bf3699c2d5d031cbfdbc3fd4a9530f3a5df5567be96778b6c5317e21356d315383f968e2dda88e82dd4d34f405ec40c2e704293afb688e3069b33313bdc1d1ddce011ccec572cd2876c3bdf95c70096ea397f8fde9ccf3a5ea484b22fc37289f300914c3b5a0fcffbe850389f818ecbf374f45fc85e246b431cf7b0948aeee94ca886f3a2769cbbbbf999df71167990ce4ee2cc2f505d36e66ada025806caa44c7b9ec7cfc770c2df5c71f52177c9bf672977550405755f0991ca33c50a05cdad295779eb66a65c0e8662dc8c92d0a37688a767867536047566e98aaac10cd9e931d9fe06d17faafc196333a94beee8899218e4ca7ed83ede4c4a26035dc3cafc52d4c1a27515e36afa292e05332950dd747e46b01b7aeb2a1bc5c2799a3f0fd3a6d282d0fcd56c5e459448739c7972a51411179557a7fadc9897989efdc2bb327abb5751e9c8a9e4c3c4247378eb61d7555cdbaed8e945b84b6ce3ba4f0892351d2e9f7456eddb81bdb302b16062504d0a002fac1a2bc34c49fed79877fdd602f848c98159eb2a3086a8be64064ad9a0901a9ff36b5043c14aa2ddd499e375c8bfbf07951a50450d0ac96dd3a0c8bd7f08aa9b5e49f67a48f3bb91728d18d37c750ead697928c08ed5dfa1ca63e6cb26da873bcb6810ece7adfad635b1dc641681b631d82a4dbd526c4f085c8e61df44dbf47408b2549e4c824482eef5a2f5add870491f63ff6f1afd1b726b5bf2b1bd6cb68bffffd97e60f193ae49bb2e2da4d44deed92268d0e32d650cd219fe3cb1b692324d50b4e4d817f44f63406964eb66fc7df4bbe7321ba7a77799ec7ddaccefcaa19dfb757a54b3ec3fd4da0f175540f18938b2f4a8217b49b778eb42ae728a85ec36ece15a2e98a0c65984769b8fe3982d0a3402599720993e355c842b47448cf7800a3df2c663b8e49a822426bab15c07f71f3ed7b0fd2a37a5d52fcdaf484f9da36555afe992bdf9304629bbbe1155e6f56e18f162982c5a1300580b4770d5d60b8ee56bdc8686742bb84c3374acce29b26824cce5808c6becaf42aab3f84de682356033282c6fa80e2632ad5ae2a2c33b787533fbbe7865f9b7b50a1f242d754f94c20800e531e17d71299fda15e5a1f1a65be704c2ce2041195fa5b54c3cd3641026de36cdb70fcddef2e76e8bb59803cdfbb1fe3c4a9d9b5129f3f6044ac7fcccfac67e66cdaad45cb67a2da1b06d16b3dfdf747ee1f172fe2aed8cd387a1a5b39d1ec4e63ec251b8fa1655440c55e90c593fa0c3e01362d2f61cafa0fa2e85b22edff12eb9373cf817b6a5039cdde148b322b58a872b5c85e4fc7b168d0bdfe065f6231de0e586ad6864ebdde8c4f39140d66c9c956e5a939676c5be4001012031653b6170c4d210d75b038f3a5630f7b915f28444ea7a7692edc38e4cc19503abe617875d6104d0250a6a7200e300d37a6e3ef2994248d7e4b2b6057d000c31f3bd27b64feaf2118b317f2dd297ee785551dee087fb45643c507a6251b10a02934295fe9804d21d7d75266c7d14fdb2cd794a86d5139d2ebe37c262ffbd4b576b483342be39933d46d6cb664e6a2afb3c14c49ad93805c70d74e6e42cb06def313fd0082c2baca12bcfc2d9c260c30e83804b29f210db4ff4accce77659a69df0315694134454cc36e282ab1eefea6de44a8698a55223b9d3e4a670a439d956c208d6a1c95c056c9d393d6da0c5bdd38986726cd458d0c95bdaef70ca1fb1d4ec6f6e0c63eff2d12e255a5eec4a360479c886d49fa620563c1ea09087ba606ee97f79aa68df6d9f9c4d9e1f9543e1d3db5ce341bf0236349ed453ba0fa34856826401fbebca887192a3c30bec736f25235556531163eb4b1dd3a25404de26d4e431d86454b2b49297b0fc498b03192fce78c3226a85b314c8306e7452004a5ee5f5a6ba2ee43ad0dc191a65263b36c08b6606aca7b7f0484765fbf9db9dffed043cfaf67b56aa2f67e88acc851d56c8d735019f296e440c46e11bfeac2770eaecba4d0338c0efce376338827f7927a24eee6ea132ae957dbf2de6cd731bbce43462b053427aaeda33018556debbecb8363786b8923c5a305a290dc40f46785bf14d6db02e2610cbdfb11efbc6b32b0a148c324f20c6c2e9edddc6548d72fc64e36bf7400cdc9f380de2213c6d680313919e0a00d5c564529b18632b2b752446cafe79c32745b09f9989b23b7e0335892cef01966a465e1fe85861040ced93a08b5eb6c717e473c2a62162dcaa35d5dfead6b61d4fce29477f5a3e490b2006c515e50020836f55d81f33a36f5753d3c5cc24e840fc76bb1f83931e9865336d297eb21d56969ac97c7ac793cd90ca16543fe21d81f1c0bae67fe24adb7d8f1fe90b6c3499a3fb8bc2816d4d9913a9d93e6437402317d6efad05fac63840cad192ea82312cdac6ecdc548b9434379e17f8f9f9fd898c4841bc4f1ae5b1074bab1df70640b3e33fdd85ff1c02cf24d354fcdb3d765fc00a760578ac9895556c511c3c6b2145937492f9cb6f89e44477dfe1af6a049c923095731cb452c67646bfc51b673fd35cdb32028bd88604f1e848adcc3c6b4d1cf70f0c7988fa7c5a2fd721f89bfb64855d178c4443b74e4f42f10c691133566e383aafe046b1ea970ba4be5f63801ffcbc6ec5941e7ad48decf4e121f827bf23baa3f4ad72edb213a0a95529cd20d30a85e84dc2469e0b0bd559917ed5062eb981e5e64f1c1b98acb79efa8617477134a65252967c2bd5de96beee62cf8e9e1e561054f3f0e2a0995d07bf340af16f0751a7ccc7205fec73768b5df8f12ed8e4cb0f344250846fd2378b1b35f4ef78e03677a8a4d9e66bce5d148253f8a66921274b24671b1aaff695be41b72940af20b0d8ae68b02e180f7c0f9f0baa0c53f429f25226b23cfdff005c144460be4617410ac974a20a318262fff5fda11fd210b70c8c2b999c954b6a433afb39ec9a742dc2eebd9884c0308639ebae2bea1c2b4747046a0a9744c04ca7d57861513f320d71489202831f539a1e355c696356e5610f09def84aa549b133bee09abc4e05d3593d7e5fae6cb54829d6452a648a1a68a5d1a6244aabf89e76e4ef359d1e122d438c08b2f8c6cd819788d03d3596405dedd2add5c537f6e55cd4d363ef120e742f2f87965f3af46c23d4e31c4aeee6c2712a5fe6b8c520e19f0a0f1647c572ad4789fbd61e153ae88bcafe5275e1399b1df78beeb4"}, {0x78, 0x117, 0x1, "adeacd92b4b42e59d0d32278f84d57850f5edea92fe86ee3e10ff9223cd6e719e10646debae6749b16f8550d41ea4a8f58fd59e35a53127c2d80f6fc3d550212ed3c0ca82e68c169a0661f777299ada4ea333a9b562dd92c81a27657cf717e91bd411274f3"}, {0xd8, 0x107, 0x8001, "818efce5c9f966135f3a9d9c3dc03217639be265fd3b8e925ffffb4be8d84614e0d2c578dc099b8d6a2271408feae832f5e9145d7299edeaabdff5238c0b564ddd24d3b99d90d1723ff6eb515c3153ae2382f027aa5223ebc77dccfb2313ccb169dca2744872da9dc24ca203f05574ce103371fdf1c39a79721ee016440147589497a5176fcaccd9e212e245c3aa878bedb373b6c493fbbadca9ee7d27b19f7501ddbd74554d8c618f082c6a6754a92ddc25fe091b5be56e3e08ea5115bbb328154996622ab9ab26"}, {0xb8, 0x88, 0x1, "32cac6226f90afd4efa2a7762a5d11a327c2dd5f5627e11d49b821ba5d7c999cebc96e3d563b21ae20642265a8831067c5b1f1efdc17b471b7fdc215257a92f53007164b5c65085ddcbd6f4d783ea38f347efb48a6d2cc5b39e7e65c0509039d6a49390c90d579184d5c5dba322f365ff4aca132e595bf23414763bf19c8966f2756d9f02af0a89c604fa8419362b7027a3accf40456aaa717884a28e725eee73b"}, {0xd0, 0xff, 0xdd, "19a0b758bba8ea62115d62547d34572e8ae49d499edd3d4b6361b34f18dc0308755d9a8939edbb78578eb00dde8f3525cea588731dae49baaf35722477584d171b573b0bb6ce3c3d84794e1e32168869fbb1101fb47864a137f13080bfddf3659efe8c90e72fc111b7b09e5c82eb0d23142aa358dcf0372f2a495a159610a7cabc5a42cbd338511f653544eaf74b3c47aecaee22ac268c06d46dc2b3a248526e23d4765084199279dd5c059b31c0813bb54b4bbe9d3f64e80cf144cdd3"}, {0xa0, 0x100, 0xfffffffd, "334bd0e8bedaee787341ab53e4885dd213edff9f3f2bd3889a569354f0503f038a2b45399d10db58f7fd9a6778765b866356a5f3ff61903dc7f8b460185a7c8b2527e54806f1763db302b414ca5596d40df05385e0898ba50bafb757e62eafaf8b5a4d04ab4a2fb22cf74ec2338b11a73fd45aab30f25ce78fab48fdbc9089e77dfbd87615cccc1c284ec839fd79"}], 0x14e8}}], 0x9, 0xc0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000001b00000016008000020000000200000002000000020000000eb10c0fd105845fd209381100080000000c00000010000000140000036520ee7acb630300", 0xfffffffffffffe6b, 0x1400}], 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) 15:37:39 executing program 4: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000c80)=ANY=[@ANYBLOB="4c0900005385930740f03af866a598a94ba13ac4fc2eb39b6c0ac171541acbe030d6c03a303ec8e3db58594c3b374413045d808c7be711e6f0d40fc9e2052f60ba3e0187ede304039e"]) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000000009333340000800000109022de61e79acb011677f4ffe36ff01014009211f0000012206000905000000"], 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffd1c, &(0x7f00000000c0)="4f7bcba8d5a41147e64997486625e78940e35de0e5e10664d3c77adb311e5a1ec1a18a4fa4165c0d1366131c85a0b1621bd95f379423cd89c0f0cff485b1ebc6acb4980ec639d3baa065eaa59e2a622f4527d21bcf2ef9600239466bb43f8fddba40bcd8361738559d095b96454205823547925c268b32a000ac4eae269575cdeeeb4dee86db2afb0dad74045d08ad9f9a") r1 = syz_open_dev$hidraw(0x0, 0x0, 0x8000041ca841) ioctl$HIDIOCAPPLICATION(r1, 0x40305839, 0x4000e0) write$hidraw(r1, &(0x7f0000000040)="be", 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xf002, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000600), 0x8, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x41, &(0x7f0000000100)="3ac42f7b7a8b6090ab3c15f9710600786e9dab4eecd63bcaa03467be49873d3e72022ff7672a4b5ed462a74361ea5673825c29642c4046b100ecae95c580e8819c") syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, &(0x7f0000000180)={0x20, 0x23, 0xbe, {0xbe, 0xd, "7b3d6a558f099401fa5a99b8b20f474d8a4a3058b0372e5acd23f003f4f6b52903423c91a496ef741040f306702e3386d610c5ec2cc2e566e6a8df3ab45ec0b129f4e3e22729e89d1cc2ada31822faf0dafa2fa4b995fe5063f0d5458f8221c31b9f263e4398bcabd62b5862af10ca56bedaf4f781e908180cf15941cbb2bccc8829879c76d7855b69d2dfebe754423e0b7d7a78330b6418bbf61aeca68a7365044b447690f09d0b7b2344e1db0001d774b0ed4e614c4a5c1b039605"}}, &(0x7f0000000000)=ANY=[@ANYBLOB="03040c0000"], &(0x7f0000000280)={0x0, 0x22, 0xe, {[@global=@item_012={0x2, 0x1, 0x2, '|\"'}, @main=@item_4={0x3, 0x0, 0x8, "dc335d3d"}, @global=@item_4={0x3, 0x1, 0x9, "d693a12e"}, @global=@item_012={0x0, 0x1, 0x2}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8000, 0x3, 0x1, {0x22, 0x114}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x0, 0x12, 0xf8, "9777c0a30f3c43f1ea639c3c4841d365cf11884fd116af6601eb017993b57034e8912db4c041375e5dc657d6b3a147d707d4599b8e655c6b1df8e229aeb34e33a17b0b4aefcc21e49eeb050a80b80647987db35c0761afb1bbaf7451684b36d56b030776df71f4e10a595c32150b892d28e02cb3dc054a3528fda3daa599ffd95de1cffec78b454933c770ee20963519a14bb4826030a5b50cd6790dda090cb16ed32b68841d4c973ed13965161e27e520ff7893e42d4d72c7a6993097fb22ac82ed233ed86204739680ad2554aaa8124c74a0bdcd7974e831463e07ec5e30ac7c3fad0a14330d781ebd52187bb9ae43bbe29474bfd66b5d"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xc0}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0x53, "7313156e22fbbe6afb01bf781da74449aeca2cac674d0532ad65e150dcd0b482c3dba032f825a927a3b78dec53539e1652ffc34615c88211c4f01e6ff06d17527ce261c396812cc63ba39f044f3e6c0ef50d75"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x2}}) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x8000041ca841) ioctl$HIDIOCAPPLICATION(r3, 0x40305839, 0x400008) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcsa\x00', 0x200, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x1, 0x4) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x6) [ 1172.889173][ T8281] udc-core: couldn't find an available UDC or it's busy [ 1172.905585][ T8281] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:37:40 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x4000004) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) flock(r4, 0x3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000080)=@default) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r9], 0x20}}, 0x0) 15:37:40 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0x208e292) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)=ANY=[]) truncate(&(0x7f0000000000)='./file0\x00', 0x4) 15:37:40 executing program 2: r0 = gettid() perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000000000}, 0x409c0, 0x0, 0x0, 0x0, 0x0, 0x600752e8, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000104000000000000000000000000771da10e3c2265b2289c7660919e59f2f1a0d2b190e993333c0540d488742f27b6340d3b71a0a9cee5ffe0eac2dd1e7b528e76e033164a305883fd6ae6369243e2d11cec8c0df0d6c0a618428cf62d75e23483d694b8888f8fc263eff5d1251ed9d426e0fba49dd4fc39e959a8bfaf7fe6b67d01f8bcc688d9be59b94e62521b6196fdbbf7155667f82ca57b2786944dff217c179d32f1c5d1533ab02f12a81fca3f2f0d06fd2e7ea6f4a4bab3e5e9fd01ac89e9699307101c6c00fa52f7a5e7e044619a93659c4e5bcbb9f269313ae1583e89", @ANYRES32=r6, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r6, @ANYBLOB='#'], 0x20}}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r7, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x4109}, {0x3, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000e5}, 0x4) r8 = getpgid(0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) [ 1172.932371][ T8281] udc-core: couldn't find an available UDC or it's busy [ 1172.947421][ T8281] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1173.016686][ T8286] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1173.195165][ T8293] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 15:37:40 executing program 2: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x78, 0x8000000000001, 0x0, 0x0, 0x0, 0x40000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x11000, 0x0) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000000000)) [ 1173.315040][ T8280] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x9b8845f9) [ 1173.350086][ T8280] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1173.388390][ T8280] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0xf8af2a64) [ 1173.427634][ T8280] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 15:37:40 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) write$binfmt_elf64(r3, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0xfb, 0x100000001, 0x2, 0x3, 0x0, 0x23b, 0x40, 0x25c, 0x9, 0x6, 0x38, 0x1, 0x8c28, 0x0, 0x204}, [{0x6474e551, 0x3f, 0x5, 0x5, 0x200, 0x6, 0x10001}], "cec00e15819409291342ecf42bf3bfe2435397b86bb95f9deb1589ec43ff192671398f97d629f0bc34aea70f8b731c9f5d17d93b10c9ee72ecf3168330985e0d50a894464f503dba6b29e4fd0858fd2f9a9e3be381181f0ad91cf9bd51f3ca60d273d8c75b771dddd68530b63dbb2bc3dd68ea9ee44b717537cd0d95f115bac7d97ebd19691c13b65ff8a6d204eb66281d019ce94df576fec7d0bf5f1112ed027dbf572490cb121e7945c496f623de45bea6cf0508c461888035891f97b781f846a94e04bae898bb5d82080e46cc8a0767a614966e2c12847cc9af6b7fcde9966befea587bab0b3a3e", [[], [], []]}, 0x461) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r0, r2, 0x0, 0x200fff) [ 1173.501960][ T8281] udc-core: couldn't find an available UDC or it's busy [ 1173.540193][ T8281] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:37:40 executing program 4: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x0, [], [{0x81, 0x8001, 0x8, 0x2, 0x2}, {0x7f, 0x400, 0x2, 0x3, 0xffffffff, 0x6}], [[], [], []]}) r1 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 1173.675009][ T29] audit: type=1800 audit(1594136260.763:129): pid=8313 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15959 res=0 15:37:40 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="737461636b20262639c482101fa8a967bd265bc72f163e10ef1e0b1663c4c3fc981e570106acf33dee6c033090779871637750e6d06314008fa441ff86b452dfc1a7fd26951257263e9ac267352c9d2321c532fec80a00000000000000143ca12daa77721f73f6878060d9c5c4f8a5f91a82305a840722e933a20300a2ca9fee317ef43bd95a907dc5"], 0x13f) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x11ac, 0x13, 0x800, 0x70bd28, 0x25dfdbfd, {0x18, 0x58, 0x9, 0x1, {0x4e24, 0x4e23, [0x10000, 0x200, 0x76e41b8a, 0x9], [0xb2c7, 0x9, 0x1f, 0x7], r2, [0x9, 0x7c80]}, 0xfffffffd, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "1b6fb86911be13b99406f329afef33af52df5029d876634cf94e39afb1a9e2f36d94a371a65a9f310a2e2dbc066f7f4d3fd8e5b7f8193cb1a9ba13ba8b43be24b00490ca948e916b762a03f26186d7135946a58e14edc02da9c87210cc202049427d5409b50e2b9eabe11f94d9c953c54ecf5d967cce6a4a49"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "b448e512f695824e6b30c1fe9c8defe6e5833fad3a443363f707f0e542b8defb448b35173b353266eae9ef2c5372fa921ff63330509ead9952e92d3e330aba1d91518859a1ff97fdfd078b04905e9771015488a990eebebdd1eef469167f2b7a42a5e0e23c3bfadc57bdb638fc55b40d3cc4783889e7885e1f668769b2f95c3006de74f08241a4c6347cb8d4f7c62fe33f1d9af3b38cbadcc5b2a28152803fd63ca0980d36a81dd15b298a7625d01b3c2c0862e0d14c2bf18cd17350736ee6924a3d97a88f8b43662be40515187efd8e1ce1effe76c779f4"}]}, 0x11ac}, 0x1, 0x0, 0x0, 0x4054}, 0x44000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_settime(0x2, &(0x7f0000000040)={0x0, 0x3938700}) [ 1173.812536][ T29] audit: type=1804 audit(1594136260.793:130): pid=8313 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir520981870/syzkaller.MSIU5P/917/bus" dev="sda1" ino=15959 res=1 15:37:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x70, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x810000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x10, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x4dc5, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r3, 0x0, r3) write$9p(r2, &(0x7f0000001400)=';', 0xb00c) 15:37:41 executing program 4: syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x2, &(0x7f0000000340)=[{&(0x7f00000001c0)="600084e002000a0000000001000000c97f13", 0x12, 0x400}, {&(0x7f0000000880)="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", 0x309, 0x34f9}], 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') [ 1173.973806][ T29] audit: type=1400 audit(1594136260.963:131): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=262639C482101FA8A967BD265BC72F163E10EF1E0B1663C4C3FC981E570106ACF33DEE6C033090779871637750E6D06314 pid=8318 comm="syz-executor.1" 15:37:41 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x200}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x16}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x84c82, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000080), &(0x7f0000000140)=0x4) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x100) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1174.038111][ T29] audit: type=1400 audit(1594136261.043:132): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=262639C482101FA8A967BD265BC72F163E10EF1E0B1663C4C3FC981E570106ACF33DEE6C033090779871637750E6D06314 pid=8318 comm="syz-executor.1" 15:37:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="39000000130009006900000000000000ab008000200000004600010707000014190001001000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) 15:37:41 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x7d) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0x0, 0x4080) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) close(0xffffffffffffffff) socket$inet(0x2, 0x3, 0x2) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000400)=0x1, 0x4) close(r1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000580)={0xa00, 0x240, 0x0, 0x0, 0x80000000, 0x5, 0x8, 0x0, {0x0, 0x5, 0x1}, {0x6, 0x200}, {0x0, 0xa0b, 0x1}, {}, 0x3, 0x0, 0x2, 0x3, 0x0, 0x2, 0x8, 0x40, 0x3, 0xd3, 0xfff, 0x7fff, 0x30, 0x200}) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000840)=[&(0x7f00000002c0)='cpuset\'\x00'], &(0x7f0000000380)=[&(0x7f0000000480)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa0\xa6\xbf\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bhGZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y', &(0x7f00000003c0)='[\xa3\xb60\xf8cmd5su\x00', &(0x7f0000000100)='[$procmd5sum(wlan1^vboxnet0\x00', &(0x7f0000000340)='@\x00']) ptrace$setopts(0x4206, r0, 0x0, 0x0) 15:37:41 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050019000000000005002d"], 0x44}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x30, 0x2, 0x6, 0x203, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x30}}, 0x40) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) [ 1174.441844][ T29] audit: type=1804 audit(1594136261.533:133): pid=8315 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir520981870/syzkaller.MSIU5P/917/bus" dev="sda1" ino=15959 res=1 15:37:41 executing program 3: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYBLOB="6f6d216c7fb5c4d08400030000405800f37f0d00010074644e7f4c65b781e347"], 0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000001c0)="b2990f8e3cf2eb5f3094b1976be5a83737b4ffb43509a316f91dc2d4fec1422ead4a4d0a21e0681d741ab9bdc409f54b719f6d748ea5c719672413f7f0d1b88950c0fc346e3846b7f5f8c50ffd6a66ba95460e49fc4fbe58ec87c4b6b6fe4a", 0x5f}], 0x1}}], 0x1, 0x24042000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 15:37:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) [ 1174.558705][ T29] audit: type=1804 audit(1594136261.563:134): pid=8315 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir520981870/syzkaller.MSIU5P/917/bus" dev="sda1" ino=15959 res=1 15:37:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000180)={0x0, 0x2, 0x80000001}) r4 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x1000, 0x8002) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KDGKBENT(r8, 0x4b46, &(0x7f0000000140)={0x1, 0x7, 0x1}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r10 = dup(r9) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) connect$bt_rfcomm(r10, &(0x7f0000000080)={0x1f, @fixed, 0x8}, 0xa) [ 1174.672080][ T29] audit: type=1804 audit(1594136261.593:135): pid=8349 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir520981870/syzkaller.MSIU5P/917/bus" dev="sda1" ino=15959 res=1 [ 1174.731243][ T8363] EXT4-fs (loop3): bad s_min_extra_isize: 65206 15:37:42 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000240)={0x4, 0x9, 0x6, r6, 0x0, &(0x7f0000000200)={0x9a0ae1, 0xffff0001, [], @string=&(0x7f00000001c0)=0x3}}) ioctl$SNDRV_PCM_IOCTL_DROP(r7, 0x4143, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x12710179, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000e8002000128008000100687372001400028008000100", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x0) 15:37:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000180)=r5) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000040)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/130, 0x82}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f00000002c0)='./file0\x00') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x48}}, 0x0) 15:37:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000"/20, @ANYRES32=0x0, @ANYBLOB="ffffb177c9f8ffed"], 0x20}}, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x0, 0x200100) dup2(r0, r1) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x284a02, 0x0) 15:37:42 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x51, 0x1}, 0x2010}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe83}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000000)={0x1c, 0x5, 0xb, 0x13, 0xa, 0x101, 0x2, 0x8, 0xffffffffffffffff}) readlinkat(r3, &(0x7f0000000140)='.\x00', &(0x7f0000000200)=""/251, 0xfb) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="02020609100000000000004c9e0000000200090002000000000000000000004105000600200000000a00000000100000000500e5000807000000ff01000009e90001000000000000000002000098a805000500000000000a00000000000000000007df49270797d0acceebde1a5206f3a1cb09a3b7bb73273b51e31cba405f394aff85b6226e66fce500ead7e0bc4a245f08fde7da852a3bd9e2d2121c6b61"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x393, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 15:37:42 executing program 4: r0 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) ioctl$FITHAW(r0, 0xc0045878) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000001400)="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"/3584, 0xe00) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x7f, 0x6, @multicast}, 0x14) fallocate(r1, 0x11, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) sendfile(r1, r2, 0x0, 0x11f08) msgctl$IPC_SET(0x0, 0x1, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000810) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{0x2, 0x0, [0x8, 0x66f, 0x7, 0x0, 0x5, 0x100, 0x0, 0x7fffffff, 0x897, 0x5, 0x800, 0x9, 0x5, 0x4, 0x0, 0x101]}, {0x0, 0x0, [0x7fff, 0x0, 0x1, 0x0, 0x3, 0x9, 0x3884, 0x8, 0x20000, 0x6, 0x800, 0x0, 0x7, 0x4, 0x1, 0x8000]}, {0x3a, 0x0, [0x100, 0x1, 0x2, 0x8, 0x7, 0x8, 0x2, 0x1ff, 0x61, 0x554a9e91, 0x6, 0x3, 0x1, 0x8, 0x40, 0x2]}, {0x10, 0x0, [0x8, 0x0, 0x0, 0x6, 0x4, 0xfffffff8, 0x0, 0x8, 0x7fff, 0x100, 0x8, 0x1, 0x4, 0x0, 0x7, 0x800]}, {0x10, 0x0, [0x6, 0x10b, 0x4, 0xc1e4, 0x1, 0x7fff, 0x1000, 0xfb07, 0x4, 0x2, 0x1, 0x4, 0x4a81, 0x21a8, 0x7fff, 0xf5]}, {0x0, 0x0, [0x8, 0x401, 0x0, 0x10000, 0x1, 0xff, 0x700, 0x1800, 0x1ff, 0xec5, 0x1, 0x6, 0x0, 0x9d, 0x100, 0x3]}, {0x8, 0x0, [0x8001, 0x1, 0x8, 0xf20, 0x1, 0x8, 0xfffffffd, 0x5, 0x401, 0x1f, 0x2, 0x0, 0x8001, 0x6, 0x3, 0x8]}, {0x34, 0x0, [0x40000000, 0x5, 0x1800000, 0x6, 0xffff, 0x9, 0x469, 0x3, 0xfffff030, 0x1eca4a30, 0x0, 0x80, 0x1f, 0x1c14, 0x9]}], r4, 0x1, 0x1, 0x240}}, 0x20) 15:37:42 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socket$isdn_base(0x22, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000000)={0x101, 0x2, 0x4, 0x14, 0x3, {0x0, 0x2710}, {0x2, 0x0, 0x7, 0x7f, 0x20, 0xff, "449aaee2"}, 0xb0f, 0x4, @fd=r1, 0x40}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000080)={0x20, 0x0, 'client0\x00', 0x0, "c9e9b81db98feab3", "178328de188e668bbde3b46befc63ec27506f1f0bb01d5dbebaa8becef0bf48d", 0x6}) 15:37:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000100)={0x0, [[0xfffffff8], [0x108], [0x4]], [], [{}, {}, {}, {0x2, 0x82}, {0x200, 0xfffffffe}, {0x0, 0xfffffffd}, {}, {0x0, 0x20}, {}, {0x0, 0x10000}], [], 0x1000}) write$binfmt_elf64(r0, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYBLOB="3a02bc9c2113b57eb189e4d7ce631b6985eabc10020000002c3e61ab320c8edddb20a9ae601678e6360e03b7b00b47bf1249636a0b2da0c578d7080000559b1afdf66997f51a8c81cc444e0b69c55d65fb3598790393a5c6347b4a10eba84ada2bc0b30f086356e44783703cab57dcd4e058a4df223ae18953dded5b5c6d51ec69336588f32ab56807000000000000001a599bb443d537e3343042d92db317e1cf6acd6375e87161763ac89c31b5787a19c0ebd870ef6b205bf0968bd18a82c71a39114e3aa6f1301232cf8ec08f9cb84d3611", @ANYRES32=r1, @ANYRES64=r0, @ANYRESDEC, @ANYRES16=r0, @ANYRES32], 0x2bcf) shutdown(r0, 0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2b8, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x80c00) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x42bc0, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), 0x0) 15:37:42 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x151) write$char_usb(r0, &(0x7f0000000040)="62a09183d875783d89ef83fa47570ff46e6d7f9935481ffb1fcdcefa91ac3db04474f80838074227ca9896804e2e7b7b954eb084e8fd85a330a5a68330e1d00d04ca6523c5300999578a118989e76ec87eebcce4b5c9b2409219832991b6c2507bf5494fcedce9af48cdee9fde884aa9253097a8afe272ac4a243a7074620d6b3bf7f4039fdae8711764506d6e6014505c2602bc9b2ef6f6328ea7664f7f5118308495cfde6385724bd7f1b7f56e64852040bac87228e3b01ed71b65951c70f137d4becef1b54ceee3a714c92f39336e229d4ac21e9e8d27614c9611371619237389eb662e42bd5d78d7348ed402508c2eb997d2038411", 0xf7) r1 = fcntl$dupfd(r0, 0x4062c92f7eea06f5, 0xffffffffffffffff) getsockname(r1, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x80) read$eventfd(r0, &(0x7f0000000200), 0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002880)='/dev/sequencer2\x00', 0x404c0, 0x0) read$alg(r2, &(0x7f00000028c0)=""/15, 0xf) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2800008, 0x30, r3, 0x10000000) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000002940)='/dev/null\x00', 0x2202, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000002ac0)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x58, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "747e92e80fac119c1e416652f3"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x41) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002b00)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002b40)={0x0, 0x0}) r8 = socket$rxrpc(0x21, 0x2, 0x2) kcmp(r6, r7, 0x4, r2, r8) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000002bc0)='/dev/input/mice\x00', 0x80080) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000002c40)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x4c, r10, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) [ 1175.414234][ T29] audit: type=1800 audit(1594136262.503:136): pid=8396 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16062 res=0 15:37:42 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)={0x6, 0xb, 0x800, 0x8, 0x451, 0x1}, 0xfffffffffffffcec) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/4096}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4004140) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x54, 0x0, 0x200, 0xffffff53, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x880c}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) splice(r0, &(0x7f0000000040)=0x42, r5, &(0x7f00000010c0)=0x1, 0x7f, 0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x20000040) 15:37:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20420, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0xbd7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_procfs(0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) [ 1175.758135][ T8407] device geneve2 entered promiscuous mode 15:37:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/2, 0x2}], 0x3, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @empty}}, 0x1e) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x5, 0x0, 0x0, @time={0x8, 0x7}, {0x0, 0xd8}, {0x40}, @result={0x8, 0x8e1}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000140)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:37:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x105500) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000a0}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xa8, r3, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x21}}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xfffff012}, {0x30, 0x4}, {0x6}]}, 0x25) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 15:37:43 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x365400, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000140)={0x10, 0xffffffffffffffda, 0x8}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="2e00000010008108040f35ecdb4cb92e0a480e002a000000e8bd6efb250309000e", 0x21}], 0x1}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffff, &(0x7f00000002c0)="6950ba083e3df322f10ef57332926f53c9832186a3a8420aff16b90741a53730f932cef1984313c63208ed757f276a1eb898e2f9af27171c905c0fe22789628dfd8dc7af4d7eab53d7d9270b14c924eed3c412bac464f42d69a9ad0839d85326d6d319c3477d47e439a65c2f246fa66a2dbe7244a5b8c42c472f8b88dd5a48821e937003098c64a443496bc3bfd8afd5b3e423a8d493806b7b7552d3d8e7db210eb08e1b13a348b13cb21bbd44b0c95ce16f3cdaefd1dc223fe0c385cccebe12b8cb030718853bd3b6ec048fb6329826") pipe(&(0x7f0000000000)) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000100)=0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00') 15:37:43 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r5, &(0x7f0000000100)="8e049088558df4a14edb98ff176118956800cd07dc681b66c1ff68e07dfe80b24b96b9f3ad2cf7756f0a90f7cab6f3522db427e02dd00524b1440b52c1fd55eed9bf1ca465e4e73a1dc33fd53f4db66c2bb36106d3c1114fd7dd442993be3d7c30eccd0b476da75f0ca3a20a2847349c31af41ff4485eb9e784331e32410d8706e8d78cbe34b85335bb95198bd5b545614a2dc218389abd4e95bc08ee569f8ec3a", 0xa1, 0x80, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) [ 1176.531492][ T8425] IPVS: ftp: loaded support on port[0] = 21 [ 1176.657691][ T8425] lo speed is unknown, defaulting to 1000 [ 1177.121109][ T8423] IPVS: ftp: loaded support on port[0] = 21 15:37:44 executing program 0: setitimer(0x1, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x10) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r1 = socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r0}) connect$llc(r3, &(0x7f0000000140)={0x1a, 0x3b1, 0x40, 0x5, 0x1, 0xfc, @dev={[], 0x15}}, 0x10) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 1177.235807][ T8423] lo speed is unknown, defaulting to 1000 15:37:44 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast}, [@default, @bcast, @bcast, @default, @rose, @default, @default]}, &(0x7f00000000c0)=0x48, 0x80800) recvmsg(r1, &(0x7f00000004c0)={&(0x7f00000001c0)=@isdn, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/153, 0x99}, {&(0x7f0000000380)=""/68, 0x44}], 0x3, &(0x7f0000000440)=""/85, 0x55}, 0x100) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x220000, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000180)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) 15:37:44 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff9) request_key(0x0, 0x0, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='cpuset\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0x9}}, 0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003e000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000004c0)="660f21a3660f38802c0fc76f0036f30f102d0faee865f30f0131f30fc7b600000f01c966b93906000066b80800000066ba000000000f303407", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) [ 1177.770067][ T3168] tipc: TX() has been purged, node left! 15:37:45 executing program 4: clone(0x20006004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000500)='\b', 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='\x00', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r2, r4}, &(0x7f0000000540)=""/241, 0xf1, &(0x7f0000000240)={&(0x7f0000000080)={'crc32c-generic\x00'}}) 15:37:45 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb882a3f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x80008, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000740)="66530700163da682530c0000053c27bc3376003639405cb4aed12f0040001500ae47a825d86800278dcff47df5bf00805acf4f8f36460204002479aed75d492b415bcee00a9fc0ebf8b0b14f2ac662f901371b884bee22df71c63c5d05692e663ebf68e6faa53367f05f4ad6142134962f11e931ffffffff00000000560c8ef00fca4fafa90bedfe92175aaa1c540000002e0d050feace34b52d9e5f755535ed7c065bcf40f085eb05", 0xa9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r3, 0x0, 0x0) r4 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, 0x0}, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 15:37:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) dup(r3) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8384030000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="cb6cfbbd0682602b92efe29c4ca61f35f5daaf64ade96699c546e1e9ff82db9afd7f69ea8b3d319f7d0f15e9f48c6b543cb494"], 0x3c}}, 0x0) [ 1178.274637][ T8518] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1178.410804][ T8518] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1178.509841][ T8518] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1178.575921][ T8521] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1178.609129][ T8518] EXT4-fs error (device loop2): ext4_fill_super:4667: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1178.732931][ T8521] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1178.776928][ T8518] EXT4-fs (loop2): get root inode failed [ 1178.819639][ T8518] EXT4-fs (loop2): mount failed 15:37:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) dup(r3) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8384030000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="cb6cfbbd0682602b92efe29c4ca61f35f5daaf64ade96699c546e1e9ff82db9afd7f69ea8b3d319f7d0f15e9f48c6b543cb494"], 0x3c}}, 0x0) [ 1178.996242][ T8532] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1179.037940][ T8532] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1179.139596][ T8532] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1179.174140][ T8532] EXT4-fs error (device loop2): ext4_fill_super:4667: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1179.198576][ T8532] EXT4-fs (loop2): get root inode failed [ 1179.213787][ T8532] EXT4-fs (loop2): mount failed 15:37:48 executing program 1: r0 = socket(0x1d, 0x400000100080003, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x2e7, 0x0) 15:37:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x3) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvmsg$can_bcm(r0, &(0x7f0000001580)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001100)=""/92, 0x5c}, {&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000001080)=""/41, 0x29}, {&(0x7f0000001180)=""/188, 0xbc}, {&(0x7f0000001280)=""/68, 0x44}, {&(0x7f0000001300)=""/164, 0xa4}, {&(0x7f00000013c0)=""/44, 0x2c}, {&(0x7f0000001400)=""/157, 0x9d}], 0x8, &(0x7f0000001540)=""/13, 0xd}, 0x2120) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f00000015c0)=0x6, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000001700)={0x0, @in={{0x2, 0x4e22, @empty}}, [0x50, 0x8, 0xf2d, 0x5, 0x4, 0xffff, 0x3ff, 0x81, 0x100000001, 0x4, 0x80, 0x4, 0xb0, 0x100000000, 0x3]}, &(0x7f0000001800)=0x100) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001240)={0xffffffffffffffff, &(0x7f00000010c0)="bff17207a190f57372a6b7610d05a9f6ba14fc9ab109db9b5f6d87704b2d", 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDSETLED(r5, 0x4b32, 0x800) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="674c906f01bc1afe53cabda9210cf9e3e4192b065f54afae475836dad542052d14a5b5b20800cb0826c7349af307e687b379dc1385a0bdc7425be837b8b3e3d513ca165629037e8ea549fb3e85da0e65b67abf35e4722fa716df2866f38933a316290201dc12b62cc4b39b376e0bbefe186edd0a9dceb70c0cf10fe3cec023b4d18acb720b0c0bca22dd5c6fcf21d7133907c04296282bd12522a0e5f8fa236ace7c02a71cb0bfd7a01039fb7f69ccab076dc78a42792df8194ee278d914ce9f7d818e7cb73eab36dc2d5ef2cff37e51fda5f50bb4ca0d9b1f396efb02ee438890804c97259bcaf7340bfac71c0609b00a8219b999db4ba382ee1714d9306037ab6f88707e058e3e39e55dd641362e056629077e045ff87d652bc8dadbd18423441d1d6cfc65ed0f1efbbce39f5812ca6665da2fec3548eeeb9a6b38754af7650605d929f8951fb1a3c27cd9b8214898284c75033ba1348abb35af12dc0b1d6c7a2aaa6452467751e422d7ae6659deb427d56e99b18c520d134bb0a403d9690e74f6d44c6ee9d87f6a80c48ed582b78fd550ae3de05494afa15f55519fe1cd894b8d497ed3fbe831b193657c28bcbb27f6a6a2131df353a106083d197719ed42733649a3df9c68713ddac2f5e2bd04354b91be1b5e10765df1ef6d5b6bd5701e86bdb9f4c7c8f03d6f9fbb4f593a5c22930e37f1a62fc2b8d5a68005994c317e7c84b4177defeec4e10b852b627c981c935dd8505df5112a3e3eb4dbc3bc715938fee73d91080329dca50dfd88df1db417c137dc7b91a5b742c14f3c3c73a0edaa02c8497b77f32a6c11929aee162520d67e41ee78dc1dde990a9a9c87175cafe5b9bc76bf559f875478ded01ed6ee0185a5310ab901f4beaa1afcadf06b87f25add88779a7d9478d547e5a3abea611c88510a5aec2bb01bdb52b87d42b857cb5aeca7d8415ee23af89d9eda2cad4684030bc22df102a3fe10d9fa58065c60d150f8a77e26d31f1855a140ac24351806b05140e67296a974634cbd90b60672d6bf1704c9286ada993b4d5e3d7d42e8aa2547ff501df39a155f1084b3497da42b9f96b554a2660662c80ea1006f66f739ec440ff790aae80812c4845e40301b159d21d9908f092cee579d3084cf410d6eff2d0a9b079fa322624ba110ebcb68ae3563595d774588d9c23d896b434524aa6fc3bb6124c61a751983266bca4e4dd18f5fefc0f3071a57c4f7e1dbd2b51cc2d9ec37c0d5b8d304b31c53b9a2a3f9321fa3112d6fa71112ba66fe9c050235ee58340d74ace26b8012407f5beea3506722617a03f00cdd54dd572c709f8b518017cfefe27975e89d70a7af7ae54919c0aead70157468548721e88760b1e41188a7bf91580a78e13363054543868e448dfc859daecf4a1614f528db93126e9647276d54e41dbd197cf8909ffe1e4acb34376ec5d24b06244ba9c48cad6f05a49ad141a9d247f5080c6a0527191a5ca96b6f35e7ef93f81c25e2d5ba671c456567a75c3d38a006671dddc5f89c5a3f5f942cb822d164f8dd13c11d9afa4a48eefbbc6c55ff8c39fd5e7f434223b874c4a12f23db3850128bfc809faf88e8636be02e68b04db60531599678d3a598440f55c1c02ac9c9d9e2b0aac119db99bf5711f4567f8dbe155e53d409a33a10a5efe0f0207d88eca00dd891a4db6e7113c327e66450f3df0eea775f77f3b488fb3b3639d345af3819fc3d164f78ce50d44b9f66e0b729176827fea21e9578cc38d76c652f362cd59ff0b77b49a9f12ee7aaccde07df8ad98066f267ada51e4b6a39f033ce46954200f7111a976acbab65cecf3ffa9cb7d5ef053425a31c930ad0d6f59379c0cfa6670d5daeaab24c4e33625abcb01c5a863d6d7f71a065716d8f1c257eab2665a27b9fa26b3c0275de42ea85dc2b0940c4fe0d3c2346d1e478ef738d9171c0f766939cc66d2143b289afaeb1e53f1b6be2381b9dc104fef0b90479090108f83f56e3f388f6c6fda2e6a6b30f83cb5c32696cfb45fb4bd105a7016d8d754db3f6d347ee20915d75e68035505fa4ab81a14e0715265cb810a6bcbfe55386d52443faf965ae6e4153c66aa5bd142371941b680c1db05969091a724a066a42780e27d0287be164a0ba9a7a02262fa072a4e30e402003f8fba497947e4ecd2e590acf96b7d44349931e44a99dea51bf23b1bf0a2b9d68b9ca115014c5257d7daf0f101f2976271dad03ce781c587eb525d1cb48889a7063f3ee38da92c15fdf5a5eeca59d5162a74d3377df03d64392d3904422bbf798320a3a20c0aa7621f4a2fe5546e849b700b0f441ea1c8945cf3b4408ec6ea007cc953a5e0f331b1ee6cd2faf63ff5efe727b6c1b351f6c21653e409945bd01d04dee6357e1463bdfc8a69cc02a467fbd6296461c4d96fc2af9ca4d4030d0a66e63d3812d5b45d67f837fe4d2b4d90496c60b40f909289f13bb3623db492b52fb2741e6eb0a79fa7fd54d3a5df44abcc7717345a2daca5bfbc1c205cd3c2f7c50eb08dacb406ae217501efa90831b18b1a8d36915ab57a534317e4ce9dd812e34ba3d47a640e4d3242405d3e9d80768b3b73299622560648c5e34d9277947281945b225d0065088bdadeb51a76b393f16b90ce51c20855f9f67bfe5386c0b8fb80f4d6b7fe119f40a12d968d2441acd112f9dd5e6858e79b61c9059d4444c1d6e5a1d43ff11c0121dbe900beb70facb4fb17ee18991728dd8ce0327b5ecd17ecf9fd8edd9aa5144eacd8ba4e214e4606d0d5064419acbcc170bd1e661be3882a204347bbe0bc1248e9cbac1b3d4cc971390a7850bdd0af6bcbe9eeac70bd077c59bc4fbfafd8331a11cb47679be3cb448c224e3cc92bd887e4a317fa4c9f090b8134279eda34757d04875b8d8152b4f0dae61ef5b0090ca86c2d2c0499799427569b97a25d590ab2c0a56c246e3432f9d750d03b24bfef9f695b9213bf6f6b7c21dc04c0bad2ccba7046d5caa4ff5288db9004da0d22d7f293051cf5fe88b3c37115da4799a6e528df8718f7cf0414ed84c2e91141ccc6ab42dc39872fee28287dc40eeeaabab0cf7652ba178fdbb733a1b5eebbb1b693ec742905b53730b6a2f43a0b7bb1b52d16c332cefcd523e33261dd24fccdd8195d7bd5dcfc69e0b7c9277477124ec11edc1b909262d4a08ef8352f97565db9506f3cae0c3ae2175d363a8cb05953ef828dc8aee4d4ec669ceea4107e0311a69a496e05c4dbb37c00c0237257cc513ce9d5024e7f1a9eb49aef24f595ec683a072519b96b6e9a9bb99b3e12f8e4ba0d70f4d05a6a474239b2f0880aab2834e74a466622e310b71363f57df5bf90d2b467dce44d0161686b3be2836626227d609278d690a3a99d9cc45149594cb8d0ab444cf472ae2527b003de50b7a7350d140a3830c455b6dfd1e75081594d4d2f9f0f08fba00ad717a679539b975a3134b0f386b2b3e521abf26d4b8ed412ef10ba327ecb39437c68db321243b28bcd7407bf2392c18645bd8e1f64373885231e5d18ba7b0263013e06b1dac304d2df7b366c7095112de6b7968774aa096f88626edb2c584d5cc33a8edc485e289549707cbd0f6e0b2a33a1f44396dc32ee18a825e547122843f61a0972d1a529c671691e0e5a8220b49b0e26debb227cb176a88a72f0e0b5d498ab540cf2a5b673b6c559693ceebf06db0459b61cbcd7ca5af077f16c11ad8a7f047267f017bc3288bcbb4c4c8ffc474e006166cd16baf50066e2dda700222e250c429daf47584efcb1ed43b07a1077479ecbd75a79e85a048e17c6caedace8b3fb02dbcea1618461fd0f2e78548db3ca467312ab3f90680513f17b73cd888e8a20fe8b38eb83ae1011f8bcc573d82f31f52c9ea3282e0a257469308ebabbb94559d26ba4371059d6ffd5086b96b49992ef563f3f9ec1e38d9a2c05d2c35f38bdc26eca293a88b5114f065b5f555df29403e131c0725994570ead8380323cf7ff678526b564012fbbe0b183612cef24bdd6d1d2aa562c3c153277fa19fb2483993b8d1f13eac9c30f3ff8f9bf9efce0c6bff88a477f561fc79647e731dbc393e34191386a2d2adaebf19ab16f71d6794dfb15428b626f7893c596805e9aff16e5f29b409bb2ac976d3a6e17f7506b80b8c0c5edcbc2404d090a22d2240ae467c97151bc6f6525009eebd86e3cfdc0cdafd75ef849c45102672654dc02c555ff1c357255a60165c2d565a66a421461221c26f55fc482383c8ecb5645b14821fd56f208faff5adf6307398ea17153006289173122fd0d845d79660eddf40ba19ba13968b9cad6e903184e9db2b896b880d4b02fba590d4d77d5db8175168898ca6b6f35f38582fe27086ebdd12641c882b57d76f96dedf9344e19096bfe638fe062c498bc95af290ba74b9ee88f3b290b3b2fb2f1c91d4a52257e1b1541fcebb02b558c30d860149f80345357453cf60735d79538149d1b337301e6d1c387b5cc93476de6e7b528d0e1a1c3f1027f5f8a150cd156730864233fe7bd5ef8ad34f43c1ccdb8837235f70252636fc0d311cf6c13377e69473f700106ed447fda884fc2123f4f0005f6e9cf1272a15c0f0ca3ff8d9c3f6c51066629c8434d6a6442963e5eb494972cd124fe6c0f06bfd1cf699c12c96364d7b4e3e12f00498f1e3bb45d8bf30fd46e81e65a8894873271bf6bd2145c03e96b3efe1709ba0180311532b1d33b5895dcab5d89ce9856e8feb7dacf880dd92ba39d13ab719f4c8bd1fb0ddc87e92b207e37c02423117502b30d22dfc8f3c85b6782b695d35171bbee63e6cda9f9ec3c41d26ba12bc96a6a9fff8fb40c875ca331f46bae3dc7d3997234f56ebb0e4aac15ccc7243485480eb2bc73a3651a183d03f14e13599bddfc3702e8c5a22be5314ccb735338e17cfde59dfba424970527d9820d8d5a39a54b9476f5010d5b91ab94121b719bb84cb64653c64ad764cab17f8e8aaf65a2c13c5b15e2969ace37f218e863a087d03aadc5f50b56f44c7056d769da3f114e2311944988eafddf38d899e843cfc98d3d475fdbeb8bbc843cc43560f91caf54a74c9870db914479f2054f2e1463cd73fc25e1632159a7330", 0xe16}], 0x1}, 0x0) 15:37:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000100)={0x0, [[0xfffffff8], [0x108], [0x4]], [], [{}, {}, {}, {0x2, 0x82}, {0x200}, {0x0, 0xfffffffd}, {}, {0x0, 0x20}, {}, {0x0, 0x10000}]}) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYBLOB="3a02bc9c2113b57eb189e4d7ce631b6985eabc10bdfd23ca0a3e61ab320c8edddb20a9ae601678e6360e3fb7d7deff00559b1afdf66997f51a8c81cc444e0b69c55d65fb3598790393a5c6347b4a10eba84ada8ec03cab57dcd4e058a4df223ae18953dded5b5c6d51ec69332588f32ab568bf1e184623849bb11a599bb443d537e3343042d900"/153, @ANYRES32=r1, @ANYRES64=r0, @ANYRESDEC, @ANYRES16=r0, @ANYRES32], 0x2bcf) shutdown(r0, 0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2b8, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x80c00) getsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x42bc0, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 1181.771959][ T8553] can: request_module (can-proto-0) failed. [ 1181.853317][ T8553] can: request_module (can-proto-0) failed. 15:37:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_REGISTER(r6, 0xc0385650, &(0x7f0000000340)={{0x0, @name="6dc00b54d86371d3f1dd3f2298c95eba1affae02896409896fef157b83dc6ca6"}, 0x8, 0xd30a, 0x8}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x60, 0x4, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3f}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfa}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x200}]}]}, 0x60}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000010000100000000000800008d2b0000000000", @ANYRES32=r4, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_DELRULE={0x2b4, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x268, 0x4, 0x0, 0x1, [{0xd8, 0x1, 0x0, 0x1, [@synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x80}]}}, @connlimit={{0xe, 0x1, 'connlimit\x00'}, @void}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8}]}}, @connlimit={{0xe, 0x1, 'connlimit\x00'}, @void}, @masq={{0x9, 0x1, 'masq\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}, @counter={{0xc, 0x1, 'counter\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100}]}}]}, {0x40, 0x1, 0x0, 0x1, [@lookup={{0xb, 0x1, 'lookup\x00'}, @void}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @void}, @dup={{0x8, 0x1, 'dup\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}]}, {0x14c, 0x1, 0x0, 0x1, [@notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}, @counter={{0xc, 0x1, 'counter\x00'}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x400}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3972}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}}, @socket={{0xb, 0x1, 'socket\x00'}, @void}, @hash={{0x9, 0x1, 'hash\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x2c0}]}}, @masq={{0x9, 0x1, 'masq\x00'}, @void}, @redir={{0xa, 0x1, 'redir\x00'}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @void}, @meta={{0x9, 0x1, 'meta\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x5d}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x45}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4c}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xe4}]}}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @void}]}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x304}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x43, 0x0) 15:37:49 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b47", 0xc}], 0x1) close(r2) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x3}, 0x4) socket$netlink(0x10, 0x3, 0x4) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000151ee499f2a26179b00000000000000"], 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r2, 0x0, 0x20000000010002, 0x0) [ 1182.063248][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:37:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x4000010) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x480000, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[]}) mount$9p_tcp(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRES32]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x6cccbb43066a5929) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000500)={'broute\x00', 0x0, 0x3, 0x6a, [], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000400)=""/106}, &(0x7f0000000300)=0x78) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6c6f77657364693d2e2f66696c65312c75707065726469723d2e2f66696c65300c99253b3442f3c25058edd08673771ee3a3fe09e60bb513ffe6ff844530581935b2f33ae824def09142cb48f16023c0f3c478f90ea0147ba8813b4dbce52d7e004b5f204ed2b738580fa762f9e7647fccd73612174639f9f2deb0b68ce2828a5c674c7249c5a56c41e7bcd637bb11d65cf80b42c4a0bc9e3929c8892b596e4993277a7a4c977ea779c351297dfc7686"]) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0xc010) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 1182.139267][ T8573] device bridge41 entered promiscuous mode 15:37:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000100)={0x0, [[0xfffffff8], [0x108], [0x4]], [], [{}, {}, {}, {0x2, 0x82}, {0x200}, {0x0, 0xfffffffd}, {}, {0x0, 0x20}, {}, {0x0, 0x10000}]}) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYBLOB="3a02bc9c2113b57eb189e4d7ce631b6985eabc10bdfd23ca0a3e61ab320c8edddb20a9ae601678e6360e3fb7d7deff00559b1afdf66997f51a8c81cc444e0b69c55d65fb3598790393a5c6347b4a10eba84ada8ec03cab57dcd4e058a4df223ae18953dded5b5c6d51ec69332588f32ab568bf1e184623849bb11a599bb443d537e3343042d900"/153, @ANYRES32=r1, @ANYRES64=r0, @ANYRESDEC, @ANYRES16=r0, @ANYRES32], 0x2bcf) shutdown(r0, 0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2b8, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x80c00) getsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x42bc0, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 1182.233197][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1182.273050][ T8576] device bridge42 entered promiscuous mode 15:37:49 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) syz_extract_tcp_res(&(0x7f00000000c0), 0x0, 0x7fff) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000002c0)={'filter\x00', 0x1000, "d99b1b3dbcf8ba7d8cd2692e1e3f585d3c444eaf02fe1dc12575bc2d2fe5656e1618f65e58520a7fe1ba6f28cfdef065c01d8b49f68cb44dafcd8cbaa914904e75b61803f45133096df34f719e5823f5cdaba7c0f7a1ff99d305873fa2a1a1d80149a8f1ff7b7c8d6e0b85e62ffab4f89dc523859c67abc4cb1b8d2e290adf7fbbeb16adc1d35a1524997a56635bc0a25fc40ae7158e4cfbf1efe43599f2cf60a2c46097c49d59501d8d3d4b4762c7a6a794e8e2cedf4b327091799cd16ad64d16c3fd21ec4c9a3ce28d8db4894e29fa13c3a4a54e21eb404dd490fea5569e5e019af26c37fc3108358b17f9f93976136130cc7a6f70a3e82ebaa3658515211348aed5df49c5f7c387ab53be3f7a66d4801eaf08920d99b5318beae347ddf5387fd07655266da34cb374b4314af186c04ab18bb2533fdfb2f177f0649c728091093c0dcc03f13b8c68c48bb806cf7ad2481a839cb46632be1dc9c6a7bc2db2ce036bdc99258233a7a3340d7eb3e5bda1754ce668035ba43a9de7eb1d254661c8111665c5d81da256c39ebfa88a37fb6fc01503f72b13256760ad39d6a0f8e98fa1056d11f063f2788577cb07f5f0dc35acfcf84483f04ccaa194ed404800d743e69794cf64b39ff816169750481591f5555a6d1379716b1309ae760c0487355fa4cc4e45baf618e5d8c151132342fd489a0435c485597635b753cfe9d8797b65fa78774f1e09ad5ad05e8c9a2aa4fb3ad6598c415e2f281cfccc460d36ea84a749ad691dd2d9c646bc288f123e8d042a54156979c084af1160dc01157d2d1c9a3cfad655788103212021f1539db271353eb5aacffd6880c19bd86adcd8b030546e63583f956fe4bf9187f8e5e6158bef13511bdf974243581d5f613c631953d3b96bab3eba0eda85f40d10bafc15ac21e59d605c518d6a5223505969bd1a867126d819f8485e1d925aaf1ed72fc4eeb63a49c665b3effdc67e0cb76da997c9de7f55eef7c0ff7dbad6277b1d3afdf87509091d31360f776a14a444c15b28944de16c082fe6d38790ac8305da68c5299523aeb363d307f109d4bcf7ea05f3a29f0cfb9cfa61dfaa93c3f49e174ca02022fae35b452f6a3b1deb4afa5d0400f211fdd47a788ef86c0aaa8981d05b5fe4976aed52b73fbd1a141b4d273468dceb05c44782a175f18ce59d78d5fa4ef3407dca087446c61b6a31dcc4867768bec6bae41495f395f42b086cee96a9563f84b0721d6cea4d2e24164b7b6a3fc3dc4d0bc089a7414c3a8ff6cdd191ac2ee9d99d84441dff7e9ac0ccfde571ac2c7ca6b55df369634e8c1ad316af085f3838edce8ba975ce5f7b1d3a5c2156db05e292f12217e2ebe7e797a0fa8c8a6b5366383e2a65bdf15264391aa1c145a0639cc50a8b6fcef54ed9663b08d34dcef957985562e56333420b3be73de55aa6d25154cb9b91c0a4c7c6807681a0c4ecdbe2294f9b043f1feaada94c28b035e71724e406ba8fb3c0f8cf625234839b437396f6476c6be7f3e9fa0b75b92196855791bf8964b9330dae57a2f2d66c614b766524860afa0c08fbec2643386d61ae74c9593bf64158934f73753a90685eb11c63f99c137056f323be1027d5b3fccc93dae6cd5edb3b3ec41475e13eda8da9ccc706a220290367c6fc4cf0d2cee60eda4b8416975b9a958182bce1eeef380f5f9eb2e56a08c367cbce4eb5ab808be110698c5b32e3e80a3d433aaec254073df090d2a6433df67a2e2a40b4ff5cc9ee84a739f1aad6a478002dea2d28b27c41b610beaba7ebcb2082b92b8a8b613d0ae97fc8be2e7cddab925f9e96965bbd8a6ac1088f1561f67394c48cfe83380e6d83a4c0a8a48afcff1e68677f74a4cd70e40f99ed0fd7c0eacf703976f67945f66b08e3d8b4749acdc7718ab8f8befbfe4a8127e237181d07149f6177afcd57663f18053181a6f56de7a580ea38d784ae4f94ec531f528788fe8b9161858ac663b20e75f7718ee8e4eb8fc8bbb15683572c787251bbb0937afbde28902f660ff585b7cccbe9a3ca795852e1e968a8c835021ac94e1e0ca160b1ebb498a57566a0ce255896fa00fc595bf7d7bba44229e120951aff799ece36396259862a2c93ca193e9b9230ea7f42b4bd210d859008f7d85d45bd36c7d52312c0fae7129a5fa9be5dc51c9f114f1aad9d8c423994c17543d64d5467a44a3c26b09afab8ed37c26cfdb32aa6f74cde5b2b65878b0ea362d3bce3eb0e627c4e6457830940b944310ca91a245ddecd0fc336ab424a44483e4e045d45bd17a8dcd80258c79e5365ce4f9f4cc274f7bce4cd9416e21873ba33496867a135c1c5e01b90f2a99b6dbe9bd2339ba7e3d212805761dec5e420ce39f9a856e1625881d2def70582dc47dcdbe9eb01d60aefbd42d19ed1fefc90b2855baa3ed7c6f6acc5657f961a57ca573dfe5b56bf9077a0f1d42726440104278304c7c26c0650f31f176c1fac6ea00fbdbc076378dbb4dc924aae449861b7d55f9120e0bcbb3351453f01aef4db6c9fe2435d74dd18d05d57a5cea1e8d74aa9bf477042302462781be8fb5238c2c476d1decf327f3850ae8880615f5c4ebf2a28523ea3f7689d717a099be065e454fd27090dae8dc2b3da7c7b4e84abbcbdfbfa42cb54c11029ff50c8efc036a4884e31bd16c28cc29bc23a3b7699ef235bddcf8f572e61236a6b51a95a93991a26e13ed809110c2b31c0e3488310664d69dea3ab6b21ab7fa3bce2f090d8d53f2a173a41dc810a55fc26484368affe41d745275c10ce39ee28f6d1e1321580cb54f7f19e61dbbf7dbb63936be569cff2db79a6d2ebaf761218ff9e7d6588abcfc867d99179be34faef34deafe027d002f2f73b362e581e286f2fd871723e73ff70ad5b175eecca6086acaa9820ea169da4a1a1fd0cac92eaba300f425967475e3eeb77e5a0063d3021bcd412bfb6f67beca69666f8cfab1e0787e7eadae78988e1894466eed0d3e1e8df26382aa965f6ed4cd5854fcbe45597d6ed3c753697451b66b95707e7f3d36043aced5531f9cb65fd91080b6b2a300dd8e9ebd57151dc5b1d4acc4282d5597048c77d0fe11ea8be89b4fabbf4206ea780243bcb8d511f919bea4cc5907f894cb380189bd223198768653e9f223e21fdd9fe4b9c304d51a6a595c6a9d34231ab0cc365f7152ef48687405a06021080439b7f245d8f053db1764bda6d929248249856ff5c2b6dcc9d016082e75a218c7cc113d5b4620318decde1273804630de5b1007643703b04b1f609055535b2c00c4c12292f3b41e1f5e2a0fc54cc3d0a8aac0536699d694b85c1f03fa70c0d8d2341d340316c25968aa9629ec970aa60fb9ad1962f7349405e411b6447ab8c07332e1e27e61f85d295d08f33f92ce3b4b3ef7bbbde5e0de2efdaad2a9a380c564b7b2ca8408ef4be4137dc613a8ba37bde95584b4a31bf10078370887039eb72cbeb52635d74c673a5e692c2a849b6d34923fc73c077490e1b8cddb6a186a1a8899d7c70d8d277ab68b9267c012be4dae4381575e48b54a82f7634edf40bf7ad9dfdb61ef8913055d5c45f496b122d424127e40334c3dc6e1b5422b7fc181136050689e7d7316a97e3d7433d03f2b01eb2c5057c85b3a3da5e062af1f571f38b04b792338cc33c8ffba3946ae015b36e249fb8f893fe2e1d5a9cb48baccade550a29296abf146d31b35e526afddb07fcc202f0b367016e178ec6e090f7e8991a8fd40b44d4a272b9eeb9587a50120b13b4dec63f12fdbc297436ce9cdf8c169ee5c231d42325bd4bce66bf4e30d7682d121f8dec5f3709e065d89ed531e6aaab02c6803333d3baa19a4bea5f59441bd352f1237c0cc36ab3bf7b6ce18d8d9e4ea9366072a957bc6574d5e3e59d955a01eb358bd2a2d29ddca9fac132e82b5bf1b2ce23ebe73668afc679437770c96567f6647ac6ff1739eede8abf1b3e8b81d5c36662af9085e36e0906a1e7477ba25ee9861e25bafb4bf1004916e35f4113adf7b110a1add2044a80f3ccd4c538a39e98c71d8a49bbb8c3163cfd9b6cf195f60aa4c41587983cdf93a676211e3f1302ee612985952de10a3213e03ac41f6884bed6d8a5156b1a4de56fed18955af67fcb904b4fb50fa723aff7bfaeb003d31760c707f67b54dfb20c143322681c97a14aeaf99a728c71420dbea5675b3e658c6ee560be5884cd948ac7766746db46a545d35dafa67c1419e2b5b0320ae64c4f0171190a9c9195ff834fae650e7142523d25f23ed0b73aac4022ff7e1daaeba67c17decb609691de14855bfbbd8ca63a870a196d1ca6466f333702b3b15b3c305248c7d83ac68aded5714c6864f55fcbf8bfd92326da94fefae7bc426ee8242bfc66f6f7f731a6b3aa27c6170e431bf8e60c27f52d017b33c0b5e1c1e0bce6409c4fe6161b79108e88768669ad9a34d71deea7f8d963075734b65d733a2f751909784801b700c5c5e27650e42c743d1b49c4525d58b94678541061e38988e6fa365ec4d713f19fa3c644629fc36371f7b718bf9af5aa71394ec09fdfed4672a1cb7455b9afdfbd24a16028a343623a288f5f99c8c0c79c5c5a6a586d50dff5d67951173152183502d33b30014415fa012dc8b12b0859bb093652eb8df2250f27146ff915648d0308120070305686d8fec609043d026a76f6b7b25b8de26837a901073d4c40d747e0bb1d965cf8cd2f8e2276c5d49ba5794a594153d9f5034408025931837be33f08d3decc5ad7c8ea0f61873898ca950e4fad6c59ae436a35cec609f70e2b95b142ad032c518b4523dca51615e52d5468ee184791c5f52f6ff73d809e377ebdd2105ed59da5efdd8e5f9f279d02fc02f2c50ef859b025402235cd5a65ff305d03c66c20e4271c2d267fc253e80d93cbb5b6dfc4dfcf91595a7b9b7c2e4633318a05e0c4e2be1f01486002f4faebe690eaf038819aedc3ace7f8fe6805ae33db1482cc4782edc8475ec166c4a0cc41f93ce5fa92e9e005172d5ac835bf2c7fe70bc71e697454a98ac65a120e0a6ca1d6d010c7b868cb6ebb1347e426c85cc2d0fe01be2d19a168280d7c7c5eb6e4c855f02a966c4fa042441d31ff3b81616531a5fd9a08a7614a3755812df497023bb58f802bd35ce905c36e66273f53992f5c7322d50968173be9a5bcd8df7714b57204e479afb7deacc77576256dee50abb8323d6065b0f6ba54fb68b617a3c41112bbccf71a180c8e13098bc5961f9434a2b59decd50f68f441380941f5509301ab91c47b4ee1c4e3026dc2cfa86a0386a3593d2c662d8d69c6307869437407aa3a89bebb3d381ced951a51d84bf6b1ebab56cc668965c76200c730bd51c55e68795468922e2b0c75af41951f2a9cb3bee09c032a5d32ad44760fe57287d0b4d7f0215987be49629a1c2b92cf67c7b94c5efb7170f05cab2ea8e4a2a77dee89235e2d596b169b6a805eff87cd949008fcfe58c365c76e94b63c454afab06689ba213bdb4f86959a865a5f6af1270afc903ebea2809b03b370ddc234702b7d5603a6522bd430964a7f7293a6c3162bb8ecfc53c0010f0cafabdc5597edea418af525028c7fb33fa5f9fe5cfdc1e89b1ea8511b8fabc475efd478236a12fe2eea2942f26309468452d2290fff1339037c28b2ed3ec7a89f6d0907de13d9e58e9757ef927285be2b22bdd9bd6ef8087af3c57c4be79458e327fa7cf4ba79764df2b4dd7165c4bf398b078535958b2251f6bb6b40c089775547399c2f04e907372f7e73977cc7092cc3069ef2ab61a1cd03e661f5021e6a7c6864e37c"}, &(0x7f0000000000)=0x1024) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, 0x0, 0xfef0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pipe2(&(0x7f0000000140), 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:49 executing program 3: r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') creat(&(0x7f0000000140)='./file0/file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)) ppoll(&(0x7f0000000040)=[{r1}, {r0, 0x8202}, {}], 0x3, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x1, 0x0) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendfile(r2, r1, 0x0, 0x1) [ 1182.461817][ T8590] overlayfs: unrecognized mount option "lowesdi=./file1" or missing value [ 1182.535733][ T8590] overlayfs: unrecognized mount option "lowesdi=./file1" or missing value [ 1182.570208][ T3168] tipc: TX() has been purged, node left! 15:37:49 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) symlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000140)='./file1\x00') r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 1183.120593][ T8604] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 1183.256937][ T8605] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 15:37:50 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'vlan1\x00', {0x2, 0x4e23, @empty}}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="74729eb4623d7463702c706f72743d3078"]) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) 15:37:50 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0xfff, &(0x7f00000000c0)="a34786bded5828e4afb47ca51ab3422116a667a6fa75dab4afc5441ee79116fd117ba8100eb2fb93ff10e24f529c09c9b83bb10529cf356ab341a2f98015853ca50eed") close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ftruncate(r1, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'hsr0\x00'}) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) 15:37:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x8c080) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, 0x0) mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000d40), 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x151040, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) [ 1183.544794][ T8609] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1183.575681][ T8613] 9pnet_virtio: no channels available for device 127.0.0.1 15:37:50 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x10000, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x4e5d, @loopback, 0xb368}, {0xa, 0x4e23, 0x8, @private0, 0x5}, 0x7ff, [0x8, 0x20000000, 0x3, 0x5, 0x1cd786e3, 0x80000000, 0x3, 0x1f]}, 0x5c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(&(0x7f00000000c0)=[{r2, 0x1010}, {r0, 0x1}, {r1, 0x4200}, {r0, 0x2000}, {r4, 0x2}, {r4, 0x404}], 0x6, &(0x7f0000000380), &(0x7f00000003c0)={[0x80000000]}, 0x8) [ 1183.868232][ T8625] QAT: Invalid ioctl 15:37:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x39, 0x27}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1b9, &(0x7f0000000100)=""/153}, 0x48) 15:37:51 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r5, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8194}}, 0x20}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x510a1081}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}]}, 0x74}}, 0xc800) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0185879, &(0x7f0000000080)) [ 1184.149979][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:37:51 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) move_pages(0x0, 0x35, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f000026bfec), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) [ 1184.213636][ T8632] device bridge33 entered promiscuous mode [ 1184.244619][ T8634] device bridge33 left promiscuous mode [ 1184.259315][ T8639] device bridge33 entered promiscuous mode 15:37:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x8, 0x4, 0x8}, 0x40) socket$kcm(0x29, 0x5, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$sock(r0, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 15:37:51 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x2000000d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@md5={0x1, "a4ecd816f30421b2c498736cad0f3315"}, 0x11, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x81) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x200fff) [ 1184.731986][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:37:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 15:37:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x74d7b3be, [{0x5, 0x74d7b3be}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000300)=""/250, 0x3a, 0xfa, 0x8}, 0x20) 15:37:52 executing program 4: r0 = getpgid(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x3) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6900) ftruncate(r4, 0x800) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) r6 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x10000000, 0x0) ioctl$EVIOCGMASK(r6, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) write$UHID_SET_REPORT_REPLY(r4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r6], 0xb7) lseek(r4, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffa) sendfile(r4, r7, 0x0, 0xffffffff) 15:37:52 executing program 1: open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[], 0x4c4) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) syncfs(r1) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000100)={0x5, 0x0, 0x9, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000480), 0xa198) [ 1185.717981][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1185.717993][ T29] audit: type=1800 audit(1594136272.803:138): pid=8659 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16034 res=0 [ 1185.772878][ T8660] BPF: type_id=5 offset=1960293310 size=0 [ 1185.778703][ T8660] BPF: [ 1185.813796][ T8660] BPF:Invalid offset [ 1185.818739][ T8661] BPF: type_id=5 offset=1960293310 size=0 [ 1185.829799][ T8660] BPF: [ 1185.829799][ T8660] [ 1185.835979][ T8661] BPF: [ 1185.838749][ T8661] BPF:Invalid offset [ 1185.869970][ T8661] BPF: [ 1185.869970][ T8661] 15:37:54 executing program 2: userfaultfd(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x7f, 0x2, 0x0, 0x1]}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, 0x0) gettid() setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) write$FUSE_STATFS(r1, &(0x7f00000002c0)={0x60, 0xfffffffffffffffe, 0x6, {{0x5, 0x10000, 0x9, 0x2, 0xfffffffffffffff9, 0xfff, 0x8000, 0x2}}}, 0x60) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f00000001c0)="0c268a927f1f6588b967481141ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67a683059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x4011, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 15:37:54 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) r4 = dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r4}, 0x68) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SIOCAX25GETINFOOLD(r7, 0x89e9, &(0x7f0000000040)) 15:37:54 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$cec(0x0, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x8, 0x0, 0x20000000000001, 0x0, 0x0}, 0xd) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) listen(r0, 0x0) unshare(0x42000200) r2 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000680)=ANY=[], 0x3f00) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x385000, 0x80, 0x1}, 0x18) sendto$inet6(r3, &(0x7f0000000400)="a41ffcd7a6e167201fcbacbefeb6e3ac278852766d82c8f325454e405d0cffd88e2bf648f39543d983bd97d9f1b3c29ba45bf6f24db3c1691f71d31a5f9a707113f979c6a6f096696f215dbf283a37d53ed9378c2458cf3accd2f58c397bbd1d547fe4d1d69046af0c92e4eef5f63b68aa255572024c6f04bef959fba2b726f77f8e27a3d1302e6becb8daa6cee8cdde3254cae9350cde56988f9a8321f637607ac31f20729c398c886cfd2f2a7492c7492310ef1ff1a95df328cac268993b37e4d4cdcb54989142496d9277d767f47120d62149f78fce83a99e87105327f01fd04e570c06986b62d231ba1c7400500c0047a4cf3d695315feef1aff098750f04ad378c5f7d1e69e898cf0ad0f53f6b9f997812608f25ddcb313169310d169099117ed0ed7584c5dda80f9798db02a688b33e6c71666ba96e2b6a45daa94472303701be3f6b2b7068e096ab9c384e9523febb1a7a5315bfaaa5e16a6ced5c135edd5ee380b8fb05b381d25707a0a3f0dcb8b2874ed03e0b1c162c977429efb7c3ce3689edbc0257285ae837a02fe32509bbe0838dc60f0268b7f2801af4271df1fa810065961d2a5ed4d62a5459bf0f3c6fa260c4b8220fedb96bf05062fb027b7c6f396805c34b2a5b838df1adf7f0ac4b2ab3f2fab8ccc42eeb27791890ecac5af98c9a58082f0b7bf8fc8cc0760f145560a9ba49dbb0fb9fc17dc44cb8c5e6ced06d6953bd3e3fcf721ef529bd722614c73bab5f5ff903abfea80b1833c8377d67706de201b98646ed788875a370dbb65e49408516808f9e22c46c9de7f1cffe6888771957985a1a43e040768663545aeb80e9dc44291f641925d829a488e713cc357890d517ac6561c155cb181e8be404c5bbad482d5a1865e827d7ae2ce38c1d31b0930dd646f593cba2a04399fd832d6b5519d2944e458c9e215736f464a1585af2973c95f48e93e513be617b0b85735345e289c9e78e3d99c2002b94472aaccfd9c91322d91c084b4fc41985a4c0c39f5e3f061f2abffb4db9640d6ff99ec557d705e1779851d9480605e67401f8f99ced583d71b805242b1be0367dab465767d37de29437cb72b4151d793d5817cdc25c73e98c60bc7b989888dd2bbf72e17c853473749fdcc36c1e8a6f45c5a99206e96aca3c536eb7f2baf787a085c1371ea2c74b33a3ab3fea04719eb8064a3b6c6f0c4ab7774bba3488c5858b108bd74afdf8462cb1de7efa1b179534225f262cb4ae7e9058edde92de7c6ba1300ac4e23b407315d569a00ec33a7e36e021f88ea81c4c6bf1a14b6e74f72283c10f416cc6809a3b84e4e128c67fec5af32fbbc2be0846e74be5e8f0c26fc1b0585a78f40c40f84d5bc9d5454a6601084d09b1eb9007d43f4905a37c752f7bed43db4aa14b60862e6a12f79b7dac99171bea12532de6185a3f8ae1e43c2d23e86e92f96f230a829c568e2f7884daff72ed5da71c1ff57dd04d93bbc317101fe4a9c74135d82fcf13e7f44a6d4690898976ea36e4774df137a37af43c74af670ba0bf363c6ef189d5b84c6b34c320f69c05e67ae1688e8836d37528f436cd478576d6a7a4b01c4a8a76f95aaf5e3637bbafd7b772aa5df149c8b0868a024edfccb199cf940ec657f4d74656571871fd37678e44056741c0f2a4082e1c9cbb2c4e2548aa6fa7ffb4968635919be4fb6a76debc802b490aa9b9af9e1ab9427b08c37ecf653463832ff34cbda74ecbea7e5d945d1034a1546e4255c1b20d1cf882f4845a3b728eadde1b34dcd1561cc8c979607136afcb1df4c463f6a118e2b4a0fdb8643504ea6a8c1cd8c37ff592ada82f7de1e64f51acd47a1a9427e188a06f369d8a1d70d5331856ec55ef0b973095b4b57d56af64de3ee9c3d34203d143f073184c321dfa68b589997cb30a426b1368f49a4c1394ac7341daec778724f9aea1d25d5e4e5f4b12b00246293e11bffaaf9d44a90428a9a8bb46e281f3382b61f73e81544ca71dd281269c1c95047194957653a0b8fed902bb638f49014e902272f89e9cf6dcb28574ade3e2328e3b63229860b5197be2a73be2307a2a517a867af2a5f77e238f376b982e8825d0d7bf2b2294fc29d2d21388d11b5075cb279bae68693f5b75147a43bbf5c075379b2f63168cd8e39ecb19dfcc804b565d3f4c9a78a1ee0d30555979b9451f7798df1fa42d7436e31d3141c7f2c1b43255645df079e6d5f28049fa2043efd9724799b8ac305f75bd88b972516c9fc2543b031de990001ea20feb0c990cbb6ebfa06a6b1c5d3a9f6ff402c2f5147b50ff376643820bfe097f1e1738d9c00a650c52146c8bff89697e33dd1b6053ce19405e2194a476de8a7123e7bd80af915fc893b1b4e8d17575db8aa855760c2ad891446b7d3554ac800fba88aecb07dec40c32453c28696370058554e968e9c6d828ffd5b0ea0930157535c67d2e254cefc86099262642ba28a1dc14d9001c1ea89a74a0a460c4f2290ae03ad6eacf376268f7b85ef33cbc6ea6ad46172e4bda125d3063d954bbc0fc70d3436190156e1c3051b7a61b4708dd2717da0f0917c40e51e291928e6382a8aa763d348e75aa00802cd3c1f25d9a1b7746fe8c4fe1f5fce66ada9e4d067bc1f46b66c4b73e3de5df1cf48c8e5ac6afe9cff4bf608fbdd4517441682380924f89ca701f9bc88460f39cdf85b163f23d5b2be281436de7ebfdbcc15b0a161d0a4eb15c3407c642d9a070f3d65a11cd8def5f62d18153e195211c9424dd25138360444031eee2cf251afc67d471dfa0c014ac3dca79b78f55e8f5d0f70e75b7a1df40a814fbaf0304f9d8fa754e2ea2444e1ede71c410a73017f3c29064b7a6f6dfbfae95ffac38b3ad0c19461ac465bb27d3f2e64a7a0848b1091a3b4791d9a34b5922bab5023e1c9098939661c560da78638a7f43d08f887daad822a8c14e86f0b64f4597279ff9df3991ccc5236fac8b8c89b605a9c61fdba7b8822a5b9ce5909bc1323835b27b24719a3da4c9df5f60cf753681477984331e598f052038c3d03f197e78b59f356d2083e585a7c7755ccb1c38125d7cc6c667fadfffa849e4bd951612c533375a3397656d9b598bca82f833bd9097889704b39edd765a307f8dda5bfbee3cc2a1359b87a08207b48377730735465a43be5c714fe9d07fd92fde2be5079a741c8bb80d626cf687ef35e5bc6c1868c9c853531b7daeec2cb9137825dc5f2155607fd3c9b8bb61da2d7281880524a21a74c9f818894eaac7446575a082bdfe193e047af63542a4bb01df2890429b947bea571c76497d9fa1dad6003ee0b8a480b057e906d0fe7552f9e053059f5f61a5c03a6e8fde0281b74c7a8cb65374854d0c2f1793f6abbed6ca3382d6a2ef7e12580fab985aeee965c65032a421154bff53b9d5eac474d60e0d6febba4e22863cb3f1180ec31259085061fb99ffaabdbc6dfce39a29ed2d99c3c13bbc1155f4cb202dc50e25a264172b7035f9cceaebce8d67b409301d283d0a1a3f8299bc8b9c01141576f3bb2114573e5de782930dcacb374b3c06f15dc2ad244bc0bd286572601a3879687c7303923de741e063debb9368c446f1d7c0b9aaa872db075db312ea919c67fe85d0855d9dc6c1c9f407614f9fc65fed0b2e5b876911a37b0c657d7f270a5bfd33c85c5ce12fc0a54e3aa770d43006eb97ac31f618f4eea0a4c95bc0d85bbb9735a62c59c99001ab8efbaa597d3687c5f8d6e772744e8facadfe9d85cd3831cf4e3d888a059cb58157e1bc3ee8a84f2eccb45a403ec3cd2364f5db77d154be1d6d461484fe163b0fd54a2626933ab9cb8835c8a4dbee7540054473cc39a49c2c5448ca7f545cfcee599ba736549f5f4bca6c43668c4fbb205e226552b0861d98354d6100da5958f112722ac17e34a96c7952f899a3f96a2fa4f08a91819f460c06a997b76ab951e3826bacdca3a19dd6f3c5fede25261aff710b5742a82c53146821f1292872cec6e59a75b4102d2408709d9508d500ce07005e4b1fac110649cd7b077b6594f6ab057081f927347cb8e3cba792429d8bd91e07f2fad3efbda5d7b455556e4ec14dd1fa39cb94920467091fd3aedb51a5264da970645185cfc670b01b5ce824c13d9ab72ca200c36d7463f94f67b2a5ef4125c3cc034b6ee1ccce7e9f20507da475c7f5a62360d835ac92c03ff4e803a58a718b1a50952308cc4d4f8233319241f9d54240a2e3ddab47db2b130e022affec6c7be3b6e1fcfa4e253032a3a93060c07c4d862f28ab4a826e434ac0ec94977b874f362be97d07bbc581a35a853df904dd516e77752bb93339906d68f316dab7d84d9bca91a1d7304b0af17f041ef305eb3f88bf06a15c604ca52c1b68bb1c8b52819b99d99710df3994e4d356bc935104db19826ad81807a790182bb736422f1087e0ac31909ce93be76dd579847dffa7c9ab6bcf1ae18566915efdc839562ef0e4e4db67fc908a479e7d61659d1b993dbef9003ab162caf4cc37846e8b9fdda3182653ac5cb0a13cc0563087834b2d8bdd449043525a79690064a8253f2e494f13b67e7f1c6f7b52bf1a0994f9bf34761be497871ce9019334c1f671c13eefe862c80ddb159ce97563b5289ab7bc47ce28badc5f312bb6f28f8061676663d5b647b56773d6c8b7c882d848e717a47cc5ad75d956a3388fe18e367f390a8dfe49512da82c01481d7bf40fb1b5f00534438f83f069f0fd91ac9e718dbebf4f413850823935144991adada60664c1ac2efd7d5319de83039a22223e98dcc0ec38518f6cab21a0e41ea14f4782e51919c48abd64845dcf7780af2ab5830b9483eefb0f1c4398123f49b767ba877096f03bb976a904f88c051117dc97427223a42bf788ce9511310b2035fc379d195536a54e35115d881915947ce452a8ce036c69358ed8188ff0f8223dce65c2f6f68cf04378ef5b107383788b265de55b3a100cede670461d56e359c1be81aa1b430ed9a71504c8c1489a00e2c4db67ce8a08e21b8a2bf63b40fdea2581bfd0df0bdc3bcb6c7b163fb9835b780877b04c9ca21607effe1afc6f6f85df63b178018af453309a040175c74923489ef201eca5dc71b0374665ed543f22d1df321abe2f8fcb8ece7fbae48fa6a7d4f86e92ab0c3d337e33993c96d63ec91bc58cb3c6c5c5b989b006e1d6dad41daf0ea84a99cfc0f2122677f636250fc29ba0a9c991fe9a7f2e73ce22f4e4827beee37323429d2252cd5500729c195b4ea5fcbffe0f0584a8f7110b397d3948a2c05e27eec36b84472d3ee142ee14f2417bdab9dc3d4c031432d0ea973361866eb39cbc3dfc4d157dd528445747b10ddb070887b38266d34dbbd6f6baf78011e825f932e035bb10a1e1dd68b12581e9c6d1490552fb09a784cf502a7f4885ca66fa8a39d51ffd551b5f81eaea32af24d61a82020caa0bd12821fc778537d56102ba916a3339407adcc608a7ef1712b0ce96fdb79cc9a8fdaa9a6b03a5a7091b31a25240998121f546134425f391ad377f2aad3155ba4f7902d0f40cffefdf6620474244c5be54c41f0aa75822e32ef85011bec05e3aaf0404719616d1f723c6bc510d2e6888d13fd2cfb0bd03373e86301994f9e7e4eecc2fc0107edf05afa38d70d4958cbeeb4dd63863bc2cea5147f9e207d10cf7ed201f0491c33f1265a5a17c315dc560b13afe135f1472b962ab3dd67e143cc4fc88def47e3d4ce35cc215b7ae5b09e72682cad68a7c17fbf2b057d45d965c456c506ee6f32af0ca3b1656bb33f1c3665772ed039778aa6040b7f825504", 0x1000, 0xc1, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback, 0xfffffffc}, 0x1c) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESOCT=r1, @ANYBLOB, @ANYRESDEC], 0x2c}}, 0x2400c893) 15:37:54 executing program 4: openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)=@md5={0x1, "004b2e5c247c8e3368d43921b9961c30"}, 0x11, 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCNXCL(r3, 0x540d) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) [ 1187.287085][ T8680] IPVS: ftp: loaded support on port[0] = 21 [ 1187.444743][ T8680] lo speed is unknown, defaulting to 1000 15:37:54 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x60, &(0x7f0000000200)={0x0}, 0xb, 0x6000000}, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4000004) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0xb) 15:37:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x7, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r2, &(0x7f0000006d00), 0x800000000000237, 0x1ffffffe) 15:37:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r1, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)=@isdn={0x22, 0x3, 0x36, 0x1f, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000001680)="4d9462187d5d202764a7ca3e8c48a736e1af14f94842b5e9fcfda871dadb99b9baa902eec7f9ee206385521955972886da916e457e48f284f38d3bef21265ef4dfda140f51c1e5b4c49fc3a794b7f855cd7d1a8a20382ef1a5ada45d9c6246d86363775c936daa090b9d23f425f83cd6b66b29942167df8648a021d19883f3cccc183eb3a6ea3269dad241fa80d1fd2fdba17e6e6db92a0cb13ba9496e902bf5b3f3cb86fa018f71fdcafa9cfecf7256c075943a03c9ea4bc6324d710b3f7c2dce2662e695b9548a7146fb15d898590ec8c75ec384e92580d0c01b7ee17510b7a73a19e6d1", 0xe5}], 0x1, &(0x7f0000000540)=[{0xc8, 0x109, 0x8000, "c0a4808fba762ae50d6c10379bd4814682466ccb2008052759421c071b91f0de1aaf27437efee8f4da6b8322e2c19784adecaf118c31f7041af0a858e847f429f8e45c2541019ebce981f9d9f0160f6e0a120a7d0c61c51953f7e2e532f1534d379aa4f8541c2236ed3583dddbd6c6d9ea7200c41b0af3cd4e11a527d4cc53ccb47797923db739cbd899eca24eccaf8a28b3443bee976b25931b474da158503ebb8e196fb2b7895f78b89d1e82c80bd4f4f80555697bb4"}, {0x1010, 0x104, 0x2, "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"}, {0x40, 0x110, 0x4, "a44c4dd8b3b9f18ba2b32c8074b63f8a784f48eb7dddd9094d6c49b209e57e24a1a93db6d8bb751e0e508fff8975731c"}], 0x1118}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1, 0x210100) ioctl$EVIOCGMASK(r2, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2]) chdir(&(0x7f0000000380)='./bus\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0xa200, 0x0) ftruncate(r3, 0x2008002) r4 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r4, 0x0) read(r4, &(0x7f000001b040)=""/102400, 0x1905d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) write$P9_RCLUNK(r4, &(0x7f0000000040)={0x7, 0x79, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BLKREPORTZONE(r6, 0xc0101282, &(0x7f0000000140)=ANY=[@ANYBLOB="400001000000000001000000000000000700000000000000bc0000000000000009000000000000d38102800500000000000000000d7aab5ca44573e5e9d00000000000769785a1b8f0decaf592de9b6431ed8d5e2abff8b4d145d0c33cb66ff71141d50f23626946cbd0dd6362f1c330262b38b27bf1437980411dccec09795ab1a318464b53603e9b528850a9c1c0b1e8f008ae29703d3a5051794f20064e7fba4aa3b08d3e1856047e624b900f5fa6a0c18a1008cbef921cb5d3d5d15a5c2ccc72afbe67c6c5b61e15932ba1981852160a4301fd4addc5562b87c76e54eb56981e6f"]) [ 1187.760269][ T8682] IPVS: ftp: loaded support on port[0] = 21 15:37:55 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x60, &(0x7f0000000200)={0x0}, 0xb, 0x6000000}, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4000004) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0xb) [ 1187.963986][ T8682] lo speed is unknown, defaulting to 1000 15:37:55 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) pipe(&(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000340)=""/232, &(0x7f00000002c0)=0xe8) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000280)=@req3={0x6, 0xfffff4da, 0x7ff, 0x7f, 0x0, 0x100, 0x7}, 0x1c) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@loopback}, &(0x7f0000000240)=0x14) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) 15:37:55 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f00000003c0)={r2, 0x6}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000010000100000000000000000000000000254f6176df2af392d4ada2452b694e2e8d30bc11cdb793c8280d941c947f7f9ac637f93251a987dd13692000000000000000be47e922d77064f3174c6874600619e7d08aed41b531dd2f6339fca98d2d28a96701aa28c19572d00ce33c07c734816e638f525ef6f368483208704f8af76c715a0000f31730a6703433f1cdad382a71065babbd527d0553ef97960b120fb57b801a59b4adb61c54042c5986c07e664c7cbb954a33ba1d3e4307243beacf70", @ANYRES32=r4, @ANYBLOB='#'], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x8194}}, 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f0000000280)) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x1407, 0x6, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 15:37:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800900011969706970000000000c00028009000100", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@private2, r3}, 0x14) 15:37:55 executing program 3: syz_mount_image$f2fs(&(0x7f0000000140)='f2fs\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r2, @in={{0x2, 0x0, @rand_addr=0x40}}}, 0x9c) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000040)=""/13, &(0x7f0000000080)=0xd) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x12, 0x215, 0x200, 0x4, r2}, 0x10) [ 1188.819881][ T3168] tipc: TX() has been purged, node left! [ 1188.883335][ T8780] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1188.913603][ T8780] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 15:37:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f00000000c0)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020001040000d25a80648c63940d0324fc60100000000a000000051a82c137153e670902018003001700d1bd", 0x2e}], 0x1}, 0x4004000) [ 1188.930443][ T7782] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1188.963124][ T8780] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1188.980813][ T3168] tipc: TX() has been purged, node left! [ 1189.008393][ T8780] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 15:37:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d1419c2203fdbfacc3fc94ad4a7216a7af8f7ce7e999d17e25f5a2efa36e3e072658063c617b42d181cf7738153d3f348c1385b244f3af54518af06ebb605ff51bf793b89571f8b70af7afd87f25bf0bed4a55505cc9f03197f50a84e1cab44ccb63ce385403f6ed0328c4bb859c18f93c418d4d86f7d559", 0x78}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/600], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0xe80, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a8ffffffff00000000122e25d386dd", 0x0, 0x3b, 0x0, 0x22d}, 0x28) [ 1189.104928][ T8780] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1189.129304][ T8780] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1189.180346][ T8780] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1189.189919][ T7782] usb 3-1: Using ep0 maxpacket: 8 15:37:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090ac9df00000000000000000000000008000540400000000900010073797a300000000008000a40000000000900020073797a31000000000800044000000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x43, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000002000/0x4000)=nil, 0x6000) r2 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000f1e000/0x2000)=nil) r3 = shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x4000) setresgid(0x0, 0x0, 0x0) setgroups(0x1, &(0x7f0000000080)=[0x0]) setresgid(0x0, 0x0, 0xffffffffffffffff) shmdt(r3) shmdt(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) [ 1189.248737][ T8780] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1189.320572][ T7782] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1189.340896][ T7782] usb 3-1: config 0 has no interface number 0 [ 1189.374053][ T7782] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 1189.402803][ T7782] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1189.413833][ T7782] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 1189.465618][ T7782] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 1189.515324][ T7782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:37:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000025000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000140)=0xbd3, 0x2, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x814) close(r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x20000000fb], 0x100000, 0x200400}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1189.556120][ T7782] usb 3-1: config 0 descriptor?? 15:37:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090ac9df00000000000000000000000008000540400000000900010073797a300000000008000a40000000000900020073797a31000000000800044000000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x43, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000002000/0x4000)=nil, 0x6000) r2 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000f1e000/0x2000)=nil) r3 = shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x4000) setresgid(0x0, 0x0, 0x0) setgroups(0x1, &(0x7f0000000080)=[0x0]) setresgid(0x0, 0x0, 0xffffffffffffffff) shmdt(r3) shmdt(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x40104593, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) [ 1189.591405][ T8772] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1189.598834][ T8772] raw-gadget gadget: fail, usb_ep_enable returned -22 15:37:56 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002000000106b1d010140000658bcf009025f0003010000000904000000010100000a240100000002010209040100000102000009040101010102000009050109000000060007250100000000090402000001020000ff7f0000000000000009058209000000000007250100000000"], &(0x7f00000008c0)={0x0, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="050f290001"]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000040)) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000000)=0x6) 15:37:56 executing program 4: [ 1189.859679][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1189.904168][ T8772] device bridge32 entered promiscuous mode [ 1189.971265][ T7782] usb 3-1: USB disconnect, device number 65 [ 1190.009875][T16473] usb 2-1: new high-speed USB device number 9 using dummy_hcd 15:37:57 executing program 4: 15:37:57 executing program 4: [ 1190.259887][T16473] usb 2-1: Using ep0 maxpacket: 16 [ 1190.380120][T16473] usb 2-1: descriptor type invalid, skip [ 1190.386068][T16473] usb 2-1: too many configurations: 240, using maximum allowed: 8 [ 1190.500142][T16473] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1190.520452][T16473] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1190.568823][T16473] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1190.681179][T16473] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1190.706737][T16473] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1190.770049][T16473] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1190.809850][ T7782] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1190.900169][T16473] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1190.919286][T16473] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1191.002152][T16473] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1191.069894][ T7782] usb 3-1: Using ep0 maxpacket: 8 [ 1191.140175][T16473] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1191.159243][T16473] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1191.195007][T16473] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1191.217077][ T7782] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1191.236650][ T7782] usb 3-1: config 0 has no interface number 0 [ 1191.263420][ T7782] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 1191.299461][T16473] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1191.315170][T16473] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1191.333376][ T7782] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1191.357207][T16473] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1191.366059][ T7782] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 520 [ 1191.366101][ T7782] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 1191.366120][ T7782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.376564][ T7782] usb 3-1: config 0 descriptor?? [ 1191.492213][ T8772] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1191.499481][ T8772] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1191.501519][T16473] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1191.535777][T16473] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1191.561751][T16473] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 15:37:58 executing program 2: 15:37:58 executing program 4: 15:37:58 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb000000000000001fe031560037ccd4e6934b00000000000000ffffffff1b00000017000000010000000000000e02000000050401"], 0x0, 0x37}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = accept4(r1, &(0x7f0000000100)=@qipcrtr, &(0x7f0000000000)=0x80, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000180)='nr0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000002c0)={0x2, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000300)={0x7, r6, 0x0, 0x202000000000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802f18db50530317d6c0000000000007aecc24f92352646f900000000000001028500006e7156fd6f0df641f7bf69b392381097a34fcc56f5b7f54e430ced70b4ba"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x1, 0x10, 0x0, 0x180}, 0x70) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$x25(r8, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) r9 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SOUND_MIXER_WRITE_RECSRC(r9, 0xc0044dff, &(0x7f0000000040)=0x1ff) [ 1191.660326][T16473] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1191.669696][T16473] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1191.721759][T16473] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1191.770482][ T7929] usb 3-1: USB disconnect, device number 66 15:37:58 executing program 4: [ 1191.840423][T16473] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1191.855725][T16473] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config 15:37:59 executing program 2: 15:37:59 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000011c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10018, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) write$evdev(r0, &(0x7f0000000040), 0xfd18) creat(0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/4096) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, 0x0, 0x2, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x40800) [ 1191.902700][T16473] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1192.130827][T16473] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1192.160351][T16473] usb 2-1: New USB device strings: Mfr=6, Product=88, SerialNumber=188 [ 1192.194228][T16473] usb 2-1: Product: syz [ 1192.206610][T16473] usb 2-1: Manufacturer: syz [ 1192.220756][T16473] usb 2-1: SerialNumber: syz [ 1192.620048][T16473] usb 2-1: 0:2 : does not exist [ 1192.649027][T16473] usb 2-1: USB disconnect, device number 9 15:38:00 executing program 3: creat(&(0x7f0000000000)='./bus\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000300)='./bus\x00', &(0x7f0000000400)='trusted.overlay.opaque\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./bus\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x3, 0x0) 15:38:00 executing program 5: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2a000400) getdents(r0, 0x0, 0x0) 15:38:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f00000000c0)={0x1e, 0x0, 0x8, 0xc}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000000)={0x7, 'ipvlan0\x00', {0x10000}, 0x6}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x2) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = dup(r3) connect$inet(r4, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000040)=0x1) 15:38:00 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:00 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000780)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002001100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f00000000c0), 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 15:38:00 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @multicast}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe43) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f00000000c0)={r6, 0x8}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="0400000000000000000000009e000000000000000000033f"]) [ 1193.835423][ T8931] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1193.853907][ T8934] device wg1 entered promiscuous mode [ 1193.899575][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 15:38:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1cfb42, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[], 0x119) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r2, 0x1) write$6lowpan_control(r1, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) 15:38:01 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="dd0400130000000000010005000000000000000200002000000401"], 0x28) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 15:38:01 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="dd0400130000000000010005000000000000000200002000000401f4"], 0x28) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) [ 1194.038258][ T29] audit: type=1326 audit(1594136281.123:139): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8926 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 [ 1194.230097][ T29] audit: type=1800 audit(1594136281.313:140): pid=8955 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16172 res=0 [ 1194.325714][ T29] audit: type=1804 audit(1594136281.333:141): pid=8955 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir765869270/syzkaller.PgnlE5/814/file0/file0" dev="sda1" ino=16172 res=1 15:38:01 executing program 4: perf_event_open(&(0x7f00000011c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) write$evdev(r0, &(0x7f0000000040), 0xfd18) creat(0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) 15:38:01 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 1194.372355][ T29] audit: type=1804 audit(1594136281.343:142): pid=8952 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir765869270/syzkaller.PgnlE5/814/file0/file0" dev="sda1" ino=16172 res=1 15:38:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1194.746699][ T8966] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 1194.771097][ T29] audit: type=1326 audit(1594136281.863:143): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8926 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:01 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:02 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffffba, &(0x7f0000000340), 0x0, 0x0, 0x6686}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000000)={0x28, 0x0, 0x1}) syz_mount_image$jfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f646973638b3fbff385010000802c66736e616d653d5d2c2c736d61636b621728ce92257ffbb76a79edb98e894a2ca3c27be53425a691"]) creat(0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000000010046) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:38:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:38:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:38:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x6) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "340e10382a03767d588d282c983db649767e35"}) 15:38:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) shutdown(r0, 0x1) [ 1195.269520][ T29] audit: type=1326 audit(1594136282.353:144): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8992 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='4~8', @ANYRES16, @ANYBLOB="6f6d216c7fb5c4d0840003000040580001800d0001"], 0x3}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 15:38:02 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 15:38:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1cfb42, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[], 0x119) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) 15:38:02 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x59, &(0x7f0000000280)="b0fe910cd17c3d0ced679a01000000cd891969b71832cb570c94d61f3514dca7e9cdb970a4391ad8a3f613a4627a572fb547634f01dde818531a440ffee49aab8ecc0f2782ae08389dd0ea4fab5e122d903270eae99f87fd08"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xc) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:38:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:38:03 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/140, 0xe7}, {&(0x7f0000000bc0)=""/15, 0xf}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f0000000a00)=""/24, 0x18}, {&(0x7f0000000ec0)=""/137, 0x89}, {&(0x7f0000000ac0)=""/151, 0x97}, {&(0x7f0000000d40)=""/209, 0xd1}, {&(0x7f0000000880)=""/172, 0xac}], 0x6}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1}}], 0x3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000280), 0xc, &(0x7f0000000a40)={0x0, 0x1a4}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15:38:03 executing program 0: r0 = socket(0x1e, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000), 0x4) sendmsg$tipc(r0, &(0x7f0000003600)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/97, 0x61}], 0x1}}], 0x1, 0x0, 0x0) [ 1195.980669][ T29] audit: type=1800 audit(1594136283.073:145): pid=9045 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=15924 res=0 [ 1196.047753][ T9044] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 15:38:03 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) memfd_create(&(0x7f0000000040)='systemeS0md5sum$\x00', 0x0) memfd_create(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0xf402000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x228, 0xf8, 0xf8, 0x0, 0xf8, 0xf8, 0x190, 0x190, 0x190, 0x190, 0x190, 0x5, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@quota={{0x38, 'quota\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@local, @remote, 0x0, 0x0, 'vlan0\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x10, 0xffffffffffffffff, 0x0) rt_sigaction(0x0, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') 15:38:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1cfb42, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) 15:38:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1c7542, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[], 0x119) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r2, 0x1) write$6lowpan_control(r1, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) 15:38:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) shutdown(r2, 0x1) [ 1196.274297][ T9071] xt_TCPMSS: Only works on TCP SYN packets [ 1196.285034][ T29] audit: type=1326 audit(1594136283.373:146): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9048 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 [ 1196.344540][ T9076] xt_TCPMSS: Only works on TCP SYN packets [ 1196.450784][ T29] audit: type=1800 audit(1594136283.483:147): pid=9077 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15832 res=0 15:38:03 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d36389ce0d47243b8a0dc23cc8489e27b243e508fb0f62c8ddccf94c935b2624092f9f9803a02e2e95bc64806224ce61f822e2ea65bafa0c1a8906176378cddbfea70b94968d037536708ed5c369da1939c84d5228fcc666a8d5bcd67d759d01be70bdea34221f0acb9bb95aac2dfbfcfa738b65fe4a1bb2ccfccade64ac4004f47ab2dbbeb27cd6312d1189b0a25de4194002e0c472e1278bec9755aac66c0bf7dea5cc51ad3bad0264572af962812ad16a6ad41c3d96829d1479b291a7670ed53e09182361a17d584aaab36c9700d927ca31d0ccac4a984af2731a220b88b3b4e6cc197fc6218d6e0d3eb4a1eeaa9c5d8f4a96a0ee46f237b3693a09e6be7d04f46617ba82d7b179cbba264abca603bff1a2b37034a741cf14f93b7d7082ff428a4ae1c5c3bb6ce9748b0ac59df77a639e90b372df00cadcaf680111e150c701e0395cef940ad34e2814565ebdb1ff0c9d7e4cd0f2bcbb1e2785f3d7c23e123077869ebe2298e8554e5cdb74745efb3059aa5ca8db8bd047f06b068812cc6a03b0627c08b4efd01fb3e7ea817a771927fd17bfae51adfbdbcb8ffca4c74db4a01e5a9e16d41eabd16230b6245834c8f25e8e7581017c1f9b9b832d2d2e0ba80502bba79921c6b18cd3f4811978a35ee5f0b997bc55e696166b80e6f0ec477d3ab10c20861080f70e15656777d9a6de45f28bddd4b9d4cebcd5b2a66ce65603cc7677433cb1c4bca6cb4081b724be8b8d3ec7b2156128ac829e6adf3e5fcb12a80858c511fa60c6a72c0cf21c2fb4e3afa553d4ff8dab55332eeb611bd2fea79ca6600d4dcace49d50542590a9d96bbe93ad1ce0e62a48a21c0466c4b51b08562956b8b93f52d47c9e0634e3b75eaf155167f82ad21eb76b44f9bf0379a99672acff2aefdd609208cab70cd2b5774c58de59bc73702c1095a26ca4b634f5575c03392ad4cb2c7e46b69a052667ee1877ded71829bdd3ac7808e38ad2cc15af338b049c398a00c48ba55f62f5a282b061b9167baf1b4d392ae56b2592d597c98d897cb774a392b18c427f530894ed160bd3c91d19268380be4a56b102de4e59dbdeabedd8b0f66d7321300ab08ed10286e374a9380d23461d0207ed2291f3393c99657eb13b7de80f72d52d6773e38f3ddd9d925715c92aab81b462efda4e368ca7bbed29a201a1a6371e38d50c66e5c36e63c00fb94bc05fd3f3f4c40c81a9aaf4f518c50e5131e56dbe69029f25470760549dcc03b37fd5cc21ce1bebe752d7ba0f74545698ed4ea4059608d2f14fd06ba83658dfea1e6d0f4ac82af7c1e75a5c6418a5b41d50f326f7c2908144e61123e8063a0096ee50cf15d7815a49012fe048b30a533c58f16dc6aad228abd8a4de30df19e23715338265c7e4226922eb67e0d6f6ee185f245954133d3a572a496f0567ac9f83407e3532399f8d603717f18dba7a5b1130a6e145b8f6962acd8fb4c603fde072e0172b6402dda1495152a29dee3b44684c034c5a1974acd7e1883832e1440fa4df4ec771442c3bebc72a4e9f96035f154a0bf1e83be08a483285a5558928b6feed7ef15184f73a6c93bd2ad2978b2bf5063d03ec1f770fe53a7d9770167ed799296bdc0ba24f0f504fc78cfca5bd62002df2968b5381073a125d2ce74f6d2f1bec103d6a275328cd6b1a466c7d12f5b4877eb134eb61f453707af779550ed00ccf6d078dcc87ab999b1f77eca1458cd5037c66f4099edff95e6287e86395190a979dfb1cca147bcf2e75a3f910ac7a844fefea9f488d5b6ec1f145245457130eadf1910e1a483281b32d7289ea22c90dca07084a58a17da5d805ef19a7684df789498a7c28751c355e588440ff8e0eb50e95768e69b56061ab1a692e4d09887d93216e71fcff0c66556af4ffb794d6c12111ce2a89d90941f79af35ba8cc96efd38462b2fb0a2ee4140121832e3a2f24621ebf0c1203d83ce37731c40aa4be62121844f10ea16a3911d3e3063141ecbf989c40f96326328e8e2d652f43cb768cbbbfa7097b2ddf3db6ca091a10f17ed0b2233e763f23ba1e80c97e167c365eb6145b62b5f8e7f39e0e7570103e536011f22d2b60906", 0x5cc}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x104, 0x7}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="11840209900d08233e496d5671dc71ff04291b2c1501772502bb867063f70647862a15257781bcf1d1e498104d082833914ee68afc14ac7cb85975751b8c31271948ee303aa2a34be964b8c1b95638607b2e7ec7fda28fea4caada028a39bf259538214e80b9b5c9b58b1cb36a933d64a25324566f7733ea93fc91c98fec268cb1e2148198e2ccf2463d2ae56c61ac436c336b2d421c6b512a600955c6ede3e5820165eabf2dda9e2294300485327a6d28f7913f19d79e5f478626bb6a607c2f5085c68749edc417da6cc4db8c605215575067836f62b0b3e0b49e8c321240c1b1b54babad07a7000c4eb99200b9d016f1554683b7b3323ab37f066b973d584345792feba5b719ec0413d1c37689ce927de538b4ac16687f6595120220e5205f79227e43a8eaa610c8c232bcb811b4a63eab1b87da214700408e830774dcd6318bec9ef28b9171b0492bddb09009a8d26f797713d81548e0c547b8aa7bcd844c2cfa69560deaa6188b576792cccdc09a1f94da4e4c4f05e4d053d6a2fcdb253dce696d6cd85a1aee740c2a84e3d63aa558d3db42531e2303c6e8cfc0b6e31950fcbf3021f708d47c05edcf3fcdd66226d99f1f132d73f698e0820c395f343e0d69042b6b06bf40b45ea6a8f52a32255f3c40d4e9fb93084421a6235116be29125e5afe2d8c418cedb2548db2fcade80c118af8a6be1e650517519721a5920f842662aad37473f2ba60f7ee8466f8dba829c3e17d3e618ef5768b1b0a8991c64f2e592e726bb4636d13fbd04ed71b031e1c1a27fe30325e521a9845ef1abae620cefb216c47a1e3b4db8cb1287006b9fed827fa5a944b8045a3397ba4208c5cb67117393b2f836e4e79196e05ebd7488fa76619ea0521982b9cb76a63bed4f0ffe48ceb4b2bbe4e590dec80eca4740027f855dad06313a2a0188932a2069fc70b8af0e4294a7b51b552ad72ccd5625fd2a971354bad2930eec5f41e0ae271224b8a9160d96965d372c65e4a0adcee1e8bb84406b6a5c5e4d6ed7ff529afdffcdbea58f43e7c39f8aa9845fc92c84aa8bc0eef238d19b2cd3dd0c6d52694c99f2f493b7064076b62d139837eda3d11e43ae52fb771c1585974bcc6e2adb24096fd3d5ac867afb9cfb6ed07cb34e227f00ed5541499d2e7e3b4f3da831a3b9c32de8be0f5b45e8248b5a2811bb452ca6dc7d56d87531347ad316e6e8c6bf887f70f455cdeae8dcfff004b0ed1b8fd63d1d5e55cbdf1541b87821f3c90f7d47e542ec75b132f5285862d3e9fd84f841e4d137e2735d5f23c87108bcaa591a14ab2ab43802ffb176453312420fe0e79af7236850104bc3e925b16fd0a57ee9959ae8ccc13c843365442bb462d86ead8a20c41e064e0ad286f4aa4c69d0046e5012cecf425b0df11c0b458e31804d8ffe98554afc69b475ca03cbe926806b276e19aa47b3e101b95ee2fd32b9f06a3fcf6f078ce694f9ed8fe03425446bcdd0e7c1f4d3e109bbe30020cb81b64bb0cdfd8a0d33e1143c4fbb7fef15d1059e1f20b394f69d482a1da5fd49508808c80c824a843698386b4d3c3885f063aa3c047624f93298040fbc706020d295cf3f363d42f21d327d91d101cc4758c67195a49c3b3002e14cf28a5b8899b7ef08b6713d89c7049ef594361b1d8a0c5838ff30a6a3f1b0f9f947c76d5f1629d3df215975b498bd33ddbc44798a9f76ba0c41e9ad565e44ebf3c333fade1d4306b1042c5e2e855f3e5fdcd64ce7fdf73b09044bec8a2f0cecbb00c6c76c85891478aa4bae6282541cff613f2b461cce115ba0b78c6f50f4593efe5c2ae558f6c0534db14d5b44416b08abe45c6ddf5c749aae8141e427a0a2f42b903ac71caa09e5098cc2c07d79145c7408415d8f937108d6becdbb38a2b3250c0fdf36297375aa3212c9bc8483e8d629c54a79ca55cdda720496753f27fd9e88e203594c1e28514e0d22b9c34c3e1f10253217abed40b09a533fad16c7b9b8e89d7dfd3b27d579bfc813ad2895543ada10f886c7c75010bc70345b727513fa3b7c6aa677a22e037e2bd7731148996f3a8c424075fd12aa8eb9d8f6a8fe7b2eb68934799f5063c58c1816caa4b400bb0914fc7300111c063e5c01910b0b01803a1a348f387542236d82bef6d926ba571ca0e7745e586eddf2334baeafd7b1149502e781ec45299c3f3cd34c3628057def3c012878123224e33828b216022dfebdc6a284e503868a1e4369af819fcfd4124d801386dbb123ce88d54712f6351c77aad6039b2f5ff3d0d1903c74043864fa9f801847ac8446280a31739e0215bce77c08c2477e9079f62225cf179da445e9f220560d995238f17e87dd4ce0f7ebe5f8941d5d130c2d6398e08bb893b5dd8e58701e41e75fd0182d3ebac8920aad7f4777b4e096eb5c5a17e440c0a5b95ca92bbaec63130bbc41d0cbfccb03eb6c1cffc8558bd255c2096a285346dd9600f33554acf62aef19d2776bd5d8a5a9f0a4976022b8ac1400e3f0a7fa227ebc0ad80187939562492154c708739f865a9803512a6213d5026b1febd0a20ce4b3a4d7d90dc5af3f5beaa06b8af1d19556655ac578f9266f5d3b393f24a2d112eee90f749e1f0a6e27ff2469f1cc21d5bcbf355168c62044fd1cc4861544a8175f640ad3c5bb6c81efa331822efb70b57f4110deebe68794211ee4a95c259b4eb519d887b6cfdee178758382f4f63c80b1f0b9f2337dd5a11a5b1fb04c3315ff942cf7f5d7da36c088a65f86529d003c8c9bf74392f9d897b53a422cb3b3f9e09f9936514ac100fecf3c9a573aae041ce3c86cce6dc2884053bc56a510791392bda454aa7dc580a3a7cf71c18dd57bec21c0eb143deb654d8b0fc642bbc7484dc9943c2102169a6aca278f0fd81b1b6b082b355443c8198284e3b01e9fff1c8df1895e9c9593f16438c7f737f2ab56c0f57eadfcd570c5b04b5218fc7d2c0cdca5c7ba5ff428b4fe541d4c8f6fe274d2a3290343f3d6944c918571e350caf2ec3cc9601cd5b71e8f22ff401024c51c592bf476f255b200962e2ed014ce551376235e8d220763f8c9c904570d6b6227c94d62e08b0c9bd3557b96c8ed227685fc54d43e4a05ca5996c4d8e3e5076f394b0c0bc7cdf972f996c45987ffb2d6a138a1772b7ffbeaa66ceddd34839051c61f9d87153f23823f9178b56eb016524ba862cdca9d147b5bda79553ade825d5a1b8ea3acf8c7cad88cd11b68625d367931b9a0296b228fd2c52da32d050d746942fb38dbb3d5e2ad75b7243f7340a8c0d4c7b156e030b6eb154ec6c47c1b6af307ea0e8916e21166572632321f8b4978ecd1f8b4029a6baba4da2dd984d245d1b6dd4a6f2a72acc4d90f480de489826130dd7b2a9ad79938ed6de65c7a56e0515d84302a8a8ee98c20ea32db20b231b9d00e03dd74b804e15c70ce8a6b169ffa79db7e24062b2dd3560502337bb03c8506a25ce77eaa06f9fb54aff0bab9545c32bb9a35a700361f46a3995ef929af7698bf16df9d8965f4d939f5dba6eb238c1089c25617568b29760ecbfef273b8070c3853a652d30da91cb00e0afa1c663589158711984cfe38869974c30e9b51333091cb0f5d72f5ddb0f3bc550b2787ff6fdfe0b90764f8ec319a2674d6e16ca2417b7a2144b5a4ad248fc4b2b8f74ed1957bd4f52f0db0ac4eb8f6dc62c51e16a803bff507359abdbd0ce1ee0fb936a4a060954c1a939b4b197b61311d079ef09e57e60f94fd796c12cf7e62e11bbdc11e04fc79736e42d6d2dcb02e705dc4e8e17addcc0902af4ebbf0a2f57db53cbe99bb0797137c903195de282ed02c37634181936e351f383fb590eb453e539b80c6935185ac40890c1ba70b5e2eb53235f3a983ce4608929d2609354f89fc22f80a0aa9fc0ea9af7f06e46d8b5f5d47dbd2efe1f2d0f4edee09f11b57c257ff5ecfe96ada3c5f37e1d766c5c85490d14f297e1ce65ae34909f04492e7cc955faabb205491a096147d0930ffa70b68055523e360328f26f28ff160cdb8b4785a22110191c9ecfd187267c1a4300e9370a41c73fe224f3a9c54493780b1a4ff96398f0a60f66e48ef4ad7183f71c0c4d6d9d1a57e19a56d9ed426cd4143de82ceb33011988ed079b52ab30300255e066a84959a10676c7b58515ff9bed194c784072af1062734f5d497f2be9b0ea1228f5a981e8d5d78da49da90b040d4e3a93b7f71360b25cf75fca36a4068748e1bc171dd40fa31d6f9c4c926a635f4ea4faf7511146bc5782606966aaab13a30d67cf182751149f678852da30d0f9b6ea5524a1f5ea01e77d7a74ac588ab2251cdbc9f4f8aa2cf367f0ad2178e66fbd7ab447aae12a7bc6cf3925fe99dcdf8ec95cf4576520b781dc12fe6d310978315d2e3d7dbc49c9be2fa40788ebd5fc02c6c7f566a64b7f4af7a96353265dc9e4c74c909b9a385966f4d7312fdcdfa8f5d0632c6db4a19ce696416a04e937d4a994e757eae59c07e5d3228254b35003eba32ed448516e9aa77b5b92c9ce7fff06a8f4f652d27971a46c621a6b2ee3c1adaf60d5cdfb381a4e4ac9ab7d7d72fcb2d6aa7e104255345f1e15dec8299c9c75735a01338d20f72d8b359803becef76d9ca6da029d0a795e6d4a652bf3880efeee074c81774b2971da03eff6d9516ac8a0c34b686aa1afbcb2befc79618a3dbb2bcd53da0075cdba0ddd975fd4e833291005f0fbf7b167922dc85b109e1381431e0fdc50f80b8592edd57f50f9dd950205e1a21cd3026cb30abe6d06dbec6c7cdb76d90c0e85a69aa1522281bcb3f4fc54ee443e76c7d9bf82e313f2dc3e277c699e079a847635780a5b724aca0ede72febba648de12fd14e3a78b29e9df82a19f4ed9c712e5b313c05e6908f6d4601d076afda5cf77eab4ea7c44c9d40f463fe8cde79f18170de9b087b113cfc7d467bd164564c2a8a99e4566d6f9eb1a8d5393700158fe84c109735cfe0ab45d9eb6fe61619d8538512730e015ffac07279973126e9087b209144c8797dd6b65381e616256a9cbf7771222c41618eb82d3539e7750ef0614acb4c901f88f31589d9d6d87c4b2a5361ad44155bf5476f2bc42cd2e758d478a1bcaf27c6c5607f025c8ff75913cb95eb631a690e3e6201204e616a4482a6eae323dadc0a9c22a7de1567ec3f45380bbde304cc76efd4bb0ac9f28475534eb973fc02f3f5dc73a862052f82f6d40c0821012589925ce3f2274ff2a8097b8464b44068c1505b967679bcc6b5d7e7ece9bd1880fc32531fe5d7bac9c5262a709239e477ecf44915a70aa7f984ec1bed047f3ec92a55714403c7c7503a3ac87cec792e072eefa623c56b6b33beb5ae7f5066a952cf6b0b25ab74841e5d2a9b20b1fe0cd83c3aae37eac0dd08d6a65410af956767766f2c6c12d13e87f363052e1e645c2dccd42948be835a9fe1c8892453b73cbcaa7c9222ccece11f86fba52d29d64a609da597e226e5f59e9a8301297c1e9881557a860df15ee14cf4bf70988e2cf90359587bc378adba5aa610db3cc1d6ae5fba9390b4c", 0x5}, {&(0x7f0000000840)='`', 0x49ed}], 0x2, 0x0, 0x0, 0x1a0}, 0xe869) 15:38:03 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="8bdb9180", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b005) 15:38:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:38:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1cfb42, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[], 0x119) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r2, 0x1) [ 1196.582456][ T29] audit: type=1800 audit(1594136283.483:148): pid=9078 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15819 res=0 15:38:03 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000140)=""/69, 0x45}], 0x23, 0x0, 0xffffffffffffff04}}], 0x1, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x400000000000) 15:38:04 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) 15:38:04 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1, 0x5}) 15:38:04 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2}) 15:38:04 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)='b', 0x1}], 0x1}}], 0x2, 0x400d005) 15:38:04 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000000000000006000080000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100001f34010400000000000000040004800900020073797a30000000000900010073797a3000000000080003400000000022000200b76312c4110d281f39ce8f"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 15:38:04 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) 15:38:04 executing program 5: 15:38:04 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000680)) getsockopt$ax25_int(r0, 0x101, 0x3, 0x0, &(0x7f0000000080)) [ 1197.372371][ T9131] udc-core: couldn't find an available UDC or it's busy [ 1197.380412][ T9134] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1197.461137][ T9131] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:38:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 1197.530132][ T9134] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 15:38:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:04 executing program 3: syz_emit_ethernet(0xc6, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x90, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06ee02", 0x0, 0x0, 0x0, @empty, @local, [@dstopts={0x0, 0x9, [], [@calipso={0x7, 0x8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0xa, "3e6d681074fccef2ec8f"}, @pad1, @generic, @hao={0xc9, 0x10, @empty}, @enc_lim, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @jumbo]}], "9ce4ee790785a31e"}}}}}}}, 0x0) 15:38:05 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 15:38:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000030a0001"], 0x2c}}, 0x0) 15:38:05 executing program 1: 15:38:05 executing program 4: 15:38:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:05 executing program 1: 15:38:05 executing program 3: 15:38:05 executing program 4: 15:38:05 executing program 5: 15:38:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:05 executing program 1: 15:38:06 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 15:38:06 executing program 3: 15:38:06 executing program 4: 15:38:06 executing program 1: 15:38:06 executing program 5: 15:38:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:06 executing program 1: 15:38:06 executing program 5: 15:38:06 executing program 3: 15:38:06 executing program 4: 15:38:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:06 executing program 4: 15:38:07 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 15:38:07 executing program 3: 15:38:07 executing program 1: 15:38:07 executing program 5: 15:38:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:07 executing program 4: 15:38:07 executing program 3: 15:38:07 executing program 1: 15:38:07 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:07 executing program 4: 15:38:07 executing program 5: 15:38:07 executing program 3: 15:38:08 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:08 executing program 5: 15:38:08 executing program 1: 15:38:08 executing program 4: 15:38:08 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:08 executing program 3: 15:38:08 executing program 3: 15:38:08 executing program 4: 15:38:08 executing program 1: 15:38:08 executing program 5: 15:38:08 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:08 executing program 5: [ 1201.217753][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1201.217767][ T29] audit: type=1326 audit(1594136288.303:156): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9249 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:08 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:08 executing program 3: 15:38:08 executing program 4: 15:38:08 executing program 1: 15:38:08 executing program 0: getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:08 executing program 5: 15:38:09 executing program 3: 15:38:09 executing program 5: 15:38:09 executing program 4: 15:38:09 executing program 1: 15:38:09 executing program 0: getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:09 executing program 3: [ 1202.115546][ T29] audit: type=1326 audit(1594136289.193:157): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9278 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:09 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:09 executing program 4: 15:38:09 executing program 1: 15:38:09 executing program 5: 15:38:09 executing program 0: getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:09 executing program 3: 15:38:09 executing program 1: 15:38:09 executing program 3: 15:38:09 executing program 0: r0 = syz_open_procfs(0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:09 executing program 4: 15:38:09 executing program 5: 15:38:10 executing program 0: r0 = syz_open_procfs(0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) [ 1203.070726][ T29] audit: type=1326 audit(1594136290.153:158): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9307 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:10 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:10 executing program 1: 15:38:10 executing program 5: 15:38:10 executing program 3: 15:38:10 executing program 4: 15:38:10 executing program 0: r0 = syz_open_procfs(0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:10 executing program 4: 15:38:10 executing program 1: 15:38:10 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:10 executing program 5: 15:38:10 executing program 3: 15:38:11 executing program 5: 15:38:13 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:13 executing program 4: 15:38:13 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x16, 0x0, 0x0) 15:38:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) fchdir(0xffffffffffffffff) open(0x0, 0x0, 0x0) 15:38:13 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:13 executing program 5: 15:38:13 executing program 4: 15:38:13 executing program 5: 15:38:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0xc008af12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) fchdir(r1) r2 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)="bf", 0x1}], 0x1) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) 15:38:14 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:14 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x6500, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x1a6) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x14e, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1207.034901][ T9377] FAT-fs (loop3): bogus number of reserved sectors [ 1207.050142][ T9377] FAT-fs (loop3): Can't find a valid FAT filesystem 15:38:14 executing program 4: mkdir(0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8805, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8805, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xffdc) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) [ 1207.143392][ T29] audit: type=1804 audit(1594136294.233:159): pid=9385 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir039538737/syzkaller.kPA4Pr/951/bus" dev="sda1" ino=16324 res=1 [ 1207.223787][ T29] audit: type=1800 audit(1594136294.233:160): pid=9385 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16324 res=0 [ 1207.228812][ T9377] FAT-fs (loop3): bogus number of reserved sectors [ 1207.284146][ T9377] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1207.325047][ T29] audit: type=1804 audit(1594136294.243:161): pid=9385 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir039538737/syzkaller.kPA4Pr/951/bus" dev="sda1" ino=16324 res=1 [ 1207.380922][ T29] audit: type=1804 audit(1594136294.273:162): pid=9377 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir015760080/syzkaller.gV5XR5/1058/bus" dev="sda1" ino=16326 res=1 [ 1207.510681][ T29] audit: type=1804 audit(1594136294.353:163): pid=9387 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir015760080/syzkaller.gV5XR5/1058/bus" dev="sda1" ino=16326 res=1 [ 1207.934686][ T29] audit: type=1804 audit(1594136295.023:164): pid=9400 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir039538737/syzkaller.kPA4Pr/951/bus" dev="sda1" ino=16324 res=1 [ 1208.111332][ T29] audit: type=1804 audit(1594136295.203:165): pid=9402 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir039538737/syzkaller.kPA4Pr/951/bus" dev="sda1" ino=16324 res=1 [ 1208.136093][ T29] audit: type=1804 audit(1594136295.203:166): pid=9401 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir039538737/syzkaller.kPA4Pr/951/bus" dev="sda1" ino=16324 res=1 [ 1208.168690][ T29] audit: type=1800 audit(1594136295.203:167): pid=9401 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16324 res=0 15:38:17 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:17 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xffa0, 0x0) r3 = dup2(r1, r0) write$FUSE_POLL(r3, &(0x7f0000000180)={0x18}, 0x18) 15:38:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:38:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec3, 0x0) 15:38:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)="bf", 0x1}], 0x1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffb) 15:38:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) [ 1210.288365][ T29] audit: type=1804 audit(1594136297.373:168): pid=9426 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir039538737/syzkaller.kPA4Pr/952/bus" dev="sda1" ino=16320 res=1 [ 1210.307719][ T9416] FAT-fs (loop3): bogus number of FAT sectors [ 1210.317847][ T9416] FAT-fs (loop3): Can't find a valid FAT filesystem 15:38:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) open(0x0, 0x0, 0x0) 15:38:17 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) mbind(&(0x7f00004e8000/0x6000)=nil, 0x6000, 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01d06, 0x0, 0x0, 0x0, 0x10000000002) 15:38:17 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x6500, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x1a6) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x14e, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 15:38:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) [ 1210.717878][ T9439] FAT-fs (loop5): bogus number of FAT sectors [ 1210.758667][ T9439] FAT-fs (loop5): Can't find a valid FAT filesystem 15:38:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x0, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:20 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:20 executing program 5: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36688, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:38:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x0, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x81000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15:38:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000400)="6625289330a91cd973dbffb3e61144d11142b1ad2028820c6456bd532f43b3783feb8bd6a0bf43b696927ca693ceb12122a19d0ba1462928dac11e005d162cad3818283900e0674a12019c477b5953a5a94a047881f133d4bef518b69fc03974ec8b9c1845a0d96de1e15812989c59ca46b742ee26a864ce3accc22253f89892c303ad916f22f750f28c7f3f1259aa9649309d9b52d372efe17f256a6c55c4617432270de3ca4cba3d2f7d6a4ee35ddac22471da2bb73816219026670ad5a79fc92d247a9d0591a501ca0ba640cc1816abaf51ba81f239a41a450a8a2a1aaf6388e47089a31472e8f2598c56211b0c4c2cc42af62cd112", 0xf7, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280)='NLBL_CALIPSO\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:38:20 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x6500, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) syz_open_procfs(0x0, 0x0) io_submit(r3, 0x98, &(0x7f0000000540)=[&(0x7f00000000c0)={0x14e, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 15:38:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x0, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) [ 1213.391140][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1213.391153][ T29] audit: type=1804 audit(1594136300.483:174): pid=9477 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir614112516/syzkaller.3TWdAt/891/bus" dev="sda1" ino=16332 res=1 [ 1213.457977][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1213.509436][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1213.518299][ T29] audit: type=1800 audit(1594136300.513:175): pid=9477 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16332 res=0 [ 1213.588385][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 15:38:20 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000080)={0x44}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x2, 0x4c}, &(0x7f0000000040)='R\x10rist\x18m\x84\x89\xa5\x05\x04Vi0\x97ddR\xd1\x06\xd3r\x90J%P\x0f\x82[\n~P\xd7\x12\x805', 0xfffffffffffffffb) syz_open_dev$vcsa(0x0, 0x0, 0x0) openat$nvram(0xffffff9c, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000200)='./file0\x00', 0xff, 0x5, &(0x7f00000018c0)=[{&(0x7f0000000300)="dda969bbe355f1a351fa1e1c827d16844513ae47dbcf94df95e6a77197444b226db34fb112a6c5ce47ab2933a7f8d0e5a5cf4ff86bcf2bd45e81e0a24a0ad1a961fadbc9c609b733f03e8a6412e31645fa6a8ff11250d1b16b9d60cbec543f08d74e2eea19a9f87085378b05cd36eff6a246490bb723dfa219b4edec9e1cad800e1670e3af7daaebaf5564343df8484021cf3228b90af3402e93cd71eb94d0b69f6c8810463958ba15f547559f", 0xad, 0x200}, {&(0x7f00000003c0)="ad6abfea9e00f5fbf79d1487d8d23744c3421316afa775bdfc802833fe3fded24e8565e9ca378161891efc4377d5d03d03d981d9ae2a694348185e74167e0135e7a2eb9c2b5fb0a203f7d92e2dba36b24624eedfc10afd41881ccbffcb6b7ad5541217d690527d5ba5e8db0e73ca6c9358ee62e973659681fbb0f8323c52a3471051f9f3036316e68e387e364978be155b", 0x91, 0x3ff}, {&(0x7f0000000240)="1f91c757be7f7daa4ee2fe3c5f803e16bc", 0x11, 0x8}, {0x0}, {&(0x7f0000000480)="5fed68bdd55c06752e9939f60cc230b6e5303534c7279454d050204b5da82bcb672435252ce43fa37af8b72cc0e9b35c1eb95b3068bfde86eb76a4079b8f38abbe9d49aa7f113fbb7084801c8a9423c0e7fccf02a8b8c09eb03f49376916a8fe6a1418c8d159c943e84ee1f11427623349f3f7e310ffebd68ae3029cc16e", 0x7e, 0x80000}], 0x818000, &(0x7f00000007c0)=ANY=[@ANYBLOB="960a3f00000000000000f66e027179b1e66b353a6ecb66ff0f0000000000000c0586d3eebedfc61c48106422394a674aebfd0ab7faa6bef67377bccd02fd831ce90e457ce960e56624f140ecc18e23ef9fe6ed33dadd4cf9d99339b7d40aa3e23a34cc58d31ac3ae66de7470d94f", @ANYRESHEX=0x0, @ANYBLOB="74442947262e58e1ddb7f48836b0f848ef9c3c0599d64420000000000000003da574c026cbf3d7b4ff3775d4ee4e0124359d3fad05f7f4d3728f961126869cef6b24e5ca29eff8dffd8f0b91b22b00b5316aef24107a4b77559e025fde23d996a59f1eff0f000000000000571d00d2955e129fd48785524fdafbca80f0f1a1a8f2b3634570a156d50ab097e62317b4b7503cccdb615cfe09b1d31643812738124df942dd137acebb26fc937534b2129b7addd6341712d11fca58c9340b205de047eb9dc514adcc002441ff7f2d42b9ddd1a0883cd84cc7a48d62c865c6"]) creat(&(0x7f0000000180)='./file0\x00', 0x53) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) 15:38:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x0, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) [ 1213.647796][ T29] audit: type=1804 audit(1594136300.523:176): pid=9483 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir614112516/syzkaller.3TWdAt/891/bus" dev="sda1" ino=16332 res=1 [ 1213.882939][ T9503] tmpfs: Unknown parameter '– [ 1213.882939][ T9503] ?' 15:38:21 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x9, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x3c}}, 0x0) 15:38:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x0, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) [ 1213.966311][ T9506] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1214.042842][ T9506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1214.107920][ T9506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 15:38:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x0, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) [ 1214.338672][ T29] audit: type=1804 audit(1594136301.423:177): pid=9512 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir614112516/syzkaller.3TWdAt/891/bus" dev="sda1" ino=16332 res=1 [ 1214.416512][ T29] audit: type=1804 audit(1594136301.503:178): pid=9516 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir614112516/syzkaller.3TWdAt/891/bus" dev="sda1" ino=16332 res=1 [ 1214.444234][ T29] audit: type=1804 audit(1594136301.503:179): pid=9515 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir614112516/syzkaller.3TWdAt/891/bus" dev="sda1" ino=16332 res=1 [ 1214.534813][ T29] audit: type=1800 audit(1594136301.503:180): pid=9515 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16332 res=0 15:38:23 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:23 executing program 1: socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}}, 0x0) 15:38:23 executing program 5: getpgid(0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$unix(0x1, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000080)={0x44}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, 0x0, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x2, 0x4c}, &(0x7f0000000040)='R\x10rist\x18m\x84\x89\xa5\x05\x04Vi0\x97ddR\xd1\x06\xd3r\x90J%P\x0f\x82[\n~P\xd7\x12\x805', 0xfffffffffffffffb) syz_open_dev$vcsa(0x0, 0x0, 0x0) openat$nvram(0xffffff9c, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000200)='./file0\x00', 0xff, 0x4, &(0x7f00000018c0)=[{&(0x7f0000000300)="dda969bbe355f1a351fa1e1c827d16844513ae47dbcf94df95e6a77197444b226db34fb112a6c5ce47ab2933a7f8d0e5a5cf4ff86bcf2bd45e81e0a24a0ad1a961fadbc9c609b733f03e8a6412e31645fa6a8ff11250d1b16b9d60cbec543f08d74e2eea19a9f87085378b05cd36eff6a246490bb723dfa219b4edec9e1cad800e1670e3af7daaebaf5564343df8484021cf3228b90af3402e93cd71eb94d0b69f6c8810463958ba15f547559f", 0xad, 0x200}, {&(0x7f00000003c0)="ad6abfea9e00f5fbf79d1487d8d23744c3421316afa775bdfc802833fe3fded24e8565e9ca378161891efc4377d5d03d03d981d9ae2a694348185e74167e0135e7a2eb9c2b5fb0a203f7d92e2dba36b24624eedfc10afd41881ccbffcb6b7ad5541217d690527d5ba5e8db0e73ca6c9358ee62e973659681fbb0f8323c52a3471051f9f3036316e68e387e364978be155b", 0x91, 0x3ff}, {&(0x7f0000000240)="1f91c757be7f7daa4ee2fe3c5f803e16bc", 0x11, 0x8}, {&(0x7f0000000480)="5fed68bdd55c06752e9939f60cc230b6e5303534c7279454d050204b5da82bcb672435252ce43fa37af8b72cc0e9b35c1eb95b3068bfde86eb76a4079b8f38abbe9d49aa7f113fbb7084801c8a9423c0e7fccf02a8b8c09eb03f49376916a8fe6a1418c8d159c943e84ee1f11427623349f3f7e310ffebd68ae3029cc16e", 0x7e, 0x80000}], 0x818000, &(0x7f00000007c0)=ANY=[@ANYBLOB="960a3f00000000000000f66e027179b1e66b353a6ecb66ff0f0000000000000c0586d3eebedfc61c48106422394a674aebfd0ab7faa6bef67377bccd02fd831ce90e457ce960e56624f140ecc18e23ef9fe6ed33dadd4cf9d99339b7d40aa3e23a34cc58d31ac3ae66de7470d94f", @ANYRESHEX=0x0, @ANYBLOB="74442947262e58e1ddb7f48836b0f848ef9c3c0599d64420000000000000003da574c026cbf3d7b4ff3775d4ee4e0124359d3fad05f7f4d3728f961126869cef6b24e5ca29eff8dffd8f0b91b22b00b5316aef24107a4b77559e025fde23d996a59f1eff0f000000000000571d00d2955e129fd48785524fdafbca80f0f1a1a8f2b3634570a156d50ab097e62317b4b7503cccdb615cfe09b1d31643812738124df942dd137acebb26fc937534b2129b7addd6341712d11fca58c9340b205de047eb9dc514adcc002441ff7f2d42b9ddd1a0883cd84cc7a48d62c865c6"]) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x480000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) 15:38:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) socket(0x400000000010, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:23 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r2, 0x0) io_setup(0x202, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="99", 0xffffff11}]) 15:38:23 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x10132) 15:38:23 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000030101020000000000000000000000000800084000000000580001800c00128005000100210000000c000280050001003a000000"], 0x74}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0xd8) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 15:38:23 executing program 5: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000001e, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x40) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) close(r0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0x32, 0x0}, 0x0) r1 = gettid() tkill(r1, 0x5000000000016) 15:38:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) socket(0x400000000010, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:24 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 15:38:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$inet6(r0, &(0x7f0000001840)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast2}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @empty}, r2}}}], 0x28}, 0x0) 15:38:24 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1) [ 1217.132425][ T9579] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not 'rawJ' [ 1219.272175][ T0] NOHZ: local_softirq_pending 08 15:38:26 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) socket(0x400000000010, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a) 15:38:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000006c0)=""/174, 0xae}], 0x1, 0x100000001) 15:38:26 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000030101020000000000000000000000000800084000000000580001800c0012800500010021"], 0x74}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100) 15:38:26 executing program 1: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0xb5481f3e129391aa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'veth0_to_batadv\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="208ad9019612"}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="1004000073d1600000000000fbf55b42b90516db4d916502c555cf09570300a44b29d9fde6ea94211af8e74b", 0x311, 0x5db0ef4e77e948cf, 0x0, 0x320) 15:38:26 executing program 3: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:38:27 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x10fffb) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0xf}, 0xf) fallocate(r1, 0x8, 0x0, 0x8000) lseek(r1, 0x0, 0x3) 15:38:27 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1f}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') sendfile(r3, r4, 0x0, 0xa808) 15:38:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, 0x0, 0x0) 15:38:27 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000000)) [ 1220.127732][ T9618] x_tables: duplicate underflow at hook 2 15:38:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, 0x0, 0x0) 15:38:27 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x8eb, 0x0, 0x0}, 0x1b) [ 1220.185866][ T9624] x_tables: duplicate underflow at hook 2 15:38:30 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:30 executing program 1: r0 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_unlink(&(0x7f0000000140)='eth0\x00') 15:38:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x40}]}) 15:38:30 executing program 5: r0 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) mq_unlink(&(0x7f0000000140)='eth0\x00') 15:38:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, 0x0, 0x0) 15:38:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000), 0xb5481f3e129391aa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'veth0_to_batadv\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="208ad9019612"}, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000100)="1004000073d1600000000000fbf55b42b90516db4d916502c555cf09570300a44b29", 0x22, 0x0, 0x0, 0x0) 15:38:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040), 0x0) 15:38:30 executing program 4: r0 = socket$inet6(0x10, 0x2, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fc, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000000)=0xda6, 0x58) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000240)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 15:38:30 executing program 5: r0 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) mq_unlink(&(0x7f0000000140)='eth0\x00') 15:38:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x5) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0xffffffe8) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0xc031, 0xffffffffffffffff, 0x0) 15:38:30 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252002cb18f6e2e2aba000000012e0b3836005404b0e0301a7b2c75f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1f0816f1f6000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000030101020000000000000000000000000800084000000000580001800c00128005000100210000000c000280050001003a0000000600"], 0x74}}, 0x0) gettid() [ 1223.329560][ T29] audit: type=1326 audit(1594136310.413:181): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9651 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040), 0x0) 15:38:31 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:31 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4093, 0xffd}], 0x1, 0x0) 15:38:31 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4093, 0xffd}], 0x1, 0x0) 15:38:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040), 0x0) 15:38:31 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r2, 0x0) io_setup(0x202, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="99", 0xffffff11}]) 15:38:31 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000004c0)='./file0\x00', 0x610c03, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000580)='./file0/file0\x00', 0x7e) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r3 = open(&(0x7f0000000380)='./file0\x00', 0x1293c2, 0x30) write(r3, &(0x7f0000000040)="1d6b11fde8", 0x216) sendfile(0xffffffffffffffff, r3, &(0x7f00000001c0), 0xa198) openat$cgroup_ro(r3, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) dup(r2) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x10) mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rmdir(&(0x7f0000000500)='./file0\x00') bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000), 0x10) renameat2(r4, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) renameat2(r1, &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) fcntl$dupfd(r4, 0x0, r3) fchmodat(r1, &(0x7f00000000c0)='./file0\x00', 0x40) 15:38:31 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000300)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x14}]}}]}, 0x4c}}, 0x0) [ 1224.069431][ T29] audit: type=1804 audit(1594136311.153:182): pid=9697 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir039538737/syzkaller.kPA4Pr/961/bus" dev="sda1" ino=16325 res=1 15:38:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc028020", 0x12) 15:38:31 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000009032, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003) fchdir(0xffffffffffffffff) 15:38:31 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @rand_addr=0x64010102}, 0xc) eventfd(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept$inet(r3, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f00000001c0)=0x10) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 1224.146549][ T29] audit: type=1804 audit(1594136311.223:183): pid=9700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir039538737/syzkaller.kPA4Pr/961/bus" dev="sda1" ino=16325 res=1 [ 1224.213274][ T29] audit: type=1804 audit(1594136311.233:184): pid=9700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir039538737/syzkaller.kPA4Pr/961/bus" dev="sda1" ino=16325 res=1 15:38:31 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002840)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x70}}, 0x0) 15:38:31 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1224.367959][ T29] audit: type=1326 audit(1594136311.453:185): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9698 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 [ 1224.403972][ T9714] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 15:38:32 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc028020", 0x12) 15:38:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x18}}], 0x1, 0x0) 15:38:32 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x10}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) 15:38:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000003e40)=[{{&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @private2}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) 15:38:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB='o'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @private1}]}}]}, 0x48}}, 0x0) 15:38:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) 15:38:32 executing program 1: 15:38:32 executing program 5: 15:38:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc028020", 0x12) 15:38:32 executing program 4: 15:38:32 executing program 1: [ 1225.260750][ T29] audit: type=1326 audit(1594136312.343:186): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9743 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:32 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:32 executing program 4: 15:38:32 executing program 5: 15:38:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e100", 0x1b) 15:38:32 executing program 1: 15:38:33 executing program 5: 15:38:33 executing program 3: 15:38:33 executing program 1: 15:38:33 executing program 4: 15:38:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e100", 0x1b) 15:38:33 executing program 5: 15:38:33 executing program 1: [ 1226.166478][ T29] audit: type=1326 audit(1594136313.253:187): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9772 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:33 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:33 executing program 3: 15:38:33 executing program 4: 15:38:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e100", 0x1b) 15:38:33 executing program 1: 15:38:33 executing program 5: 15:38:33 executing program 5: 15:38:34 executing program 3: 15:38:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e030900", 0x20) 15:38:34 executing program 4: 15:38:34 executing program 1: 15:38:34 executing program 4: [ 1227.139296][ T29] audit: type=1326 audit(1594136314.223:188): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9800 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:34 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:34 executing program 5: 15:38:34 executing program 1: 15:38:34 executing program 3: 15:38:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e030900", 0x20) 15:38:34 executing program 4: 15:38:34 executing program 5: 15:38:35 executing program 1: 15:38:35 executing program 4: 15:38:35 executing program 3: 15:38:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e030900", 0x20) 15:38:35 executing program 5: [ 1228.091212][ T29] audit: type=1326 audit(1594136315.183:189): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:35 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:35 executing program 3: 15:38:35 executing program 4: 15:38:35 executing program 1: 15:38:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800", 0x22) 15:38:35 executing program 5: 15:38:35 executing program 5: 15:38:35 executing program 4: 15:38:35 executing program 1: 15:38:35 executing program 3: 15:38:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800", 0x22) 15:38:36 executing program 5: [ 1229.031263][ T29] audit: type=1326 audit(1594136316.123:190): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9854 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:36 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:36 executing program 4: 15:38:36 executing program 1: 15:38:36 executing program 3: 15:38:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800", 0x22) 15:38:36 executing program 5: 15:38:36 executing program 4: 15:38:36 executing program 1: 15:38:36 executing program 3: 15:38:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a0", 0x23) 15:38:36 executing program 5: 15:38:37 executing program 4: [ 1229.981364][ T29] audit: type=1326 audit(1594136317.073:191): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9882 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:37 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:37 executing program 3: 15:38:37 executing program 1: 15:38:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a0", 0x23) 15:38:37 executing program 5: 15:38:37 executing program 4: 15:38:37 executing program 5: 15:38:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x5d9a1a053c8e68a3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a0", 0x23) 15:38:37 executing program 4: 15:38:37 executing program 1: 15:38:37 executing program 3: 15:38:37 executing program 5: [ 1230.920216][ T29] audit: type=1326 audit(1594136318.003:192): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9906 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:38 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:38 executing program 4: 15:38:38 executing program 1: 15:38:38 executing program 0: 15:38:38 executing program 3: 15:38:38 executing program 5: 15:38:38 executing program 4: 15:38:38 executing program 0: 15:38:38 executing program 3: 15:38:38 executing program 1: 15:38:38 executing program 5: 15:38:38 executing program 3: [ 1231.885263][ T29] audit: type=1326 audit(1594136318.973:193): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9931 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:39 executing program 2: getpgid(0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:39 executing program 0: 15:38:39 executing program 4: 15:38:39 executing program 1: 15:38:39 executing program 5: 15:38:39 executing program 3: 15:38:39 executing program 0: 15:38:39 executing program 3: 15:38:39 executing program 1: 15:38:39 executing program 4: 15:38:39 executing program 5: 15:38:39 executing program 5: [ 1232.836451][ T29] audit: type=1326 audit(1594136319.923:194): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9953 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:40 executing program 2: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:40 executing program 4: 15:38:40 executing program 1: 15:38:40 executing program 3: 15:38:40 executing program 0: 15:38:40 executing program 5: 15:38:40 executing program 1: 15:38:40 executing program 3: 15:38:40 executing program 5: 15:38:40 executing program 4: 15:38:40 executing program 0: 15:38:40 executing program 3: [ 1233.790248][ T29] audit: type=1326 audit(1594136320.873:195): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9976 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:41 executing program 2: futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:41 executing program 1: 15:38:41 executing program 5: 15:38:41 executing program 0: 15:38:41 executing program 3: 15:38:41 executing program 4: 15:38:41 executing program 1: 15:38:41 executing program 5: 15:38:41 executing program 4: 15:38:41 executing program 3: 15:38:41 executing program 0: 15:38:41 executing program 1: [ 1234.757604][ T29] audit: type=1326 audit(1594136321.843:196): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9999 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:42 executing program 2: futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:42 executing program 5: 15:38:42 executing program 4: 15:38:42 executing program 0: 15:38:42 executing program 3: 15:38:42 executing program 1: 15:38:42 executing program 1: 15:38:42 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 15:38:42 executing program 4: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x26) 15:38:42 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x54, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}]}]}, 0x54}}, 0x0) 15:38:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@utf8no='utf8=0'}]}) 15:38:42 executing program 4: [ 1235.686979][T10029] tipc: Started in network mode [ 1235.694388][T10029] tipc: Own node identity e0000001, cluster identity 4711 [ 1235.700898][T10032] ptrace attach of "/root/syz-executor.5"[10031] was attempted by "/root/syz-executor.5"[10032] [ 1235.702652][T10029] tipc: Enabling of bearer rejected, failed to enable media [ 1235.734492][ T29] audit: type=1326 audit(1594136322.823:197): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10020 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 [ 1235.739124][T10035] tipc: Enabling of bearer rejected, failed to enable media [ 1235.788827][T10034] FAT-fs (loop3): bogus number of reserved sectors [ 1235.812094][T10034] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1235.882557][T10034] FAT-fs (loop3): bogus number of reserved sectors [ 1235.899955][T10034] FAT-fs (loop3): Can't find a valid FAT filesystem 15:38:43 executing program 2: futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:43 executing program 1: 15:38:43 executing program 5: syz_read_part_table(0x0, 0x5, &(0x7f0000000040)=[{&(0x7f00000000c0)="020185ffffff0a100000ff45ac0000ffffffa5000800000000000000024000ffffff82000000e10000008877007200300700bfffffff00000000008000da55aa", 0x40, 0x1c0}]) 15:38:43 executing program 0: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 15:38:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') preadv(r0, &(0x7f0000001480)=[{&(0x7f0000001b40)=""/4102, 0x1006}], 0x1, 0xc00) 15:38:43 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc01ff003639405cb4aec12f0000001500ae47a825d86800278dcff47d010000805acf4f8f364602344324adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebfdf70faa53367f05f4affffffffffff800031e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563af083476882296a9660f14d11db401a5dd7f3356f46386ea5580575f1cef3b8a0fc8723d7286610f43210535caa15d5da359abd9c4c0338d4afe76ddf9397a8d1c1a1b285efad2e9668751fdeca64460d004", 0xf7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 15:38:43 executing program 1: syz_read_part_table(0x0, 0x5, &(0x7f0000000040)=[{&(0x7f00000000c0)="020185ffffff0a100000ff45ac000000000063000800000000000000024000ffffff82000000e10000008877007200300700bfffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1236.500491][T10059] ptrace attach of "/root/syz-executor.3"[10057] was attempted by "/root/syz-executor.3"[10059] [ 1236.520535][T10055] loop5: p1 < > p2 p3 p4 [ 1236.525149][T10055] loop5: partition table partially beyond EOD, truncated 15:38:43 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002400)=[{0x0}, {&(0x7f0000000000)=""/60, 0x3c}], 0x2}, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 1236.563894][T10055] loop5: p1 start 4106 is beyond EOD, truncated 15:38:43 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002d00)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) [ 1236.611666][T10055] loop5: p2 size 1073872896 extends beyond EOD, truncated 15:38:43 executing program 0: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 1236.648598][ T29] audit: type=1326 audit(1594136323.733:198): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10060 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 [ 1236.675926][T10055] loop5: p3 start 225 is beyond EOD, truncated 15:38:43 executing program 1: syz_usb_connect(0x0, 0x63, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x40, 0x97, 0x58, 0x10, 0x5c6, 0x9080, 0x29cf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x3, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5, 0x73, 0x3, 0xb, 0x2d, 0x56, 0x1, [], [{{0x9, 0x5, 0x9}}, {{0x9, 0x5, 0x7, 0x2}}, {{0x9, 0x5, 0xd, 0x0, 0x10}}]}}, {{0x9, 0x4, 0x5e, 0x0, 0x2, 0xf1, 0x4d, 0x59, 0x0, [], [{{0x9, 0x5, 0x9}}, {{0x9, 0x5, 0x7}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x87, 0xa, 0xe0}}]}}]}}, 0x0) [ 1236.714078][T10055] loop5: p4 size 3657465856 extends beyond EOD, truncated 15:38:43 executing program 0: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 1236.870101][T10055] loop5: p1 < > p2 p3 p4 [ 1236.875344][T10055] loop5: partition table partially beyond EOD, truncated [ 1236.908289][T10055] loop5: p1 start 4106 is beyond EOD, truncated [ 1236.922091][T10055] loop5: p2 size 1073872896 extends beyond EOD, truncated [ 1236.969478][T10055] loop5: p3 start 225 is beyond EOD, truncated [ 1236.989874][T10055] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1237.189978][ T7417] usb 2-1: new high-speed USB device number 10 using dummy_hcd 15:38:44 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 15:38:44 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 15:38:44 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff400000000001090224000100000000090400fc000103"], 0x0) 15:38:44 executing program 2: futex(&(0x7f000000cffc), 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:44 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:38:44 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002d00)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x300) [ 1237.440009][ T7417] usb 2-1: Using ep0 maxpacket: 16 15:38:44 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) [ 1237.560202][ T7417] usb 2-1: config 0 has an invalid interface number: 5 but max is 2 [ 1237.571604][ T29] audit: type=1326 audit(1594136324.663:199): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10122 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 [ 1237.608929][ T7417] usb 2-1: config 0 has an invalid interface number: 94 but max is 2 [ 1237.645149][ T7417] usb 2-1: config 0 has no interface number 1 [ 1237.667697][ T7417] usb 2-1: config 0 has no interface number 2 [ 1237.680023][ T8065] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1237.685539][ T7417] usb 2-1: config 0 interface 5 altsetting 115 endpoint 0x9 has invalid wMaxPacketSize 0 15:38:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) memfd_create(&(0x7f0000000340)='\x00', 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 15:38:44 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000020543c08bb043009f952010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001400)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1237.712720][ T7417] usb 2-1: config 0 interface 5 altsetting 115 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1237.741716][ T7417] usb 2-1: config 0 interface 5 altsetting 115 bulk endpoint 0x7 has invalid maxpacket 0 [ 1237.758808][ T7417] usb 2-1: config 0 interface 94 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 1237.773360][ T7417] usb 2-1: config 0 interface 94 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1237.800829][ T7417] usb 2-1: config 0 interface 5 has no altsetting 0 15:38:44 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x5, {0x5, 0x0, "94dc2d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1237.850902][T10140] udc-core: couldn't find an available UDC or it's busy [ 1237.860618][T10140] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1237.980386][ T7417] usb 2-1: New USB device found, idVendor=05c6, idProduct=9080, bcdDevice=29.cf [ 1237.992207][ T7417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.012377][ T7417] usb 2-1: Product: syz [ 1238.016965][ T7417] usb 2-1: Manufacturer: syz [ 1238.022495][ T7417] usb 2-1: SerialNumber: syz [ 1238.032468][ T7417] usb 2-1: config 0 descriptor?? [ 1238.080422][ T8065] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.105032][ T8065] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1238.115872][ T8065] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.40 [ 1238.149890][ T8065] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.180415][ T8065] usb 6-1: config 0 descriptor?? [ 1238.220166][T22614] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1238.230576][ T8065] usb 6-1: MIDIStreaming interface descriptor not found [ 1238.315632][ T7417] usb 2-1: USB disconnect, device number 10 [ 1238.375746][T10140] udc-core: couldn't find an available UDC or it's busy [ 1238.389824][T10140] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1238.433605][ T2485] usb 6-1: USB disconnect, device number 52 [ 1238.610446][T22614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.639837][T22614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.702947][T22614] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.40 [ 1238.754323][T22614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.841323][T22614] usb 4-1: config 0 descriptor?? [ 1239.050031][ T7417] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1239.219953][T22614] usbhid 4-1:0.0: can't add hid device: -71 [ 1239.226174][T22614] usbhid: probe of 4-1:0.0 failed with error -71 [ 1239.239296][ T2485] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1239.248577][T22614] usb 4-1: USB disconnect, device number 39 [ 1239.299919][ T7417] usb 2-1: Using ep0 maxpacket: 16 [ 1239.420048][ T7417] usb 2-1: config 0 has an invalid interface number: 5 but max is 2 [ 1239.428081][ T7417] usb 2-1: config 0 has an invalid interface number: 94 but max is 2 [ 1239.436844][ T7417] usb 2-1: config 0 has no interface number 1 [ 1239.443219][ T7417] usb 2-1: config 0 has no interface number 2 [ 1239.449493][ T7417] usb 2-1: config 0 interface 5 altsetting 115 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1239.459949][ T7417] usb 2-1: config 0 interface 5 altsetting 115 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1239.470225][ T7417] usb 2-1: config 0 interface 5 altsetting 115 bulk endpoint 0x7 has invalid maxpacket 0 [ 1239.480843][ T7417] usb 2-1: config 0 interface 94 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 1239.491870][ T7417] usb 2-1: config 0 interface 94 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1239.503242][ T7417] usb 2-1: config 0 interface 5 has no altsetting 0 [ 1239.640003][ T2485] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.650550][ T2485] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1239.657154][ T2485] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.40 [ 1239.669165][ T2485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.670244][ T7417] usb 2-1: New USB device found, idVendor=05c6, idProduct=9080, bcdDevice=29.cf [ 1239.683935][ T2485] usb 6-1: config 0 descriptor?? [ 1239.698045][ T7417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.708383][ T7417] usb 2-1: Product: syz [ 1239.720938][ T7417] usb 2-1: Manufacturer: syz [ 1239.721400][T22614] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1239.728478][ T7417] usb 2-1: SerialNumber: syz [ 1239.742816][ T2485] usb 6-1: MIDIStreaming interface descriptor not found [ 1239.753838][ T7417] usb 2-1: config 0 descriptor?? 15:38:46 executing program 1: syz_read_part_table(0x6f0860ea, 0x5, &(0x7f0000000040)=[{&(0x7f00000000c0)="020185ffffff0a100000ff45ac0000ffffffa9000800000000000000024000ffffff82000000e10000008877007200300700bfffffff00000000008000da55aa", 0x40, 0x1c0}]) 15:38:46 executing program 0: syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe0, 0x5e, 0x84, 0x10, 0xb428, 0xe1b0, 0x8216, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x50}}]}}]}}, 0x0) 15:38:46 executing program 2: futex(&(0x7f000000cffc), 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:46 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002d00)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4c) [ 1239.869248][ T7417] usb 2-1: can't set config #0, error -71 [ 1239.888268][ T7417] usb 2-1: USB disconnect, device number 11 [ 1239.960356][ T2485] usb 6-1: USB disconnect, device number 53 15:38:47 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6666, 0x8801, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "94dcae"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:38:47 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) [ 1240.100888][ T29] audit: type=1326 audit(1594136327.193:200): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10225 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 [ 1240.140081][T22614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 15:38:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000001700010100000000000002000400000006000b0026"], 0x1c}}, 0x0) [ 1240.170144][T22614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.210097][T16473] usb 1-1: new full-speed USB device number 29 using dummy_hcd 15:38:47 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0xea60}, {0x77359400}}) [ 1240.213291][T22614] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.40 15:38:47 executing program 1: socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$devlink(0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000040)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 1240.267927][T22614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.303939][T22614] usb 4-1: config 0 descriptor?? 15:38:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 15:38:47 executing program 1: syz_read_part_table(0x0, 0x5, &(0x7f0000000040)=[{&(0x7f00000000c0)="020185ffffff0a100000ff45ac0000ffffffbf000800000000000000024000ffffff82000000e10000008877007200300700bfffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1240.630163][ T2485] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1240.750524][T16473] usb 1-1: New USB device found, idVendor=b428, idProduct=e1b0, bcdDevice=82.16 [ 1240.765725][T16473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.801524][T22614] plantronics 0003:047F:FFFF.0012: item fetching failed at offset 4/5 [ 1240.808390][T16473] usb 1-1: Product: syz [ 1240.824461][T22614] plantronics 0003:047F:FFFF.0012: parse failed [ 1240.841638][T16473] usb 1-1: Manufacturer: syz [ 1240.848175][T16473] usb 1-1: SerialNumber: syz [ 1240.850754][T22614] plantronics: probe of 0003:047F:FFFF.0012 failed with error -22 [ 1240.866779][T16473] usb 1-1: config 0 descriptor?? [ 1240.879972][ T2485] usb 6-1: Using ep0 maxpacket: 16 [ 1240.912026][T16473] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1241.000127][ T2485] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.004224][T16473] usb 4-1: USB disconnect, device number 40 [ 1241.011340][ T2485] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.049840][ T2485] usb 6-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.40 [ 1241.058919][ T2485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.116174][ T2485] usb 6-1: config 0 descriptor?? [ 1241.135196][T22614] usb 1-1: USB disconnect, device number 29 [ 1241.491499][ T2485] usbhid 6-1:0.0: can't add hid device: -71 [ 1241.497583][ T2485] usbhid: probe of 6-1:0.0 failed with error -71 [ 1241.512521][ T2485] usb 6-1: USB disconnect, device number 54 [ 1241.779850][ T3832] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1241.891104][T16473] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1241.961089][ T2485] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1242.139877][ T3832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.151449][ T3832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.161538][ T3832] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.40 [ 1242.171690][ T3832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.182049][ T3832] usb 4-1: config 0 descriptor?? [ 1242.209922][ T2485] usb 6-1: Using ep0 maxpacket: 16 15:38:49 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 15:38:49 executing program 2: futex(&(0x7f000000cffc), 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) [ 1242.350144][ T2485] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.389798][ T2485] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.399645][ T2485] usb 6-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.40 [ 1242.410721][T16473] usb 1-1: New USB device found, idVendor=b428, idProduct=e1b0, bcdDevice=82.16 [ 1242.419884][ T2485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.428123][ T3832] usbhid 4-1:0.0: can't add hid device: -71 [ 1242.435114][ T2485] usb 6-1: config 0 descriptor?? [ 1242.436745][ T3832] usbhid: probe of 4-1:0.0 failed with error -71 [ 1242.451441][T16473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.475384][ T3832] usb 4-1: USB disconnect, device number 41 [ 1242.482075][T16473] usb 1-1: Product: syz [ 1242.492556][ T29] audit: type=1326 audit(1594136329.583:201): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10334 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 [ 1242.497039][T16473] usb 1-1: Manufacturer: syz [ 1242.544036][T16473] usb 1-1: SerialNumber: syz [ 1242.573979][T16473] usb 1-1: config 0 descriptor?? [ 1242.631793][T16473] usb-storage 1-1:0.0: USB Mass Storage device detected 15:38:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r0, &(0x7f0000001480)=[{&(0x7f0000001b40)=""/4102, 0x1006}], 0x1, 0xc00) 15:38:49 executing program 4: r0 = socket$inet6(0x10, 0x2, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fc, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendto$inet6(r0, &(0x7f0000000240)="4c00000012001f15b9409b849ac00a00a5784002feffffff0000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 15:38:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) r1 = epoll_create(0x5) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$unix(r2, &(0x7f0000000880)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000080)="53e7", 0x2}], 0x1, &(0x7f00000007c0)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x0) [ 1242.840166][ T8065] usb 1-1: USB disconnect, device number 30 [ 1242.941726][ T2485] smartjoyplus 0003:6666:8801.0013: item fetching failed at offset 4/5 [ 1242.970014][ T2485] smartjoyplus 0003:6666:8801.0013: parse failed [ 1242.976563][ T2485] smartjoyplus: probe of 0003:6666:8801.0013 failed with error -22 [ 1243.151153][ T8065] usb 6-1: USB disconnect, device number 55 [ 1243.941089][ T8065] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1244.209998][ T8065] usb 6-1: Using ep0 maxpacket: 16 [ 1244.339965][ T8065] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.350886][ T8065] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.361230][ T8065] usb 6-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.40 [ 1244.370557][ T8065] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.379499][ T8065] usb 6-1: config 0 descriptor?? 15:38:51 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x11b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 15:38:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000170001010000004b000002"], 0x1c}}, 0x0) 15:38:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f0000001480)=[{&(0x7f0000001b40)=""/4102, 0x1006}], 0x1, 0x380) 15:38:51 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x63, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x26, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0xf, {0xf, 0x0, "94dcae64cd13e51426dbd37342"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:38:51 executing program 0: syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x0) 15:38:51 executing program 2: futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) [ 1244.560103][ T8065] usbhid 6-1:0.0: can't add hid device: -71 [ 1244.562057][T10402] udc-core: couldn't find an available UDC or it's busy [ 1244.566279][ T8065] usbhid: probe of 6-1:0.0 failed with error -71 15:38:51 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002d00)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 15:38:51 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) [ 1244.602179][T10408] ptrace attach of "/root/syz-executor.5"[10407] was attempted by "/root/syz-executor.5"[10408] [ 1244.628635][ T8065] usb 6-1: USB disconnect, device number 56 [ 1244.630869][T10402] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:38:51 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000104c05740300070000000109022400010000000009040001e91e000103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 15:38:51 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) [ 1244.716378][ T29] audit: type=1326 audit(1594136331.803:202): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10399 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:51 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc01ff003639405cb4aec12f0000001500ae47a825d86800278dcff47d010000805acf4f8f364602344324adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebfdf70faa53367f05f4affffffffffff800031e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563af083476882296a9660f14d11db401a5dd7f3356f46386ea5580575f1cef3b8a0fc8723d7286610f43210535caa15d5da359abd9c4c0338d4afe76ddf9397a8d1c1a1b285efad2e9668751fdeca644", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 1244.880766][T10402] udc-core: couldn't find an available UDC or it's busy [ 1244.887785][T10402] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:38:52 executing program 1: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) [ 1244.972889][T10430] binder: BINDER_SET_CONTEXT_MGR already set [ 1244.996945][T10430] binder: 10417:10430 ioctl 40046207 0 returned -16 15:38:52 executing program 5: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) [ 1245.013555][T10433] ptrace attach of "/root/syz-executor.5"[10432] was attempted by "/root/syz-executor.5"[10433] 15:38:52 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002d00)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) [ 1245.091101][ T2485] usb 4-1: new high-speed USB device number 42 using dummy_hcd 15:38:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0xfffdfffb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x35, 0x20008000, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/165, 0xa5}], 0x1, 0x200000000001f6) [ 1245.329912][ T2485] usb 4-1: Using ep0 maxpacket: 16 [ 1245.438061][T10402] udc-core: couldn't find an available UDC or it's busy [ 1245.450324][ T2485] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.470699][T10402] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1245.492040][ T2485] usb 4-1: too many endpoints for config 0 interface 0 altsetting 1: 233, using maximum allowed: 30 [ 1245.532650][ T2485] usb 4-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 233 [ 1245.536444][T10449] udc-core: couldn't find an available UDC or it's busy [ 1245.553423][ T2485] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1245.561282][ T2485] usb 4-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 7.00 [ 1245.571367][ T2485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:38:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ef17496040000000000109022400010000000009040000010301000009210000000122eeff08"], 0x0) 15:38:52 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002d00)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 15:38:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000200)="1400000052001f0214f9f4070009040081000710", 0x14) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 15:38:52 executing program 2: futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:52 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) [ 1245.582178][ T2485] usb 4-1: config 0 descriptor?? [ 1245.594986][T10449] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1245.737726][T10462] udc-core: couldn't find an available UDC or it's busy [ 1245.759693][T10462] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1245.790232][ T29] audit: type=1326 audit(1594136332.883:203): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10453 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 [ 1245.910105][ T2485] usb 4-1: language id specifier not provided by device, defaulting to English [ 1246.162315][ T2485] usb 4-1: USB disconnect, device number 42 [ 1246.889950][ T2485] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1247.139895][ T2485] usb 4-1: Using ep0 maxpacket: 16 [ 1247.280048][ T2485] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.290181][ T2485] usb 4-1: too many endpoints for config 0 interface 0 altsetting 1: 233, using maximum allowed: 30 [ 1247.303696][ T2485] usb 4-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 233 [ 1247.317601][ T2485] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1247.325479][ T2485] usb 4-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 7.00 [ 1247.335461][ T2485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.346077][ T2485] usb 4-1: config 0 descriptor?? 15:38:54 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) write(r1, &(0x7f0000000100), 0x92000) socket(0x0, 0x0, 0x0) 15:38:54 executing program 5: r0 = socket(0x1f, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000001080)=0x9, 0x4) 15:38:54 executing program 1: unshare(0x44000600) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x54, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}]}]}, 0x54}}, 0x0) 15:38:54 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002d00)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 15:38:54 executing program 4: r0 = socket(0x1f, 0x3, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 15:38:54 executing program 2: futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) [ 1247.694537][ T2485] usb 4-1: string descriptor 0 read error: -71 [ 1247.724152][ T2485] usb 4-1: USB disconnect, device number 43 15:38:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000000)={0x3, 0x200, 0x10001, 0x8001, 0x6, 0x7}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x80, 0x23, 0x6c, {0x6c, 0xb, "6c660c4fa38e2ba5e01b886fb02a6fd3667013cfe08113e8cd18f701fa78fef0784d64730281417ad6dbcba6c00dfd7b3c28d65d02a2360ee5e6f12b2b594e7e199c6fb028f986e727c27143c6d9d3fe122edbaa8a63236649889cde84a50258166165726fb61f5773ea"}}, &(0x7f0000000300)={0x0, 0x3, 0xf7, @string={0xf7, 0x3, "966aec6183427ab12905768155dbf05f24084a0f7e9f8a1b2cfc3e1ed203aeeedaf1a0d77e675a43fd38084cb34d2975cb6784b408b5853ab2156b10dabb6f1faaffbf9d49997fa47dc7ab90c1726b55051f8c6473d8a36e36c69a9855e0e7cbcecca4775c5b165899dab4482ebdfa4a61a754bf82a4840dd7999bccb32a25b498d494cffc283cb86c7c483eccfeb092d07be7446067e1fc5c193ccfb3104aced10c33547827c959f16300c4309582c0c6c489b57cdf345d8304c79de9d5ced7ec0181f4331051c2263395317a38b6537d2ebb6896774c798a27252f96984f4431634a27041255b2551b72a07053e81b9dcf1c1ffb"}}, &(0x7f0000000100)={0x0, 0x22, 0x2c, {[@main=@item_4={0x3, 0x0, 0xc, "997944e8"}, @global=@item_4={0x3, 0x1, 0x7, "bd502362"}, @local=@item_012={0x2, 0x2, 0xa, "c815"}, @local=@item_4={0x3, 0x2, 0x3, "24dfc405"}, @local=@item_4={0x3, 0x2, 0x9, "a40d3953"}, @main=@item_4={0x3, 0x0, 0x8, "8bf5e138"}, @local=@item_4={0x3, 0x2, 0x9, "173cf547"}, @main=@item_012={0x2, 0x0, 0x9, "a373"}, @local=@item_4={0x3, 0x2, 0x7, "92dec932"}, @local=@item_012={0x2, 0x2, 0x3, "1936"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc5, 0xe0, 0x1, {0x22, 0x477}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0xdf, "8b5216e6174a35ce595be9b5d8cb58fb0fb756b9c85e6a0ffdb167e5ef89f6884774d06a6c4971d92f349734098af68a289de5bee67544ac79b26ce94b03ab7b3ab1fdc93b145422891a626ef974ad3322147a83b0987099cb923dfa9270a4e1509bc3bc820de3ec007d6f37d558d7c99107094cefe7ddb8ea096ece1831963f9bfdbbcc608ba79f309e3fffe4baa8f341fd613ed8e9da2f63c5abc7ebc8aaa799218774dd46a94e989c77172840ab8ceea15e61a25747abc6541fd3eaafc8917ce6e78cb1c77d300ddcb084444724c95deec810f3aaa3bf793751776094e4"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000500)={0x20, 0x1, 0x88, "eaa128818703c976e75335a1ccb57d123d62efc41686b68adf05276209dc5309a4e1f7a81b05a4afa9a7fdca1f7c7263aedcf78224866cd5c76b130900bfa3d1254542bf3112c009f47db4426ecea556a9b44e527d937b4441d5b56ad86693427779ea44ce452259b4896a17be87354461436de34b8fe4ece8c194ec2e5d9235d577d35c89810cc2"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x1f}}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000c80)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000d00)={0x20, 0x21, 0xd1, {0xd1, 0x9, "1b287a1ab94ab52fb850237786b4e091d7fbf37ec6427b97001de17512b5d4823bf332895c912596e5314dfbb5d9f2934293cd2d1df9d736eab31fde5bdb22a4143b56b18cd24e69d5f30c947d2e80fac4ce869af2d38573551b5a694891609b884c21c2f4f751fde71447b0b2bd3b72798b788c723d456f17e35dcef42d760fc1331a31a36a2335b07837f085b4e8681dacb0e52ef8198ab077f98ff45213b50a4775c74e21ebdd66393e7e093021780d04fd06489ccd38b605f6ae6488b183ae875e7b264cf75f30a0e3c6d997c5"}}, &(0x7f0000000e00)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "90363966d44b843c7860226f4848579ba2e1a0534be7509abdc07b47e37ce4658f7687d1f3bbb16a91d0be42516b9169448577c3aa3b9336838eb74689229ae9afd021a024c07c7df6625ac57fc9a0d21cc882e0816cb65a1f1123b88461a5fa5d212e7621ee365bba4be577c3720f137dbbfddff71f9a4235fd9d6c83496a8a03333e4eab3db1189bee12ed17cacaa6fe9cb4ea5a33399ac7f3f5a93341e551fe67da610a4041506d356026b1408b9264f798f118e485ad3dc5b7ab97cbbf4c8b52fc40a86c88110fed39a27e11500c4046fef25411b793711b49f665"}}, &(0x7f0000000f00)={0x0, 0xf, 0xc7, {0x5, 0xf, 0xc7, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xf6, "cd3ff6ce672c9bae37b5a4d61e7fa766"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x7, 0x9}, @generic={0xa4, 0x10, 0x1, "1466cd8caa8f946ad8bb75225e63ced72b7bc5dabb1b2b0fd6487dd3d032d93fec32d855a4d6e2f15d1eb5478133227102ab62be031e09360b25577cdfc0c3353ad26720dba7e13c2be0aac3a512719c298e95554971606ba20bde13ca31f2b6dbf27e268c0a42d00d4fa2b1e9540cb22d47ec58b995fd6424d5b863f79fcfb437cc7c7fe9e80a4991e97934b5073ba94b509b76309d65cb42e224fdc093573cf6"}, @ptm_cap={0x3}]}}, &(0x7f0000001000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x10, 0x81, 0x6, "4c1fd9bc", "00053f8f"}}, &(0x7f0000001040)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x3, 0x1, 0x3, 0x8, 0x81, 0xfff7}}}, &(0x7f0000001540)={0x84, &(0x7f00000010c0)={0x40, 0x8, 0x86, "f465cfcd9e3cba0e295f548058cec9be48e0d4206b07dc677a8296f2045bb8f9a6538897a24ce05b9c3ee7bf1932577315b68ad52887a374e35b042c355e18a91514782117e84a9a71a425762feec7425fbe512b45ffae9af5d66924ff7ddf0c81fe0f8d630c59ea09dd39c555c6fb1992af0785e25d47acb1c178f79bab1493c6655b25e742"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000001200)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001240)={0x20, 0x0, 0x8, {0x10, 0x1, [0xff0]}}, &(0x7f0000001280)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000012c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000001300)={0x40, 0xb, 0x2, "27cd"}, &(0x7f0000001340)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000001380)={0x40, 0x13, 0x6}, &(0x7f00000013c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001400)={0x40, 0x19, 0x2, "c93b"}, &(0x7f0000001440)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001480)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000014c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001500)={0x40, 0x21, 0x1, 0x8}}) 15:38:54 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x17, 0x12, 0xbe, 0x40, 0xbfd, 0x3, 0xd58b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x65, 0x4b, 0xfb}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 1247.827725][T10506] IPVS: ftp: loaded support on port[0] = 21 [ 1247.835224][T10509] tipc: Started in network mode [ 1247.860968][T10509] tipc: Own node identity e0000001, cluster identity 4711 [ 1247.901056][ T29] audit: type=1326 audit(1594136334.993:204): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10493 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 [ 1247.928849][T10509] tipc: Enabling of bearer rejected, failed to enable media 15:38:55 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002d00)=""/4096, 0x1000}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xf2, 0x0) [ 1247.966103][T10506] lo speed is unknown, defaulting to 1000 15:38:55 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r0, r3) sendmsg$netlink(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) [ 1248.027392][T10522] udc-core: couldn't find an available UDC or it's busy [ 1248.044958][T10522] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:38:55 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002d00)=""/4096, 0x1000}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xf2, 0x0) [ 1248.207452][T10506] IPVS: ftp: loaded support on port[0] = 21 15:38:55 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB], 0x2) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000804}, 0x4000000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) fchmod(0xffffffffffffffff, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000980)=ANY=[], 0x1) [ 1248.249921][T22614] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1248.273398][T10506] lo speed is unknown, defaulting to 1000 15:38:55 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002d00)=""/4096, 0x1000}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xf2, 0x0) 15:38:55 executing program 1: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) setxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003500)=[{&(0x7f0000003540)=""/4095, 0x7ffff000}], 0x1, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) [ 1248.540540][T22614] usb 6-1: Using ep0 maxpacket: 16 15:38:55 executing program 2: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) [ 1248.582956][T10522] udc-core: couldn't find an available UDC or it's busy [ 1248.600044][T10522] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:38:55 executing program 4: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14, 0x0, @thr={&(0x7f0000000000)="65172b0664cf51af94305689c584e31f6c66cb691afc9d9e2b5b9ac2e580f152493914bedc7ae3e02fee09675c45a31ebbc064f0625d92c1bd3c511cc949f3", &(0x7f0000000300)="92eb"}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) dup(0xffffffffffffffff) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x0) 15:38:55 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) [ 1248.680207][T22614] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1248.700568][T22614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.760258][ T3539] tipc: TX() has been purged, node left! [ 1248.762284][T22614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.853639][T22614] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1248.892469][ T29] audit: type=1800 audit(1594136335.983:205): pid=10580 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16326 res=0 [ 1248.929020][T10593] binder: BINDER_SET_CONTEXT_MGR already set [ 1248.945842][T22614] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1248.962928][T10593] binder: 10588:10593 ioctl 40046207 0 returned -16 [ 1248.975648][ T29] audit: type=1326 audit(1594136336.013:206): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10582 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 [ 1249.021328][T22614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:38:56 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42441, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x0, 0xd73a}, 0x3080, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8000) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000340)=""/152) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) [ 1249.061635][T22614] usb 6-1: config 0 descriptor?? [ 1249.616901][T22614] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0014/input/input15 [ 1249.670333][T22614] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0014/input/input16 [ 1249.784121][T22614] kye 0003:0458:5013.0014: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 1250.062997][T10518] udc-core: couldn't find an available UDC or it's busy [ 1250.076028][T10518] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1250.989921][T22614] usb 6-1: reset high-speed USB device number 57 using dummy_hcd 15:38:58 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000002c0)="88") 15:38:58 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 15:38:58 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_out(r0, 0x5460, &(0x7f0000000180)) 15:38:58 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42441, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x0, 0xd73a}, 0x3080, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8000) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000340)=""/152) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) 15:38:58 executing program 2: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 15:38:58 executing program 4: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14, 0x0, @thr={&(0x7f0000000000)="65172b0664cf51af94305689c584e31f6c66cb691afc9d9e2b5b9ac2e580f152493914bedc7ae3e02fee09675c45a31ebbc064f0625d92c1bd3c511cc949f3", &(0x7f0000000300)="92eb"}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) dup(0xffffffffffffffff) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x0) 15:38:58 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 15:38:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}]}}, &(0x7f0000000740)=""/245, 0x32, 0xf5, 0x1}, 0x20) 15:38:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b63, 0x0) [ 1251.369502][ T29] audit: type=1326 audit(1594136338.453:207): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10638 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 15:38:58 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002d00)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 15:38:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00100}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="2400000026000102"], 0x24}}, 0x0) 15:38:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='limits\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 1251.770996][ T3539] tipc: TX() has been purged, node left! [ 1252.003686][ T8065] usb 6-1: USB disconnect, device number 57 [ 1299.251972][ T0] NOHZ: local_softirq_pending 08 [ 1321.010724][ T0] NOHZ: local_softirq_pending 08 [ 1415.090104][ T1147] INFO: task syz-executor.1:10663 blocked for more than 143 seconds. [ 1415.090117][ T1147] Not tainted 5.8.0-rc3-syzkaller #0 [ 1415.090123][ T1147] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1415.090131][ T1147] syz-executor.1 D27896 10663 6937 0x00004004 [ 1415.090156][ T1147] Call Trace: [ 1415.090186][ T1147] __schedule+0x8e1/0x1eb0 [ 1415.090210][ T1147] ? io_schedule_timeout+0x140/0x140 [ 1415.090235][ T1147] ? __down+0x13a/0x2a0 [ 1415.090249][ T1147] schedule+0xd0/0x2a0 [ 1415.090267][ T1147] schedule_timeout+0x1d8/0x250 [ 1415.090283][ T1147] ? usleep_range+0x170/0x170 [ 1415.090302][ T1147] ? __down+0x13a/0x2a0 [ 1415.090319][ T1147] ? mark_held_locks+0x9f/0xe0 [ 1415.090336][ T1147] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1415.090352][ T1147] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1415.090463][ T1147] ? trace_hardirqs_on+0x5f/0x220 [ 1415.090484][ T1147] __down+0x183/0x2a0 [ 1415.090502][ T1147] ? do_raw_spin_lock+0x120/0x2b0 [ 1415.090524][ T1147] ? __down_timeout+0x2a0/0x2a0 [ 1415.090537][ T1147] ? rwlock_bug.part.0+0x90/0x90 [ 1415.090559][ T1147] ? lockdep_hardirqs_off+0x66/0xa0 [ 1415.090616][ T1147] ? vc_allocate+0x720/0x720 [ 1415.090632][ T1147] down+0x57/0x80 [ 1415.090650][ T1147] console_lock+0x25/0x80 [ 1415.090666][ T1147] con_install+0x8c/0x5c0 [ 1415.090731][ T1147] ? alloc_tty_struct+0x703/0x920 [ 1415.090749][ T1147] ? vc_allocate+0x720/0x720 [ 1415.090773][ T1147] ? vc_allocate+0x720/0x720 [ 1415.090791][ T1147] tty_init_dev.part.0+0x9e/0x610 [ 1415.090811][ T1147] tty_open+0xb2e/0xf60 [ 1415.090835][ T1147] ? tty_kopen+0x490/0x490 [ 1415.090848][ T1147] ? rwlock_bug.part.0+0x90/0x90 [ 1415.090872][ T1147] ? tty_kopen+0x490/0x490 [ 1415.090887][ T1147] chrdev_open+0x266/0x770 [ 1415.090904][ T1147] ? cdev_device_add+0x210/0x210 [ 1415.090928][ T1147] ? security_file_open+0x1f5/0x3f0 [ 1415.090950][ T1147] do_dentry_open+0x501/0x1290 [ 1415.090967][ T1147] ? cdev_device_add+0x210/0x210 [ 1415.090992][ T1147] path_openat+0x1bb9/0x2750 [ 1415.091020][ T1147] ? path_lookupat+0x830/0x830 [ 1415.091046][ T1147] ? __lockdep_free_key_range+0x110/0x110 [ 1415.091062][ T1147] ? lock_is_held_type+0xb0/0xe0 [ 1415.091083][ T1147] do_filp_open+0x17e/0x3c0 [ 1415.091101][ T1147] ? may_open_dev+0xf0/0xf0 [ 1415.091128][ T1147] ? rwlock_bug.part.0+0x90/0x90 [ 1415.091150][ T1147] ? _raw_spin_unlock+0x24/0x40 [ 1415.091166][ T1147] ? __alloc_fd+0x28d/0x600 [ 1415.091190][ T1147] do_sys_openat2+0x16f/0x3b0 [ 1415.091204][ T1147] ? __might_fault+0x190/0x1d0 [ 1415.091219][ T1147] ? build_open_flags+0x650/0x650 [ 1415.091240][ T1147] ? put_timespec64+0xcb/0x120 [ 1415.091257][ T1147] ? ns_to_timespec64+0xc0/0xc0 [ 1415.091276][ T1147] __x64_sys_open+0x119/0x1c0 [ 1415.091291][ T1147] ? do_sys_open+0x140/0x140 [ 1415.091306][ T1147] ? __x64_sys_clock_gettime+0x165/0x240 [ 1415.091325][ T1147] ? do_syscall_64+0x1c/0xe0 [ 1415.091340][ T1147] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1415.091361][ T1147] do_syscall_64+0x60/0xe0 [ 1415.091377][ T1147] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1415.091389][ T1147] RIP: 0033:0x416921 [ 1415.091396][ T1147] Code: Bad RIP value. [ 1415.091404][ T1147] RSP: 002b:00007f55346a67a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1415.091420][ T1147] RAX: ffffffffffffffda RBX: 000000000050ade0 RCX: 0000000000416921 [ 1415.091429][ T1147] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f55346a67d0 [ 1415.091438][ T1147] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000e [ 1415.091448][ T1147] R10: 0000000000000064 R11: 0000000000000293 R12: 00000000ffffffff [ 1415.091458][ T1147] R13: 0000000000000c5d R14: 00000000004ceb70 R15: 00007f55346a76d4 [ 1415.091486][ T1147] INFO: task syz-executor.1:10665 blocked for more than 143 seconds. [ 1415.091495][ T1147] Not tainted 5.8.0-rc3-syzkaller #0 [ 1415.091501][ T1147] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1415.091508][ T1147] syz-executor.1 D28760 10665 6937 0x00000004 [ 1415.091532][ T1147] Call Trace: [ 1415.091552][ T1147] __schedule+0x8e1/0x1eb0 [ 1415.091580][ T1147] ? io_schedule_timeout+0x140/0x140 [ 1415.091607][ T1147] schedule+0xd0/0x2a0 [ 1415.091625][ T1147] schedule_preempt_disabled+0xf/0x20 [ 1415.091640][ T1147] __mutex_lock+0x3e2/0x10d0 [ 1415.091656][ T1147] ? fs_reclaim_acquire+0xf/0x40 [ 1415.091672][ T1147] ? tty_open+0x51d/0xf60 [ 1415.091694][ T1147] ? mutex_lock_io_nested+0xf60/0xf60 [ 1415.091713][ T1147] ? lock_is_held_type+0xb0/0xe0 [ 1415.091736][ T1147] ? trace_kmalloc+0xfd/0x130 [ 1415.091757][ T1147] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 1415.091777][ T1147] tty_open+0x51d/0xf60 [ 1415.091800][ T1147] ? tty_kopen+0x490/0x490 [ 1415.091813][ T1147] ? rwlock_bug.part.0+0x90/0x90 [ 1415.091837][ T1147] ? tty_kopen+0x490/0x490 [ 1415.091850][ T1147] chrdev_open+0x266/0x770 [ 1415.091866][ T1147] ? cdev_device_add+0x210/0x210 [ 1415.091886][ T1147] ? security_file_open+0x1f5/0x3f0 [ 1415.091906][ T1147] do_dentry_open+0x501/0x1290 [ 1415.091922][ T1147] ? cdev_device_add+0x210/0x210 [ 1415.091945][ T1147] path_openat+0x1bb9/0x2750 [ 1415.091972][ T1147] ? path_lookupat+0x830/0x830 [ 1415.091996][ T1147] ? __lockdep_free_key_range+0x110/0x110 [ 1415.092012][ T1147] ? lock_is_held_type+0xb0/0xe0 [ 1415.092033][ T1147] do_filp_open+0x17e/0x3c0 [ 1415.092049][ T1147] ? may_open_dev+0xf0/0xf0 [ 1415.092075][ T1147] ? rwlock_bug.part.0+0x90/0x90 [ 1415.092098][ T1147] ? _raw_spin_unlock+0x24/0x40 [ 1415.092111][ T1147] ? __alloc_fd+0x28d/0x600 [ 1415.092135][ T1147] do_sys_openat2+0x16f/0x3b0 [ 1415.092148][ T1147] ? __might_fault+0x190/0x1d0 [ 1415.092163][ T1147] ? build_open_flags+0x650/0x650 [ 1415.092183][ T1147] ? put_timespec64+0xcb/0x120 [ 1415.092199][ T1147] ? ns_to_timespec64+0xc0/0xc0 [ 1415.092219][ T1147] __x64_sys_open+0x119/0x1c0 [ 1415.092233][ T1147] ? do_sys_open+0x140/0x140 [ 1415.092247][ T1147] ? __x64_sys_clock_gettime+0x165/0x240 [ 1415.092266][ T1147] ? do_syscall_64+0x1c/0xe0 [ 1415.092282][ T1147] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1415.092302][ T1147] do_syscall_64+0x60/0xe0 [ 1415.092318][ T1147] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1415.092329][ T1147] RIP: 0033:0x416921 [ 1415.092335][ T1147] Code: Bad RIP value. [ 1415.092343][ T1147] RSP: 002b:00007f55346857a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1415.092357][ T1147] RAX: ffffffffffffffda RBX: 000000000050ade0 RCX: 0000000000416921 [ 1415.092367][ T1147] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f55346857d0 [ 1415.092376][ T1147] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 000000000000000e [ 1415.092385][ T1147] R10: 0000000000000064 R11: 0000000000000293 R12: 00000000ffffffff [ 1415.092395][ T1147] R13: 0000000000000c5d R14: 00000000004ceb70 R15: 00007f55346866d4 [ 1415.092420][ T1147] [ 1415.092420][ T1147] Showing all locks held in the system: [ 1415.092433][ T1147] 1 lock held by khungtaskd/1147: [ 1415.092438][ T1147] #0: ffffffff89bc1180 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1415.092489][ T1147] 1 lock held by in:imklog/6483: [ 1415.092494][ T1147] #0: ffff8880a2da9630 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 1415.092529][ T1147] 2 locks held by agetty/6497: [ 1415.092534][ T1147] #0: ffff888096ad7098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1415.092563][ T1147] #1: ffffc90000f942e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x223/0x1a30 [ 1415.092622][ T1147] 1 lock held by syz-executor.5/10653: [ 1415.092631][ T1147] 2 locks held by syz-executor.1/10663: [ 1415.092637][ T1147] #0: ffffffff8a1762c8 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x51d/0xf60 [ 1415.092667][ T1147] #1: ffff88804fae51c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_lock+0xbd/0x120 [ 1415.092701][ T1147] 1 lock held by syz-executor.1/10665: [ 1415.092706][ T1147] #0: ffffffff8a1762c8 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x51d/0xf60 [ 1415.092736][ T1147] [ 1415.092742][ T1147] ============================================= [ 1415.092742][ T1147] [ 1415.092749][ T1147] NMI backtrace for cpu 0 [ 1415.092764][ T1147] CPU: 0 PID: 1147 Comm: khungtaskd Not tainted 5.8.0-rc3-syzkaller #0 [ 1415.092772][ T1147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1415.092777][ T1147] Call Trace: [ 1415.092795][ T1147] dump_stack+0x18f/0x20d [ 1415.092815][ T1147] nmi_cpu_backtrace.cold+0x70/0xb1 [ 1415.092864][ T1147] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1415.092882][ T1147] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 1415.092898][ T1147] watchdog+0xd7d/0x1000 [ 1415.092916][ T1147] ? reset_hung_task_detector+0x30/0x30 [ 1415.092974][ T1147] kthread+0x3b5/0x4a0 [ 1415.092988][ T1147] ? __kthread_bind_mask+0xc0/0xc0 [ 1415.093001][ T1147] ? __kthread_bind_mask+0xc0/0xc0 [ 1415.093055][ T1147] ret_from_fork+0x1f/0x30 [ 1415.093081][ T1147] Sending NMI from CPU 0 to CPUs 1: [ 1415.093768][ C1] NMI backtrace for cpu 1 [ 1415.093775][ C1] CPU: 1 PID: 10653 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1415.093782][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1415.093787][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x55/0x60 [ 1415.093798][ C1] Code: 82 e0 13 00 00 83 f8 02 75 20 48 8b 8a e8 13 00 00 8b 92 e4 13 00 00 48 8b 01 48 83 c0 01 48 39 c2 76 07 48 89 34 c1 48 89 01 66 2e 0f 1f 84 00 00 00 00 00 41 55 41 54 49 89 fc 55 48 bd eb [ 1415.093802][ C1] RSP: 0018:ffffc9000402f878 EFLAGS: 00000246 [ 1415.093811][ C1] RAX: 0000000000040000 RBX: 0000000000000050 RCX: ffffc90014127000 [ 1415.093816][ C1] RDX: 0000000000040000 RSI: ffffffff83c64690 RDI: 0000000000000004 [ 1415.093822][ C1] RBP: 000000000000002a R08: 0000000000000000 R09: ffffffff8aae5a07 [ 1415.093827][ C1] R10: 0000000000000050 R11: 0000000000000000 R12: ffff8880000a002a [ 1415.093832][ C1] R13: ffff8880000a0000 R14: 0000000000000000 R15: 00000000ef94b6c1 [ 1415.093838][ C1] FS: 00007f420328e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1415.093843][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1415.093848][ C1] CR2: 000000c000203000 CR3: 00000000a2570000 CR4: 00000000001406e0 [ 1415.093854][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1415.093859][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1415.093862][ C1] Call Trace: [ 1415.093866][ C1] vga16fb_fillrect+0x9c0/0x193b [ 1415.093870][ C1] bit_clear_margins+0x2d5/0x4a0 [ 1415.093873][ C1] ? bit_bmove+0x210/0x210 [ 1415.093877][ C1] ? mark_lock+0xbc/0x1710 [ 1415.093881][ C1] ? mark_lock+0xbc/0x1710 [ 1415.093885][ C1] fbcon_clear_margins+0x1d5/0x230 [ 1415.093889][ C1] fbcon_do_set_font+0x7e2/0x950 [ 1415.093892][ C1] fbcon_set_font+0x767/0x8b0 [ 1415.093896][ C1] ? fbcon_set_def_font+0x350/0x350 [ 1415.093900][ C1] con_font_op+0xd25/0x1110 [ 1415.093904][ C1] ? con_write+0xb0/0xb0 [ 1415.093907][ C1] ? apparmor_capable+0x1d8/0x460 [ 1415.093911][ C1] ? security_capable+0x8f/0xc0 [ 1415.093915][ C1] vt_ioctl+0x1180/0x2670 [ 1415.093919][ C1] ? trace_stack_print+0x22e/0x2c0 [ 1415.093923][ C1] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1415.093927][ C1] ? vt_waitactive+0x350/0x350 [ 1415.093931][ C1] ? tomoyo_path_number_perm+0x244/0x4d0 [ 1415.093935][ C1] ? tomoyo_execute_permission+0x470/0x470 [ 1415.093940][ C1] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1415.093943][ C1] ? tty_jobctrl_ioctl+0x4d/0x1010 [ 1415.093947][ C1] ? vt_waitactive+0x350/0x350 [ 1415.093951][ C1] tty_ioctl+0x1019/0x15f0 [ 1415.093954][ C1] ? tty_fasync+0x390/0x390 [ 1415.093959][ C1] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1415.093963][ C1] ? do_vfs_ioctl+0x27d/0x1090 [ 1415.093967][ C1] ? generic_block_fiemap+0x60/0x60 [ 1415.093970][ C1] ? __might_fault+0x190/0x1d0 [ 1415.093974][ C1] ? _copy_to_user+0x126/0x160 [ 1415.093978][ C1] ? __fget_files+0x294/0x400 [ 1415.093981][ C1] ? tty_fasync+0x390/0x390 [ 1415.093985][ C1] ksys_ioctl+0x11a/0x180 [ 1415.093989][ C1] __x64_sys_ioctl+0x6f/0xb0 [ 1415.093993][ C1] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1415.093996][ C1] do_syscall_64+0x60/0xe0 [ 1415.094001][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1415.094004][ C1] RIP: 0033:0x45cb29 [ 1415.094007][ C1] Code: Bad RIP value. [ 1415.094012][ C1] RSP: 002b:00007f420328dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1415.094021][ C1] RAX: ffffffffffffffda RBX: 00000000004ea260 RCX: 000000000045cb29 [ 1415.094027][ C1] RDX: 00000000200002c0 RSI: 0000000000004b61 RDI: 0000000000000004 [ 1415.094032][ C1] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1415.094038][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1415.094043][ C1] R13: 000000000000042f R14: 00000000004c7031 R15: 00007f420328e6d4 [ 1415.114641][ T1147] Kernel panic - not syncing: hung_task: blocked tasks [ 1415.114659][ T1147] CPU: 0 PID: 1147 Comm: khungtaskd Not tainted 5.8.0-rc3-syzkaller #0 [ 1415.114667][ T1147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1415.114672][ T1147] Call Trace: [ 1415.114693][ T1147] dump_stack+0x18f/0x20d [ 1415.114783][ T1147] panic+0x2e3/0x75c [ 1415.114800][ T1147] ? __warn_printk+0xf3/0xf3 [ 1415.114820][ T1147] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1415.114835][ T1147] ? preempt_schedule_thunk+0x16/0x18 [ 1415.114850][ T1147] ? watchdog.cold+0x5/0x16b [ 1415.114862][ T1147] ? watchdog+0xa82/0x1000 [ 1415.114879][ T1147] watchdog.cold+0x16/0x16b [ 1415.114898][ T1147] ? reset_hung_task_detector+0x30/0x30 [ 1415.114914][ T1147] kthread+0x3b5/0x4a0 [ 1415.114927][ T1147] ? __kthread_bind_mask+0xc0/0xc0 [ 1415.114939][ T1147] ? __kthread_bind_mask+0xc0/0xc0 [ 1415.114956][ T1147] ret_from_fork+0x1f/0x30 [ 1415.116395][ T1147] Kernel Offset: disabled