, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:17 executing program 3: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 735.441344][T24829] futex_wake_op: syz-executor.3 tries to shift op by 256; fix this program 19:11:17 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 19:11:17 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:17 executing program 5: r0 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f0000005c00)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) [ 735.677859][T24840] overlayfs: failed to resolve './file0': -2 19:11:17 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="b4", 0x1}], 0x1}}], 0x1, 0x2400c06c) 19:11:17 executing program 5: ustat(0x6, &(0x7f0000000000)) 19:11:17 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x51, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:17 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x5ee, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac141433e000000162079f4b4d2f87e5feca6aab840213f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) 19:11:17 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:18 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 19:11:18 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) [ 736.351099][T24873] overlayfs: failed to resolve './file0': -2 [ 736.387384][T24893] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 19:11:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0xb8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000080000000000000000000000000a20000000000a01000000000087a3db98000000000900010073797a300000000084000000080a8381933a000000000000000000000900010073797a30000000000c0002"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 19:11:18 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 736.748940][ T28] audit: type=1804 audit(1601147478.535:11): pid=24905 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir891359126/syzkaller.0Q6BJD/635/cgroup.controllers" dev="sda1" ino=16090 res=1 errno=0 [ 736.766357][T24905] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. 19:11:18 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, 0x0, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:18 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10001}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14}}, 0xa4}}, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 19:11:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:19 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10001}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14}}, 0xa4}}, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 19:11:19 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:19 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:19 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000040)="24000000220007031dfffd946f61050002000000054300000000391e421ba3a20400ff7e280000001100ffd613d3475bb65f6400004efb0000000000007e23f7efbf54000000005cc37fcfa3", 0x4c}], 0x1}, 0x0) 19:11:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) [ 737.708362][T24945] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 737.792283][T24953] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 19:11:19 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, 0x0, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:19 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r2}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) poll(0x0, 0x0, 0x1ff) 19:11:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:20 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:20 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1) [ 738.973774][T24995] overlayfs: failed to resolve './file1': -2 [ 739.017608][T24999] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 19:11:21 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:21 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, 0x0, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:21 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:21 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:22 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:22 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:22 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:22 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:23 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r2, 0x48280) fcntl$setstatus(r1, 0x4, 0x6100) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x87ffffc) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) write(r1, &(0x7f00000000c0)="82", 0x1) ftruncate(r0, 0x200004) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x40003) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @remote}, 0x10) r4 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, 0x0, 0x8080fffffffe) 19:11:23 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:23 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:23 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:23 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:24 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:24 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x12) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002"], 0x18) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/147, 0x9f}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x74, 0x0) 19:11:24 executing program 0: ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:24 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:24 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:24 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x12) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002"], 0x18) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/147, 0x9f}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x74, 0x0) 19:11:24 executing program 0: ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:25 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 19:11:25 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:25 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x12) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002"], 0x18) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/147, 0x9f}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x74, 0x0) 19:11:25 executing program 0: ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:25 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:25 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 19:11:25 executing program 0: perf_event_open(0x0, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:25 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="fc1454046803ec28901ac4a536f23f3b587ad5ec594a1a48a0dfb07f18811597268dc5115e106099811005fe4f08765bd0a560d7ec111a4cc23bcfb9d0c6ca365aa2606692a26174fa073f3bbea1d90df213450874e706808c6276128ecab86aa857e4d7fd3a850669407157ee02a86570fcd09fc4f8c8d48c0260eccd8024b45edffb8db35bcbc1dd2deabaf1ca9cc7fc767b84b6e528dd25e781543d3a8f7627e130f2121be7e9ead056f6a2acb75f45804edd78dbfab390e425fbe279d69528bc203544235cf6030c5b9d005726becd0cd7e20b86e1de12f72e1e3dbd86feebde2cdc7584dd434bdbacc88e620249f4ef51b8db37931ea55ecd502ac688a1821af5f270d4e1847f8f2aab417e263e7281644f1b7e0784eec329d0ae0dd5689d41b7f93fae07a0ea3cb290720a382b8a9bee8cdf66cd5cdb5fb635e5bf51f10084adcd0d81f11b5103b7d0666b670875fc5c48bde6512652bce40196bf027c78ed7813ee91871d06da6d3c13735fb5602d9651c58ce44810f17114c2d1f60c21107ef714770dc9238803c0620d38e8216988bdf5cffc805275713d93109f8d1985f7c6e2cbb361a875f98535147e9c6c252981347573e41d1f6166572e6a578aece652ba7feb824dada33ff0d08cdb5c62b5db5581a97b32723af198b053a35d0c3fa6ef130a9d007a3ecb2c985487e8fda8dd5983acb186e8d01fb2e9e0d9c5eeaec9da3f387ff9b856903f1058ca94fae2ff0a9f31fa24e5ab6865123e40955d54f0cd28e1fa5a37df04517ed02769717b69b4d102e6cb5e670efcfd059f0e37cdfcab55dcc0f9dc79781fdd777c484dca3d61fdb9ac5290144f5d9bd2631cca01c54ba90ee24016611af3d6fa5af64dd9d25e08d928fdb65a86be290b8543253ff4622526655915f0c11d382cc7b281e76a092ec3cf04f342d3872d44938a81cf1b5f5643f68892b130df6d1e92a15f8e6caee84b40c41f888750ee7e26f350fd26bbb97cdd248e764f69ff93da545a8caa4b82537885ae9a71c01585ebbb58ef6837204387a91c2d2cbb34784f1ad990f68c18f02f8581cf7c05bb0e7b6818efbaf9406d9781ddde72cb6a48265a13cc27a4d5f2c8641eb3380a15a68186b4302623679635078082abc08bd00c4c6d406077ae07f4f189561dc1d77cbb05964ef1ee91154dc27726f570ff46fa8f60f0a8333e74821fc62da43fa87ff9973e3f3a124282383c7d3c55cd83d944e481191c43532dfda56ae70f28c93e989cae47188165a8c464af46cd90f654952131b21e5a2f8102c50f4ad5816e2a2d4c5f4ff5ecfa4a14d3bbc4a83fee36b98fe7c98c01b07c96b26c9347f0e1ea967f19727dfd3606511b325b9bfbafa3df5489a2c2b39f028cce96a239215f0cb4ead252a021584c7701886efc7ff9fda6544415e53834a195fd1b59c03c5bc292d5129f72c1407a99a57e07059084577ba1919923306c248bb6e24436a035c1d312416686a790574076075da40996f002e43c9086a7cde3c8a841721b5c132f2e188c142f74814c076f2f5482b5155e64b8ad74a7749a439c369396d9df50d90ce83d29cae86cbe6d3a75576cb5987313f4793e4ad9433da61de7e5a1680cc46fa13971e645254d8734846e388df9f0a7091817fcea834c7422ccbd43cb959663cdee2d5d7337f07bde3f886ab3f8eb727b169db1f2a5a79da5e70a21441152538391ac15361092bdac1487871deb3ce0e458ecd085d75e030775b81ac40635e705937d04e8d9055ba1bf57c0714e27be36d23d5bcfe528506a435cf62ac38c8727235f743c7c2a2928ae4c382e5aee63f1647e4e5b0c803eb82d0657f30eaa4bcb9eb854dcac4a48192d32ad363410162d9fecb109fa08dcee10791eb98e81ac5ad4a5c8a6eb558ce4d56e2e4fd4634a08a882a14864b0d1883eab5a3ec490c77ca8676de7e231c47a1405624327763320b565ce9fda34228ceeae61815b1af9c8249f61b26f794526a093a52d391811dde19ae8954c193e118aa12f0f0ab4f53e5809068effd10feb49c22e42119025c3bd97619ce8b910420be3c71232f182b1bb51aff474dde31ae13dd8a51d5537d49daef068630d37289424af515c83d98f2b716d362e9bc3b24e434811189c5618b7b2d8346adccb6bec94d82e9b7b731e85c729561afafc0c2feb9be4607d1c6ef1b06124b912dd96bcf63c1a18f16d7c63e17c84625e9b7014c9010697edffd56d616bf4de3819dfbc66530c42e9fbe87f3f0d0a55710a655d0cf817b635d6f06fb9ddfc488152a83e96aa891166395ca71b44e1c2fd565090443cde963f325916cb98da0c6de8a6be4ba69705fb8974863b0c5ff71baa2ae992b8f7725dfe3659aa472f9538218799bbefb95d68319ef2110e6ae254886e650d57456e6e6da3b2007ea0d19c07a28223a17e1b1e7963ed887fcd5a55f3869978995f8546e5fcef062bf3311bfbcbff83a6e5698df7704684f415b6eb42bc96ccb1a842038df2a7285bf183a2be8f70910edea77b69454615261025e5bb0af45748d01a0ef78abb37bacefdb7a0e317502fac37b300ad1b07e671b776bff21d43142756f9d5c669346753e3656611282e8d083c7ef39353714945fa3adad8367cd7a134011fcd25db0ff332a6dc4dc15337bba33e5cf94fe4f5592772a901f477c5057874579ddbf676516200b68457e8384a89e10bd0116ba84424548715d96b81daa71b28286038450767d40abaa4084c47791eb8d2db21513384221cf7f5c70bc31ca770d921935a731ab3dcc71ac04b1cd636eb150b20e860d195161ca8e466c9f54f3e2ec9bb275a027de1e135faf9f4797f0e0a9b50b89b6c77429c5ea5b1e0fe7b6bd90b2f19412ff5fccd5ec6dcbc5d3842e5fbadb65bc3928e08519ed4206ecc3e27dda8b10ec93527c6eebc697ac29dbfb2dc6a2b2eace1d18221eff54d016e889e5c0c704a7eee9e5316cd9570ab2f880038d76a96efa618b555713fa6a49297aa452ba6b422c5a6c76d0fab731da81fa5954e3129ee2eb20b395c389739c0ad4eaab108ae6c040865f83091ddf6e6f1bb7f577ad9b0fd70ca4d59efd03889b779327d5f877d3d33437b2d78c4c3a204a8686e439a79723967c79c1f037c4f0e288cb91d99b4d7ca5b8e9f501d2a550418f565741c7071046d0b569ee15c088f01e1a3fbf4cdba3cd4674f7b6cc47ec4c56ad51b1f75aca8cb74edf26b5278b667b5e3804ed38efedb584d5e0e482f195dea1999fb95b86462dab60b4b2acadbf5e57a4d87f7cb35102bf21df03ee7302caf5c760c63bdbbc13e871befc0a899aeb9075d5d49a8acd105c8d55fdbf9dfcf2251222636c1ab3520c875d7743822302893c8ed39ae358946634fe7220ed8ddbf6b3bcb99ddcf9a1eb5dfc5821433dadc4f1c2ee18e12c95c69086f4b3a6ec8569122bf252bf726a90c58e8d6cbac5befe7ab5d3e160f99f8db612b4e2b1c0aea7cc359c157166ac053ceadc5e37029847762764156bffabbfe58c342d9495e0c821345", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:25 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{0x0}], 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000640)='\f', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x7400, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0)='ethtool\x00') socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @private}, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf251d000000080001000100000008000300", @ANYRES32=r3, @ANYBLOB="0c00238006000300bd0200000800010002000000"], 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x24008004) 19:11:26 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:26 executing program 0: perf_event_open(0x0, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:26 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:26 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:26 executing program 0: perf_event_open(0x0, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:26 executing program 3: unshare(0x20000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r2, 0x20000) 19:11:26 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:26 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:27 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 19:11:27 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:27 executing program 3: pipe2(&(0x7f0000000100), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:27 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:27 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:27 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:27 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:27 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:27 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:27 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:27 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:27 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:28 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) tkill(r1, 0x12) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:11:28 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:28 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:28 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) [ 746.376403][T25273] ptrace attach of "/root/syz-executor.3"[25272] was attempted by "/root/syz-executor.3"[25273] 19:11:28 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x0, 0x0, 0x0, {0x0, 0x7530}, {0x0, 0x7530}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "51d5205e4ca4b888d40047c37321760319cfff34bdfeff767c815dad738690b20cf465f6ef18683b77224a9922dd0c52d6f5d97258d9a57813477b6fc92af87b"}}, 0x80}}, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x109, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x1b) 19:11:28 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:28 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:28 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:28 executing program 3: clone(0x10308500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$MON_IOCX_MFETCH(r0, 0x40189206, &(0x7f00000003c0)={0x0}) [ 746.882888][T25296] ptrace attach of "/root/syz-executor.3"[25291] was attempted by "/root/syz-executor.3"[25296] 19:11:28 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:28 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:28 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:28 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:28 executing program 3: clone(0x10308500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$MON_IOCX_MFETCH(r0, 0x40189206, &(0x7f00000003c0)={0x0}) 19:11:29 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:29 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:29 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:29 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:29 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:29 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:29 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:29 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:30 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:30 executing program 3: clone(0x10308500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$MON_IOCX_MFETCH(r0, 0x40189206, &(0x7f00000003c0)={0x0}) 19:11:30 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b0"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:30 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000380)='.', 0x0, 0x865410, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 19:11:30 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b0"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:30 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b0"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:30 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:30 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 19:11:30 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:30 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:31 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002c80)=[{{&(0x7f0000000440)=@l2, 0x80, 0x0, 0x0, 0x0, 0xfffffdba}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x156, 0x0, 0x0) 19:11:31 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:31 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:31 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:31 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:31 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:31 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:31 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x25) 19:11:32 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 750.313248][T25443] ptrace attach of "/root/syz-executor.3"[25440] was attempted by "/root/syz-executor.3"[25443] 19:11:32 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:32 executing program 3: 19:11:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:32 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:32 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:32 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="fc1454046803ec28901ac4a536f23f3b587ad5ec594a1a48a0dfb07f18811597268dc5115e106099811005fe4f08765bd0a560d7ec111a4cc23bcfb9d0c6ca365aa2606692a26174fa073f3bbea1d90df213450874e706808c6276128ecab86aa857e4d7fd3a850669407157ee02a86570fcd09fc4f8c8d48c0260eccd8024b45edffb8db35bcbc1dd2deabaf1ca9cc7fc767b84b6e528dd25e781543d3a8f7627e130f2121be7e9ead056f6a2acb75f45804edd78dbfab390e425fbe279d69528bc203544235cf6030c5b9d005726becd0cd7e20b86e1de12f72e1e3dbd86feebde2cdc7584dd434bdbacc88e620249f4ef51b8db37931ea55ecd502ac688a1821af5f270d4e1847f8f2aab417e263e7281644f1b7e0784eec329d0ae0dd5689d41b7f93fae07a0ea3cb290720a382b8a9bee8cdf66cd5cdb5fb635e5bf51f10084adcd0d81f11b5103b7d0666b670875fc5c48bde6512652bce40196bf027c78ed7813ee91871d06da6d3c13735fb5602d9651c58ce44810f17114c2d1f60c21107ef714770dc9238803c0620d38e8216988bdf5cffc805275713d93109f8d1985f7c6e2cbb361a875f98535147e9c6c252981347573e41d1f6166572e6a578aece652ba7feb824dada33ff0d08cdb5c62b5db5581a97b32723af198b053a35d0c3fa6ef130a9d007a3ecb2c985487e8fda8dd5983acb186e8d01fb2e9e0d9c5eeaec9da3f387ff9b856903f1058ca94fae2ff0a9f31fa24e5ab6865123e40955d54f0cd28e1fa5a37df04517ed02769717b69b4d102e6cb5e670efcfd059f0e37cdfcab55dcc0f9dc79781fdd777c484dca3d61fdb9ac5290144f5d9bd2631cca01c54ba90ee24016611af3d6fa5af64dd9d25e08d928fdb65a86be290b8543253ff4622526655915f0c11d382cc7b281e76a092ec3cf04f342d3872d44938a81cf1b5f5643f68892b130df6d1e92a15f8e6caee84b40c41f888750ee7e26f350fd26bbb97cdd248e764f69ff93da545a8caa4b82537885ae9a71c01585ebbb58ef6837204387a91c2d2cbb34784f1ad990f68c18f02f8581cf7c05bb0e7b6818efbaf9406d9781ddde72cb6a48265a13cc27a4d5f2c8641eb3380a15a68186b4302623679635078082abc08bd00c4c6d406077ae07f4f189561dc1d77cbb05964ef1ee91154dc27726f570ff46fa8f60f0a8333e74821fc62da43fa87ff9973e3f3a124282383c7d3c55cd83d944e481191c43532dfda56ae70f28c93e989cae47188165a8c464af46cd90f654952131b21e5a2f8102c50f4ad5816e2a2d4c5f4ff5ecfa4a14d3bbc4a83fee36b98fe7c98c01b07c96b26c9347f0e1ea967f19727dfd3606511b325b9bfbafa3df5489a2c2b39f028cce96a239215f0cb4ead252a021584c7701886efc7ff9fda6544415e53834a195fd1b59c03c5bc292d5129f72c1407a99a57e07059084577ba1919923306c248bb6e24436a035c1d312416686a790574076075da40996f002e43c9086a7cde3c8a841721b5c132f2e188c142f74814c076f2f5482b5155e64b8ad74a7749a439c369396d9df50d90ce83d29cae86cbe6d3a75576cb5987313f4793e4ad9433da61de7e5a1680cc46fa13971e645254d8734846e388df9f0a7091817fcea834c7422ccbd43cb959663cdee2d5d7337f07bde3f886ab3f8eb727b169db1f2a5a79da5e70a21441152538391ac15361092bdac1487871deb3ce0e458ecd085d75e030775b81ac40635e705937d04e8d9055ba1bf57c0714e27be36d23d5bcfe528506a435cf62ac38c8727235f743c7c2a2928ae4c382e5aee63f1647e4e5b0c803eb82d0657f30eaa4bcb9eb854dcac4a48192d32ad363410162d9fecb109fa08dcee10791eb98e81ac5ad4a5c8a6eb558ce4d56e2e4fd4634a08a882a14864b0d1883eab5a3ec490c77ca8676de7e231c47a1405624327763320b565ce9fda34228ceeae61815b1af9c8249f61b26f794526a093a52d391811dde19ae8954c193e118aa12f0f0ab4f53e5809068effd10feb49c22e42119025c3bd97619ce8b910420be3c71232f182b1bb51aff474dde31ae13dd8a51d5537d49daef068630d37289424af515c83d98f2b716d362e9bc3b24e434811189c5618b7b2d8346adccb6bec94d82e9b7b731e85c729561afafc0c2feb9be4607d1c6ef1b06124b912dd96bcf63c1a18f16d7c63e17c84625e9b7014c9010697edffd56d616bf4de3819dfbc66530c42e9fbe87f3f0d0a55710a655d0cf817b635d6f06fb9ddfc488152a83e96aa891166395ca71b44e1c2fd565090443cde963f325916cb98da0c6de8a6be4ba69705fb8974863b0c5ff71baa2ae992b8f7725dfe3659aa472f9538218799bbefb95d68319ef2110e6ae254886e650d57456e6e6da3b2007ea0d19c07a28223a17e1b1e7963ed887fcd5a55f3869978995f8546e5fcef062bf3311bfbcbff83a6e5698df7704684f415b6eb42bc96ccb1a842038df2a7285bf183a2be8f70910edea77b69454615261025e5bb0af45748d01a0ef78abb37bacefdb7a0e317502fac37b300ad1b07e671b776bff21d43142756f9d5c669346753e3656611282e8d083c7ef39353714945fa3adad8367cd7a134011fcd25db0ff332a6dc4dc15337bba33e5cf94fe4f5592772a901f477c5057874579ddbf676516200b68457e8384a89e10bd0116ba84424548715d96b81daa71b28286038450767d40abaa4084c47791eb8d2db21513384221cf7f5c70bc31ca770d921935a731ab3dcc71ac04b1cd636eb150b20e860d195161ca8e466c9f54f3e2ec9bb275a027de1e135faf9f4797f0e0a9b50b89b6c77429c5ea5b1e0fe7b6bd90b2f19412ff5fccd5ec6dcbc5d3842e5fbadb65bc3928e08519ed4206ecc3e27dda8b10ec93527c6eebc697ac29dbfb2dc6a2b2eace1d18221eff54d016e889e5c0c704a7eee9e5316cd9570ab2f880038d76a96efa618b555713fa6a49297aa452ba6b422c5a6c76d0fab731da81fa5954e3129ee2eb20b395c389739c0ad4eaab108ae6c040865f83091ddf6e6f1bb7f577ad9b0fd70ca4d59efd03889b779327d5f877d3d33437b2d78c4c3a204a8686e439a79723967c79c1f037c4f0e288cb91d99b4d7ca5b8e9f501d2a550418f565741c7071046d0b569ee15c088f01e1a3fbf4cdba3cd4674f7b6cc47ec4c56ad51b1f75aca8cb74edf26b5278b667b5e3804ed38efedb584d5e0e482f195dea1999fb95b86462dab60b4b2acadbf5e57a4d87f7cb35102bf21df03ee7302caf5c760c63bdbbc13e871befc0a899aeb9075d5d49a8acd105c8d55fdbf9dfcf2251222636c1ab3520c875d7743822302893c8ed39ae358946634fe7220ed8ddbf6b3bcb99ddcf9a1eb5dfc5821433dadc4f1c2ee18e12c95c69086f4b3a6ec8569122bf252bf726a90c58e8d6cbac5befe7ab5d3e160f99f8db612b4e2b1c0aea7cc359c157166ac053ceadc5e37029847762764156bffabbfe58c342d9495e0c821345", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:33 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:33 executing program 3: 19:11:33 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:33 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:33 executing program 3: 19:11:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:33 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:33 executing program 3: 19:11:33 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:33 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:33 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:33 executing program 3: 19:11:34 executing program 3: 19:11:34 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:34 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:34 executing program 3: 19:11:34 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:34 executing program 3: 19:11:34 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:34 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:34 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:34 executing program 3: 19:11:34 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:34 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:35 executing program 3: 19:11:35 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:35 executing program 3: 19:11:35 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:35 executing program 3: 19:11:35 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:35 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:35 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="fc1454046803ec28901ac4a536f23f3b587ad5ec594a1a48a0dfb07f18811597268dc5115e106099811005fe4f08765bd0a560d7ec111a4cc23bcfb9d0c6ca365aa2606692a26174fa073f3bbea1d90df213450874e706808c6276128ecab86aa857e4d7fd3a850669407157ee02a86570fcd09fc4f8c8d48c0260eccd8024b45edffb8db35bcbc1dd2deabaf1ca9cc7fc767b84b6e528dd25e781543d3a8f7627e130f2121be7e9ead056f6a2acb75f45804edd78dbfab390e425fbe279d69528bc203544235cf6030c5b9d005726becd0cd7e20b86e1de12f72e1e3dbd86feebde2cdc7584dd434bdbacc88e620249f4ef51b8db37931ea55ecd502ac688a1821af5f270d4e1847f8f2aab417e263e7281644f1b7e0784eec329d0ae0dd5689d41b7f93fae07a0ea3cb290720a382b8a9bee8cdf66cd5cdb5fb635e5bf51f10084adcd0d81f11b5103b7d0666b670875fc5c48bde6512652bce40196bf027c78ed7813ee91871d06da6d3c13735fb5602d9651c58ce44810f17114c2d1f60c21107ef714770dc9238803c0620d38e8216988bdf5cffc805275713d93109f8d1985f7c6e2cbb361a875f98535147e9c6c252981347573e41d1f6166572e6a578aece652ba7feb824dada33ff0d08cdb5c62b5db5581a97b32723af198b053a35d0c3fa6ef130a9d007a3ecb2c985487e8fda8dd5983acb186e8d01fb2e9e0d9c5eeaec9da3f387ff9b856903f1058ca94fae2ff0a9f31fa24e5ab6865123e40955d54f0cd28e1fa5a37df04517ed02769717b69b4d102e6cb5e670efcfd059f0e37cdfcab55dcc0f9dc79781fdd777c484dca3d61fdb9ac5290144f5d9bd2631cca01c54ba90ee24016611af3d6fa5af64dd9d25e08d928fdb65a86be290b8543253ff4622526655915f0c11d382cc7b281e76a092ec3cf04f342d3872d44938a81cf1b5f5643f68892b130df6d1e92a15f8e6caee84b40c41f888750ee7e26f350fd26bbb97cdd248e764f69ff93da545a8caa4b82537885ae9a71c01585ebbb58ef6837204387a91c2d2cbb34784f1ad990f68c18f02f8581cf7c05bb0e7b6818efbaf9406d9781ddde72cb6a48265a13cc27a4d5f2c8641eb3380a15a68186b4302623679635078082abc08bd00c4c6d406077ae07f4f189561dc1d77cbb05964ef1ee91154dc27726f570ff46fa8f60f0a8333e74821fc62da43fa87ff9973e3f3a124282383c7d3c55cd83d944e481191c43532dfda56ae70f28c93e989cae47188165a8c464af46cd90f654952131b21e5a2f8102c50f4ad5816e2a2d4c5f4ff5ecfa4a14d3bbc4a83fee36b98fe7c98c01b07c96b26c9347f0e1ea967f19727dfd3606511b325b9bfbafa3df5489a2c2b39f028cce96a239215f0cb4ead252a021584c7701886efc7ff9fda6544415e53834a195fd1b59c03c5bc292d5129f72c1407a99a57e07059084577ba1919923306c248bb6e24436a035c1d312416686a790574076075da40996f002e43c9086a7cde3c8a841721b5c132f2e188c142f74814c076f2f5482b5155e64b8ad74a7749a439c369396d9df50d90ce83d29cae86cbe6d3a75576cb5987313f4793e4ad9433da61de7e5a1680cc46fa13971e645254d8734846e388df9f0a7091817fcea834c7422ccbd43cb959663cdee2d5d7337f07bde3f886ab3f8eb727b169db1f2a5a79da5e70a21441152538391ac15361092bdac1487871deb3ce0e458ecd085d75e030775b81ac40635e705937d04e8d9055ba1bf57c0714e27be36d23d5bcfe528506a435cf62ac38c8727235f743c7c2a2928ae4c382e5aee63f1647e4e5b0c803eb82d0657f30eaa4bcb9eb854dcac4a48192d32ad363410162d9fecb109fa08dcee10791eb98e81ac5ad4a5c8a6eb558ce4d56e2e4fd4634a08a882a14864b0d1883eab5a3ec490c77ca8676de7e231c47a1405624327763320b565ce9fda34228ceeae61815b1af9c8249f61b26f794526a093a52d391811dde19ae8954c193e118aa12f0f0ab4f53e5809068effd10feb49c22e42119025c3bd97619ce8b910420be3c71232f182b1bb51aff474dde31ae13dd8a51d5537d49daef068630d37289424af515c83d98f2b716d362e9bc3b24e434811189c5618b7b2d8346adccb6bec94d82e9b7b731e85c729561afafc0c2feb9be4607d1c6ef1b06124b912dd96bcf63c1a18f16d7c63e17c84625e9b7014c9010697edffd56d616bf4de3819dfbc66530c42e9fbe87f3f0d0a55710a655d0cf817b635d6f06fb9ddfc488152a83e96aa891166395ca71b44e1c2fd565090443cde963f325916cb98da0c6de8a6be4ba69705fb8974863b0c5ff71baa2ae992b8f7725dfe3659aa472f9538218799bbefb95d68319ef2110e6ae254886e650d57456e6e6da3b2007ea0d19c07a28223a17e1b1e7963ed887fcd5a55f3869978995f8546e5fcef062bf3311bfbcbff83a6e5698df7704684f415b6eb42bc96ccb1a842038df2a7285bf183a2be8f70910edea77b69454615261025e5bb0af45748d01a0ef78abb37bacefdb7a0e317502fac37b300ad1b07e671b776bff21d43142756f9d5c669346753e3656611282e8d083c7ef39353714945fa3adad8367cd7a134011fcd25db0ff332a6dc4dc15337bba33e5cf94fe4f5592772a901f477c5057874579ddbf676516200b68457e8384a89e10bd0116ba84424548715d96b81daa71b28286038450767d40abaa4084c47791eb8d2db21513384221cf7f5c70bc31ca770d921935a731ab3dcc71ac04b1cd636eb150b20e860d195161ca8e466c9f54f3e2ec9bb275a027de1e135faf9f4797f0e0a9b50b89b6c77429c5ea5b1e0fe7b6bd90b2f19412ff5fccd5ec6dcbc5d3842e5fbadb65bc3928e08519ed4206ecc3e27dda8b10ec93527c6eebc697ac29dbfb2dc6a2b2eace1d18221eff54d016e889e5c0c704a7eee9e5316cd9570ab2f880038d76a96efa618b555713fa6a49297aa452ba6b422c5a6c76d0fab731da81fa5954e3129ee2eb20b395c389739c0ad4eaab108ae6c040865f83091ddf6e6f1bb7f577ad9b0fd70ca4d59efd03889b779327d5f877d3d33437b2d78c4c3a204a8686e439a79723967c79c1f037c4f0e288cb91d99b4d7ca5b8e9f501d2a550418f565741c7071046d0b569ee15c088f01e1a3fbf4cdba3cd4674f7b6cc47ec4c56ad51b1f75aca8cb74edf26b5278b667b5e3804ed38efedb584d5e0e482f195dea1999fb95b86462dab60b4b2acadbf5e57a4d87f7cb35102bf21df03ee7302caf5c760c63bdbbc13e871befc0a899aeb9075d5d49a8acd105c8d55fdbf9dfcf2251222636c1ab3520c875d7743822302893c8ed39ae358946634fe7220ed8ddbf6b3bcb99ddcf9a1eb5dfc5821433dadc4f1c2ee18e12c95c69086f4b3a6ec8569122bf252bf726a90c58e8d6cbac5befe7ab5d3e160f99f8db612b4e2b1c0aea7cc359c157166ac053ceadc5e37029847762764156bffabbfe58c342d9495e0c821345", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:35 executing program 3: 19:11:36 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:36 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:36 executing program 3: 19:11:36 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:36 executing program 3: 19:11:36 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:36 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:36 executing program 3: 19:11:36 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 754.789400][T25605] overlayfs: failed to resolve './file0': -2 19:11:36 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="fc1454046803ec28901ac4a536f23f3b587ad5ec594a1a48a0dfb07f18811597268dc5115e106099811005fe4f08765bd0a560d7ec111a4cc23bcfb9d0c6ca365aa2606692a26174fa073f3bbea1d90df213450874e706808c6276128ecab86aa857e4d7fd3a850669407157ee02a86570fcd09fc4f8c8d48c0260eccd8024b45edffb8db35bcbc1dd2deabaf1ca9cc7fc767b84b6e528dd25e781543d3a8f7627e130f2121be7e9ead056f6a2acb75f45804edd78dbfab390e425fbe279d69528bc203544235cf6030c5b9d005726becd0cd7e20b86e1de12f72e1e3dbd86feebde2cdc7584dd434bdbacc88e620249f4ef51b8db37931ea55ecd502ac688a1821af5f270d4e1847f8f2aab417e263e7281644f1b7e0784eec329d0ae0dd5689d41b7f93fae07a0ea3cb290720a382b8a9bee8cdf66cd5cdb5fb635e5bf51f10084adcd0d81f11b5103b7d0666b670875fc5c48bde6512652bce40196bf027c78ed7813ee91871d06da6d3c13735fb5602d9651c58ce44810f17114c2d1f60c21107ef714770dc9238803c0620d38e8216988bdf5cffc805275713d93109f8d1985f7c6e2cbb361a875f98535147e9c6c252981347573e41d1f6166572e6a578aece652ba7feb824dada33ff0d08cdb5c62b5db5581a97b32723af198b053a35d0c3fa6ef130a9d007a3ecb2c985487e8fda8dd5983acb186e8d01fb2e9e0d9c5eeaec9da3f387ff9b856903f1058ca94fae2ff0a9f31fa24e5ab6865123e40955d54f0cd28e1fa5a37df04517ed02769717b69b4d102e6cb5e670efcfd059f0e37cdfcab55dcc0f9dc79781fdd777c484dca3d61fdb9ac5290144f5d9bd2631cca01c54ba90ee24016611af3d6fa5af64dd9d25e08d928fdb65a86be290b8543253ff4622526655915f0c11d382cc7b281e76a092ec3cf04f342d3872d44938a81cf1b5f5643f68892b130df6d1e92a15f8e6caee84b40c41f888750ee7e26f350fd26bbb97cdd248e764f69ff93da545a8caa4b82537885ae9a71c01585ebbb58ef6837204387a91c2d2cbb34784f1ad990f68c18f02f8581cf7c05bb0e7b6818efbaf9406d9781ddde72cb6a48265a13cc27a4d5f2c8641eb3380a15a68186b4302623679635078082abc08bd00c4c6d406077ae07f4f189561dc1d77cbb05964ef1ee91154dc27726f570ff46fa8f60f0a8333e74821fc62da43fa87ff9973e3f3a124282383c7d3c55cd83d944e481191c43532dfda56ae70f28c93e989cae47188165a8c464af46cd90f654952131b21e5a2f8102c50f4ad5816e2a2d4c5f4ff5ecfa4a14d3bbc4a83fee36b98fe7c98c01b07c96b26c9347f0e1ea967f19727dfd3606511b325b9bfbafa3df5489a2c2b39f028cce96a239215f0cb4ead252a021584c7701886efc7ff9fda6544415e53834a195fd1b59c03c5bc292d5129f72c1407a99a57e07059084577ba1919923306c248bb6e24436a035c1d312416686a790574076075da40996f002e43c9086a7cde3c8a841721b5c132f2e188c142f74814c076f2f5482b5155e64b8ad74a7749a439c369396d9df50d90ce83d29cae86cbe6d3a75576cb5987313f4793e4ad9433da61de7e5a1680cc46fa13971e645254d8734846e388df9f0a7091817fcea834c7422ccbd43cb959663cdee2d5d7337f07bde3f886ab3f8eb727b169db1f2a5a79da5e70a21441152538391ac15361092bdac1487871deb3ce0e458ecd085d75e030775b81ac40635e705937d04e8d9055ba1bf57c0714e27be36d23d5bcfe528506a435cf62ac38c8727235f743c7c2a2928ae4c382e5aee63f1647e4e5b0c803eb82d0657f30eaa4bcb9eb854dcac4a48192d32ad363410162d9fecb109fa08dcee10791eb98e81ac5ad4a5c8a6eb558ce4d56e2e4fd4634a08a882a14864b0d1883eab5a3ec490c77ca8676de7e231c47a1405624327763320b565ce9fda34228ceeae61815b1af9c8249f61b26f794526a093a52d391811dde19ae8954c193e118aa12f0f0ab4f53e5809068effd10feb49c22e42119025c3bd97619ce8b910420be3c71232f182b1bb51aff474dde31ae13dd8a51d5537d49daef068630d37289424af515c83d98f2b716d362e9bc3b24e434811189c5618b7b2d8346adccb6bec94d82e9b7b731e85c729561afafc0c2feb9be4607d1c6ef1b06124b912dd96bcf63c1a18f16d7c63e17c84625e9b7014c9010697edffd56d616bf4de3819dfbc66530c42e9fbe87f3f0d0a55710a655d0cf817b635d6f06fb9ddfc488152a83e96aa891166395ca71b44e1c2fd565090443cde963f325916cb98da0c6de8a6be4ba69705fb8974863b0c5ff71baa2ae992b8f7725dfe3659aa472f9538218799bbefb95d68319ef2110e6ae254886e650d57456e6e6da3b2007ea0d19c07a28223a17e1b1e7963ed887fcd5a55f3869978995f8546e5fcef062bf3311bfbcbff83a6e5698df7704684f415b6eb42bc96ccb1a842038df2a7285bf183a2be8f70910edea77b69454615261025e5bb0af45748d01a0ef78abb37bacefdb7a0e317502fac37b300ad1b07e671b776bff21d43142756f9d5c669346753e3656611282e8d083c7ef39353714945fa3adad8367cd7a134011fcd25db0ff332a6dc4dc15337bba33e5cf94fe4f5592772a901f477c5057874579ddbf676516200b68457e8384a89e10bd0116ba84424548715d96b81daa71b28286038450767d40abaa4084c47791eb8d2db21513384221cf7f5c70bc31ca770d921935a731ab3dcc71ac04b1cd636eb150b20e860d195161ca8e466c9f54f3e2ec9bb275a027de1e135faf9f4797f0e0a9b50b89b6c77429c5ea5b1e0fe7b6bd90b2f19412ff5fccd5ec6dcbc5d3842e5fbadb65bc3928e08519ed4206ecc3e27dda8b10ec93527c6eebc697ac29dbfb2dc6a2b2eace1d18221eff54d016e889e5c0c704a7eee9e5316cd9570ab2f880038d76a96efa618b555713fa6a49297aa452ba6b422c5a6c76d0fab731da81fa5954e3129ee2eb20b395c389739c0ad4eaab108ae6c040865f83091ddf6e6f1bb7f577ad9b0fd70ca4d59efd03889b779327d5f877d3d33437b2d78c4c3a204a8686e439a79723967c79c1f037c4f0e288cb91d99b4d7ca5b8e9f501d2a550418f565741c7071046d0b569ee15c088f01e1a3fbf4cdba3cd4674f7b6cc47ec4c56ad51b1f75aca8cb74edf26b5278b667b5e3804ed38efedb584d5e0e482f195dea1999fb95b86462dab60b4b2acadbf5e57a4d87f7cb35102bf21df03ee7302caf5c760c63bdbbc13e871befc0a899aeb9075d5d49a8acd105c8d55fdbf9dfcf2251222636c1ab3520c875d7743822302893c8ed39ae358946634fe7220ed8ddbf6b3bcb99ddcf9a1eb5dfc5821433dadc4f1c2ee18e12c95c69086f4b3a6ec8569122bf252bf726a90c58e8d6cbac5befe7ab5d3e160f99f8db612b4e2b1c0aea7cc359c157166ac053ceadc5e37029847762764156bffabbfe58c342d9495e0c821345", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:36 executing program 3: 19:11:36 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:36 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:36 executing program 3: 19:11:36 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:37 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="02070000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:37 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 755.328854][T25633] overlayfs: failed to resolve './file0': -2 19:11:37 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="02070000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:37 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="02070000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 755.918322][T25660] overlayfs: failed to resolve './file0': -2 19:11:37 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x51, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:37 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:37 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:40 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:40 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:40 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:40 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x51, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:40 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:11:40 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, 0x0}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:40 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, 0x0}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:40 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, 0x0}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:40 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:40 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x51, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:43 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:43 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:43 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:43 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:11:43 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x51, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:43 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:43 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:43 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:43 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:44 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:46 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:46 executing program 5: timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:46 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x51, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:46 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc018ae85, 0x0) 19:11:46 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x51, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x100000530) 19:11:46 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80044584, &(0x7f0000000040)=""/197) 19:11:46 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:46 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x51, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, 0x0, 0x100000530) 19:11:46 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:46 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:49 executing program 5: timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x1d, 0x0, 0xec35) 19:11:49 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x51, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, 0x0, 0x100000530) 19:11:49 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="021300"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:49 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:49 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x51, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, 0x0, 0x100000530) 19:11:49 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="021300"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:49 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:49 executing program 3: r0 = syz_mount_image$msdos(&(0x7f0000000280)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000200)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f0000000040)="dbed7d4cac17", 0x6, 0x1f}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000000240)={[{@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffb07}}]}) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) 19:11:49 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x51, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x100000530) 19:11:49 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="021300"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 767.942485][T25904] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:11:52 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:52 executing program 5: timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:52 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="02130002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:11:52 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="fc1454046803ec28901ac4a536f23f3b587ad5ec594a1a48a0dfb07f18811597268dc5115e106099811005fe4f08765bd0a560d7ec111a4cc23bcfb9d0c6ca365aa2606692a26174fa073f3bbea1d90df213450874e706808c6276128ecab86aa857e4d7fd3a850669407157ee02a86570fcd09fc4f8c8d48c0260eccd8024b45edffb8db35bcbc1dd2deabaf1ca9cc7fc767b84b6e528dd25e781543d3a8f7627e130f2121be7e9ead056f6a2acb75f45804edd78dbfab390e425fbe279d69528bc203544235cf6030c5b9d005726becd0cd7e20b86e1de12f72e1e3dbd86feebde2cdc7584dd434bdbacc88e620249f4ef51b8db37931ea55ecd502ac688a1821af5f270d4e1847f8f2aab417e263e7281644f1b7e0784eec329d0ae0dd5689d41b7f93fae07a0ea3cb290720a382b8a9bee8cdf66cd5cdb5fb635e5bf51f10084adcd0d81f11b5103b7d0666b670875fc5c48bde6512652bce40196bf027c78ed7813ee91871d06da6d3c13735fb5602d9651c58ce44810f17114c2d1f60c21107ef714770dc9238803c0620d38e8216988bdf5cffc805275713d93109f8d1985f7c6e2cbb361a875f98535147e9c6c252981347573e41d1f6166572e6a578aece652ba7feb824dada33ff0d08cdb5c62b5db5581a97b32723af198b053a35d0c3fa6ef130a9d007a3ecb2c985487e8fda8dd5983acb186e8d01fb2e9e0d9c5eeaec9da3f387ff9b856903f1058ca94fae2ff0a9f31fa24e5ab6865123e40955d54f0cd28e1fa5a37df04517ed02769717b69b4d102e6cb5e670efcfd059f0e37cdfcab55dcc0f9dc79781fdd777c484dca3d61fdb9ac5290144f5d9bd2631cca01c54ba90ee24016611af3d6fa5af64dd9d25e08d928fdb65a86be290b8543253ff4622526655915f0c11d382cc7b281e76a092ec3cf04f342d3872d44938a81cf1b5f5643f68892b130df6d1e92a15f8e6caee84b40c41f888750ee7e26f350fd26bbb97cdd248e764f69ff93da545a8caa4b82537885ae9a71c01585ebbb58ef6837204387a91c2d2cbb34784f1ad990f68c18f02f8581cf7c05bb0e7b6818efbaf9406d9781ddde72cb6a48265a13cc27a4d5f2c8641eb3380a15a68186b4302623679635078082abc08bd00c4c6d406077ae07f4f189561dc1d77cbb05964ef1ee91154dc27726f570ff46fa8f60f0a8333e74821fc62da43fa87ff9973e3f3a124282383c7d3c55cd83d944e481191c43532dfda56ae70f28c93e989cae47188165a8c464af46cd90f654952131b21e5a2f8102c50f4ad5816e2a2d4c5f4ff5ecfa4a14d3bbc4a83fee36b98fe7c98c01b07c96b26c9347f0e1ea967f19727dfd3606511b325b9bfbafa3df5489a2c2b39f028cce96a239215f0cb4ead252a021584c7701886efc7ff9fda6544415e53834a195fd1b59c03c5bc292d5129f72c1407a99a57e07059084577ba1919923306c248bb6e24436a035c1d312416686a790574076075da40996f002e43c9086a7cde3c8a841721b5c132f2e188c142f74814c076f2f5482b5155e64b8ad74a7749a439c369396d9df50d90ce83d29cae86cbe6d3a75576cb5987313f4793e4ad9433da61de7e5a1680cc46fa13971e645254d8734846e388df9f0a7091817fcea834c7422ccbd43cb959663cdee2d5d7337f07bde3f886ab3f8eb727b169db1f2a5a79da5e70a21441152538391ac15361092bdac1487871deb3ce0e458ecd085d75e030775b81ac40635e705937d04e8d9055ba1bf57c0714e27be36d23d5bcfe528506a435cf62ac38c8727235f743c7c2a2928ae4c382e5aee63f1647e4e5b0c803eb82d0657f30eaa4bcb9eb854dcac4a48192d32ad363410162d9fecb109fa08dcee10791eb98e81ac5ad4a5c8a6eb558ce4d56e2e4fd4634a08a882a14864b0d1883eab5a3ec490c77ca8676de7e231c47a1405624327763320b565ce9fda34228ceeae61815b1af9c8249f61b26f794526a093a52d391811dde19ae8954c193e118aa12f0f0ab4f53e5809068effd10feb49c22e42119025c3bd97619ce8b910420be3c71232f182b1bb51aff474dde31ae13dd8a51d5537d49daef068630d37289424af515c83d98f2b716d362e9bc3b24e434811189c5618b7b2d8346adccb6bec94d82e9b7b731e85c729561afafc0c2feb9be4607d1c6ef1b06124b912dd96bcf63c1a18f16d7c63e17c84625e9b7014c9010697edffd56d616bf4de3819dfbc66530c42e9fbe87f3f0d0a55710a655d0cf817b635d6f06fb9ddfc488152a83e96aa891166395ca71b44e1c2fd565090443cde963f325916cb98da0c6de8a6be4ba69705fb8974863b0c5ff71baa2ae992b8f7725dfe3659aa472f9538218799bbefb95d68319ef2110e6ae254886e650d57456e6e6da3b2007ea0d19c07a28223a17e1b1e7963ed887fcd5a55f3869978995f8546e5fcef062bf3311bfbcbff83a6e5698df7704684f415b6eb42bc96ccb1a842038df2a7285bf183a2be8f70910edea77b69454615261025e5bb0af45748d01a0ef78abb37bacefdb7a0e317502fac37b300ad1b07e671b776bff21d43142756f9d5c669346753e3656611282e8d083c7ef39353714945fa3adad8367cd7a134011fcd25db0ff332a6dc4dc15337bba33e5cf94fe4f5592772a901f477c5057874579ddbf676516200b68457e8384a89e10bd0116ba84424548715d96b81daa71b28286038450767d40abaa4084c47791eb8d2db21513384221cf7f5c70bc31ca770d921935a731ab3dcc71ac04b1cd636eb150b20e860d195161ca8e466c9f54f3e2ec9bb275a027de1e135faf9f4797f0e0a9b50b89b6c77429c5ea5b1e0fe7b6bd90b2f19412ff5fccd5ec6dcbc5d3842e5fbadb65bc3928e08519ed4206ecc3e27dda8b10ec93527c6eebc697ac29dbfb2dc6a2b2eace1d18221eff54d016e889e5c0c704a7eee9e5316cd9570ab2f880038d76a96efa618b555713fa6a49297aa452ba6b422c5a6c76d0fab731da81fa5954e3129ee2eb20b395c389739c0ad4eaab108ae6c040865f83091ddf6e6f1bb7f577ad9b0fd70ca4d59efd03889b779327d5f877d3d33437b2d78c4c3a204a8686e439a79723967c79c1f037c4f0e288cb91d99b4d7ca5b8e9f501d2a550418f565741c7071046d0b569ee15c088f01e1a3fbf4cdba3cd4674f7b6cc47ec4c56ad51b1f75aca8cb74edf26b5278b667b5e3804ed38efedb584d5e0e482f195dea1999fb95b86462dab60b4b2acadbf5e57a4d87f7cb35102bf21df03ee7302caf5c760c63bdbbc13e871befc0a899aeb9075d5d49a8acd105c8d55fdbf9dfcf2251222636c1ab3520c875d7743822302893c8ed39ae358946634fe7220ed8ddbf6b3bcb99ddcf9a1eb5dfc5821433dadc4f1c2ee18e12c95c69086f4b3a6ec8569122bf252bf726a90c58e8d6cbac5befe7ab5d3e160f99f8db612b4e2b1c0aea7cc359c157166ac053ceadc5e37029847762764156bffabbfe58c342d9495e0c821345", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x51, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x100000530) 19:11:52 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="02130002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:52 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:52 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x9c5, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x51, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x100000530) 19:11:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:11:53 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="02130002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:53 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:11:55 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000001c0)='\x00', 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000000)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x480, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/476]) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = openat$nvram(0xffffff9c, &(0x7f0000000300)='/dev/nvram\x00', 0x202680, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) 19:11:55 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:11:55 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:55 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 773.976044][T25989] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 19:11:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x400000000000010, 0x802, 0x0) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 774.039067][T25989] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 19:11:55 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r1, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 774.094607][T26005] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 774.154764][T26005] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 19:11:56 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 19:11:56 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/112, 0x70}], 0x1) 19:11:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x400000000000010, 0x802, 0x0) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:11:56 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:56 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, 0x0, 0x0, 0x0) 19:11:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:56 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r1, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 774.487972][ T12] hid-generic 0000:0000:E443AE6D.001C: hidraw0: HID v2327ee.ad Device [syz1] on z͏DJ 19:11:56 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r1, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 774.550108][ T6553] hid-generic 0000:0000:E443AE6D.001D: hidraw0: HID v2327ee.ad Device [syz1] on z͏DJ 19:11:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x400000000000010, 0x802, 0x0) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:11:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) getpid() r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x10000020000000fb], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:11:56 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, 0x0, 0x0, 0x0) 19:11:56 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:11:56 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:56 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204b00002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000202"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, 0x0, 0x0, 0x0) 19:11:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:56 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 19:11:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:11:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000100), 0x4) 19:11:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:11:57 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:11:57 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:11:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:57 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:11:57 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:11:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:11:57 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:11:58 executing program 4: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:11:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:11:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:11:58 executing program 4: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) [ 776.669599][T26151] overlayfs: missing 'lowerdir' 19:12:00 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:00 executing program 4: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:00 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:00 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:12:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:00 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002) [ 779.021881][T26190] overlayfs: missing 'lowerdir' [ 779.473888][ T28] audit: type=1800 audit(1601147521.264:12): pid=26216 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=15938 res=0 errno=0 19:12:03 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:03 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:03 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:03 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:03 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:03 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:03 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 782.090524][T26251] overlayfs: missing 'lowerdir' 19:12:04 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:06 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:06 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:06 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:06 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:06 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:06 executing program 2: mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000980)=""/191, 0xbf) [ 785.252976][T26311] overlayfs: missing 'lowerdir' 19:12:07 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:07 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:07 executing program 2: mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000980)=""/191, 0xbf) 19:12:09 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:09 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:09 executing program 2: mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000980)=""/191, 0xbf) 19:12:09 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:09 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:09 executing program 2: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:09 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:10 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:10 executing program 2: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) [ 788.332864][T26361] overlayfs: missing 'lowerdir' 19:12:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:10 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:10 executing program 2: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) [ 789.320138][T26383] overlayfs: missing 'lowerdir' 19:12:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:12 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:12 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:12 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', 0x0, 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:12 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$inet6(0x10, 0x0, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:13 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:13 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', 0x0, 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 791.388493][T26425] overlayfs: missing 'lowerdir' 19:12:13 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:13 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', 0x0, 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 792.038610][T26452] overlayfs: missing 'lowerdir' 19:12:16 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:16 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:16 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:16 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:16 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:16 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) [ 794.577337][T26488] overlayfs: missing 'lowerdir' 19:12:16 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:16 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:19 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:19 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:19 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:19 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:19 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 797.487596][T26517] FAT-fs (loop2): Directory bread(block 6) failed 19:12:19 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:19 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:19 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 797.720989][T26539] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 797.746213][T26539] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 798.002564][T26555] FAT-fs (loop2): Directory bread(block 6) failed 19:12:22 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:22 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:22 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:22 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 800.775529][T26583] FAT-fs (loop2): Directory bread(block 6) failed 19:12:22 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:22 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:22 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 801.207203][T26593] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 19:12:23 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 801.249987][T26593] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 801.317280][T26607] FAT-fs (loop2): Directory bread(block 6) failed [ 801.371477][T26607] FAT-fs (loop2): Directory bread(block 6) failed [ 801.433182][T26612] FAT-fs (loop2): Directory bread(block 6) failed 19:12:25 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(0x0, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:25 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:25 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:25 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 803.930859][T26630] FAT-fs (loop2): Directory bread(block 6) failed [ 803.965668][T26630] FAT-fs (loop2): Directory bread(block 6) failed 19:12:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x0, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 804.038511][T26643] FAT-fs (loop2): Directory bread(block 6) failed 19:12:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="4a9668ae87628dda43822e2bf7f5db100db28cdd434753dfdd3c311b1958b93c", 0x20, 0x601}, {0x0}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:25 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 804.159655][T26649] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 19:12:26 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(0x0, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) [ 804.207099][T26649] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 804.322418][T26657] FAT-fs (loop2): Directory bread(block 6) failed 19:12:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x0, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:26 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:26 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:26 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(0x0, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:26 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 805.119655][T26686] overlayfs: unrecognized mount option "upper" or missing value 19:12:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x0, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:27 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:27 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:27 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:27 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) [ 805.375745][T26702] FAT-fs (loop2): bogus number of reserved sectors 19:12:27 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x0, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 805.510543][T26702] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:27 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:27 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:27 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) [ 805.707407][T26722] overlayfs: unrecognized mount option "upper" or missing value 19:12:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x0, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:27 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:27 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 805.953065][T26743] FAT-fs (loop2): bogus number of reserved sectors 19:12:27 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:27 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0), &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) [ 806.063915][T26743] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x0, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x400000000000010, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 806.402828][T26775] FAT-fs (loop2): bogus number of reserved sectors [ 806.443250][T26759] overlayfs: unrecognized mount option "upper" or missing value 19:12:28 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 806.511569][T26775] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:28 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x400000000000010, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:28 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:28 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x400000000000010, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 806.984797][T26796] FAT-fs (loop2): bogus number of reserved sectors [ 807.090529][T26796] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:28 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0), &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:28 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:28 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 807.299710][T26818] overlayfs: workdir and upperdir must be separate subtrees 19:12:29 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) [ 807.444209][T26836] FAT-fs (loop2): bogus number of reserved sectors [ 807.481281][T26836] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:29 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) [ 807.736902][T26847] overlayfs: workdir and upperdir must be separate subtrees 19:12:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 807.907495][T26855] FAT-fs (loop2): bogus number of reserved sectors 19:12:29 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 807.955971][T26855] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:29 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0), &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:30 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:30 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{0x0}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0), 0x0) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:30 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200), 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0), 0x0) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 808.380175][T26878] FAT-fs (loop2): bogus number of reserved sectors [ 808.396749][T26878] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:30 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{0x0}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:30 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200), 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 808.606617][T26885] overlayfs: workdir and upperdir must be separate subtrees 19:12:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0), 0x0) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 808.700050][T26898] FAT-fs (loop2): bogus number of reserved sectors [ 808.772414][T26898] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:30 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200), 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:30 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:30 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{0x0}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) [ 809.128636][T26908] overlayfs: failed to resolve './fil': -2 [ 809.230968][T26921] FAT-fs (loop2): bogus number of reserved sectors [ 809.246357][T26921] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e0200", 0x12) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:31 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:31 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:31 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:31 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 809.709241][T26939] FAT-fs (loop2): bogus number of reserved sectors 19:12:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e0200", 0x12) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 809.790384][T26939] FAT-fs (loop2): Can't find a valid FAT filesystem [ 809.955328][T26956] overlayfs: failed to resolve './fil': -2 19:12:31 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:31 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:31 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e0200", 0x12) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 810.205000][T26962] FAT-fs (loop2): bogus number of reserved sectors [ 810.273565][T26962] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:32 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 810.621337][T26980] overlayfs: failed to resolve './fil': -2 19:12:32 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:32 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba10", 0x1b) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:32 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) [ 810.940899][T26994] FAT-fs (loop2): bogus number of reserved sectors [ 811.013982][T26994] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:32 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba10", 0x1b) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:32 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:33 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) [ 811.220702][T26993] overlayfs: failed to resolve './file': -2 19:12:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba10", 0x1b) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 811.410101][T27018] FAT-fs (loop2): bogus number of reserved sectors 19:12:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 811.488738][T27018] FAT-fs (loop2): Can't find a valid FAT filesystem [ 811.863988][T27026] overlayfs: failed to resolve './file': -2 19:12:33 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba108008000200", 0x20) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:33 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:33 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:34 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 812.216500][T27043] FAT-fs (loop2): bogus number of reserved sectors [ 812.250274][T27043] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba108008000200", 0x20) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:34 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180), 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:34 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) [ 812.456076][T27049] overlayfs: failed to resolve './file': -2 19:12:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba108008000200", 0x20) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:34 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180), 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 812.669974][T27072] FAT-fs (loop2): bogus number of reserved sectors [ 812.731190][T27072] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:34 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(0x0) r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f19", 0x22) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:34 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240", 0x12}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:34 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180), 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:35 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) [ 813.200233][T27090] FAT-fs (loop2): invalid media value (0x00) 19:12:35 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 813.318153][T27090] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f19", 0x22) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:35 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:35 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:35 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240", 0x12}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:35 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f19", 0x22) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 813.734762][T27130] FAT-fs (loop2): invalid media value (0x00) 19:12:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(0x0) r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:35 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 813.775953][T27130] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:35 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240", 0x12}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) [ 814.070490][T27148] FAT-fs (loop2): invalid media value (0x00) [ 814.077583][T27148] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:36 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:36 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:36 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004", 0x15}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) [ 814.409554][T27160] FAT-fs (loop2): invalid media value (0x00) [ 814.437634][T27160] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:36 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:36 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f19", 0x22) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(0x0) r0 = msgget$private(0x0, 0x406) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:36 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004", 0x15}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:36 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f19", 0x22) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 814.918277][T27178] FAT-fs (loop2): invalid media value (0x00) [ 814.992077][T27178] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:36 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:37 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f19", 0x22) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:37 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004", 0x15}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:37 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 815.380285][T27200] FAT-fs (loop2): invalid media value (0x00) [ 815.443596][T27200] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:37 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:37 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f8", 0x16}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:37 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 816.096299][T27223] FAT-fs (loop2): bogus number of FAT sectors 19:12:37 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 816.161877][T27223] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000100), 0x4) 19:12:38 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:38 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f8", 0x16}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:38 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000100), 0x4) [ 816.602349][T27245] FAT-fs (loop2): bogus number of FAT sectors [ 816.647673][T27245] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:38 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:38 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:38 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f8", 0x16}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000100), 0x4) 19:12:38 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000100), 0x4) 19:12:38 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 817.040439][T27262] FAT-fs (loop2): bogus number of FAT sectors [ 817.067387][T27262] FAT-fs (loop2): Can't find a valid FAT filesystem 19:12:39 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000100), 0x4) 19:12:39 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:39 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:39 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:39 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23) setsockopt$sock_int(r0, 0x1, 0x42, 0x0, 0x0) 19:12:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:39 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 818.030094][T27319] overlayfs: failed to resolve './file0': -2 19:12:40 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23) setsockopt$sock_int(r0, 0x1, 0x42, 0x0, 0x0) 19:12:40 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:40 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:40 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') msgget$private(0x0, 0x406) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:40 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:40 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:40 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23) setsockopt$sock_int(r0, 0x1, 0x42, 0x0, 0x0) 19:12:40 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:40 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:40 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:40 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r2, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af865", 0x3e}], 0x2) sendto$inet(r2, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 19:12:40 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:40 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:40 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') msgget$private(0x0, 0x406) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:40 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:40 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:40 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:40 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:40 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:40 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:40 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:41 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x601}], 0x0, &(0x7f0000000100)) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:41 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:41 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:41 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') msgget$private(0x0, 0x406) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:41 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) [ 819.661440][T27421] FAT-fs (loop3): Directory bread(block 6) failed 19:12:41 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 819.715211][T27421] FAT-fs (loop3): Directory bread(block 6) failed 19:12:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_ENCAP_LIMIT={0x5}]}}}]}, 0x44}}, 0x0) 19:12:41 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:41 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:42 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:42 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/217, 0xd9}, {&(0x7f0000000140)=""/152, 0x98}], 0x2) 19:12:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') msgget$private(0x0, 0x406) msgctl$IPC_INFO(0x0, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:42 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:42 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:42 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 820.495105][ T2474] hid-generic 0000:0000:E443AE6D.001E: hidraw0: HID v2327ee.ad Device [syz1] on z͏DJ [ 820.537124][ T2642] hid-generic 0000:0000:E443AE6D.001F: hidraw0: HID v2327ee.ad Device [syz1] on z͏DJ 19:12:42 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:42 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:42 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x7}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:12:42 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:42 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') msgget$private(0x0, 0x406) msgctl$IPC_INFO(0x0, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) [ 820.865375][T27505] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 821.032948][T27505] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:12:43 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:43 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 19:12:43 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000980)=""/191, 0xbf) 19:12:43 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:12:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') msgget$private(0x0, 0x406) msgctl$IPC_INFO(0x0, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:43 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000980)=""/191, 0xbf) 19:12:43 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, 0x0, 0x0, 0x62, 0x0) 19:12:43 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000040)=0x8001) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x1145110, 0x0) 19:12:43 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:43 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000980)=""/191, 0xbf) 19:12:43 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, 0x0, 0x0, 0x62, 0x0) 19:12:44 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:44 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, 0x0, 0x0, 0x62, 0x0) 19:12:44 executing program 3: socket$pptp(0x18, 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c00010062726964676500"], 0x3c}}, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x2e, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x10, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) 19:12:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') msgget$private(0x0, 0x406) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:44 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:44 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000980)=""/191, 0xbf) [ 822.466919][T27598] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 822.606314][T27607] bridge1: port 1(macvlan0) entered blocking state 19:12:44 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:44 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, 0x0, 0x0) 19:12:44 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x0, 0x0) [ 822.653988][T27607] bridge1: port 1(macvlan0) entered disabled state 19:12:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') msgget$private(0x0, 0x406) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) [ 822.806604][T27607] device macvlan0 entered promiscuous mode 19:12:44 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 822.867542][T27607] bridge1: port 1(macvlan0) entered blocking state [ 822.874903][T27607] bridge1: port 1(macvlan0) entered forwarding state [ 822.964773][T27607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 19:12:44 executing program 3: socket$pptp(0x18, 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c00010062726964676500"], 0x3c}}, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x2e, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x10, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) [ 823.082677][T27607] syz-executor.3 (27607) used greatest stack depth: 23840 bytes left [ 823.188041][T27644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 19:12:45 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:45 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, 0x0, 0x0) 19:12:45 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 823.276988][T27647] device macvlan0 left promiscuous mode [ 823.316880][T27647] bridge1: port 1(macvlan0) entered disabled state 19:12:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') msgget$private(0x0, 0x406) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x3425000000000000) 19:12:45 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 823.547377][T27647] bridge2: port 1(macvlan0) entered blocking state 19:12:45 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, 0x0, 0x0) [ 823.593310][T27647] bridge2: port 1(macvlan0) entered disabled state 19:12:45 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x0, 0x0) [ 823.680427][T27647] device macvlan0 entered promiscuous mode [ 823.709327][T27647] bridge2: port 1(macvlan0) entered blocking state [ 823.716438][T27647] bridge2: port 1(macvlan0) entered forwarding state [ 823.738214][T27667] overlayfs: failed to resolve './file0': -2 19:12:45 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') msgget$private(0x0, 0x406) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(0x0, 0x3425000000000000) [ 823.833217][T27647] syz-executor.3 (27647) used greatest stack depth: 23776 bytes left 19:12:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 19:12:45 executing program 3: socket$pptp(0x18, 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c00010062726964676500"], 0x3c}}, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x2e, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x10, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) 19:12:45 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 824.046202][T27690] overlayfs: failed to resolve './file0': -2 19:12:46 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) [ 824.174080][T27694] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 19:12:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') msgget$private(0x0, 0x406) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(0x0, 0x3425000000000000) 19:12:46 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 824.301987][T27699] device macvlan0 left promiscuous mode [ 824.336016][T27699] bridge2: port 1(macvlan0) entered disabled state 19:12:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 824.458368][T27699] bridge3: port 1(macvlan0) entered blocking state [ 824.476265][T27699] bridge3: port 1(macvlan0) entered disabled state [ 824.573680][T27699] device macvlan0 entered promiscuous mode 19:12:46 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x0, 0x0) 19:12:46 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 824.659168][T27699] bridge3: port 1(macvlan0) entered blocking state [ 824.666901][T27699] bridge3: port 1(macvlan0) entered forwarding state 19:12:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 19:12:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') msgget$private(0x0, 0x406) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(0x0, 0x3425000000000000) 19:12:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 19:12:46 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 19:12:46 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000640)=0x400) 19:12:46 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, 0x0) pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:46 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') msgget$private(0x0, 0x406) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x0) 19:12:47 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$inet(0x2, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0xc8100, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x2020) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="b9800000c035004000000f30d07531f5f50fdb090920e03500004000c4636569b3ce4b50330026660f3881694f0f0f5c193a9af342d8860080000066b82001c4220d2d4f5d2e66420fc73366ba2000ed", 0x50}], 0x1, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000100)=0x100121, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10002, 0x10) [ 825.320415][T27762] IPVS: ftp: loaded support on port[0] = 21 [ 825.416486][T27763] overlayfs: failed to resolve './file0': -2 19:12:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') msgget$private(0x0, 0x406) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x0) 19:12:47 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008680)="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", 0x2000, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 19:12:47 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, 0x0) pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f000000bc80)={0x0, 0x0, &(0x7f000000bc40)={&(0x7f0000000080)={0x18, r1, 0xa56f26d04ef423cf, 0x0, 0x0, {0x11}, [@HEADER={0x4}]}, 0x18}}, 0x0) 19:12:47 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:47 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, 0x0) pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:47 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:47 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:12:47 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) ftruncate(r2, 0x200005) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc04c5609, 0x0) 19:12:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') msgget$private(0x0, 0x406) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/179) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x0) [ 826.238091][T27762] IPVS: ftp: loaded support on port[0] = 21 [ 826.507298][T23667] tipc: TX() has been purged, node left! [ 826.516728][ T28] audit: type=1800 audit(1601147568.304:13): pid=27827 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15787 res=0 errno=0 19:12:48 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$inet(0x2, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0xc8100, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x2020) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="b9800000c035004000000f30d07531f5f50fdb090920e03500004000c4636569b3ce4b50330026660f3881694f0f0f5c193a9af342d8860080000066b82001c4220d2d4f5d2e66420fc73366ba2000ed", 0x50}], 0x1, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000100)=0x100121, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10002, 0x10) 19:12:48 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:48 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000080)=""/194, 0xc2) 19:12:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) semop(0x0, 0x0, 0x0) futimesat(r0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 826.695761][T27871] IPVS: ftp: loaded support on port[0] = 21 19:12:48 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:48 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:48 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x480, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000340)) 19:12:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f000000bc80)={0x0, 0x0, &(0x7f000000bc40)={&(0x7f0000000080)={0x18, r1, 0xa56f26d04ef423cf, 0x0, 0x0, {0xd}, [@HEADER={0x4}]}, 0x18}}, 0x0) 19:12:48 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f000000bc80)={0x0, 0x0, &(0x7f000000bc40)={&(0x7f0000000080)={0x18, r1, 0xa56f26d04ef423cf, 0x0, 0x0, {0xd}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 827.957515][ T28] audit: type=1800 audit(1601147569.744:14): pid=27827 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15789 res=0 errno=0 19:12:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) 19:12:49 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 19:12:49 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 19:12:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x5) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1, r4}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:12:49 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x5) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1, r4}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:12:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 19:12:50 executing program 0: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x200933a, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x4) 19:12:50 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="5c03f582becfaf66d6ef9b170824f2c3d6f526926feedd8a5e5c2a34547c3d83c41d18300fa8cf144dcd87f9e8f0387801fe4763483d6bd27fb08cd6e06ef550ee3756c3b19c800a79b3e485cd84c62221ac11d8"]}]}) 19:12:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 19:12:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x5) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1, r4}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:12:50 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 19:12:50 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/242, 0xf2}], 0x1, 0x0, 0x0) 19:12:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x5) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1, r4}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:12:51 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002) [ 829.450877][ T12] usb 4-1: new high-speed USB device number 2 using dummy_hcd 19:12:51 executing program 4: socket$pptp(0x18, 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)) socket$inet6(0xa, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c00010062726964676500"], 0x3c}}, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x2e, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x10, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 829.711294][ T12] usb 4-1: Using ep0 maxpacket: 8 19:12:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x5) socket$tipc(0x1e, 0x5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 829.793004][T28023] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 829.892556][T28027] bridge1: port 1(macvlan0) entered blocking state [ 829.913063][ T12] usb 4-1: language id specifier not provided by device, defaulting to English [ 829.915277][T28027] bridge1: port 1(macvlan0) entered disabled state 19:12:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:12:51 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) [ 830.063494][T28027] device macvlan0 entered promiscuous mode [ 830.111412][ T12] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 830.136856][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.148615][T28027] bridge1: port 1(macvlan0) entered blocking state [ 830.155722][T28027] bridge1: port 1(macvlan0) entered forwarding state [ 830.171189][ T12] usb 4-1: Product: 苵쾾暯ល␈쏲鈦諝属㐪籔茽᷄〘ꠏᓏ쵍驪砸︁捇㵈퉫끿회滠僵㟮썖鲱઀덹藤蓍⋆갡 [ 830.222962][ T12] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 830.232670][ T12] usb 4-1: USB disconnect, device number 2 [ 830.259152][T28042] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 830.298818][T28042] device bond1 entered promiscuous mode [ 830.318457][T28043] bond1: (slave veth7): making interface the new active one [ 830.326064][T28043] device veth7 entered promiscuous mode [ 830.334270][T28043] bond1: (slave veth7): Enslaving as an active interface with an up link [ 830.361260][T28046] bond1 (unregistering): (slave veth7): Releasing backup interface [ 830.390437][T28046] device veth7 left promiscuous mode [ 830.749906][T28046] bond1 (unregistering): Released all slaves [ 830.846579][T28027] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 830.861070][ T12] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 830.870210][T28027] syz-executor.4 (28027) used greatest stack depth: 23648 bytes left [ 830.954243][T28042] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 831.096700][T28042] device bond1 entered promiscuous mode [ 831.117642][T28043] bond1: (slave veth9): making interface the new active one [ 831.126933][T28043] device veth9 entered promiscuous mode [ 831.130951][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 831.136148][T28043] bond1: (slave veth9): Enslaving as an active interface with an up link [ 831.331116][ T12] usb 4-1: language id specifier not provided by device, defaulting to English 19:12:53 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="5c03f582becfaf66d6ef9b170824f2c3d6f526926feedd8a5e5c2a34547c3d83c41d18300fa8cf144dcd87f9e8f0387801fe4763483d6bd27fb08cd6e06ef550ee3756c3b19c800a79b3e485cd84c62221ac11d8"]}]}) 19:12:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x5) socket$tipc(0x1e, 0x5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:12:53 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:53 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 19:12:53 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x4) 19:12:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 831.456723][T23667] tipc: TX() has been purged, node left! [ 831.464511][T23667] tipc: TX() has been purged, node left! [ 831.514368][ T12] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 831.536009][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.574838][ T12] usb 4-1: Product: 苵쾾暯ល␈쏲鈦諝属㐪籔茽᷄〘ꠏᓏ쵍驪砸︁捇㵈퉫끿회滠僵㟮썖鲱઀덹藤蓍⋆갡 [ 831.590995][T28175] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 831.685316][T28175] device bond2 entered promiscuous mode [ 831.748801][ T12] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 831.793543][T28186] bond2: (slave veth11): making interface the new active one [ 831.814334][T28186] device veth11 entered promiscuous mode [ 831.823913][T28186] bond2: (slave veth11): Enslaving as an active interface with an up link [ 831.828232][ T12] usb 4-1: USB disconnect, device number 3 19:12:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x5) socket$tipc(0x1e, 0x5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 831.848251][T28218] bond2 (unregistering): (slave veth11): Releasing backup interface [ 831.889659][T28218] device veth11 left promiscuous mode 19:12:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x5) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 832.240909][ T12] usb 4-1: new high-speed USB device number 4 using dummy_hcd 19:12:54 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000), 0x0, 0x0) 19:12:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x5) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 832.491096][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 832.548209][T28218] bond2 (unregistering): Released all slaves 19:12:54 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 832.691536][ T12] usb 4-1: language id specifier not provided by device, defaulting to English [ 832.797206][T28300] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 832.919835][T28300] device bond2 entered promiscuous mode [ 832.969627][T28323] bond2: (slave veth13): making interface the new active one [ 832.970961][ T12] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 832.987066][T28323] device veth13 entered promiscuous mode [ 833.010341][T28323] bond2: (slave veth13): Enslaving as an active interface with an up link [ 833.030163][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.047608][T28334] bond2 (unregistering): (slave veth13): Releasing backup interface [ 833.063022][T28334] device veth13 left promiscuous mode [ 833.067608][ T12] usb 4-1: Product: 苵쾾暯ល␈쏲鈦諝属㐪籔茽᷄〘ꠏᓏ쵍驪砸︁捇㵈퉫끿회滠僵㟮썖鲱઀덹藤蓍⋆갡 [ 833.127498][ T12] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 833.169912][ T12] usb 4-1: USB disconnect, device number 4 [ 833.399501][T28334] bond2 (unregistering): Released all slaves 19:12:55 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="5c03f582becfaf66d6ef9b170824f2c3d6f526926feedd8a5e5c2a34547c3d83c41d18300fa8cf144dcd87f9e8f0387801fe4763483d6bd27fb08cd6e06ef550ee3756c3b19c800a79b3e485cd84c62221ac11d8"]}]}) 19:12:55 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x4) 19:12:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:12:55 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000), 0x0, 0x0) 19:12:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:12:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:12:55 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 833.826601][T28402] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 833.928981][T28402] device bond2 entered promiscuous mode [ 833.961034][ T2474] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 833.992231][T28405] bond2: (slave veth15): making interface the new active one [ 834.009774][T28405] device veth15 entered promiscuous mode [ 834.033361][T28405] bond2: (slave veth15): Enslaving as an active interface with an up link [ 834.065934][T28437] bond2 (unregistering): (slave veth15): Releasing backup interface 19:12:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 834.122387][T28437] device veth15 left promiscuous mode [ 834.210892][ T2474] usb 4-1: Using ep0 maxpacket: 8 19:12:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:12:56 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe2(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000), 0x0, 0x0) [ 834.411451][ T2474] usb 4-1: language id specifier not provided by device, defaulting to English 19:12:56 executing program 4: r0 = mq_open(&(0x7f0000000180)='eth0\x00t@M\'4;\xb9W\x90\xdb\xf6\x91<\xbc\xed\x15\xc1\x9e\xd5\xb5\x90\xa1\x1c+\x1eK\vv\x9cF\xac\xff\xec\xecc\xaa\xc3V\x14\xf07\xf2\xa7/\xc8\x06\xa29\x85\xa29\x81\xf0\xf4\xb8\xba\xeaY\xb4B7\xc5\xc7\x8fY0\x8e\xab|9\xc9C\xe5\xe2\x1c\xae\x1d\xb4>4Q$@[a\xe7\xd8i\x03\x804\x1a\x17huG\x81\xe8\xad#\xbd#\x05\xa8\x8cB\xa6iP\xbf$\xad\x8a\x03Z\xfa\x06,\xf4\x9a\xf6{\xda$\x84\x9b]\xc2\xd2\x98\x06.\b%\x7f\xa8u\xe7\x9d4\xad\xe4z3\xe9\xe7\x06\xde\xd2\xf7\xdb\xc6\x1b\x02\xc8\xaeT\xa0\xa1\fv7\r\x17\xe1', 0x42, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000140)='eth0\x00') [ 834.631040][ T2474] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 834.661633][ T2474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 19:12:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 834.707035][ T2474] usb 4-1: Product: 苵쾾暯ល␈쏲鈦諝属㐪籔茽᷄〘ꠏᓏ쵍驪砸︁捇㵈퉫끿회滠僵㟮썖鲱઀덹藤蓍⋆갡 [ 834.807103][ T2474] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 834.853707][T28437] bond2 (unregistering): Released all slaves [ 834.862476][ T2474] usb 4-1: USB disconnect, device number 5 19:12:56 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="5c03f582becfaf66d6ef9b170824f2c3d6f526926feedd8a5e5c2a34547c3d83c41d18300fa8cf144dcd87f9e8f0387801fe4763483d6bd27fb08cd6e06ef550ee3756c3b19c800a79b3e485cd84c62221ac11d8"]}]}) 19:12:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f000000bc80)={0x0, 0x0, &(0x7f000000bc40)={&(0x7f0000000080)={0x18, r1, 0xa56f26d04ef423cf, 0x0, 0x0, {0x13}, [@HEADER={0x4}]}, 0x18}}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) 19:12:56 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:12:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 835.214887][T28521] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:12:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:12:57 executing program 5: r0 = mq_open(&(0x7f0000000180)='eth0\x00t@M\'4;\xb9W\x90\xdb\xf6\x91<\xbc\xed\x15\xc1\x9e\xd5\xb5\x90\xa1\x1c+\x1eK\vv\x9cF\xac\xff\xec\xecc\xaa\xc3V\x14\xf07\xf2\xa7/\xc8\x06\xa29\x85\xa29\x81\xf0\xf4\xb8\xba\xeaY\xb4B7\xc5\xc7\x8fY0\x8e\xab|9\xc9C\xe5\xe2\x1c\xae\x1d\xb4>4Q$@[a\xe7\xd8i\x03\x804\x1a\x17huG\x81\xe8\xad#\xbd#\x05\xa8\x8cB\xa6iP\xbf$\xad\x8a\x03Z\xfa\x06,\xf4\x9a\xf6{\xda$\x84\x9b]\xc2\xd2\x98\x06.\b%\x7f\xa8u\xe7\x9d4\xad\xe4z3\xe9\xe7\x06\xde\xd2\xf7\xdb\xc6\x1b\x02\xc8\xaeT\xa0\xa1\fv7\r\x17\xe1', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000140)='eth0\x00') 19:12:57 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 835.448325][T28521] device bond2 entered promiscuous mode [ 835.506273][T28533] bond2: (slave veth17): making interface the new active one 19:12:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 835.559826][T28533] device veth17 entered promiscuous mode [ 835.571027][ T2474] usb 4-1: new high-speed USB device number 6 using dummy_hcd 19:12:57 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) futimesat(r0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)={{0x0, 0xea60}}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000500)=""/247, 0xf7) [ 835.608991][T28533] bond2: (slave veth17): Enslaving as an active interface with an up link 19:12:57 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000640)) 19:12:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 835.831006][ T2474] usb 4-1: Using ep0 maxpacket: 8 [ 835.892092][T28607] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 836.031644][T28607] device bond3 entered promiscuous mode [ 836.051304][ T2474] usb 4-1: language id specifier not provided by device, defaulting to English [ 836.104169][T28609] bond3: (slave veth19): making interface the new active one [ 836.160985][T28609] device veth19 entered promiscuous mode [ 836.200230][T28609] bond3: (slave veth19): Enslaving as an active interface with an up link [ 836.273310][ T2474] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 836.282753][ T2474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.293271][ T2474] usb 4-1: Product: 苵쾾暯ល␈쏲鈦諝属㐪籔茽᷄〘ꠏᓏ쵍驪砸︁捇㵈퉫끿회滠僵㟮썖鲱઀덹藤蓍⋆갡 [ 836.311476][ T2474] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 836.328056][ T2474] usb 4-1: USB disconnect, device number 6 19:12:58 executing program 3: 19:12:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:12:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 19:12:58 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) ftruncate(r2, 0x200005) sendfile(r1, r2, 0x0, 0x80001d00c0d0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="d84315089adec478c12aa12968180100994bd5dc29b5efbeaac4e7e6ef32bcf16b33247b2f826cca374619f3ab5d4f6d0de2e39b914c7352bff922196f1ec55064879f5e4f8d98219c1c2b28da13cd63576fe0becd6ed2f4702efc52b198bec1102f15452b380ddf8cb2e7943587e506ac7d95d1000000000000000555fedb8314460e46986987855e19b8219b66df2cd182a84450fc6bdb3019e984a8a8e54a1d70e3243818bc5cec87337bebfd6dcc4e6a4b6a1afffacd4757fd4bb496582e5a2303de69938e6c90731017d8265a00"/223, @ANYRES16=0x0], 0x2d8}, 0x1, 0x0, 0x0, 0x4000000}, 0xa71d03f2a0f9be19) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc04c5609, 0x0) 19:12:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:12:58 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:12:58 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 836.898269][T28670] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:12:58 executing program 3: [ 837.009729][T28670] device bond4 entered promiscuous mode 19:12:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:12:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) [ 837.072840][ T28] audit: type=1800 audit(1601147578.854:15): pid=28666 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16359 res=0 errno=0 [ 837.149353][T28678] bond4: (slave veth21): making interface the new active one 19:12:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 837.212965][T28678] device veth21 entered promiscuous mode 19:12:59 executing program 3: [ 837.280278][T28678] bond4: (slave veth21): Enslaving as an active interface with an up link 19:12:59 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 19:12:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:12:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 837.642688][T28752] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 837.722613][T28752] device bond5 entered promiscuous mode [ 837.746873][T28754] bond5: (slave veth23): making interface the new active one [ 837.760178][T28754] device veth23 entered promiscuous mode [ 837.768387][T28754] bond5: (slave veth23): Enslaving as an active interface with an up link [ 838.437016][ T28] audit: type=1800 audit(1601147580.224:16): pid=28666 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16366 res=0 errno=0 19:13:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 19:13:00 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) ftruncate(r2, 0x200005) sendfile(r1, r2, 0x0, 0x80001d00c0d0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="d84315089adec478c12aa12968180100994bd5dc29b5efbeaac4e7e6ef32bcf16b33247b2f826cca374619f3ab5d4f6d0de2e39b914c7352bff922196f1ec55064879f5e4f8d98219c1c2b28da13cd63576fe0becd6ed2f4702efc52b198bec1102f15452b380ddf8cb2e7943587e506ac7d95d1000000000000000555fedb8314460e46986987855e19b8219b66df2cd182a84450fc6bdb3019e984a8a8e54a1d70e3243818bc5cec87337bebfd6dcc4e6a4b6a1afffacd4757fd4bb496582e5a2303de69938e6c90731017d8265a00"/223, @ANYRES16=0x0], 0x2d8}, 0x1, 0x0, 0x0, 0x4000000}, 0xa71d03f2a0f9be19) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc04c5609, 0x0) 19:13:00 executing program 3: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="5c03f582becfaf66d6ef9b170824f2c3d6f526926feedd8a5e5c2a34547c3d83c41d18300fa8cf144dcd87f9e8f0387801fe4763483d6bd27fb08cd6e06ef550ee3756c3b19c800a79b3e485cd84c62221ac11d8"]}]}) 19:13:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:00 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 838.598441][T28804] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 838.663724][T28804] device bond6 entered promiscuous mode 19:13:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) [ 838.749218][T28837] bond6: (slave veth25): making interface the new active one [ 838.760483][T28837] device veth25 entered promiscuous mode [ 838.776298][T28837] bond6: (slave veth25): Enslaving as an active interface with an up link 19:13:00 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:13:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 838.799088][T28804] bond6 (unregistering): (slave veth25): Releasing backup interface [ 838.844308][T28804] device veth25 left promiscuous mode 19:13:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 19:13:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r0 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) [ 839.084500][ T28] audit: type=1800 audit(1601147580.874:17): pid=28813 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16359 res=0 errno=0 19:13:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r0 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 839.390108][T28804] bond6 (unregistering): Released all slaves 19:13:01 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) ftruncate(r2, 0x200005) sendfile(r1, r2, 0x0, 0x80001d00c0d0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="d84315089adec478c12aa12968180100994bd5dc29b5efbeaac4e7e6ef32bcf16b33247b2f826cca374619f3ab5d4f6d0de2e39b914c7352bff922196f1ec55064879f5e4f8d98219c1c2b28da13cd63576fe0becd6ed2f4702efc52b198bec1102f15452b380ddf8cb2e7943587e506ac7d95d1000000000000000555fedb8314460e46986987855e19b8219b66df2cd182a84450fc6bdb3019e984a8a8e54a1d70e3243818bc5cec87337bebfd6dcc4e6a4b6a1afffacd4757fd4bb496582e5a2303de69938e6c90731017d8265a00"/223, @ANYRES16=0x0], 0x2d8}, 0x1, 0x0, 0x0, 0x4000000}, 0xa71d03f2a0f9be19) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc04c5609, 0x0) 19:13:01 executing program 3: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="5c03f582becfaf66d6ef9b170824f2c3d6f526926feedd8a5e5c2a34547c3d83c41d18300fa8cf144dcd87f9e8f0387801fe4763483d6bd27fb08cd6e06ef550ee3756c3b19c800a79b3e485cd84c62221ac11d8"]}]}) 19:13:01 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='5', 0x1}]) 19:13:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r0 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:01 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r2], 0x20}}, 0x0) 19:13:01 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 840.030345][T28933] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 840.038773][ T28] audit: type=1800 audit(1601147581.814:18): pid=28934 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16359 res=0 errno=0 19:13:01 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='5', 0x1}]) [ 840.251013][T28933] device bond6 entered promiscuous mode 19:13:02 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:13:02 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 840.295534][T28943] bond6 (unregistering): Released all slaves 19:13:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='5', 0x1}]) 19:13:02 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:13:02 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) ftruncate(r1, 0x200005) sendfile(r0, r1, 0x0, 0x80001d00c0d0) 19:13:02 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:02 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r2], 0x20}}, 0x0) 19:13:02 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:13:02 executing program 3: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="5c03f582becfaf66d6ef9b170824f2c3d6f526926feedd8a5e5c2a34547c3d83c41d18300fa8cf144dcd87f9e8f0387801fe4763483d6bd27fb08cd6e06ef550ee3756c3b19c800a79b3e485cd84c62221ac11d8"]}]}) 19:13:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) [ 840.897187][T29055] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:13:02 executing program 2: perf_event_open(0x0, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) [ 841.030294][ T28] audit: type=1800 audit(1601147582.814:19): pid=29085 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16359 res=0 errno=0 [ 841.093749][T29055] device bond6 entered promiscuous mode [ 841.112517][T29066] bond6 (unregistering): Released all slaves 19:13:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) [ 841.310642][ T28] audit: type=1800 audit(1601147583.094:20): pid=29147 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16366 res=0 errno=0 19:13:03 executing program 2: perf_event_open(0x0, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:03 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r2], 0x20}}, 0x0) 19:13:03 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x0, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="5c03f582becfaf66d6ef9b170824f2c3d6f526926feedd8a5e5c2a34547c3d83c41d18300fa8cf144dcd87f9e8f0387801fe4763483d6bd27fb08cd6e06ef550ee3756c3b19c800a79b3e485cd84c62221ac11d8"]}]}) 19:13:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f000000bc80)={0x0, 0x0, &(0x7f000000bc40)={&(0x7f00000000c0)={0x20, r1, 0xa56f26d04ef423cf, 0x0, 0x0, {0x13}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}}, 0x0) 19:13:03 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)='5', 0x1}]) [ 841.575425][T29159] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:13:03 executing program 2: perf_event_open(0x0, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 841.764111][T29159] device bond6 entered promiscuous mode [ 841.807530][T29164] bond6 (unregistering): Released all slaves [ 841.901171][ T12] usb 4-1: new high-speed USB device number 7 using dummy_hcd 19:13:04 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:13:04 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)='5', 0x1}]) 19:13:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:04 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$inet(0x2, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0xc8100, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8050}, 0x2020) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="b9800000c035004000000f30d07531f5f50fdb090920e03500004000c4636569b3ce4b50330026660f3881694f0f0f5c193a9af342d8860080000066b82001c4220d2d4f5d2e66420fc73366ba2000ed", 0x50}], 0x1, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000100)=0x100121, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10002, 0x10) 19:13:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r2], 0x20}}, 0x0) [ 842.181002][ T12] usb 4-1: device descriptor read/64, error 18 [ 842.326431][T29260] IPVS: ftp: loaded support on port[0] = 21 19:13:04 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)='5', 0x1}]) 19:13:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r2], 0x20}}, 0x0) [ 842.571057][ T12] usb 4-1: device descriptor read/64, error 18 [ 842.841039][ T12] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 843.071732][T29260] IPVS: ftp: loaded support on port[0] = 21 [ 843.131670][ T12] usb 4-1: device descriptor read/64, error 18 [ 843.256411][T23667] tipc: TX() has been purged, node left! [ 843.521098][ T12] usb 4-1: device descriptor read/64, error 18 [ 843.641756][ T12] usb usb4-port1: attempt power cycle [ 844.351223][ T12] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 844.442466][ T12] usb 4-1: Invalid ep0 maxpacket: 0 19:13:06 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x0, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="5c03f582becfaf66d6ef9b170824f2c3d6f526926feedd8a5e5c2a34547c3d83c41d18300fa8cf144dcd87f9e8f0387801fe4763483d6bd27fb08cd6e06ef550ee3756c3b19c800a79b3e485cd84c62221ac11d8"]}]}) 19:13:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 19:13:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r2], 0x20}}, 0x0) 19:13:06 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$inet(0x2, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0xc8100, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8050}, 0x2020) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="b9800000c035004000000f30d07531f5f50fdb090920e03500004000c4636569b3ce4b50330026660f3881694f0f0f5c193a9af342d8860080000066b82001c4220d2d4f5d2e66420fc73366ba2000ed", 0x50}], 0x1, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000100)=0x100121, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10002, 0x10) 19:13:06 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 844.591128][ T12] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 844.688737][T29357] IPVS: ftp: loaded support on port[0] = 21 19:13:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) [ 844.775453][T23667] tipc: TX() has been purged, node left! 19:13:06 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:13:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32], 0x20}}, 0x0) 19:13:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) [ 845.026035][T29417] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:13:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 845.071162][ T12] usb 4-1: device not accepting address 10, error -71 [ 845.087415][ T12] usb usb4-port1: unable to enumerate USB device [ 845.139036][T29417] device bond6 entered promiscuous mode [ 845.230574][T29422] bond6: (slave veth27): making interface the new active one [ 845.285300][T29422] device veth27 entered promiscuous mode [ 845.293968][T29422] bond6: (slave veth27): Enslaving as an active interface with an up link [ 845.461091][ T12] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 845.740959][ T12] usb 4-1: device descriptor read/64, error 18 [ 846.130961][ T12] usb 4-1: device descriptor read/64, error 18 [ 846.404372][ T12] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 846.690945][ T12] usb 4-1: device descriptor read/64, error 18 [ 847.082146][ T12] usb 4-1: device descriptor read/64, error 18 [ 847.099375][T23667] tipc: TX() has been purged, node left! [ 847.201153][ T12] usb usb4-port1: attempt power cycle 19:13:09 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x0, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="5c03f582becfaf66d6ef9b170824f2c3d6f526926feedd8a5e5c2a34547c3d83c41d18300fa8cf144dcd87f9e8f0387801fe4763483d6bd27fb08cd6e06ef550ee3756c3b19c800a79b3e485cd84c62221ac11d8"]}]}) 19:13:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 19:13:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32], 0x20}}, 0x0) 19:13:09 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$inet(0x2, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0xc8100, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8050}, 0x2020) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="b9800000c035004000000f30d07531f5f50fdb090920e03500004000c4636569b3ce4b50330026660f3881694f0f0f5c193a9af342d8860080000066b82001c4220d2d4f5d2e66420fc73366ba2000ed", 0x50}], 0x1, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000100)=0x100121, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10002, 0x10) 19:13:09 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 847.752432][T29489] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 847.765343][T29488] IPVS: ftp: loaded support on port[0] = 21 [ 847.785604][T29489] bond7 (uninitialized): Released all slaves 19:13:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 19:13:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:09 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 847.908026][T29499] bond6: (slave veth29): Enslaving as a backup interface with an up link 19:13:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32], 0x20}}, 0x0) 19:13:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) [ 848.130967][ T12] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 848.185369][T29544] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 848.221014][ T12] usb 4-1: Invalid ep0 maxpacket: 0 19:13:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 848.253390][T29544] bond7 (uninitialized): Released all slaves [ 848.316600][T29550] bond6: (slave veth31): Enslaving as a backup interface with an up link [ 848.372092][ T12] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 848.461200][ T12] usb 4-1: Invalid ep0 maxpacket: 0 [ 848.467106][ T12] usb usb4-port1: unable to enumerate USB device [ 850.060537][T23667] tipc: TX() has been purged, node left! 19:13:12 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, 0x0) 19:13:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 19:13:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 19:13:12 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 850.788915][T29583] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 850.895708][T29583] device bond7 entered promiscuous mode 19:13:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 19:13:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 19:13:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:12 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="aa", 0x1}], 0x1}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19:13:13 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) [ 851.224023][T29649] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 851.232723][ T2474] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 851.440274][T29649] device bond8 entered promiscuous mode [ 851.501075][ T2474] usb 4-1: Using ep0 maxpacket: 8 [ 851.941383][ T2474] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 851.950459][ T2474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.981221][ T2474] usb 4-1: Product: syz [ 851.992103][ T2474] usb 4-1: Manufacturer: syz [ 851.996729][ T2474] usb 4-1: SerialNumber: syz [ 852.022799][ T2474] usbip-host 4-1: 4-1 is not in match_busid table... skip! 19:13:15 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, 0x0) 19:13:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 19:13:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r3, &(0x7f0000000940)=[{0x0}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x2, 0x0, 0x0) 19:13:15 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 853.795809][ T12] usb 4-1: USB disconnect, device number 15 [ 853.863155][T29722] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:13:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 19:13:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) [ 854.041757][T29722] device bond9 entered promiscuous mode 19:13:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 19:13:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r2], 0x20}}, 0x0) 19:13:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 854.281207][ T12] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 854.311472][T29791] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 854.365181][T29791] bond10 (uninitialized): Released all slaves [ 854.429755][T29795] bond6: (slave veth39): Enslaving as a backup interface with an up link [ 854.541038][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 854.981358][ T12] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 855.001753][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.029392][ T12] usb 4-1: Product: syz [ 855.043887][ T12] usb 4-1: Manufacturer: syz [ 855.057552][ T12] usb 4-1: SerialNumber: syz [ 855.088417][ T12] usbip-host 4-1: 4-1 is not in match_busid table... skip! 19:13:18 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, 0x0) 19:13:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 19:13:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r2], 0x20}}, 0x0) 19:13:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:18 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 856.863271][ T6553] usb 4-1: USB disconnect, device number 16 19:13:18 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:13:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) [ 856.939525][T29824] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 856.967822][T29824] bond10 (uninitialized): Released all slaves [ 857.042106][T29830] bond6: (slave veth41): Enslaving as a backup interface with an up link 19:13:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r2], 0x20}}, 0x0) 19:13:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) [ 857.275730][T29854] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 857.327459][T29854] bond10 (uninitialized): Released all slaves [ 857.341181][ T6553] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 857.378852][T29859] bond6: (slave veth43): Enslaving as a backup interface with an up link [ 857.591028][ T6553] usb 4-1: Using ep0 maxpacket: 8 [ 858.031237][ T6553] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 858.040342][ T6553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.049738][ T6553] usb 4-1: Product: syz [ 858.054563][ T6553] usb 4-1: Manufacturer: syz [ 858.059221][ T6553] usb 4-1: SerialNumber: syz [ 858.069902][ T6553] usbip-host 4-1: 4-1 is not in match_busid table... skip! 19:13:21 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}]}) 19:13:21 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:13:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 19:13:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r2], 0x20}}, 0x0) [ 859.915920][ T17] usb 4-1: USB disconnect, device number 17 19:13:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:21 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:13:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 19:13:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r2], 0x20}}, 0x0) 19:13:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:22 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 860.371023][ T17] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 860.611137][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 860.821352][ T17] usb 4-1: language id specifier not provided by device, defaulting to English [ 861.001135][ T17] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 861.010176][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.018763][ T17] usb 4-1: Product: syz [ 861.026955][ T17] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 861.043918][ T17] usb 4-1: USB disconnect, device number 18 19:13:23 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}]}) 19:13:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r2], 0x20}}, 0x0) 19:13:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:23 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:13:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 19:13:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r2], 0x20}}, 0x0) 19:13:23 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:13:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, 0x0) 19:13:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10094) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) [ 861.795531][T29999] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 861.881578][ T9916] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 861.920272][T29999] device bond10 entered promiscuous mode [ 861.948518][T30008] bond10 (unregistering): Released all slaves [ 862.141051][ T9916] usb 4-1: Using ep0 maxpacket: 8 [ 862.341564][ T9916] usb 4-1: language id specifier not provided by device, defaulting to English [ 862.531754][ T9916] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 862.551655][ T9916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.593531][ T9916] usb 4-1: Product: syz [ 862.612523][ T9916] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 862.621479][ T9916] usb 4-1: USB disconnect, device number 19 19:13:24 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}]}) 19:13:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, 0x0) 19:13:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10094) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r2], 0x20}}, 0x0) 19:13:24 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 863.085129][T30103] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:13:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 863.262362][T30103] device bond10 entered promiscuous mode 19:13:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, 0x0) [ 863.326447][T30122] bond10 (unregistering): Released all slaves 19:13:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10094) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, &(0x7f0000000380)) [ 863.511331][ T3101] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 863.771090][ T3101] usb 4-1: Using ep0 maxpacket: 8 [ 863.981513][ T3101] usb 4-1: language id specifier not provided by device, defaulting to English [ 864.201143][ T3101] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 864.222504][ T3101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.242418][ T3101] usb 4-1: Product: syz [ 864.257597][ T3101] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 864.272987][ T3101] usb 4-1: USB disconnect, device number 20 19:13:26 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, 0x0}]}) 19:13:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r2], 0x20}}, 0x0) 19:13:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, &(0x7f0000000380)) 19:13:26 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:13:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) [ 864.737192][T30230] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:13:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, &(0x7f0000000380)) [ 864.935345][T30230] device bond10 entered promiscuous mode 19:13:26 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 865.001722][T30243] bond10 (unregistering): Released all slaves [ 865.042296][ T3101] usb 4-1: new high-speed USB device number 21 using dummy_hcd 19:13:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 865.300989][ T3101] usb 4-1: Using ep0 maxpacket: 8 [ 865.321823][T30341] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 865.350636][T30341] bond10 (uninitialized): Released all slaves [ 865.400094][T30345] bond6: (slave veth45): Enslaving as a backup interface with an up link [ 865.521343][ T3101] usb 4-1: language id specifier not provided by device, defaulting to English [ 865.761551][ T3101] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 865.770626][ T3101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.789573][ T3101] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 865.812559][ T3101] usb 4-1: USB disconnect, device number 21 19:13:28 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, 0x0}]}) 19:13:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[0x0]) 19:13:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:28 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:13:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) [ 866.405419][T30384] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:13:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[0x0]) [ 866.466948][T30384] bond10 (uninitialized): Released all slaves 19:13:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 866.543037][T30379] bond6: (slave veth47): Enslaving as a backup interface with an up link 19:13:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) [ 866.701189][ T3101] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 866.850123][T30416] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 866.896712][T30416] bond10 (uninitialized): Released all slaves [ 866.959499][T30413] bond6: (slave veth49): Enslaving as a backup interface with an up link [ 866.968433][ T3101] usb 4-1: Using ep0 maxpacket: 8 [ 867.201474][ T3101] usb 4-1: language id specifier not provided by device, defaulting to English [ 867.461086][ T3101] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 867.470693][ T3101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.504299][ T3101] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 867.536096][ T3101] usb 4-1: USB disconnect, device number 22 19:13:29 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, 0x0}]}) 19:13:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[0x0]) 19:13:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:29 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:13:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 868.031844][T30447] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 868.105047][T30447] bond10 (uninitialized): Released all slaves 19:13:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='5', 0x1}]) [ 868.148667][T30457] bond6: (slave veth51): Enslaving as a backup interface with an up link 19:13:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 868.341328][ T17] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 868.424177][T30484] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 868.498730][T30484] bond10 (uninitialized): Released all slaves [ 868.556218][T30488] bond6: (slave veth53): Enslaving as a backup interface with an up link [ 868.592040][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 868.791540][ T17] usb 4-1: language id specifier not provided by device, defaulting to English [ 869.031248][ T17] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 869.050088][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.086463][ T17] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 869.126475][ T17] usb 4-1: USB disconnect, device number 23 19:13:31 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[]}]}) 19:13:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='5', 0x1}]) 19:13:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:31 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 869.586072][T30518] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 869.623000][T30518] bond10 (uninitialized): Released all slaves 19:13:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='5', 0x1}]) [ 869.714347][T30529] bond6: (slave veth55): Enslaving as a backup interface with an up link 19:13:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 869.881129][ T9916] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 870.001462][T30555] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 870.121318][ T9916] usb 4-1: Using ep0 maxpacket: 8 [ 870.176580][T30555] device bond10 entered promiscuous mode [ 870.321651][ T9916] usb 4-1: language id specifier not provided by device, defaulting to English [ 870.541115][ T9916] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 870.555936][ T9916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.589346][ T9916] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 870.617467][ T9916] usb 4-1: USB disconnect, device number 24 19:13:32 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[]}]}) 19:13:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, 0x0}]) 19:13:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:32 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 871.052753][T30620] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:13:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 871.104806][T30620] device bond11 entered promiscuous mode 19:13:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, 0x0}]) 19:13:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) [ 871.214494][T30676] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 871.261897][T30676] device bond12 entered promiscuous mode 19:13:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 871.354147][T30722] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:13:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, 0x0}]) [ 871.410141][T30722] device bond13 entered promiscuous mode [ 871.431503][ T9916] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 871.681067][ T9916] usb 4-1: Using ep0 maxpacket: 8 [ 871.881512][ T9916] usb 4-1: language id specifier not provided by device, defaulting to English [ 872.108830][ T9916] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 872.123585][ T9916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.166321][ T9916] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 872.180295][ T9916] usb 4-1: USB disconnect, device number 25 19:13:34 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[]}]}) 19:13:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)}]) 19:13:34 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 872.620655][T30792] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:13:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)}]) 19:13:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 872.817653][T30792] device bond14 entered promiscuous mode 19:13:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)}]) [ 872.931290][ T2474] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 873.069006][T30866] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 873.161773][T30866] device bond15 entered promiscuous mode [ 873.171503][ T2474] usb 4-1: Using ep0 maxpacket: 8 [ 873.371510][ T2474] usb 4-1: language id specifier not provided by device, defaulting to English [ 873.612035][ T2474] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 873.631088][ T2474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.649198][ T2474] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 873.671962][ T2474] usb 4-1: USB disconnect, device number 26 19:13:35 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB]}]}) 19:13:35 executing program 5: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 19:13:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:35 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:35 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 874.170169][T30933] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:13:36 executing program 5: syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) 19:13:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:36 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f00000000c0)) 19:13:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x13, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss], 0x4) [ 874.334405][T30933] device bond16 entered promiscuous mode 19:13:36 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) [ 874.471127][ T9916] usb 4-1: new high-speed USB device number 27 using dummy_hcd 19:13:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 874.633094][T31004] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 874.721402][ T9916] usb 4-1: Using ep0 maxpacket: 8 [ 874.848404][T31004] device bond17 entered promiscuous mode [ 874.932187][ T9916] usb 4-1: language id specifier not provided by device, defaulting to English [ 875.171230][ T9916] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 875.202343][ T9916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.233590][ T9916] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 875.264746][ T9916] usb 4-1: USB disconnect, device number 27 19:13:37 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB]}]}) 19:13:37 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x480, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) 19:13:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:37 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:37 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:13:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:37 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) [ 875.728064][T31069] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:13:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 875.795919][T31069] device bond18 entered promiscuous mode [ 876.001112][ T9916] usb 4-1: new high-speed USB device number 28 using dummy_hcd 19:13:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 876.114444][T31130] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:13:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 876.120137][T31130] bond19 (uninitialized): Released all slaves [ 876.150170][T31130] bond6: (slave veth75): Enslaving as a backup interface with an up link [ 876.241058][ T9916] usb 4-1: Using ep0 maxpacket: 8 [ 876.349374][T31145] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 876.433282][T31145] bond19 (uninitialized): Released all slaves [ 876.451562][ T9916] usb 4-1: language id specifier not provided by device, defaulting to English [ 876.477961][T31147] bond6: (slave veth77): Enslaving as a backup interface with an up link [ 876.711167][ T9916] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 876.733508][ T9916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.755939][ T9916] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 876.775551][ T9916] usb 4-1: USB disconnect, device number 28 19:13:38 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB]}]}) 19:13:38 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x1f, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 19:13:38 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) [ 877.252745][T31175] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:13:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 877.343562][T31177] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 877.380056][T31177] bond19 (uninitialized): Released all slaves [ 877.427030][T31190] bond0: (slave veth7): Enslaving as an active interface with an up link 19:13:39 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) [ 877.518081][T31193] bond6: (slave veth79): Enslaving as a backup interface with an up link [ 877.561257][ T2474] usb 4-1: new high-speed USB device number 29 using dummy_hcd 19:13:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 877.828133][ T2474] usb 4-1: Using ep0 maxpacket: 8 19:13:39 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 878.061625][ T2474] usb 4-1: language id specifier not provided by device, defaulting to English 19:13:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 878.111596][T31175] bond0: (slave veth7): Releasing backup interface [ 878.192076][T31190] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 878.294470][T31232] bond0: (slave veth7): Enslaving as an active interface with an up link [ 878.331132][ T2474] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 878.340337][ T2474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.382174][ T2474] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 878.433875][ T2474] usb 4-1: USB disconnect, device number 29 [ 878.634819][T31235] bond0: (slave veth7): Releasing backup interface 19:13:40 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="5c03f582becfaf66d6ef9b170824f2c3d6f526926feedd8a5e5c2a34547c3d83c41d18300fa8cf144dcd"]}]}) 19:13:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:40 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32], 0x20}}, 0x0) 19:13:40 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:13:40 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000080), 0x0}, 0x20) [ 878.912152][T31280] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:13:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:13:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 878.987730][T31280] bond19 (uninitialized): Released all slaves [ 879.053803][T31287] bond6: (slave veth81): Enslaving as a backup interface with an up link 19:13:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32], 0x20}}, 0x0) 19:13:41 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) [ 879.162929][T31300] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 879.191336][ T8170] usb 4-1: new high-speed USB device number 30 using dummy_hcd 19:13:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 879.304521][T31304] bond0: (slave veth7): Enslaving as an active interface with an up link [ 879.344209][T31314] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 879.401673][T31314] bond19 (uninitialized): Released all slaves [ 879.429089][T31304] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 879.461282][ T8170] usb 4-1: Using ep0 maxpacket: 8 [ 879.498975][T31316] bond6: (slave veth83): Enslaving as a backup interface with an up link 19:13:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 879.661492][ T8170] usb 4-1: language id specifier not provided by device, defaulting to English [ 879.841358][ T8170] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 879.860737][ T8170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.888756][ T8170] usb 4-1: Product: 苵쾾暯ល␈쏲鈦諝属㐪籔茽᷄〘ꠏᓏ쵍 [ 879.927478][ T8170] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 879.970525][ T8170] usb 4-1: USB disconnect, device number 30 19:13:42 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="5c03f582becfaf66d6ef9b170824f2c3d6f526926feedd8a5e5c2a34547c3d83c41d18300fa8cf144dcd"]}]}) 19:13:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() lstat(0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee00) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') 19:13:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32], 0x20}}, 0x0) 19:13:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:13:42 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x33, 0x0, 0x0, 0x0) 19:13:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 880.390331][T31355] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 880.427503][T31355] bond19 (uninitialized): Released all slaves 19:13:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 880.570832][T31367] bond6: (slave veth85): Enslaving as a backup interface with an up link 19:13:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) [ 880.651281][ T8170] usb 4-1: new high-speed USB device number 31 using dummy_hcd 19:13:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:42 executing program 2: getpid() sched_setscheduler(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) [ 880.856286][T31394] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 880.891255][ T8170] usb 4-1: Using ep0 maxpacket: 8 [ 880.924544][T31394] bond19 (uninitialized): Released all slaves [ 880.954534][T31397] bond6: (slave veth87): Enslaving as a backup interface with an up link 19:13:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 881.091679][ T8170] usb 4-1: language id specifier not provided by device, defaulting to English [ 881.126711][T31406] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 881.148665][T31406] bond19 (uninitialized): Released all slaves [ 881.213470][T31408] bond6: (slave veth89): Enslaving as a backup interface with an up link [ 881.271181][ T8170] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 881.285192][ T8170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.304903][ T8170] usb 4-1: Product: 苵쾾暯ល␈쏲鈦諝属㐪籔茽᷄〘ꠏᓏ쵍 [ 881.345698][ T8170] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 881.375722][ T8170] usb 4-1: USB disconnect, device number 31 19:13:43 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="5c03f582becfaf66d6ef9b170824f2c3d6f526926feedd8a5e5c2a34547c3d83c41d18300fa8cf144dcd"]}]}) 19:13:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() lstat(0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee00) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') 19:13:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) 19:13:43 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xa) 19:13:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 19:13:43 executing program 1: socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x110}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 882.240745][T31437] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 882.271289][ T2474] usb 4-1: new high-speed USB device number 32 using dummy_hcd 19:13:44 executing program 2: r0 = socket(0x18, 0x0, 0x1) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, 0x0) [ 882.315226][T31437] bond19 (uninitialized): Released all slaves [ 882.340203][T31443] bond6: (slave veth91): Enslaving as a backup interface with an up link 19:13:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r2], 0x20}}, 0x0) 19:13:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x43) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x107004}}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:13:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) [ 882.561119][ T2474] usb 4-1: Using ep0 maxpacket: 8 19:13:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r2], 0x20}}, 0x0) [ 882.761492][ T2474] usb 4-1: language id specifier not provided by device, defaulting to English 19:13:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0xffbc}], 0x1}}], 0x1, 0x0) [ 882.991668][ T2474] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 883.013182][ T2474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.036127][ T2474] usb 4-1: Product: 苵쾾暯ល␈쏲鈦諝属㐪籔茽᷄〘ꠏᓏ쵍 [ 883.052546][ T2474] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 883.105071][ T2474] usb 4-1: USB disconnect, device number 32 19:13:45 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003"]}, {0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="5c03f582becfaf66d6ef9b170824f2c3d6f526926feedd8a5e5c2a34547c3d83c41d18300fa8cf144dcd87f9e8f0387801fe4763483d6bd27fb08cd6e06ef5"]}]}) [ 883.712639][T31372] ================================================================== [ 883.721375][T31372] BUG: KASAN: use-after-free in io_wq_worker_running+0xb4/0x100 [ 883.729127][T31372] Write of size 4 at addr ffff88821787508c by task io_wqe_worker-0/31372 [ 883.737648][T31372] [ 883.740001][T31372] CPU: 1 PID: 31372 Comm: io_wqe_worker-0 Not tainted 5.9.0-rc6-syzkaller #0 [ 883.748766][T31372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.758949][T31372] Call Trace: [ 883.762258][T31372] dump_stack+0x1d6/0x29e [ 883.766607][T31372] print_address_description+0x66/0x620 [ 883.772172][T31372] ? printk+0x62/0x83 [ 883.776237][T31372] ? _raw_spin_lock_irqsave+0x84/0xd0 [ 883.781630][T31372] ? vprintk_emit+0x2f0/0x370 [ 883.786318][T31372] kasan_report+0x132/0x1d0 [ 883.790838][T31372] ? io_wq_worker_running+0xb4/0x100 [ 883.796249][T31372] ? __schedule+0x9c1/0xd20 [ 883.800770][T31372] check_memory_region+0x2b5/0x2f0 [ 883.806225][T31372] io_wq_worker_running+0xb4/0x100 [ 883.811673][T31372] schedule_timeout+0x15c/0x250 [ 883.816636][T31372] ? run_local_timers+0x120/0x120 [ 883.821680][T31372] io_wqe_worker+0x60b/0x810 [ 883.826323][T31372] kthread+0x37e/0x3a0 [ 883.830414][T31372] ? create_io_worker+0x5f0/0x5f0 [ 883.835456][T31372] ? kthread_blkcg+0xd0/0xd0 [ 883.840069][T31372] ret_from_fork+0x1f/0x30 [ 883.844509][T31372] [ 883.846851][T31372] Allocated by task 31356: [ 883.851285][T31372] __kasan_kmalloc+0x100/0x130 [ 883.856172][T31372] kmem_cache_alloc_node_trace+0x1f7/0x2a0 [ 883.861994][T31372] io_wq_create+0x295/0x880 [ 883.866509][T31372] __se_sys_io_uring_setup+0x18ed/0x2a00 [ 883.872202][T31372] do_syscall_64+0x31/0x70 [ 883.876638][T31372] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 883.882541][T31372] [ 883.884874][T31372] Freed by task 7: [ 883.888839][T31372] kasan_set_track+0x3d/0x70 [ 883.893728][T31372] kasan_set_free_info+0x17/0x30 [ 883.898679][T31372] __kasan_slab_free+0xdd/0x110 [ 883.903584][T31372] kfree+0x113/0x200 [ 883.907575][T31372] io_wq_destroy+0x470/0x510 [ 883.912253][T31372] io_ring_exit_work+0x195/0x520 [ 883.917280][T31372] process_one_work+0x789/0xfc0 [ 883.922183][T31372] worker_thread+0xaa4/0x1460 [ 883.927009][T31372] kthread+0x37e/0x3a0 [ 883.931086][T31372] ret_from_fork+0x1f/0x30 [ 883.935499][T31372] [ 883.937839][T31372] The buggy address belongs to the object at ffff888217875000 [ 883.937839][T31372] which belongs to the cache kmalloc-1k of size 1024 [ 883.952511][T31372] The buggy address is located 140 bytes inside of [ 883.952511][T31372] 1024-byte region [ffff888217875000, ffff888217875400) [ 883.966109][T31372] The buggy address belongs to the page: [ 883.971892][T31372] page:000000002c352c60 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x217875 [ 883.982510][T31372] flags: 0x57ffe0000000200(slab) [ 883.987680][T31372] raw: 057ffe0000000200 ffffea000853ee88 ffffea00085fb0c8 ffff8880aa440700 [ 883.996436][T31372] raw: 0000000000000000 ffff888217875000 0000000100000002 0000000000000000 [ 884.005373][T31372] page dumped because: kasan: bad access detected [ 884.011866][T31372] [ 884.014200][T31372] Memory state around the buggy address: [ 884.019841][T31372] ffff888217874f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 884.028359][T31372] ffff888217875000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 884.036851][T31372] >ffff888217875080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 884.044915][T31372] ^ [ 884.049244][T31372] ffff888217875100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 884.057314][T31372] ffff888217875180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 884.065372][T31372] ================================================================== [ 884.073436][T31372] Disabling lock debugging due to kernel taint [ 884.079786][ T8170] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 884.094088][T31372] Kernel panic - not syncing: panic_on_warn set ... [ 884.100699][T31372] CPU: 0 PID: 31372 Comm: io_wqe_worker-0 Tainted: G B 5.9.0-rc6-syzkaller #0 [ 884.111012][T31372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 884.121194][T31372] Call Trace: [ 884.124501][T31372] dump_stack+0x1d6/0x29e [ 884.128847][T31372] panic+0x2c0/0x800 [ 884.132867][T31372] ? trace_hardirqs_on+0x30/0x80 [ 884.137807][T31372] kasan_report+0x1c9/0x1d0 [ 884.142328][T31372] ? io_wq_worker_running+0xb4/0x100 [ 884.147626][T31372] ? __schedule+0x9c1/0xd20 [ 884.152260][T31372] check_memory_region+0x2b5/0x2f0 [ 884.157478][T31372] io_wq_worker_running+0xb4/0x100 [ 884.162790][T31372] schedule_timeout+0x15c/0x250 [ 884.167664][T31372] ? run_local_timers+0x120/0x120 [ 884.172966][T31372] io_wqe_worker+0x60b/0x810 [ 884.177574][T31372] kthread+0x37e/0x3a0 [ 884.181654][T31372] ? create_io_worker+0x5f0/0x5f0 [ 884.186724][T31372] ? kthread_blkcg+0xd0/0xd0 [ 884.191328][T31372] ret_from_fork+0x1f/0x30 [ 884.197339][T31372] Kernel Offset: disabled [ 884.201974][T31372] Rebooting in 86400 seconds..