[ OK ] Started Regular background program processing daemon. Starting System Logging Service... Starting getty on tty2-tty6 if dbus and logind are not available... Starting Permit User Sessions... Starting OpenBSD Secure Shell server... [ OK ] Started System Logging Service. [ OK ] Found device /dev/ttyS0. [ OK ] Started Permit User Sessions. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.244' (ECDSA) to the list of known hosts. 2020/08/13 07:41:34 fuzzer started 2020/08/13 07:41:35 dialing manager at 10.128.0.26:46289 2020/08/13 07:41:35 syscalls: 3271 2020/08/13 07:41:35 code coverage: enabled 2020/08/13 07:41:35 comparison tracing: enabled 2020/08/13 07:41:35 extra coverage: enabled 2020/08/13 07:41:35 setuid sandbox: enabled 2020/08/13 07:41:35 namespace sandbox: enabled 2020/08/13 07:41:35 Android sandbox: enabled 2020/08/13 07:41:35 fault injection: enabled 2020/08/13 07:41:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/13 07:41:35 net packet injection: enabled 2020/08/13 07:41:35 net device setup: enabled 2020/08/13 07:41:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/13 07:41:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/13 07:41:35 USB emulation: enabled 2020/08/13 07:41:35 hci packet injection: enabled 07:45:04 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0cfdff", 0x14, 0x6, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syzkaller login: [ 277.672615][ T28] audit: type=1400 audit(1597304704.498:8): avc: denied { execmem } for pid=6867 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:45:04 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) close(r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0xcc272, 0xffffffffffffffff, 0x0) 07:45:04 executing program 2: socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2713, &(0x7f0000019100)=""/102385, &(0x7f00000000c0)=0x18ff1) 07:45:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r0, 0x5501) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) 07:45:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 278.901223][ T6868] IPVS: ftp: loaded support on port[0] = 21 [ 279.162317][ T6870] IPVS: ftp: loaded support on port[0] = 21 [ 279.181254][ T6868] chnl_net:caif_netlink_parms(): no params data found [ 279.301151][ T6872] IPVS: ftp: loaded support on port[0] = 21 [ 279.419418][ T6868] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.427744][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.436687][ T6868] device bridge_slave_0 entered promiscuous mode [ 279.449200][ T6868] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.456882][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.464947][ T6868] device bridge_slave_1 entered promiscuous mode [ 279.551436][ T6874] IPVS: ftp: loaded support on port[0] = 21 [ 279.603385][ T6870] chnl_net:caif_netlink_parms(): no params data found [ 279.618914][ T6868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.672488][ T6868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.817936][ T6876] IPVS: ftp: loaded support on port[0] = 21 [ 279.916299][ T6868] team0: Port device team_slave_0 added [ 279.952725][ T6878] IPVS: ftp: loaded support on port[0] = 21 [ 280.010777][ T6868] team0: Port device team_slave_1 added [ 280.044524][ T6872] chnl_net:caif_netlink_parms(): no params data found [ 280.122294][ T6870] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.133584][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.144662][ T6870] device bridge_slave_0 entered promiscuous mode [ 280.182811][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.192604][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.221653][ T6868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.250660][ T6870] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.260828][ T6870] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.270617][ T6870] device bridge_slave_1 entered promiscuous mode [ 280.293947][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.301785][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.328046][ T6868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.353119][ T6870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.373406][ T6870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.400749][ T6874] chnl_net:caif_netlink_parms(): no params data found [ 280.431225][ T6868] device hsr_slave_0 entered promiscuous mode [ 280.438454][ T6868] device hsr_slave_1 entered promiscuous mode [ 280.503129][ T6870] team0: Port device team_slave_0 added [ 280.512536][ T6870] team0: Port device team_slave_1 added [ 280.613300][ T6872] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.620990][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.629778][ T6872] device bridge_slave_0 entered promiscuous mode [ 280.645002][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.653724][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.680782][ T6870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.739537][ T6872] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.749271][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.761157][ T6872] device bridge_slave_1 entered promiscuous mode [ 280.775497][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.782738][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.808795][ T6870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.875033][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.882902][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.891059][ T6874] device bridge_slave_0 entered promiscuous mode [ 280.902327][ T6874] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.910301][ T2503] Bluetooth: hci0: command 0x0409 tx timeout [ 280.916872][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.924559][ T6874] device bridge_slave_1 entered promiscuous mode [ 280.953549][ T6872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.027220][ T6870] device hsr_slave_0 entered promiscuous mode [ 281.036414][ T6870] device hsr_slave_1 entered promiscuous mode [ 281.043232][ T6870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.052412][ T6870] Cannot create hsr debugfs directory [ 281.059289][ T6876] chnl_net:caif_netlink_parms(): no params data found [ 281.072420][ T6872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.139862][ T6874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.149027][ T17] Bluetooth: hci1: command 0x0409 tx timeout [ 281.181420][ T6874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.202088][ T6878] chnl_net:caif_netlink_parms(): no params data found [ 281.232394][ T6872] team0: Port device team_slave_0 added [ 281.243788][ T6872] team0: Port device team_slave_1 added [ 281.267271][ T6868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 281.294114][ T6868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 281.314245][ T17] Bluetooth: hci2: command 0x0409 tx timeout [ 281.317463][ T6874] team0: Port device team_slave_0 added [ 281.350259][ T6868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 281.361816][ T6874] team0: Port device team_slave_1 added [ 281.376708][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.383797][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.413964][ T6872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.438369][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.445336][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.472975][ T6872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.484942][ T6868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 281.546854][ T17] Bluetooth: hci3: command 0x0409 tx timeout [ 281.561333][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.568539][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.594571][ T6874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.616374][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.623447][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.632813][ T6876] device bridge_slave_0 entered promiscuous mode [ 281.667673][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.675435][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.707997][ T6874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.708981][ T17] Bluetooth: hci4: command 0x0409 tx timeout [ 281.731787][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.739794][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.748164][ T6876] device bridge_slave_1 entered promiscuous mode [ 281.773514][ T6872] device hsr_slave_0 entered promiscuous mode [ 281.781635][ T6872] device hsr_slave_1 entered promiscuous mode [ 281.796477][ T6872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.804045][ T6872] Cannot create hsr debugfs directory [ 281.854393][ T6876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.863895][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.871982][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.875756][ T17] Bluetooth: hci5: command 0x0409 tx timeout [ 281.881516][ T6878] device bridge_slave_0 entered promiscuous mode [ 281.916191][ T6876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.929441][ T6874] device hsr_slave_0 entered promiscuous mode [ 281.937600][ T6874] device hsr_slave_1 entered promiscuous mode [ 281.945175][ T6874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.954232][ T6874] Cannot create hsr debugfs directory [ 281.961877][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.969557][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.978346][ T6878] device bridge_slave_1 entered promiscuous mode [ 282.080245][ T6876] team0: Port device team_slave_0 added [ 282.093207][ T6876] team0: Port device team_slave_1 added [ 282.112622][ T6878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.160012][ T6878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.170243][ T6870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 282.219517][ T6870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 282.241215][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.249201][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.276191][ T6876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.291192][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.299528][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.326285][ T6876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.366642][ T6870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 282.389338][ T6870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 282.404649][ T6878] team0: Port device team_slave_0 added [ 282.458504][ T6878] team0: Port device team_slave_1 added [ 282.486502][ T6876] device hsr_slave_0 entered promiscuous mode [ 282.494781][ T6876] device hsr_slave_1 entered promiscuous mode [ 282.503920][ T6876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.512499][ T6876] Cannot create hsr debugfs directory [ 282.538681][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.545728][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.573580][ T6878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.587343][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.594308][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.620240][ T6878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.727563][ T6878] device hsr_slave_0 entered promiscuous mode [ 282.734725][ T6878] device hsr_slave_1 entered promiscuous mode [ 282.742482][ T6878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.751719][ T6878] Cannot create hsr debugfs directory [ 282.760981][ T6868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.827295][ T6874] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 282.842823][ T6874] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 282.911610][ T6874] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 282.934907][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 282.945201][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.959887][ T6870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.974940][ T6874] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 282.986697][ T6872] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 283.003540][ T2723] Bluetooth: hci0: command 0x041b tx timeout [ 283.012111][ T6872] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 283.030967][ T6872] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 283.050019][ T6868] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.079868][ T6872] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 283.164066][ T6870] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.171486][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.183942][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.193001][ T2503] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.200362][ T2503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.212748][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.221293][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.225769][ T5] Bluetooth: hci1: command 0x041b tx timeout [ 283.284887][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 283.293489][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 283.302981][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.311570][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.318706][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.327198][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.335881][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.344203][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.351305][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.359689][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 283.368464][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.376997][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.384050][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.385624][ T2723] Bluetooth: hci2: command 0x041b tx timeout [ 283.391782][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 283.406795][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 283.418520][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 283.448643][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 283.457902][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.468221][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.477761][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.487786][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.555902][ T6878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 283.564375][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.573529][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 283.583214][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.591669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.600625][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.609358][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.617800][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.627135][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.635619][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.644147][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.653067][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.661801][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.670319][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 283.679626][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.695776][ T6878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 283.709678][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.717916][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.728041][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.746601][ T6878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 283.773494][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.785827][ T5] Bluetooth: hci4: command 0x041b tx timeout [ 283.786866][ T6878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 283.846412][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.853893][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.890569][ T6868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.913926][ T6870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.922038][ T6876] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 283.938758][ T6874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.945764][ T5] Bluetooth: hci5: command 0x041b tx timeout [ 283.954430][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.962921][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.986591][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 283.996109][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.007235][ T6876] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 284.026932][ T6876] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 284.051894][ T6874] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.076703][ T6876] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 284.097226][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.104946][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.137546][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.146454][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.154768][ T2723] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.161887][ T2723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.170219][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 284.197096][ T6872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.204640][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.213387][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.222242][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.232677][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.241753][ T3917] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.248901][ T3917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.260696][ T6868] device veth0_vlan entered promiscuous mode [ 284.300271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.309223][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.317459][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.327546][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.336650][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.345145][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.354307][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.362268][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.383764][ T6868] device veth1_vlan entered promiscuous mode [ 284.402116][ T6872] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.419093][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 284.428596][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.440480][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.452415][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.462247][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.501484][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.511501][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 284.520123][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.528636][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 284.537894][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.570477][ T6874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 284.579856][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.591078][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.600182][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.609249][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.620083][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.627198][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.638583][ T6870] device veth0_vlan entered promiscuous mode [ 284.673439][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.681495][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.693206][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 284.701650][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.711497][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.720854][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.728018][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.736397][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.761009][ T6878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.771975][ T6870] device veth1_vlan entered promiscuous mode [ 284.798271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 284.810773][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.819841][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.828355][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.874034][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 284.882116][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.891482][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.901453][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 284.910531][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 284.919409][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.928528][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.937573][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 284.946675][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.955307][ T6868] device veth0_macvtap entered promiscuous mode [ 284.975616][ T6878] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.010271][ T6872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.049172][ T6872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.066560][ T8170] Bluetooth: hci0: command 0x040f tx timeout [ 285.074018][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 285.093137][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 285.102542][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.111128][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.119840][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.128719][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.138727][ T6868] device veth1_macvtap entered promiscuous mode [ 285.155667][ T6874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.188075][ T6876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.221680][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 285.230646][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.243113][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.252555][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.259728][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.271074][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.280115][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.292392][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.299602][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.308006][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.314659][ T2723] Bluetooth: hci1: command 0x040f tx timeout [ 285.316133][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.329354][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.338360][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.373468][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.391793][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.401576][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.410860][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.421447][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.437061][ T6876] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.444480][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.467343][ T5] Bluetooth: hci2: command 0x040f tx timeout [ 285.480863][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.494644][ T6870] device veth0_macvtap entered promiscuous mode [ 285.516378][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 285.525002][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.537907][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.547551][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.556741][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.565763][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.574410][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.583610][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.592820][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.601450][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.610120][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.618918][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.627541][ T3917] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.634663][ T3917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.653857][ T6868] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.666118][ T6868] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.674925][ T6868] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.684167][ T6868] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.705066][ T6870] device veth1_macvtap entered promiscuous mode [ 285.711946][ T8170] Bluetooth: hci3: command 0x040f tx timeout [ 285.725577][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 285.733624][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.742100][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 285.753415][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.762428][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.770867][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.779012][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.788282][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.797206][ T2723] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.804248][ T2723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.813912][ T6874] device veth0_vlan entered promiscuous mode [ 285.831341][ T6878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.843148][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.862911][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.872049][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.880495][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.892277][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.901332][ T3917] Bluetooth: hci4: command 0x040f tx timeout [ 285.906309][ T6872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.919995][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.937142][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.955676][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.964555][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.975789][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.984369][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.993441][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.007757][ T6874] device veth1_vlan entered promiscuous mode [ 286.028757][ T2723] Bluetooth: hci5: command 0x040f tx timeout [ 286.053292][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 286.064938][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.081543][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.105129][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.114272][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 286.123546][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 286.137200][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 286.145279][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.154511][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.198736][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 286.210252][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.222169][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.230853][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.240589][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.249979][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.259450][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.269654][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.279188][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.301662][ T6872] device veth0_vlan entered promiscuous mode [ 286.317079][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.342934][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.352899][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 07:45:13 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xe, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xeb33}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000440)={0x14, 0x88, 0xfa00, {r0, 0x30, 0x0, @in={0x2, 0x4e21, @multicast2}}}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x1000, 0x2c82) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000034000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000340)="baf80c66b888e13a8166efbafc0c66ed36652e0f01c50f2244f30f090fafa2693526660f38823466f30f599d07000fc71b0f01c5d0ff", 0x36}], 0x1, 0x3c, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x0, 0x0, 0x2, 0x0, 0x2, 0xc5b, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000300)}, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 286.393895][ T6872] device veth1_vlan entered promiscuous mode [ 286.420931][ T6870] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.467928][ T6870] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.501016][ T6870] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.525884][ T6870] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.545365][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.553245][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.563767][ T8177] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 286.613194][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.631685][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.656753][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.684152][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.700787][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.729004][ T6874] device veth0_macvtap entered promiscuous mode [ 286.792873][ T6878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.819109][ T6874] device veth1_macvtap entered promiscuous mode [ 286.888686][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 286.900494][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.909232][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.917505][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.926919][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 07:45:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2, @remote}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r3, r3, &(0x7f00000001c0), 0xa198) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4cb, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x0, 0x1004}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000004000000000000010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x2}}}, 0x24}}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r4, 0x9, {0x0, 0xff, 0x4}, 0x2}, 0x18, &(0x7f0000000240)={&(0x7f00000002c0)="7fef0d828d0f23bac1d6959a452e252105f56764e16cb400a5c1a84253bc289f3a5dd96f750d9f04b61ac33ae56b463d5bbb67113eb9be27bbe660baab65a7f3bd7200684b0366cf2f0a93b7bd4d7f", 0x4f}, 0x1, 0x0, 0x0, 0x80}, 0x10040810) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 286.963500][ T6876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.980396][ T6872] device veth0_macvtap entered promiscuous mode [ 287.023163][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 287.040637][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.052803][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 287.064033][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.097583][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.118202][ T6872] device veth1_macvtap entered promiscuous mode [ 287.151648][ T2723] Bluetooth: hci0: command 0x0419 tx timeout [ 287.176551][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.185163][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.223221][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.243498][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.259809][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 287.306141][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.345388][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 07:45:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400add427323b472545b4560a117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71026000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r1 = syz_genetlink_get_family_id$batadv(0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r3 = socket$inet6(0xa, 0x1, 0x84) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYBLOB="10002dbd9462d9dbe4839e9e6000fb503325f5ffffff05002a0001000000080005000000000000db00000000000000ce1b5e741df2f950788933e8a8e826296202522095042fa4e6a0a4468cee3114857c4c2685d16c008895f688c83baa47508db2dd6cfd974534695eaa12e6d38a62b1acee7ece5f208cd40b8d9f1dbcf47d5efaeca668e451cda9ebea09d49e139aa531526518d5f9ff72"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000880) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000426bd7000ffdbdf250200000005002a000000000008002b00f4000000050030000000000008002c000101100008002b00060000005116e170c45344dccc698eb7c9c6a1bfd65b7e284c70c54e33df075d9802c978c35fcdffbcb5f4f44ecc25121e606296cc3d0bc94e25570c6e8ae967ff1d45e79fc5f97cceeb06183cc5b753a83e73bfd7cbccd36b6bae0201010000bc1ca071b1122f64c836ed9c30c93f98b6eb09710ed75e8d89bc1d0ee3142ec7b67dd314e5ef3f2e63c19468286fe7c6c3153861ac7668211d758be41f87d3ce7cddedae934628ed1713f22604e6a0f792404b40cbbf892b72f5538875a7932e00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a300000000008000340000000011400000011001b"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0100"], 0x1}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x28011, r4, 0x1100000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000005) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r7, r7) [ 287.365314][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.387009][ T2723] Bluetooth: hci1: command 0x0419 tx timeout [ 287.389401][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.451640][ T8215] mmap: syz-executor.1 (8215) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 287.477762][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.502890][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.546534][ T2723] Bluetooth: hci2: command 0x0419 tx timeout [ 287.561664][ T6874] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.574743][ T8223] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=8223 comm=syz-executor.0 [ 287.579128][ T6874] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 07:45:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0xf56, 0x0, {0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xb2) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000001280)=0x4) r6 = fanotify_init(0x0, 0x0) fanotify_mark(r6, 0x105, 0x101b, r5, 0x0) r7 = openat2(r5, &(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)={0x400000, 0xd2, 0x2}, 0x18) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f0000001200)={0x50000002}) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r4, r4, &(0x7f00000001c0), 0xa198) ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f0000001100)={0x6, 0x4, 0x8, 0x1000}) [ 287.642802][ T6874] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.704270][ T6874] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 07:45:14 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffffba, &(0x7f0000000340), 0x0, 0x0, 0x6686}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000140)={0x0, 0x0, 0x0}) open(0x0, 0x0, 0x0) r2 = socket(0x400000000000010, 0x2, 0x0) write(r2, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x88000) syz_open_dev$usbfs(0x0, 0x0, 0x519221) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0x44, 0x0, 0x1, 0x0, 0x0, 0x4044051}, 0x4000801) [ 287.781516][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 287.814347][ T17] Bluetooth: hci3: command 0x0419 tx timeout [ 287.826533][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.890593][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 287.920621][ C0] hrtimer: interrupt took 48646 ns [ 287.941609][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.953446][ T17] Bluetooth: hci4: command 0x0419 tx timeout [ 287.968649][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 287.982539][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.996552][ T6872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.115941][ T28] audit: type=1804 audit(1597304714.938:9): pid=8231 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir629960723/syzkaller.6x6aTn/1/file0" dev="sda1" ino=15738 res=1 errno=0 [ 288.140531][ T17] Bluetooth: hci5: command 0x0419 tx timeout [ 288.142850][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.158049][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.171135][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 288.182327][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.193397][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 288.204198][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.214156][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 288.224669][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.237025][ T6872] batman_adv: batadv0: Interface activated: batadv_slave_1 07:45:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x280000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f00000001c0)) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) dup3(r0, r2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 288.296495][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 288.331177][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 07:45:15 executing program 0: r0 = socket$kcm(0xa, 0x400000005, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000000), 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001100)) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}, 0x88c1) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x2}}}, 0x24}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in=@multicast2, @in6=@mcast2, 0x4e23, 0x0, 0x4e21, 0x3, 0xa, 0xc0, 0x20, 0x33, r5, r7}, {0x10001, 0x67, 0x1, 0x8b, 0x800, 0x80000000, 0x800, 0xffffffffffffff0d}, {0x6, 0x5, 0x2d, 0x5}, 0x5, 0x6e6bbe, 0x1, 0x0, 0x2, 0x2}, {{@in6=@loopback, 0x4d6, 0x33}, 0x2, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x3500, 0x1, 0x2, 0x9, 0x4, 0x5, 0xfffff800}}, 0xe8) [ 288.354249][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.369807][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.403351][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.422375][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.460223][ T6872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.487740][ T6872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.516325][ T6872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.525199][ T6872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.583944][ T8243] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 288.609454][ T8245] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 288.663040][ T8250] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 289.001710][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.012933][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 07:45:15 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000000c0)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047457, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x72, &(0x7f0000000000)={r5, 0x4, "99569e6b"}, &(0x7f0000000140)=0xc) fanotify_mark(0xffffffffffffffff, 0x105, 0x101b, 0xffffffffffffffff, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000001180)={0x6, &(0x7f0000001100)=[{}, {}, {}, {}, {}, {}]}) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r5, 0x3f}, &(0x7f0000000100)=0x8) [ 289.045543][ T6876] device veth0_vlan entered promiscuous mode [ 289.117406][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.135857][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.153140][ T6876] device veth1_vlan entered promiscuous mode [ 289.171660][ T8264] IPVS: ftp: loaded support on port[0] = 21 [ 289.206780][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 289.215127][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.277328][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.307657][ T6878] device veth0_vlan entered promiscuous mode 07:45:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000001580)=ANY=[@ANYRESOCT], &(0x7f0000003ff6)='GPL\x00', 0x2000005, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x20000000}, 0x10}, 0x78) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000200e5614f0008000000000008"], 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x20000000000000, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x1cd, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x76, 0x4) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 07:45:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x204000, 0x0) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x4c}}, 0x0) [ 289.363503][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.379676][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.456110][ T6878] device veth1_vlan entered promiscuous mode [ 289.505812][ T8289] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 289.529684][ T8289] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 289.643989][ T8304] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 289.676212][ T8304] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 289.790229][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.809449][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.838648][ T6876] device veth0_macvtap entered promiscuous mode [ 289.874549][ T6876] device veth1_macvtap entered promiscuous mode [ 289.899380][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 289.930146][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 289.986042][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.994651][ T8315] IPVS: ftp: loaded support on port[0] = 21 [ 289.994812][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.041154][ T6878] device veth0_macvtap entered promiscuous mode [ 290.141114][ T6878] device veth1_macvtap entered promiscuous mode [ 290.172304][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.205290][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.215140][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.255372][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.275241][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.305867][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.336208][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.355708][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.367971][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.388960][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 290.398477][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 290.410051][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.421670][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.467252][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 290.485732][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.505690][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 290.535562][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.562108][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 290.593342][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.616268][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 290.631068][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.649318][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.668359][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.684777][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.694374][ T7] tipc: TX() has been purged, node left! [ 290.702859][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.720346][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.731077][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.747846][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.765936][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.788741][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.809184][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.832273][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.855240][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.876925][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.907577][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.933963][ T6876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.955314][ T6876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.964030][ T6876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.005253][ T6876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.095464][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 291.104265][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 291.174557][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 291.200247][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.226082][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 291.245230][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.265226][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 291.285486][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.308942][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 291.320441][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.330863][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 291.341881][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.353936][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.370240][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.386588][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.417869][ T6878] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.445226][ T6878] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.453968][ T6878] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.475531][ T6878] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.707776][ T8355] input: syz0 as /devices/virtual/input/input5 [ 291.731874][ T8355] input: failed to attach handler leds to device input5, error: -6 [ 291.761738][ T8355] input: syz0 as /devices/virtual/input/input6 07:45:18 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r0, 0xb03, 0x0, 0x400000, {0x12}}, 0x14}}, 0x0) [ 291.778145][ T8355] input: failed to attach handler leds to device input6, error: -6 07:45:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f0000000280)='\'sel\x88\x8d\x92i_C^\xe4\xc5\x05\b\xac\x8b\xca\xdaJ\xe8\x87\xcfct!e\f_', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x5, 0x8}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x2}}}, 0x24}}, 0x0) sysfs$2(0x2, 0x6, &(0x7f00000002c0)=""/109) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x2) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/188, 0xbc, 0x0, 0x0) 07:45:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="4000000010000507000054000000000000000000bcf861efcaa717fa7d16b2e77f7a1e8feea2eaf44274a9765d02e19019067fa8476e5e44bf1b86838de89f8b9fe4aef3bc", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006c6f7770616e0000040002800a000100aaaaaaaaaabb0000"], 0x40}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) fremovexattr(r3, &(0x7f0000000080)=@known='system.posix_acl_access\x00') sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:45:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 292.126479][ T8383] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 07:45:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) r3 = pidfd_getfd(r2, r0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x8, 0x800, 0x3, {0x3, @win={{0xe4, 0x1ff, 0x5eac, 0x2}, 0x5, 0xa4d, &(0x7f0000000000)={{0x1, 0x5, 0x9, 0x70df}}, 0x12, &(0x7f0000000040)="a5e81a5ed29e6f553257405bd3dd887706c4994526b5d702387c286fd7cc7ff809dc65535a757baf98bdd4313248b24deac3130e1b5285d3d8d0564b44c9df5b722bf35ed717a6", 0x5}}, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') r6 = socket$kcm(0x10, 0x2, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="96763431", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r7, @ANYBLOB="06000600224e0000"], 0x24}}, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r9 = fanotify_init(0x0, 0x0) fanotify_mark(r9, 0x105, 0x101b, r8, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) [ 292.848370][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 07:45:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:21 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x4100, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0xfffffffffffffffa) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/ip6_tables_targets\x00') ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={r3, 0x1, 0x0, 0x4000}) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000040)) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40, 0x0) syz_read_part_table(0x5, 0x6, &(0x7f0000000780)=[{&(0x7f0000000240)="d52614eb04fa2becf5892e5abb7112265d7ca34fcd605b48082d7838e9a0a6b6b6df8fc205711fae004919219b26487fc64ececdbb004ed3f0a3a3409dbb37ae7ab173244b752203dda01aa3a74a186dbd0d92891ad478ef3c09d604454a517a3a343b7010c39ac47c509cb23ade44bdb9148833c1ffd5ba4be7b7698fd026f45e1fe472fd2ff4d1c0a0e0436c20dcf3113ec324d9d64b05aa85de7a416b959629fc59d321b3c5cb14a351b63837e7774801342b6b961e04e1ae81f7963a47f74d8fff06d642d500841c9ea927a20ff97a6c608f5f32d979b175af0862f2f1b018c61089a19165b499664acf21ddeadb1b588f73", 0xf4, 0x10000}, {&(0x7f00000001c0)="4334f37bf4d8f4fd144a723cb713b9e8dc85328c3c5272a36130", 0x1a, 0xffff}, {&(0x7f0000000340)="cab64809a9e33d3a7b7ece1bcefc0b2910722bf9756fca9f988125bf09ecc29cd392653e1687612a6ed818dfa3840c4e15bc2c52753c1880ea592c9a461996a74e12b52ae2bb5f090eb5a344945730d3e613415d720d9dc571ba06fdea8ea8620f7dc1c40edcf569750314fde4bdd2", 0x6f, 0xffff}, {&(0x7f00000003c0)="d3a8495e72c7a6ca49110a2c172d351d93dc1ec0981eff4248585855c9438f33986bef8fa7060f1548553835a46906d23e1a939727df23231358e27c11a8f0de3ba69055ae7752f82752cb025df9f71b3803c4e5d4b82fc79cc6106b0736940b933d5e25aad63e4523cf5b9c479ad19c52634bcbfc8ba5e8ac4a2d4588acb127638be5039d1e1fa7a76cc9", 0x8b, 0x1fc}, {&(0x7f00000005c0)="541a7aa36a4388b9c250587c57f2e10e493ecad806ef478603b249d964d9e84376c18ba77443e2370e36f3fd6b93e90e66f878e2742aa7314da1280e0919b4e70b593ff423f262838a3e04673787ed8de43b0de6b376f546ce92bc9e0e8bdba124320e6eb1de4b7cc45cb0e60d1843b2b91c6c4d5fed5ebda29867612bee4cf1a98b3564d8db9a2400901d71266ae0640aea993a7684c9681963070b84351e296eebc4c929d089fa35792451b9f68322674dd48142f7cae0ab0579b17f1be9fc758b6a6337eb77a5d8a916a1a1177d05516a4e59c4", 0xd5, 0x5}, {&(0x7f00000006c0)="afe4f3965c914d864758fbc732669eb34bd35be2054383f277ab5004875dac364302350da5ad17991307fc28ef7c03ae011f41b6c746ca926a7acc2a4a2705f1e3a1c102eb3419e5319663e673dd1b2c3bc9320287aab4069c4d37e04c58a82fb47e4dd1eaeb2a051ec79c4b937d949f4e82c508b783c90aab6cfb0b66c87880e505a2bb89f0651d58de6f4bb699325520344ae58de6cee101171d620326861fbe25f8e736c56a8109", 0xa9, 0x4}]) sendfile(r5, 0xffffffffffffffff, 0x0, 0x11f08) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)=0x3ff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000200)) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0xc880) 07:45:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:21 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="9b0dd9d727", 0x5, 0x10000}], 0x4400, &(0x7f0000000500)={[{@user_subvol_rm='user_subvol_rm_allowed'}, {@datasum='datasum'}, {@ssd_spread='ssd_spread'}, {@fragment_all='fragment=all'}], [{@smackfsroot={'smackfsroot', 0x3d, '.-@\\'}}, {@obj_role={'obj_role', 0x3d, '#-'}}, {@uid_lt={'uid<', r2}}, {@uid_eq={'uid', 0x3d, r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@audit='audit'}, {@dont_appraise='dont_appraise'}]}) sendfile(r0, r1, 0x0, 0x800000080004101) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 07:45:21 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001280)=""/4119, &(0x7f0000001140)=0x1017) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) mount$overlay(0x400002, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="2486f850e9e68ac7e47db32c5bc4d8afc69c6159fce0666a0985ca7bd461e346dfa583612e064946b8ced66484dfe25a029e33ab98621ebc8e8925fcd61549ecb3efefdf519b801af78fa926c389de74034f", @ANYRES64, @ANYRES64, @ANYBLOB="07a1a39ee72b897566268f6e7854debcb09ceedafb92e309e647705ac15008ab93fca91e56fedcdc743041e88ecdc7d700000000eb6c77d8da50e63098c3dd150ba1ae94b5cd98bacd40b7be1e368da047735f058065003eb87c763b3c495071fa5a", @ANYBLOB="d1dfaeef9b487179e5d5a9", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3]) 07:45:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 294.947049][ T28] audit: type=1800 audit(1597304721.779:10): pid=8448 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15781 res=0 errno=0 07:45:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 295.263851][ T8463] overlayfs: unrecognized mount option "$†øPéæŠÇä}³" or missing value 07:45:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:22 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="9b0dd9d727", 0x5, 0x10000}], 0x4400, &(0x7f0000000500)={[{@user_subvol_rm='user_subvol_rm_allowed'}, {@datasum='datasum'}, {@ssd_spread='ssd_spread'}, {@fragment_all='fragment=all'}], [{@smackfsroot={'smackfsroot', 0x3d, '.-@\\'}}, {@obj_role={'obj_role', 0x3d, '#-'}}, {@uid_lt={'uid<', r2}}, {@uid_eq={'uid', 0x3d, r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@audit='audit'}, {@dont_appraise='dont_appraise'}]}) sendfile(r0, r1, 0x0, 0x800000080004101) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 07:45:23 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x4100, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0xfffffffffffffffa) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/ip6_tables_targets\x00') ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={r3, 0x1, 0x0, 0x4000}) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000040)) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40, 0x0) syz_read_part_table(0x5, 0x6, &(0x7f0000000780)=[{&(0x7f0000000240)="d52614eb04fa2becf5892e5abb7112265d7ca34fcd605b48082d7838e9a0a6b6b6df8fc205711fae004919219b26487fc64ececdbb004ed3f0a3a3409dbb37ae7ab173244b752203dda01aa3a74a186dbd0d92891ad478ef3c09d604454a517a3a343b7010c39ac47c509cb23ade44bdb9148833c1ffd5ba4be7b7698fd026f45e1fe472fd2ff4d1c0a0e0436c20dcf3113ec324d9d64b05aa85de7a416b959629fc59d321b3c5cb14a351b63837e7774801342b6b961e04e1ae81f7963a47f74d8fff06d642d500841c9ea927a20ff97a6c608f5f32d979b175af0862f2f1b018c61089a19165b499664acf21ddeadb1b588f73", 0xf4, 0x10000}, {&(0x7f00000001c0)="4334f37bf4d8f4fd144a723cb713b9e8dc85328c3c5272a36130", 0x1a, 0xffff}, {&(0x7f0000000340)="cab64809a9e33d3a7b7ece1bcefc0b2910722bf9756fca9f988125bf09ecc29cd392653e1687612a6ed818dfa3840c4e15bc2c52753c1880ea592c9a461996a74e12b52ae2bb5f090eb5a344945730d3e613415d720d9dc571ba06fdea8ea8620f7dc1c40edcf569750314fde4bdd2", 0x6f, 0xffff}, {&(0x7f00000003c0)="d3a8495e72c7a6ca49110a2c172d351d93dc1ec0981eff4248585855c9438f33986bef8fa7060f1548553835a46906d23e1a939727df23231358e27c11a8f0de3ba69055ae7752f82752cb025df9f71b3803c4e5d4b82fc79cc6106b0736940b933d5e25aad63e4523cf5b9c479ad19c52634bcbfc8ba5e8ac4a2d4588acb127638be5039d1e1fa7a76cc9", 0x8b, 0x1fc}, {&(0x7f00000005c0)="541a7aa36a4388b9c250587c57f2e10e493ecad806ef478603b249d964d9e84376c18ba77443e2370e36f3fd6b93e90e66f878e2742aa7314da1280e0919b4e70b593ff423f262838a3e04673787ed8de43b0de6b376f546ce92bc9e0e8bdba124320e6eb1de4b7cc45cb0e60d1843b2b91c6c4d5fed5ebda29867612bee4cf1a98b3564d8db9a2400901d71266ae0640aea993a7684c9681963070b84351e296eebc4c929d089fa35792451b9f68322674dd48142f7cae0ab0579b17f1be9fc758b6a6337eb77a5d8a916a1a1177d05516a4e59c4", 0xd5, 0x5}, {&(0x7f00000006c0)="afe4f3965c914d864758fbc732669eb34bd35be2054383f277ab5004875dac364302350da5ad17991307fc28ef7c03ae011f41b6c746ca926a7acc2a4a2705f1e3a1c102eb3419e5319663e673dd1b2c3bc9320287aab4069c4d37e04c58a82fb47e4dd1eaeb2a051ec79c4b937d949f4e82c508b783c90aab6cfb0b66c87880e505a2bb89f0651d58de6f4bb699325520344ae58de6cee101171d620326861fbe25f8e736c56a8109", 0xa9, 0x4}]) sendfile(r5, 0xffffffffffffffff, 0x0, 0x11f08) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)=0x3ff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000200)) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0xc880) 07:45:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:23 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000340)={0x200, 0x5, &(0x7f00000000c0)=[0x3, 0x9, 0x7fffffff, 0x7, 0x0], &(0x7f00000001c0)=[0x80000000, 0x8000, 0x3, 0x7f, 0x1b, 0x4, 0xffffffff, 0x4, 0x0], &(0x7f0000000200)=[0x6, 0x0, 0x8], &(0x7f0000000300)=[0x3, 0x80000000, 0x7, 0xffff7fff], 0x0, 0x3}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002c40)=ANY=[@ANYBLOB='D\x00@\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0000000000000000040000000a000100726f757465000000140002000800020000000000080001000f000000"], 0x44}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 07:45:23 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="9b0dd9d727", 0x5, 0x10000}], 0x4400, &(0x7f0000000500)={[{@user_subvol_rm='user_subvol_rm_allowed'}, {@datasum='datasum'}, {@ssd_spread='ssd_spread'}, {@fragment_all='fragment=all'}], [{@smackfsroot={'smackfsroot', 0x3d, '.-@\\'}}, {@obj_role={'obj_role', 0x3d, '#-'}}, {@uid_lt={'uid<', r2}}, {@uid_eq={'uid', 0x3d, r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@audit='audit'}, {@dont_appraise='dont_appraise'}]}) sendfile(r0, r1, 0x0, 0x800000080004101) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 07:45:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0x5, 0x5, 0x8}, {{}, 0x1f, 0x963c, 0x80}, {{r3, r4/1000+10000}, 0x17, 0x1, 0xfffffffd}, {{0x0, 0xea60}, 0x14, 0x401, 0x2}], 0x60) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}}, 0x9c) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r5, r5, &(0x7f00000001c0), 0xa198) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000240)={0x1, 0x2, 0x2, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) [ 296.705913][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 07:45:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 296.735753][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 296.884094][ T28] audit: type=1800 audit(1597304723.709:11): pid=8537 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15794 res=0 errno=0 07:45:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:24 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="9b0dd9d727", 0x5, 0x10000}], 0x4400, &(0x7f0000000500)={[{@user_subvol_rm='user_subvol_rm_allowed'}, {@datasum='datasum'}, {@ssd_spread='ssd_spread'}, {@fragment_all='fragment=all'}], [{@smackfsroot={'smackfsroot', 0x3d, '.-@\\'}}, {@obj_role={'obj_role', 0x3d, '#-'}}, {@uid_lt={'uid<', r2}}, {@uid_eq={'uid', 0x3d, r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@audit='audit'}, {@dont_appraise='dont_appraise'}]}) sendfile(r0, r1, 0x0, 0x800000080004101) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 07:45:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x141042, 0x188) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000480), 0xa198) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = fsmount(r1, 0x1, 0xc) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=r3) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x7, 0x3, 0x4, 0x100, 0x2, 0x6, 0x7fff, 0x2e6, 0x38, 0x28, 0x2, 0x13, 0x20, 0x1, 0x88b2, 0x3, 0x9d}, [{0x60000000, 0x10000, 0x3f, 0x8, 0x5, 0x6, 0x1000, 0xea9e}], "f5b8163ef49fd1e0305ed5774f21ffc4cac9acf7e1c42b83255f307e6d3f84faf9e9ddd53b89c16a4aef6201abb85e73ef5cd3dfe852f5d899756a7bf6b93768e2cbb0a450c743c242a3077a6c04ce133debce03522221b273d1f91e23fa25cd618a0f628f434c15025cce6238064c1a989b3b247899753bda23dc181037603390065e79beab123e8d37e7863038defe4dad", [[], [], [], [], [], [], [], [], []]}, 0x9ea) 07:45:24 executing program 0: unshare(0x400) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) bind$isdn(r1, &(0x7f0000000000)={0x22, 0x74, 0x40, 0xff, 0x1}, 0x6) r2 = eventfd2(0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) io_setup(0x202, &(0x7f00000004c0)=0x0) io_submit(r4, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 07:45:24 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:24 executing program 1: creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="9ec3"]) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001700)=[{&(0x7f0000000000), 0x1}, {&(0x7f0000000100)=0x2, 0x2}, {&(0x7f0000000180)=0x2, 0x1}, {&(0x7f00000001c0)=0x2}, {&(0x7f0000000200)}, {&(0x7f0000000240)=0x2}, {&(0x7f0000000280)=0x1, 0x2}, {&(0x7f0000000300)=0x1}, {&(0x7f0000000340)=0x1}, {&(0x7f0000000380)=0x2, 0x1}, {&(0x7f00000003c0), 0x1}, {&(0x7f0000000400)=0x1, 0x2}, {&(0x7f0000000480)=0x1, 0x1}, {&(0x7f00000004c0)=0x2, 0x2}, {&(0x7f0000000500)=0x2, 0x2}, {&(0x7f0000000540)=0x1, 0x1}, {&(0x7f0000000580)=0x1}, {&(0x7f00000005c0)=0x1}, {&(0x7f0000000600)=0x2}, {&(0x7f0000000640)=0x1, 0x1}, {&(0x7f0000000680), 0x2}, {&(0x7f00000006c0)=0x1, 0x1}, {&(0x7f0000000700)}, {&(0x7f0000000740)=0x1, 0x2}, {&(0x7f0000000780)=0x2, 0x1f}, {&(0x7f00000007c0)=0x2}, {&(0x7f0000000800)=0x1, 0x1}, {&(0x7f0000000840)}, {&(0x7f0000000880), 0x2}, {&(0x7f00000008c0)=0x2, 0x2}, {&(0x7f0000000900)=0x1, 0x1}, {&(0x7f0000000940), 0x1}, {&(0x7f0000000980)=0x1, 0x1}, {&(0x7f00000009c0)=0x1, 0x1}, {&(0x7f0000000a00)=0x2}, {&(0x7f0000000a40)=0x1}, {&(0x7f0000000a80)=0x1, 0x1}, {&(0x7f0000000ac0)=0x2, 0x2}, {&(0x7f0000000b00)=0x2, 0x1}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=0x1, 0x1}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)=0x1}, {&(0x7f0000000c40)=0x1, 0x1}, {&(0x7f0000000c80), 0x2}, {&(0x7f0000000cc0)=0x8}, {&(0x7f0000000d00)=0x2, 0x2}, {&(0x7f0000000d40)=0x1}, {&(0x7f0000000d80)=0x1}, {&(0x7f0000000dc0)=0x1, 0x2}, {&(0x7f0000000e00), 0x1}, {&(0x7f0000000e40), 0x2}, {&(0x7f0000000e80), 0x1}, {&(0x7f0000000ec0)=0x2, 0x1}, {&(0x7f0000000f00)=0x2, 0x1}, {&(0x7f0000000f40)=0x1, 0x1}, {&(0x7f0000000f80), 0x2}, {&(0x7f0000000fc0)=0x2, 0x1}, {&(0x7f0000001040)}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=0x2, 0x1}, {&(0x7f0000001100)=0x2}, {&(0x7f0000001140), 0x1}, {&(0x7f0000001180)=0x2}, {&(0x7f00000011c0)=0x2, 0x1}, {&(0x7f0000001200)=0x1, 0x1}, {&(0x7f0000001240), 0x2}, {&(0x7f0000001280)=0x2}, {&(0x7f00000012c0)=0x2, 0x1}, {&(0x7f0000001300)=0x2, 0x2}, {&(0x7f0000001340)=0x2, 0x2}, {&(0x7f0000001380)=0x2}, {&(0x7f00000013c0)}, {&(0x7f0000001400)=0x2, 0x2}, {&(0x7f0000001440)=0x1, 0x2}, {&(0x7f0000001480), 0x2}, {&(0x7f00000014c0)=0x1}, {&(0x7f0000001500)=0x1, 0x1}, {&(0x7f0000001540)=0x2, 0x2}, {&(0x7f0000001580)=0x2, 0x1}, {&(0x7f00000015c0)=0x2, 0x2}, {&(0x7f0000001600)=0x2, 0x1}, {&(0x7f0000001640)}, {&(0x7f0000001680), 0x2}, {&(0x7f00000016c0)=0x2, 0x1}], 0xd, 0x55, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 07:45:24 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="9b0dd9d727", 0x5, 0x10000}], 0x4400, &(0x7f0000000500)={[{@user_subvol_rm='user_subvol_rm_allowed'}, {@datasum='datasum'}, {@ssd_spread='ssd_spread'}, {@fragment_all='fragment=all'}], [{@smackfsroot={'smackfsroot', 0x3d, '.-@\\'}}, {@obj_role={'obj_role', 0x3d, '#-'}}, {@uid_lt={'uid<', r2}}, {@uid_eq={'uid', 0x3d, r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@audit='audit'}, {@dont_appraise='dont_appraise'}]}) sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:25 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in6={0xa, 0x4e24, 0xfff, @local, 0x8001}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, [], 0x1}, 0x400}, @in6={0xa, 0x4e22, 0x0, @loopback, 0x8}, @in={0x2, 0x4e23, @multicast2}], 0x90) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000003, 0x2010, r4, 0x58692000) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000000)='./bus\x00', 0x5c1002, 0x187) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x0, 0x30}, 0xc) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x2]}, 0x8, 0x800) r7 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r7, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0xa3) sendfile(r7, r7, &(0x7f00000001c0), 0xa198) ioctl$EVIOCGMTSLOTS(r7, 0x8040450a, &(0x7f0000000100)=""/57) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r6, 0x8000000) ftruncate(r5, 0x200004) sendfile(r2, r5, 0x0, 0x80001d00c0d0) 07:45:25 executing program 0: unshare(0x400) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) bind$isdn(r1, &(0x7f0000000000)={0x22, 0x74, 0x40, 0xff, 0x1}, 0x6) r2 = eventfd2(0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) io_setup(0x202, &(0x7f00000004c0)=0x0) io_submit(r4, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) [ 298.247457][ T28] audit: type=1804 audit(1597304725.079:12): pid=8606 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir629960723/syzkaller.6x6aTn/8/bus" dev="sda1" ino=15806 res=1 errno=0 07:45:25 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 298.292576][ T28] audit: type=1804 audit(1597304725.119:13): pid=8606 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir629960723/syzkaller.6x6aTn/8/bus" dev="sda1" ino=15806 res=1 errno=0 [ 298.304984][ T28] audit: type=1804 audit(1597304725.129:14): pid=8616 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir629960723/syzkaller.6x6aTn/8/bus" dev="sda1" ino=15806 res=1 errno=0 07:45:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102010ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2c, 0x10, &(0x7f0000000040)}, 0x24) exit(0x0) 07:45:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400add427323b472545b4560a117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71026000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00B\x00', @ANYRES16=r4, @ANYBLOB="10002dbd9462d9dbe4839e9e6000fb503325f5ffffff05002a0001000000080005000000000000db00000000000000ce1b5e741df2f950788933e8a8e826296202522095042fa4e6a0a4468cee3114857c4c2685d16c008895f688c83baa47508db2dd6cfd974534695eaa12e6d38a62b1acee7ece5f208cd40b8d9f1dbcf47d5efaeca668e451cda9ebea09d49e139aa531526518d5f9ff72"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000880) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000426bd7000ffdbdf250200000005002a000000000008002b00f4000000050030000000000008002c000101100008002b00060000005116e170c45344dccc698eb7c9c6a1bfd65b7e284c70c54e33df075d9802c978c35fcdffbcb5f4f44ecc25121e606296cc3d0bc94e25570c6e8ae967ff1d45e79fc5f97cceeb06183cc5b753a83e73bfd7cbccd36b6bae0201010000bc1ca071b1122f64c836ed9c30c93f98b6eb09710ed75e8d89bc1d0ee3142ec7b67dd314e5ef3f2e63c19468286fe7c6c3153861ac7668211d758be41f87d3ce7cddedae934628ed1713f22604e6a0f792404b40cbbf892b72f5538875a7932e00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x68, 0x4, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd37a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x32c}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8900}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400add427323b472545b4560a117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71026000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00B\x00', @ANYRES16=r6, @ANYBLOB="10002dbd9462d9dbe4839e9e6000fb503325f5ffffff05002a0001000000080005000000000000db00000000000000ce1b5e741df2f950788933e8a8e826296202522095042fa4e6a0a4468cee3114857c4c2685d16c008895f688c83baa47508db2dd6cfd974534695eaa12e6d38a62b1acee7ece5f208cd40b8d9f1dbcf47d5efaeca668e451cda9ebea09d49e139aa531526518d5f9ff72"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000880) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000426bd7000ffdbdf250200000005002a000000000008002b00f4000000050030000000000008002c000101100008002b00060000005116e170c45344dccc698eb7c9c6a1bfd65b7e284c70c54e33df075d9802c978c35fcdffbcb5f4f44ecc25121e606296cc3d0bc94e25570c6e8ae967ff1d45e79fc5f97cceeb06183cc5b753a83e73bfd7cbccd36b6bae0201010000bc1ca071b1122f64c836ed9c30c93f98b6eb09710ed75e8d89bc1d0ee3142ec7b67dd314e5ef3f2e63c19468286fe7c6c3153861ac7668211d758be41f87d3ce7cddedae934628ed1713f22604e6a0f792404b40cbbf892b72f5538875a7932e00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x88, r7, 0x8, 0x70bd27, 0x24dfdbfb, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast2, 0xfffffff8}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc090}, 0x40) r8 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) get_robust_list(r8, &(0x7f0000000600)=&(0x7f00000005c0)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f0000000340)={&(0x7f0000000300)}}, &(0x7f0000000640)=0x18) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x0, 0x0, {0x7, r5}}, 0x18}}, 0x0) 07:45:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102010ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2c, 0x10, &(0x7f0000000040)}, 0x24) exit(0x0) 07:45:25 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 298.811667][ T8650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=8650 comm=syz-executor.1 [ 298.812616][ T8650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2052 sclass=netlink_tcpdiag_socket pid=8650 comm=syz-executor.1 [ 298.819832][ T8650] PF_BRIDGE: br_mdb_parse() with invalid ifindex 07:45:25 executing program 1: unshare(0x22060400) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x4, 0x8, 0x5, 0x0, 0x0, {0x2}}, 0x14}}, 0x240008c0) recvmsg(r0, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x105, 0x101b, r1, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x7f, 0x5, 0x8000, 0x7f, 0x5, 0x4}) 07:45:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x161040, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x72, &(0x7f0000000900)=ANY=[@ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e24, 0xfffffffc, @dev={0xfe, 0x80, [], 0x28}, 0x5}}}, 0x84) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000240)) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001059ef00f94200"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x9, 0x3}, {0xb, 0xd}, {0x7, 0x5}}, ["", "", "", "", ""]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20010400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000250001002abd7000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="0a007208f2ff0d001000f3ff08000e00080000000700050003030000"], 0x34}, 0x1, 0x0, 0x0, 0x20048049}, 0x8800) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="2e00000014008502000000000000002e020a00e22c000000160002800200000600"/46, 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 298.959893][ T8650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=8650 comm=syz-executor.1 [ 298.960105][ T8658] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2052 sclass=netlink_tcpdiag_socket pid=8658 comm=syz-executor.1 [ 299.284332][ T8676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22800 sclass=netlink_route_socket pid=8676 comm=syz-executor.0 [ 299.301149][ T8676] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 07:45:26 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="9b0dd9d727", 0x5, 0x10000}], 0x4400, &(0x7f0000000500)={[{@user_subvol_rm='user_subvol_rm_allowed'}, {@datasum='datasum'}, {@ssd_spread='ssd_spread'}, {@fragment_all='fragment=all'}], [{@smackfsroot={'smackfsroot', 0x3d, '.-@\\'}}, {@obj_role={'obj_role', 0x3d, '#-'}}, {@uid_lt={'uid<', r2}}, {@uid_eq={'uid', 0x3d, r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@audit='audit'}, {@dont_appraise='dont_appraise'}]}) sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:26 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:26 executing program 1: unshare(0x40000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e22, @local}, 0xa2e9398d3132e4c1, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='veth1_to_bridge\x00', 0x0, 0x2, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047455, 0x0) 07:45:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 299.518316][ T8683] IPVS: ftp: loaded support on port[0] = 21 07:45:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:26 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 299.839288][ T8683] IPVS: ftp: loaded support on port[0] = 21 07:45:26 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:26 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) sendfile(r0, r1, 0x0, 0x800000080004101) [ 300.022660][ T8733] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 07:45:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0x18}}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x23]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="20002abd7000fddb"], 0x50}}, 0x0) ioctl$KVM_NMI(r4, 0xae9a) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = fanotify_init(0x0, 0x0) fanotify_mark(r6, 0x105, 0x101b, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 07:45:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:27 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x800) sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:30 executing program 1: perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010001fff0000248f1c872d2bf100001f", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a002615a3053e8c1d6435ce74ce4ff987f6e2267fd67e61b0393103388254713fd7b3357a25d1b44d2224e7c7b8ae4664339f8a1a402a8714bf1bb8d24c3e6b95008475d08ad085f194627d05d16ac2a111a9215743c019e40487d124fc880e668d7f971f9fee155489d8c9a221eea87720912092646c469900e1968f6f6245"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f00000001c0)={0x2}) r0 = socket(0x10, 0x80002, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x82242, 0x20) write$fb(r1, &(0x7f0000000040)="52f801aadc7e9cbbfceb5a36f9cd75b3c76fdb3549519506f635c9ffe6ad5fd0e368688620d354b4935f002e596cf29c1e5dc4801eb74110215d1e627b24f23ee7801a1223", 0x45) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) 07:45:30 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:30 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a0, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x208, 0x3c8, 0x3c8, 0x208, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x90, 0xf8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'vxcan1\x00', {0x0, 0x0, 0x7ff, 0x0, 0x0, 0x4, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'wg2\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x12) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={0x40, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "68d8c543eb6859ef9be3cc3b2b49cb449241bba20390a9ebc7476bee33e5380f0e62fd543209"}]}, 0x40}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000c80)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b000000050000009c05400000000000cc000000cc000000cc000000d4030000081500000805000008050000080500000805000005"], 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) 07:45:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:30 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) [ 303.307387][ T353] tipc: TX() has been purged, node left! [ 303.513331][ T8820] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.513431][ T8820] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.513456][ T8820] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.513479][ T8820] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.513542][ T8820] device vxlan0 entered promiscuous mode [ 303.598057][ T8820] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.598087][ T8820] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.598112][ T8820] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.598137][ T8820] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 07:45:30 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 304.253443][ T8844] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.262905][ T8844] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.271783][ T8844] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.280571][ T8844] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 07:45:31 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:31 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) [ 304.330115][ T8844] device vxlan0 entered promiscuous mode [ 304.340749][ T8844] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.349949][ T8844] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.358891][ T8844] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.367825][ T8844] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 07:45:31 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:31 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004101) 07:45:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:32 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x101}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x802, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r8 = fanotify_init(0x0, 0x0) fanotify_mark(r8, 0x105, 0x101b, r7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0)) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f00000001c0)={0x0, r9}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}]}, 0x40}}, 0x0) 07:45:33 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a0, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x208, 0x3c8, 0x3c8, 0x208, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x90, 0xf8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'vxcan1\x00', {0x0, 0x0, 0x7ff, 0x0, 0x0, 0x4, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'wg2\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x12) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={0x40, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "68d8c543eb6859ef9be3cc3b2b49cb449241bba20390a9ebc7476bee33e5380f0e62fd543209"}]}, 0x40}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000c80)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b000000050000009c05400000000000cc000000cc000000cc000000d4030000081500000805000008050000080500000805000005"], 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) 07:45:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffff111, 0x400000) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400add427323b472545b4560a117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71026000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00B\x00', @ANYRES16=r3, @ANYBLOB="10002dbd9462d9dbe4839e9e6000fb503325f5ffffff05002a0001000000080005000000000000db00000000000000ce1b5e741df2f950788933e8a8e826296202522095042fa4e6a0a4468cee3114857c4c2685d16c008895f688c83baa47508db2dd6cfd974534695eaa12e6d38a62b1acee7ece5f208cd40b8d9f1dbcf47d5efaeca668e451cda9ebea09d49e139aa531526518d5f9ff72"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000880) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000426bd7000ffdbdf250200000005002a000000000008002b00f4000000050030000000000008002c000101100008002b00060000005116e170c45344dccc698eb7c9c6a1bfd65b7e284c70c54e33df075d9802c978c35fcdffbcb5f4f44ecc25121e606296cc3d0bc94e25570c6e8ae967ff1d45e79fc5f97cceeb06183cc5b753a83e73bfd7cbccd36b6bae0201010000bc1ca071b1122f64c836ed9c30c93f98b6eb09710ed75e8d89bc1d0ee3142ec7b67dd314e5ef3f2e63c19468286fe7c6c3153861ac7668211d758be41f87d3ce7cddedae934628ed1713f22604e6a0f792404b40cbbf892b72f5538875a7932e00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040000) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x24041000}, 0x800) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 07:45:33 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004101) 07:45:33 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a0, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x208, 0x3c8, 0x3c8, 0x208, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x90, 0xf8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'vxcan1\x00', {0x0, 0x0, 0x7ff, 0x0, 0x0, 0x4, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'wg2\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x12) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={0x40, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "68d8c543eb6859ef9be3cc3b2b49cb449241bba20390a9ebc7476bee33e5380f0e62fd543209"}]}, 0x40}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000c80)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b000000050000009c05400000000000cc000000cc000000cc000000d4030000081500000805000008050000080500000805000005"], 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) 07:45:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:33 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004101) 07:45:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 306.481949][ T8920] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=8920 comm=syz-executor.2 07:45:33 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004101) 07:45:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004101) 07:45:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 311.234738][ T0] NOHZ: local_softirq_pending 08 [ 311.873736][ T0] NOHZ: local_softirq_pending 08 07:45:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004101) 07:45:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004101) 07:45:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004101) 07:45:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800deffb21c622f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c0002800cfe0100", @ANYRES32, @ANYBLOB], 0x38}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000700)=0x3) socket(0x29, 0x8000c, 0x9) 07:45:40 executing program 2: open(&(0x7f0000000000)='./bus\x00', 0x1650c2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x8, 0x6}, {0x3, 0x1}], r1}, 0x18, 0x2) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)="8c", 0x1}], 0x1) rename(&(0x7f0000000200)='./bus\x00', &(0x7f00000002c0)='./bus\x00') mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r3, 0x0) 07:45:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 07:45:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004101) 07:45:41 executing program 2: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102010ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003440200bfa30000000000001702000000feffff7a0af0ff01ffffff79a4f0ff00000000b7060000ffffffff3d640200000000005502faff037202000404000001007d60b6030000001000006a0a00fe39000000850000002b0000009c000000000000009500000000000000a81bbfa3982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c458000000000000e3a94b574d2eb38a548355f0b886bd001362e64eae7f860db5808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b89bd9d5fdb68832e986440ff0a7edfa0cb231ccd00000000000000000000007777e27060493073807c4b7bbaed91f33fb382d91ae8e13bbe25120322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a02fa0892728807982d90e116bba29bb744af70a4cd8f3ad2db58bdd0b424ac416e66af9ebcfea905d37cf226312cb81ec843bcea06e7fa5e5b3596301460142f83b465d9e57dfdb06dcf91fd2464cb130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ec7ecbd061772daa52a38539295d3fea7a7e669441e1ff041143edfa904fb43337f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cd7ce18b68bc37e061d33357d6a39d33c702576cc2a8881663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000000000000000000000000000009f1f5ab2e02739ccd50523d36032538f5cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a4b37032f1e8f6c673e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2818206ce5fba6fca8b270d76191b43ab4cbdd4dbcccdc644fe65e7bd90a5fc16387bcb5e3df18d7d2a33c78cb8fe48ddcf6adfc9417bd42909ee4307c4197b15797af17845fbc02846d2f8543f65594cb5e06d538eb067b21111dbaa58b19a52f3f12880128d08eb477ad349c2214bc7f8378b7e5b5415f3da911411ed6655c6b66beaf92e416313dfe58e88fbfa825114227c2f6cfd1448ca37902a5678af7277e6cde25737b058ba3ca6068a000000f56b6f544f57ddc35f3c1b5904def348912e1eefe8164c3341b91913718593085d2a9a260663c11f5484cad2de673f9a1fcac868ff6cb20122f76531881165f4d46e1a23ce0dc462ff47e1fb4a8e2a1fabe97ec9c78c9123068c839dc2d825b82749063a85bf6c1bcf4ccf798e4962562c024f00000000000000000000000000000038b655016c5717a4cf8c6ea9b697b7d1964aeca4e43114c0fc8c8bc518b33ddd069f97d51ac5d0d063c5f58e9ee681f57bd662b1aa490b806b0c05912f68aacc936340ce13f621bbcaa029d015ef5ebec5f1f5f8a989b4e91b34c89b18cc01d72cce29f7542da7e4c56a5a758e88c18533475ed19fcb4887dd2c1c5b8b3ca254d093816e00479d3906a77c5591d7c69ab1b4120ad4357856d28594ce97da8380f0ca179bed28380eaab6e7328070774621bda6e3c067d8466f7a44"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2c, 0x10, &(0x7f0000000040)}, 0x24) exit(0xa00) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x72, &(0x7f0000000000)={r4, 0x4, "99569e6b"}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x1, 0x4, 0x9, 0x400, 0xa66, 0x200, 0x2, 0x5, r4}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, [], 0x1}, 0xffff0001}}, 0x40, 0x2, 0x1, 0x6, 0x91, 0x40, 0x9}, &(0x7f00000001c0)=0x9c) 07:45:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 314.183490][ T28] audit: type=1800 audit(1597304741.009:15): pid=9067 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15876 res=0 errno=0 [ 314.223552][ T28] audit: type=1804 audit(1597304741.049:16): pid=9071 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir541631992/syzkaller.RX8XOD/5/bus" dev="sda1" ino=15876 res=1 errno=0 07:45:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004101) 07:45:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004101) 07:45:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:41 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000012c0)=ANY=[@ANYBLOB="0a0000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000ea361cccfe7ef43deb1cbe42cb235e0939c4d45238941cf217aa27befe3f8d75cb2cce7c2f46ffab7fa9cac37f19e829f249f76b11c658a9b30cfd546da47e19bf14b004b15f80706b44e8700e8923a0a34ecec753751b9d6bcb985ae896147021f0c61f3e3240c10000000000000000"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000001a000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512b5b4215b35a0e17c7628aa090a79507df79f298129da4871307b534bf901115e17392ac66ad029d1c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b217369ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813ce3d32cfc7a53ac271d6d6f4ea6bf97f2f5ee7ea2e534300bcb3fdc4b486fd03eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8d003d4b7745fef1d04ec633dee254aed491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db3598a6a7a103680e5e5971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa909ac06b57479321a0574fb304bc2a1681989328c8ddc20ea011bf5742e0ef94234db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a4aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85ad3428f4a1bc3f8fd8e4a5a33744ccc448bdf1d41a2d8bda74d66016ac59dda0fde0745db06753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4a389469608241730401000000000000000000000000eb55d001623258a141bd587cc9dad46de56ef907b0000000000000000079ae5498f6589880ed6eea7b9c670012bd05e7de0940313c5870786554df26236ebced9390cb6941b8285d936a7d2120eca291963eb2d537d87cbb54e588ee5d6944ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a0aa9a104e16bb1a2bacf13464ca03aff14b9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c363000000000223201780200c6ed7966130b547dbf8b497af0a77f52f2cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee938a836804ed3a1079b0282a12043408cd60b687dcff910700000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea394cd8fff71c2710a7ea8ae0dc214e1cc275b26adfa892e6de9200000000e50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab50fe82d5a96b09c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd3ffb6151d79c1cee1cdfba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447dc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d310ab16bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4000000000000000749efd3763655500344bae34347f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419a5c16e2055b850580994484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0a2e9120be61e58c79d497247d278888901d44bf77ff246605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2cebdf902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f3101987602688888ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca2119ff0d61c5224550346115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77a23b0000e49666c464d35ca9b50f3ed3b3dc8c17a23692759ccf5a205311b7ab2253269785d8db874609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a2102fa1296dfff4a979369b0e8ebc628879a46e820a2cf91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d1b8b90bc0df4cfb0b9c8c80158b44ecae9420654f7016b0aac117087406d343e27b372d603f0000008f2bcad7fe6bb932bc5751d2974e95455a277f9a9aeb29aa185d7fe74b25a3b472bc7bbdd2ac5a1ea608e8137ace03361607cc1a84be659355629ab13ad49008c3fcfa2423439aaf3e36cbf537801d3b384d63b95a3607961d5b59da48a0155e8e42cc13c702cc40c89cf86c2021d72f9f4ab1b00de555a5a39593c93871ff7eb5ecadb64837a2d887236cedaa5152e3d5864e57581b61f2b0960600000000000000265f091e7bce17d20604c5ab751773a5cf2ed6c94682ebf13548209b8a719a7abc06ed03832bf274707c7c97536e20d2cb639ecd58709b05a20097208d03f7a146a690191361873867864e0af53eae997eecfa0dc3dcec19d3d901ee75c8710470d9eb6f62c5c721883f1544ba6627a9d2b58e8fbade7716f159af1c8dab05a933746c16b638df94b561c6715a32a394ed1e6c01670c931bfa52c58c6f34d64e758a7a7f7dcba2bab170ad7556a45774dfcc55257215c8ae719dc1c232fc6699ef83f85887d04a543030b4328ab48744ac23ff56fd2da52eb9fb2eefcdd2d92d73ac1b111ea8b5e1fec36a3579879acfe366d393f1fa9cbe08d9ba57a443643e9cd2519c88e91a5e458e66ea26822d27a45e0a9c10a127fed19e36b52655d4dd919a95eb4c25a08cb6e1a9b4d6813a0fd07a4ad9df661ab8b86a932db0df838b178540d88bd08365e547c970e2983200703864a3b9e1482cb479dad6d34d211b05267eb1355520e9ec0c5014b0832f7fb35782fdbfcbbc1254d295aa126f912ab2447c6a9007f53a7f5d51ea480371748d18d8e10608ab8261fe058d1732f28814a9981d84a04a2bb36c89bdd245e3293a14df1ac567301a79514f103abd387d6ef2d9d94508ac0f6135c8921279573e9ef585980789a92b9848906f545559d32112b5040f0776703763249ca98499efbb9e7362e4999594c1086d8954e9469db01d85fb0b9b3148663e9ea2e755d96c2986712d25a9922565e947d03c42215118426d5451c262985bd571c363d260faea1db53e2cf3427c90aefa2662a1c2b28b0e020e872bda1d39da508de5a2952627ca1e0d5a0a1f3945ef2fba3ff9f5142b2a35d23b6728febfd82dfae07f59532886d96ddbf59b7f95ce81f048de58baae4cc90ef4878ce334a36055159376de87dd8f8a15f2ce182e8da95582e0b2d56c94c057dee4d66039905b750bbbee4edc051da9ac5ddf9a0e96e1308611aa0a8d6b6a640e803362f361641ee367c2863ef432057eaf6d47765a1fe091a557fe0006f7003c08c0bc8f3d47bf703f466799aa89b73f10a5e9386377189e9fe5a302a6a3eef2f4bb10300ec4dff63c15fcc6ab37fc303a593422b0ada81ee70e61506393ab7994645c1c6f2016dddb07e411e37d7a1597ee1b1c35d9ce13b9bc378e9e660e1c57bdceda9cec725719dbc10aec5e4e84d79ada50c0304065c63437328caf28844e06abee81b0bbc34ceddc5a281161f00b4dc290cd3397ea8c78d185aafd546acb8a7448b10f67196cac6436ec4377009f1c703439f1a3a7d03f63826c3e3b408a5f1f66f1ff2e188b4d3e2a5edd89ca3b388166483f3ba72c146f3ddae21a84c12376d71eeefbb73159ec61aa26596e8e41cdcd8ef70e3ae061048e75fb75eea7744d437a2ef67825699c47eec8c5cd79729293665019f6ed528e40442f47408352ffe3cf332f93528071cda332d19e6d2f33f0455ec99f47aeef72ef74613abcbc142956563802a62eb77567bbcbd053f34e764d844fa808c2c62ff9d8f3ab215a8a6681e81e7453a4264139efeb24a303d29aa2b833511b415edbdf040a28d13af9edacb9078d516a3a72e1f3fe460f71b5497951d18cc1f1c2563a853f6cd7ddb7f06fa7476e3991c496fde8a6d50c5b2b75babcf400e2bd29f7ae38aa2799897af8954ed6aa7017d113a304785486bffe18add60fc23ed140c3acea"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2}, 0x10) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r4, r5, 0x4, r2}, 0x10) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r6, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000280)={0x9e0000, 0xfffffffa, 0xfffffffc, r6, 0x0, &(0x7f0000000200)={0x990af8, 0x7ff, [], @value=0x6}}) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f00000002c0)={0x0, r7, 0x1}) 07:45:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004101) 07:45:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) 07:45:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:42 executing program 2: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102010ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2c, 0x10, &(0x7f0000000040)}, 0x24) exit(0xa00) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x72, &(0x7f0000000000)={r4, 0x4, "99569e6b"}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x1, 0x4, 0x9, 0x400, 0xa66, 0x200, 0x2, 0x5, r4}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, [], 0x1}, 0xffff0001}}, 0x40, 0x2, 0x1, 0x6, 0x91, 0x40, 0x9}, &(0x7f00000001c0)=0x9c) 07:45:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) 07:45:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004101) 07:45:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) 07:45:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, 0x0}, 0x0) 07:45:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbffffc, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)={[{@fat=@nfs='nfs'}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004101) 07:45:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, 0x0}, 0x0) 07:45:43 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x301ec1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x2d3199e09b3ea309, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0xc5b]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:45:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, 0x0}, 0x0) 07:45:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)}, 0x0) 07:45:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)}, 0x0) 07:45:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)}, 0x0) 07:45:43 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004101) 07:45:44 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffd32, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f00000006c0)={'bridge_slave_1\x00', 0xdb}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400add427323b472545b4560a117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71026000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c00883e38ba90d84200", @ANYRES16=r6, @ANYBLOB="10002dbd9462d9dbe4839e9e6000fb503325d5ffffff05002a0001000000080005080000000000db00000000000000ce1b5e741df2f950788933e8a8e826296202522095042fa4e6a0a4468cee3114857c4c2685d16c008895f688c83baa47508db2dd6cfd974534695eaa12e6d38a62b1acee7ece5f208cd40b8d9f1dbcf47d5efaeca668e451cda9ebea09d49e139aa531526518d5f9ff720e128592815090cb40d3969c100febc7cd812971e9eeae8ab99fe16df9deb518f9629f9846c185ea815638c990ce0d12ab1b7c97f32e299949aba5a945a4e49b80673308de2deb39"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000880) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000426bd7000ffdbdf250200000005002a000000000008002b00f4000000050030000000000008002c000101100008002b00060000005116e170c45344dccc698eb7c9c6a1bfd65b7e284c70c54e33df075d9802c978c35fcdffbcb5f4f44ecc25121e606296cc3d0bc94e25570c6e8ae967ff1d45e79fc5f97cceeb06183cc5b753a83e73bfd7cbccd36b6bae0201010000bc1ca071b1122f64c836ed9c30c93f98b6eb09710ed75e8d89bc1d0ee3142ec7b67dd314e5ef3f2e63c19468286fe7c6c3153861ac7668211d758be41f87d3ce7cddedae934628ed1713f22604e6a0f792404b40cbbf892b72f5538875a7932e00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040000) sendmsg$NFT_MSG_GETGEN(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24000461) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x7f, 0x2, 0x62, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x700, 0x8001, 0x6a6a3901}}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_getaddrlabel={0x24, 0x4a, 0x8, 0x70bd2e, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r7, 0x10000}, [@IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x24}}, 0x0) 07:45:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x0) 07:45:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:44 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004101) 07:45:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000180)) open(&(0x7f0000000340)='./file0\x00', 0x418580, 0x110) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400add427323b472545b4560a117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71026000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00B\x00', @ANYRES16=r3, @ANYBLOB="10002dbd9462d9dbe4839e9e6000fb503325f5ffffff05002a0001000000080005000000000000db00000000000000ce1b5e741df2f950788933e8a8e826296202522095042fa4e6a0a4468cee3114857c4c2685d16c008895f688c83baa47508db2dd6cfd974534695eaa12e6d38a62b1acee7ece5f208cd40b8d9f1dbcf47d5efaeca668e451cda9ebea09d49e139aa531526518d5f9ff72"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000880) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="db2b1cd5", @ANYRES16=r3, @ANYBLOB="000426bd0200000005002a000000000008002b00f4000000050030000000000008002c000101100008002b00060000005116e170c45344dccc698eb7c9c6a1bfd65b7e284c70c54e33df075d9802c978c35fcdffbcb5f4f44ecc25121e606296cc3d0bc94e25570c6e8ae967ff1d45e79fc5f97cceeb06183cc5b753a83e73bfd7cbccd36b6bae0201010000bc1ca071b1122f64c836ed9c30c93f98b6eb09710ed75e8d89bc1d0ee3142ec7b67dd314e5ef3f2e63c19468286fe7c6c3153861ac7668211d758be41f87d3ce7cddedae934628ed1713f22604e6a0f792404b40cbbf892b72f5538875a7932e01"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040000) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x50000}, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0)='/dev/video#\x00', 0x0, 0x2) r4 = accept(r2, 0x0, &(0x7f0000000000)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000100)={r5, 0x1, 0x6, @random="b9562d310c06"}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4004004) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r1, r6, 0x0, 0x11f02) 07:45:44 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004101) 07:45:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) ustat(0x7fffffff, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3e6, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x31c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 317.428605][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 317.437307][ T9198] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=9198 comm=syz-executor.2 [ 317.457125][ T28] audit: type=1800 audit(1597304744.289:17): pid=9197 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15857 res=0 errno=0 [ 317.458480][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 317.459819][ T9201] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=9201 comm=syz-executor.2 [ 317.641573][ T9206] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 317.645505][ T9206] device macvlan2 entered promiscuous mode [ 317.722993][ T9206] device batadv0 entered promiscuous mode [ 317.734915][ T9206] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 317.736763][ T9206] team0: Port device macvlan2 added [ 317.756677][ T9210] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 317.782380][ T9210] device macvlan3 entered promiscuous mode [ 317.804232][ T9210] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 317.817090][ T9210] team0: Port device macvlan3 added 07:45:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) ustat(0x7fffffff, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3e6, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x31c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 07:45:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x0) 07:45:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004101) [ 317.842055][ T28] audit: type=1804 audit(1597304744.669:18): pid=9197 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745004034/syzkaller.MGdmZ6/24/file0" dev="sda1" ino=15857 res=1 errno=0 07:45:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004101) 07:45:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x0) 07:45:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004101) [ 317.941560][ T9223] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 317.964703][ T9223] device macvlan4 entered promiscuous mode [ 317.972048][ T9223] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 317.976965][ T9223] team0: Port device macvlan4 added 07:45:45 executing program 0: write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c0, 0xa0404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x0, 0x0, 0x0, 0x7, 0xf}, 0x0, 0xc, 0xffffffffffffffff, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220087fd, &(0x7f0000e68000)={0x2, 0x4ea4, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='6', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x1f4}}], 0x1, 0x100, 0x0) close(0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180), 0x4) fcntl$setsig(0xffffffffffffffff, 0xa, 0x80026) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000002340)=""/4096) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 07:45:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 07:45:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:45 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004101) 07:45:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 07:45:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:45 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004101) 07:45:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 07:45:46 executing program 0: exit_group(0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6ffe, 0x1ae797}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) open(&(0x7f0000000000)='./file0/file0/file0\x00', 0x4000, 0x4d) r1 = getpgid(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000140)='./file0/file0/file0\x00', 0x0, 0xc50c4, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="4081d5a832b70b4a3d190b81cdf6ac85b7c1faa0", @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a0005000400000000000000083c2b459189c20625b43c9b48f14be8efe4ce14952f284b18ebbfe8f48a4c7358e38bce34be493f9a8870d04cf28bb2070000009b4a18acccd998a324587ce78fbb9b5d7464d6ba9a71736768600456f160ca0c2721fdfff68edb414cf45c50fd10230fd644e208f50942bf5a644ee41cd45a92f443d8f1328232f8a8641f2e227bb7a000c4"], 0x40}}, 0x0) 07:45:46 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004101) 07:45:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x0, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:46 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004101) 07:45:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x0, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:46 executing program 4 (fault-call:2 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:46 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xfffffffffffffff7, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000140)) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 319.454721][ T9276] FAULT_INJECTION: forcing a failure. [ 319.454721][ T9276] name failslab, interval 1, probability 0, space 0, times 1 07:45:46 executing program 4 (fault-call:2 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) [ 319.454742][ T9276] CPU: 1 PID: 9276 Comm: syz-executor.4 Not tainted 5.8.0-syzkaller #0 07:45:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x0, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 319.454751][ T9276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 07:45:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004101) [ 319.454756][ T9276] Call Trace: [ 319.454915][ T9276] dump_stack+0x18f/0x20d [ 319.454957][ T9276] should_fail.cold+0x5/0x14 [ 319.455041][ T9276] should_failslab+0x5/0xf [ 319.455072][ T9276] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 319.455087][ T9276] kmem_cache_alloc_trace+0x49/0x2c0 [ 319.455151][ T9276] alloc_pipe_info+0x10a/0x590 07:45:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x14, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 07:45:46 executing program 4 (fault-call:2 fault-nth:3): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) [ 319.455211][ T9276] splice_direct_to_actor+0x779/0x980 [ 319.455308][ T9276] ? inode_security+0x102/0x130 07:45:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004101) [ 319.455349][ T9276] ? avc_policy_seqno+0x9/0x70 [ 319.455365][ T9276] ? generic_splice_sendpage+0x140/0x140 [ 319.455381][ T9276] ? selinux_file_permission+0x92/0x520 [ 319.455401][ T9276] ? do_splice_to+0x170/0x170 [ 319.455416][ T9276] ? security_file_permission+0x248/0x560 [ 319.455476][ T9276] ? lock_is_held_type+0xbb/0xf0 [ 319.455498][ T9276] do_splice_direct+0x1b3/0x280 [ 319.455516][ T9276] ? splice_direct_to_actor+0x980/0x980 07:45:47 executing program 4 (fault-call:2 fault-nth:4): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) [ 319.455536][ T9276] ? security_file_permission+0x248/0x560 [ 319.455561][ T9276] do_sendfile+0x55f/0xd40 [ 319.455587][ T9276] ? do_compat_pwritev64+0x1b0/0x1b0 [ 319.455631][ T9276] ? wait_for_completion+0x260/0x260 [ 319.455650][ T9276] ? vfs_write+0x1b0/0x730 [ 319.455669][ T9276] __x64_sys_sendfile64+0x1cc/0x210 [ 319.455685][ T9276] ? __ia32_sys_sendfile+0x220/0x220 [ 319.455753][ T9276] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 319.455781][ T9276] ? trace_hardirqs_on+0x5f/0x220 [ 319.455798][ T9276] ? lockdep_hardirqs_on+0x76/0xf0 [ 319.455817][ T9276] do_syscall_64+0x2d/0x70 [ 319.455842][ T9276] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 319.455855][ T9276] RIP: 0033:0x45d189 [ 319.455873][ T9276] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.455882][ T9276] RSP: 002b:00007f75a3422c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 319.455898][ T9276] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d189 [ 319.455908][ T9276] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 319.455917][ T9276] RBP: 00007f75a3422ca0 R08: 0000000000000000 R09: 0000000000000000 [ 319.455927][ T9276] R10: 0800000080004101 R11: 0000000000000246 R12: 0000000000000000 [ 319.455938][ T9276] R13: 00007ffdc41c70df R14: 00007f75a34239c0 R15: 000000000118cf4c [ 319.645861][ T9284] FAULT_INJECTION: forcing a failure. [ 319.645861][ T9284] name failslab, interval 1, probability 0, space 0, times 0 [ 319.645880][ T9284] CPU: 1 PID: 9284 Comm: syz-executor.4 Not tainted 5.8.0-syzkaller #0 [ 319.645889][ T9284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.645894][ T9284] Call Trace: [ 319.645913][ T9284] dump_stack+0x18f/0x20d [ 319.645933][ T9284] should_fail.cold+0x5/0x14 [ 319.645956][ T9284] ? alloc_pipe_info+0x1e5/0x590 [ 319.645973][ T9284] should_failslab+0x5/0xf [ 319.645987][ T9284] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 319.646001][ T9284] __kmalloc+0x6f/0x320 [ 319.646015][ T9284] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 319.646037][ T9284] alloc_pipe_info+0x1e5/0x590 [ 319.646057][ T9284] splice_direct_to_actor+0x779/0x980 [ 319.646075][ T9284] ? inode_security+0x102/0x130 [ 319.646091][ T9284] ? avc_policy_seqno+0x9/0x70 [ 319.646106][ T9284] ? generic_splice_sendpage+0x140/0x140 [ 319.646121][ T9284] ? selinux_file_permission+0x92/0x520 [ 319.646140][ T9284] ? do_splice_to+0x170/0x170 [ 319.646155][ T9284] ? security_file_permission+0x248/0x560 [ 319.646171][ T9284] ? lock_is_held_type+0xbb/0xf0 [ 319.646195][ T9284] do_splice_direct+0x1b3/0x280 [ 319.646214][ T9284] ? splice_direct_to_actor+0x980/0x980 [ 319.646232][ T9284] ? security_file_permission+0x248/0x560 [ 319.646256][ T9284] do_sendfile+0x55f/0xd40 [ 319.646281][ T9284] ? do_compat_pwritev64+0x1b0/0x1b0 [ 319.646298][ T9284] ? wait_for_completion+0x260/0x260 [ 319.646316][ T9284] ? vfs_write+0x1b0/0x730 [ 319.646335][ T9284] __x64_sys_sendfile64+0x1cc/0x210 [ 319.646348][ T9284] ? __ia32_sys_sendfile+0x220/0x220 [ 319.646366][ T9284] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 319.646382][ T9284] ? trace_hardirqs_on+0x5f/0x220 [ 319.646404][ T9284] ? lockdep_hardirqs_on+0x76/0xf0 [ 319.646422][ T9284] do_syscall_64+0x2d/0x70 [ 319.646441][ T9284] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 319.646453][ T9284] RIP: 0033:0x45d189 [ 319.646468][ T9284] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.646477][ T9284] RSP: 002b:00007f75a3422c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 319.646491][ T9284] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d189 [ 319.646500][ T9284] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 319.646510][ T9284] RBP: 00007f75a3422ca0 R08: 0000000000000000 R09: 0000000000000000 [ 319.646519][ T9284] R10: 0800000080004101 R11: 0000000000000246 R12: 0000000000000001 [ 319.646529][ T9284] R13: 00007ffdc41c70df R14: 00007f75a34239c0 R15: 000000000118cf4c [ 319.885382][ T9296] FAULT_INJECTION: forcing a failure. [ 319.885382][ T9296] name failslab, interval 1, probability 0, space 0, times 0 [ 319.885401][ T9296] CPU: 1 PID: 9296 Comm: syz-executor.4 Not tainted 5.8.0-syzkaller #0 [ 319.885411][ T9296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.885416][ T9296] Call Trace: [ 319.885437][ T9296] dump_stack+0x18f/0x20d [ 319.885457][ T9296] should_fail.cold+0x5/0x14 [ 319.885479][ T9296] should_failslab+0x5/0xf [ 319.885495][ T9296] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 319.885514][ T9296] kmem_cache_alloc_node_trace+0x59/0x400 [ 319.885534][ T9296] __kmalloc_node+0x38/0x60 [ 319.885635][ T9296] kvmalloc_node+0x61/0xf0 [ 319.885683][ T9296] iov_iter_get_pages_alloc+0x82a/0x1440 [ 319.885704][ T9296] ? push_pipe+0x680/0x680 [ 319.885739][ T9296] ? stack_trace_save+0x8c/0xc0 [ 319.885755][ T9296] ? stack_trace_consume_entry+0x160/0x160 [ 319.885770][ T9296] ? iov_iter_pipe+0xf1/0x2a0 [ 319.885800][ T9296] default_file_splice_read.constprop.0+0x1c9/0x9e0 [ 319.885817][ T9296] ? kasan_save_stack+0x32/0x40 [ 319.885831][ T9296] ? kasan_save_stack+0x1b/0x40 [ 319.885845][ T9296] ? __kmalloc+0x1a8/0x320 [ 319.885861][ T9296] ? do_splice_direct+0x1b3/0x280 [ 319.885877][ T9296] ? do_sendfile+0x55f/0xd40 [ 319.885889][ T9296] ? __x64_sys_sendfile64+0x1cc/0x210 [ 319.885905][ T9296] ? iter_file_splice_write+0xbe0/0xbe0 [ 319.885921][ T9296] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 319.885938][ T9296] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 319.885954][ T9296] ? __lock_acquire+0x16cb/0x5640 [ 319.885978][ T9296] ? find_held_lock+0x2d/0x110 [ 319.886004][ T9296] ? fs_reclaim_release+0xa3/0x160 [ 319.886035][ T9296] ? __fsnotify_parent+0x48c/0x930 [ 319.886055][ T9296] ? lock_is_held_type+0xbb/0xf0 [ 319.886069][ T9296] ? fsnotify+0xf80/0xf80 [ 319.886091][ T9296] ? inode_security+0x102/0x130 [ 319.886108][ T9296] ? avc_policy_seqno+0x9/0x70 [ 319.886124][ T9296] ? selinux_file_permission+0x92/0x520 [ 319.886142][ T9296] ? security_file_permission+0x248/0x560 [ 319.886163][ T9296] do_splice_to+0x137/0x170 [ 319.886182][ T9296] splice_direct_to_actor+0x307/0x980 [ 319.886202][ T9296] ? generic_splice_sendpage+0x140/0x140 [ 319.886221][ T9296] ? do_splice_to+0x170/0x170 [ 319.886235][ T9296] ? security_file_permission+0x248/0x560 [ 319.886258][ T9296] do_splice_direct+0x1b3/0x280 [ 319.886274][ T9296] ? splice_direct_to_actor+0x980/0x980 [ 319.886292][ T9296] ? security_file_permission+0x248/0x560 [ 319.886313][ T9296] do_sendfile+0x55f/0xd40 [ 319.886336][ T9296] ? do_compat_pwritev64+0x1b0/0x1b0 [ 319.886351][ T9296] ? wait_for_completion+0x260/0x260 [ 319.886367][ T9296] ? vfs_write+0x1b0/0x730 [ 319.886384][ T9296] __x64_sys_sendfile64+0x1cc/0x210 [ 319.886397][ T9296] ? __ia32_sys_sendfile+0x220/0x220 [ 319.886413][ T9296] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 319.886429][ T9296] ? trace_hardirqs_on+0x5f/0x220 [ 319.886444][ T9296] ? lockdep_hardirqs_on+0x76/0xf0 [ 319.886461][ T9296] do_syscall_64+0x2d/0x70 [ 319.886479][ T9296] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 319.886490][ T9296] RIP: 0033:0x45d189 [ 319.886506][ T9296] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.886515][ T9296] RSP: 002b:00007f75a3422c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 319.886530][ T9296] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d189 [ 319.886540][ T9296] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 319.886548][ T9296] RBP: 00007f75a3422ca0 R08: 0000000000000000 R09: 0000000000000000 [ 319.886557][ T9296] R10: 0800000080004101 R11: 0000000000000246 R12: 0000000000000002 [ 319.886566][ T9296] R13: 00007ffdc41c70df R14: 00007f75a34239c0 R15: 000000000118cf4c [ 320.188848][ T9309] FAULT_INJECTION: forcing a failure. [ 320.188848][ T9309] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 320.188866][ T9309] CPU: 0 PID: 9309 Comm: syz-executor.4 Not tainted 5.8.0-syzkaller #0 [ 320.188874][ T9309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.188879][ T9309] Call Trace: [ 320.188899][ T9309] dump_stack+0x18f/0x20d [ 320.188919][ T9309] should_fail.cold+0x5/0x14 [ 320.188939][ T9309] __alloc_pages_nodemask+0x183/0x810 [ 320.188957][ T9309] ? lock_downgrade+0x830/0x830 [ 320.188975][ T9309] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 320.188992][ T9309] ? lock_is_held_type+0xbb/0xf0 [ 320.189012][ T9309] ? lock_is_held_type+0xbb/0xf0 [ 320.189112][ T9309] alloc_pages_current+0x187/0x280 [ 320.189131][ T9309] push_pipe+0x2a4/0x680 [ 320.189160][ T9309] iov_iter_get_pages_alloc+0x8b5/0x1440 [ 320.189179][ T9309] ? push_pipe+0x680/0x680 [ 320.189196][ T9309] ? stack_trace_consume_entry+0x160/0x160 [ 320.189211][ T9309] ? iov_iter_pipe+0xf1/0x2a0 [ 320.189233][ T9309] default_file_splice_read.constprop.0+0x1c9/0x9e0 [ 320.189263][ T9309] ? kasan_save_stack+0x32/0x40 [ 320.189277][ T9309] ? kasan_save_stack+0x1b/0x40 [ 320.189291][ T9309] ? __kmalloc+0x1a8/0x320 [ 320.189306][ T9309] ? do_splice_direct+0x1b3/0x280 [ 320.189322][ T9309] ? do_sendfile+0x55f/0xd40 [ 320.189336][ T9309] ? __x64_sys_sendfile64+0x1cc/0x210 [ 320.189352][ T9309] ? iter_file_splice_write+0xbe0/0xbe0 [ 320.189368][ T9309] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 320.189384][ T9309] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 320.189439][ T9309] ? unwind_next_frame+0xe3b/0x1f90 [ 320.189465][ T9309] ? find_held_lock+0x2d/0x110 [ 320.189483][ T9309] ? fs_reclaim_release+0xa3/0x160 [ 320.189497][ T9309] ? __fsnotify_parent+0x48c/0x930 [ 320.189513][ T9309] ? lock_is_held_type+0xbb/0xf0 [ 320.189526][ T9309] ? fsnotify+0xf80/0xf80 [ 320.189547][ T9309] ? inode_security+0x102/0x130 [ 320.189563][ T9309] ? avc_policy_seqno+0x9/0x70 [ 320.189579][ T9309] ? selinux_file_permission+0x92/0x520 [ 320.189597][ T9309] ? security_file_permission+0x248/0x560 [ 320.189620][ T9309] do_splice_to+0x137/0x170 [ 320.189638][ T9309] splice_direct_to_actor+0x307/0x980 [ 320.189659][ T9309] ? generic_splice_sendpage+0x140/0x140 [ 320.189677][ T9309] ? do_splice_to+0x170/0x170 [ 320.189691][ T9309] ? security_file_permission+0x248/0x560 [ 320.189714][ T9309] do_splice_direct+0x1b3/0x280 [ 320.189731][ T9309] ? splice_direct_to_actor+0x980/0x980 [ 320.189750][ T9309] ? security_file_permission+0x248/0x560 [ 320.189772][ T9309] do_sendfile+0x55f/0xd40 [ 320.189794][ T9309] ? do_compat_pwritev64+0x1b0/0x1b0 [ 320.189810][ T9309] ? wait_for_completion+0x260/0x260 [ 320.189826][ T9309] ? vfs_write+0x1b0/0x730 [ 320.189843][ T9309] __x64_sys_sendfile64+0x1cc/0x210 [ 320.189858][ T9309] ? __ia32_sys_sendfile+0x220/0x220 [ 320.189875][ T9309] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 320.189889][ T9309] ? trace_hardirqs_on+0x5f/0x220 [ 320.189903][ T9309] ? lockdep_hardirqs_on+0x76/0xf0 [ 320.189918][ T9309] do_syscall_64+0x2d/0x70 [ 320.189933][ T9309] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 320.189944][ T9309] RIP: 0033:0x45d189 [ 320.189958][ T9309] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 320.189967][ T9309] RSP: 002b:00007f75a3422c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 320.189981][ T9309] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d189 [ 320.189990][ T9309] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 320.189999][ T9309] RBP: 00007f75a3422ca0 R08: 0000000000000000 R09: 0000000000000000 [ 320.190009][ T9309] R10: 0800000080004101 R11: 0000000000000246 R12: 0000000000000003 [ 320.190019][ T9309] R13: 00007ffdc41c70df R14: 00007f75a34239c0 R15: 000000000118cf4c [ 320.407042][ T9319] FAULT_INJECTION: forcing a failure. [ 320.407042][ T9319] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 320.407060][ T9319] CPU: 1 PID: 9319 Comm: syz-executor.4 Not tainted 5.8.0-syzkaller #0 [ 320.407070][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.407074][ T9319] Call Trace: [ 320.407095][ T9319] dump_stack+0x18f/0x20d [ 320.407115][ T9319] should_fail.cold+0x5/0x14 [ 320.407136][ T9319] __alloc_pages_nodemask+0x183/0x810 [ 320.407153][ T9319] ? lock_downgrade+0x830/0x830 [ 320.407172][ T9319] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 320.407190][ T9319] ? lock_is_held_type+0xbb/0xf0 [ 320.407210][ T9319] ? lock_is_held_type+0xbb/0xf0 [ 320.407233][ T9319] alloc_pages_current+0x187/0x280 [ 320.407250][ T9319] push_pipe+0x2a4/0x680 [ 320.407274][ T9319] iov_iter_get_pages_alloc+0x8b5/0x1440 [ 320.407294][ T9319] ? push_pipe+0x680/0x680 [ 320.407310][ T9319] ? stack_trace_consume_entry+0x160/0x160 [ 320.407325][ T9319] ? iov_iter_pipe+0xf1/0x2a0 [ 320.407364][ T9319] default_file_splice_read.constprop.0+0x1c9/0x9e0 [ 320.407380][ T9319] ? kasan_save_stack+0x32/0x40 [ 320.407394][ T9319] ? kasan_save_stack+0x1b/0x40 [ 320.407407][ T9319] ? __kmalloc+0x1a8/0x320 [ 320.407423][ T9319] ? do_splice_direct+0x1b3/0x280 [ 320.407439][ T9319] ? do_sendfile+0x55f/0xd40 [ 320.407452][ T9319] ? __x64_sys_sendfile64+0x1cc/0x210 [ 320.407469][ T9319] ? iter_file_splice_write+0xbe0/0xbe0 [ 320.407486][ T9319] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 320.407503][ T9319] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 320.407518][ T9319] ? unwind_next_frame+0xe3b/0x1f90 [ 320.407545][ T9319] ? find_held_lock+0x2d/0x110 [ 320.407563][ T9319] ? fs_reclaim_release+0xa3/0x160 [ 320.407577][ T9319] ? __fsnotify_parent+0x48c/0x930 [ 320.407592][ T9319] ? lock_is_held_type+0xbb/0xf0 [ 320.407606][ T9319] ? fsnotify+0xf80/0xf80 [ 320.407627][ T9319] ? inode_security+0x102/0x130 [ 320.407645][ T9319] ? avc_policy_seqno+0x9/0x70 [ 320.407661][ T9319] ? selinux_file_permission+0x92/0x520 [ 320.407679][ T9319] ? security_file_permission+0x248/0x560 [ 320.407701][ T9319] do_splice_to+0x137/0x170 [ 320.407719][ T9319] splice_direct_to_actor+0x307/0x980 [ 320.407744][ T9319] ? generic_splice_sendpage+0x140/0x140 [ 320.407764][ T9319] ? do_splice_to+0x170/0x170 [ 320.407779][ T9319] ? security_file_permission+0x248/0x560 [ 320.407801][ T9319] do_splice_direct+0x1b3/0x280 [ 320.407818][ T9319] ? splice_direct_to_actor+0x980/0x980 [ 320.407833][ T9319] ? security_file_permission+0x248/0x560 [ 320.407855][ T9319] do_sendfile+0x55f/0xd40 [ 320.407878][ T9319] ? do_compat_pwritev64+0x1b0/0x1b0 [ 320.407895][ T9319] ? wait_for_completion+0x260/0x260 [ 320.407911][ T9319] ? vfs_write+0x1b0/0x730 [ 320.407928][ T9319] __x64_sys_sendfile64+0x1cc/0x210 [ 320.407943][ T9319] ? __ia32_sys_sendfile+0x220/0x220 [ 320.407959][ T9319] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 320.407975][ T9319] ? trace_hardirqs_on+0x5f/0x220 [ 320.407990][ T9319] ? lockdep_hardirqs_on+0x76/0xf0 [ 320.408006][ T9319] do_syscall_64+0x2d/0x70 [ 320.408024][ T9319] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 320.408035][ T9319] RIP: 0033:0x45d189 [ 320.408051][ T9319] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 320.408060][ T9319] RSP: 002b:00007f75a3422c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 07:45:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 07:45:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x14, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 07:45:50 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xfffffffffffffff7, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000140)) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 07:45:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) [ 320.408074][ T9319] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d189 [ 320.408084][ T9319] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 320.408093][ T9319] RBP: 00007f75a3422ca0 R08: 0000000000000000 R09: 0000000000000000 [ 320.408103][ T9319] R10: 0800000080004101 R11: 0000000000000246 R12: 0000000000000004 [ 320.408113][ T9319] R13: 00007ffdc41c70df R14: 00007f75a34239c0 R15: 000000000118cf4c [ 322.639071][ T9289] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 07:45:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 07:45:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x14, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 07:45:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 07:45:50 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) r2 = semget$private(0x0, 0x1, 0x0) semop(r2, &(0x7f0000000200)=[{0x0, 0x1}], 0x1) semop(r2, &(0x7f00000001c0)=[{}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$GETZCNT(r2, 0x2, 0xf, &(0x7f0000001100)=""/4096) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x24) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 07:45:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4}]}, 0x18}], 0x1}, 0x0) 07:45:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080000010) 07:45:51 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) [ 324.485671][ T9386] FAULT_INJECTION: forcing a failure. [ 324.485671][ T9386] name failslab, interval 1, probability 0, space 0, times 0 [ 324.559765][ T9386] CPU: 1 PID: 9386 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 324.559776][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.559781][ T9386] Call Trace: [ 324.559803][ T9386] dump_stack+0x18f/0x20d [ 324.559825][ T9386] should_fail.cold+0x5/0x14 [ 324.559847][ T9386] should_failslab+0x5/0xf [ 324.559869][ T9386] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 324.559888][ T9386] kmem_cache_alloc_trace+0x49/0x2c0 [ 324.559913][ T9386] alloc_pipe_info+0x10a/0x590 [ 324.559935][ T9386] splice_direct_to_actor+0x779/0x980 [ 324.559954][ T9386] ? inode_security+0x102/0x130 [ 324.559972][ T9386] ? avc_policy_seqno+0x9/0x70 [ 324.559987][ T9386] ? generic_splice_sendpage+0x140/0x140 [ 324.560002][ T9386] ? selinux_file_permission+0x92/0x520 [ 324.560021][ T9386] ? do_splice_to+0x170/0x170 [ 324.560036][ T9386] ? security_file_permission+0x248/0x560 [ 324.560052][ T9386] ? lock_is_held_type+0xbb/0xf0 [ 324.560075][ T9386] do_splice_direct+0x1b3/0x280 [ 324.560094][ T9386] ? splice_direct_to_actor+0x980/0x980 [ 324.560113][ T9386] ? security_file_permission+0x248/0x560 [ 324.560137][ T9386] do_sendfile+0x55f/0xd40 [ 324.560162][ T9386] ? do_compat_pwritev64+0x1b0/0x1b0 [ 324.560180][ T9386] ? wait_for_completion+0x260/0x260 [ 324.560197][ T9386] ? vfs_write+0x1b0/0x730 [ 324.560216][ T9386] __x64_sys_sendfile64+0x1cc/0x210 [ 324.560232][ T9386] ? __ia32_sys_sendfile+0x220/0x220 [ 324.560250][ T9386] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 324.560266][ T9386] ? trace_hardirqs_on+0x5f/0x220 [ 324.560283][ T9386] ? lockdep_hardirqs_on+0x76/0xf0 07:45:52 executing program 1 (fault-call:2 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4}]}, 0x18}], 0x1}, 0x0) [ 324.560300][ T9386] do_syscall_64+0x2d/0x70 [ 324.560318][ T9386] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 324.560329][ T9386] RIP: 0033:0x45d189 07:45:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="66ba4200b818480000efc4e17162f60f205d0f3801dfb9800000c00f3235000400000f300f837b00c0feb8010000000f01c1b98a0000000f32660f381e0e64260f01c9", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0xffffffffffffff54}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) sendto$x25(r3, &(0x7f0000000000)="e1c4f3db988552520262036c88ac2547032e4cfafbd01fc568f7d2675d73ab22d644022f4cda0d1ac2e07e0f3b2f9facc2eb48186d3c2ef5a5018704cbe45a3b3bf5db7ca04a9e629f2e04c814587d393345d11d8e134478c2285fb4774786300a5195", 0x63, 0x16000050, &(0x7f0000002500)={0x9, @remote={[], 0x0}}, 0x12) 07:45:52 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000040)={0x2, 'veth1_to_bridge\x00', {0x401}, 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0x100, 0xb5481f3e129391aa) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001100), &(0x7f0000001180)=0x4) [ 324.560345][ T9386] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 324.560353][ T9386] RSP: 002b:00007f34e2fa2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 07:45:52 executing program 1 (fault-call:2 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) [ 324.560368][ T9386] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d189 07:45:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 324.560378][ T9386] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 324.560387][ T9386] RBP: 00007f34e2fa2ca0 R08: 0000000000000000 R09: 0000000000000000 07:45:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4}]}, 0x18}], 0x1}, 0x0) [ 324.560396][ T9386] R10: 0800000080004101 R11: 0000000000000246 R12: 0000000000000000 07:45:52 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000340)=""/235) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 07:45:52 executing program 1 (fault-call:2 fault-nth:3): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) [ 324.560405][ T9386] R13: 00007ffc6f39b0ff R14: 00007f34e2fa39c0 R15: 000000000118cf4c [ 325.370536][ T9409] FAULT_INJECTION: forcing a failure. [ 325.370536][ T9409] name failslab, interval 1, probability 0, space 0, times 0 [ 325.370555][ T9409] CPU: 0 PID: 9409 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 325.370564][ T9409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.370568][ T9409] Call Trace: [ 325.370596][ T9409] dump_stack+0x18f/0x20d [ 325.370616][ T9409] should_fail.cold+0x5/0x14 [ 325.370638][ T9409] ? alloc_pipe_info+0x1e5/0x590 [ 325.370655][ T9409] should_failslab+0x5/0xf [ 325.370670][ T9409] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 325.370686][ T9409] __kmalloc+0x6f/0x320 [ 325.370700][ T9409] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 325.370722][ T9409] alloc_pipe_info+0x1e5/0x590 [ 325.370742][ T9409] splice_direct_to_actor+0x779/0x980 [ 325.370759][ T9409] ? inode_security+0x102/0x130 [ 325.370776][ T9409] ? avc_policy_seqno+0x9/0x70 [ 325.370791][ T9409] ? generic_splice_sendpage+0x140/0x140 [ 325.370806][ T9409] ? selinux_file_permission+0x92/0x520 [ 325.370824][ T9409] ? do_splice_to+0x170/0x170 [ 325.370839][ T9409] ? security_file_permission+0x248/0x560 [ 325.370854][ T9409] ? lock_is_held_type+0xbb/0xf0 [ 325.370877][ T9409] do_splice_direct+0x1b3/0x280 [ 325.370894][ T9409] ? splice_direct_to_actor+0x980/0x980 [ 325.370913][ T9409] ? security_file_permission+0x248/0x560 [ 325.370936][ T9409] do_sendfile+0x55f/0xd40 [ 325.370960][ T9409] ? do_compat_pwritev64+0x1b0/0x1b0 [ 325.370977][ T9409] ? wait_for_completion+0x260/0x260 [ 325.370995][ T9409] ? vfs_write+0x1b0/0x730 [ 325.371013][ T9409] __x64_sys_sendfile64+0x1cc/0x210 [ 325.371028][ T9409] ? __ia32_sys_sendfile+0x220/0x220 [ 325.371046][ T9409] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 325.371062][ T9409] ? trace_hardirqs_on+0x5f/0x220 [ 325.371077][ T9409] ? lockdep_hardirqs_on+0x76/0xf0 [ 325.371095][ T9409] do_syscall_64+0x2d/0x70 [ 325.371114][ T9409] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 325.371125][ T9409] RIP: 0033:0x45d189 [ 325.371141][ T9409] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 325.371150][ T9409] RSP: 002b:00007f34e2fa2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 325.371165][ T9409] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d189 [ 325.371174][ T9409] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 325.371184][ T9409] RBP: 00007f34e2fa2ca0 R08: 0000000000000000 R09: 0000000000000000 [ 325.371193][ T9409] R10: 0800000080004101 R11: 0000000000000246 R12: 0000000000000001 [ 325.371203][ T9409] R13: 00007ffc6f39b0ff R14: 00007f34e2fa39c0 R15: 000000000118cf4c [ 325.569762][ T9428] FAULT_INJECTION: forcing a failure. [ 325.569762][ T9428] name failslab, interval 1, probability 0, space 0, times 0 [ 325.569780][ T9428] CPU: 0 PID: 9428 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 325.569789][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.569793][ T9428] Call Trace: [ 325.569813][ T9428] dump_stack+0x18f/0x20d [ 325.569831][ T9428] should_fail.cold+0x5/0x14 [ 325.569851][ T9428] should_failslab+0x5/0xf [ 325.569866][ T9428] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 325.569882][ T9428] kmem_cache_alloc_node_trace+0x59/0x400 [ 325.569902][ T9428] __kmalloc_node+0x38/0x60 [ 325.569920][ T9428] kvmalloc_node+0x61/0xf0 [ 325.569936][ T9428] iov_iter_get_pages_alloc+0x82a/0x1440 [ 325.569956][ T9428] ? push_pipe+0x680/0x680 [ 325.569972][ T9428] ? stack_trace_save+0x8c/0xc0 [ 325.569986][ T9428] ? stack_trace_consume_entry+0x160/0x160 [ 325.570000][ T9428] ? iov_iter_pipe+0xf1/0x2a0 [ 325.570022][ T9428] default_file_splice_read.constprop.0+0x1c9/0x9e0 [ 325.570044][ T9428] ? kasan_save_stack+0x32/0x40 [ 325.570056][ T9428] ? kasan_save_stack+0x1b/0x40 [ 325.570070][ T9428] ? __kmalloc+0x1a8/0x320 [ 325.570085][ T9428] ? do_splice_direct+0x1b3/0x280 [ 325.570099][ T9428] ? do_sendfile+0x55f/0xd40 [ 325.570110][ T9428] ? __x64_sys_sendfile64+0x1cc/0x210 [ 325.570125][ T9428] ? iter_file_splice_write+0xbe0/0xbe0 [ 325.570140][ T9428] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 325.570155][ T9428] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 325.570169][ T9428] ? unwind_next_frame+0xe3b/0x1f90 [ 325.570193][ T9428] ? find_held_lock+0x2d/0x110 [ 325.570210][ T9428] ? fs_reclaim_release+0xa3/0x160 [ 325.570222][ T9428] ? __fsnotify_parent+0x48c/0x930 [ 325.570238][ T9428] ? lock_is_held_type+0xbb/0xf0 [ 325.570251][ T9428] ? fsnotify+0xf80/0xf80 [ 325.570277][ T9428] ? inode_security+0x102/0x130 [ 325.570294][ T9428] ? avc_policy_seqno+0x9/0x70 [ 325.570309][ T9428] ? selinux_file_permission+0x92/0x520 [ 325.570328][ T9428] ? security_file_permission+0x248/0x560 [ 325.570349][ T9428] do_splice_to+0x137/0x170 [ 325.570367][ T9428] splice_direct_to_actor+0x307/0x980 [ 325.570386][ T9428] ? generic_splice_sendpage+0x140/0x140 [ 325.570403][ T9428] ? do_splice_to+0x170/0x170 [ 325.570417][ T9428] ? security_file_permission+0x248/0x560 [ 325.570439][ T9428] do_splice_direct+0x1b3/0x280 [ 325.570456][ T9428] ? splice_direct_to_actor+0x980/0x980 [ 325.570474][ T9428] ? security_file_permission+0x248/0x560 [ 325.570498][ T9428] do_sendfile+0x55f/0xd40 [ 325.570522][ T9428] ? do_compat_pwritev64+0x1b0/0x1b0 [ 325.570537][ T9428] ? wait_for_completion+0x260/0x260 [ 325.570552][ T9428] ? vfs_write+0x1b0/0x730 [ 325.570567][ T9428] __x64_sys_sendfile64+0x1cc/0x210 [ 325.570580][ T9428] ? __ia32_sys_sendfile+0x220/0x220 [ 325.570594][ T9428] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 325.570608][ T9428] ? trace_hardirqs_on+0x5f/0x220 [ 325.570622][ T9428] ? lockdep_hardirqs_on+0x76/0xf0 [ 325.570637][ T9428] do_syscall_64+0x2d/0x70 [ 325.570653][ T9428] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 325.570663][ T9428] RIP: 0033:0x45d189 [ 325.570680][ T9428] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 325.570689][ T9428] RSP: 002b:00007f34e2fa2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 325.570702][ T9428] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d189 [ 325.570709][ T9428] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 325.570717][ T9428] RBP: 00007f34e2fa2ca0 R08: 0000000000000000 R09: 0000000000000000 [ 325.570726][ T9428] R10: 0800000080004101 R11: 0000000000000246 R12: 0000000000000002 [ 325.570735][ T9428] R13: 00007ffc6f39b0ff R14: 00007f34e2fa39c0 R15: 000000000118cf4c [ 325.591469][ T9426] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 325.787174][ T9442] FAULT_INJECTION: forcing a failure. [ 325.787174][ T9442] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 325.787193][ T9442] CPU: 0 PID: 9442 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 325.787202][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.787207][ T9442] Call Trace: [ 325.787227][ T9442] dump_stack+0x18f/0x20d [ 325.787247][ T9442] should_fail.cold+0x5/0x14 [ 325.787274][ T9442] __alloc_pages_nodemask+0x183/0x810 [ 325.787292][ T9442] ? lock_downgrade+0x830/0x830 [ 325.787310][ T9442] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 325.787325][ T9442] ? lock_is_held_type+0xbb/0xf0 [ 325.787344][ T9442] ? lock_is_held_type+0xbb/0xf0 [ 325.787366][ T9442] alloc_pages_current+0x187/0x280 [ 325.787384][ T9442] push_pipe+0x2a4/0x680 [ 325.787405][ T9442] iov_iter_get_pages_alloc+0x8b5/0x1440 [ 325.787424][ T9442] ? push_pipe+0x680/0x680 [ 325.787441][ T9442] ? stack_trace_consume_entry+0x160/0x160 [ 325.787455][ T9442] ? iov_iter_pipe+0xf1/0x2a0 [ 325.787475][ T9442] default_file_splice_read.constprop.0+0x1c9/0x9e0 [ 325.787489][ T9442] ? kasan_save_stack+0x32/0x40 [ 325.787501][ T9442] ? kasan_save_stack+0x1b/0x40 [ 325.787512][ T9442] ? __kmalloc+0x1a8/0x320 [ 325.787526][ T9442] ? do_splice_direct+0x1b3/0x280 [ 325.787539][ T9442] ? do_sendfile+0x55f/0xd40 [ 325.787551][ T9442] ? __x64_sys_sendfile64+0x1cc/0x210 [ 325.787566][ T9442] ? iter_file_splice_write+0xbe0/0xbe0 [ 325.787582][ T9442] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 325.787597][ T9442] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 325.787612][ T9442] ? unwind_next_frame+0xe3b/0x1f90 [ 325.787636][ T9442] ? find_held_lock+0x2d/0x110 [ 325.787653][ T9442] ? fs_reclaim_release+0xa3/0x160 [ 325.787666][ T9442] ? __fsnotify_parent+0x48c/0x930 [ 325.787681][ T9442] ? lock_is_held_type+0xbb/0xf0 [ 325.787694][ T9442] ? fsnotify+0xf80/0xf80 [ 325.787714][ T9442] ? inode_security+0x102/0x130 [ 325.787730][ T9442] ? avc_policy_seqno+0x9/0x70 [ 325.787744][ T9442] ? selinux_file_permission+0x92/0x520 [ 325.787762][ T9442] ? security_file_permission+0x248/0x560 [ 325.787783][ T9442] do_splice_to+0x137/0x170 [ 325.787802][ T9442] splice_direct_to_actor+0x307/0x980 [ 325.787827][ T9442] ? generic_splice_sendpage+0x140/0x140 [ 325.787846][ T9442] ? do_splice_to+0x170/0x170 [ 325.787859][ T9442] ? security_file_permission+0x248/0x560 [ 325.787882][ T9442] do_splice_direct+0x1b3/0x280 [ 325.787900][ T9442] ? splice_direct_to_actor+0x980/0x980 [ 325.787919][ T9442] ? security_file_permission+0x248/0x560 [ 325.787942][ T9442] do_sendfile+0x55f/0xd40 [ 325.787966][ T9442] ? do_compat_pwritev64+0x1b0/0x1b0 [ 325.787980][ T9442] ? wait_for_completion+0x260/0x260 [ 325.787993][ T9442] ? vfs_write+0x1b0/0x730 [ 325.788010][ T9442] __x64_sys_sendfile64+0x1cc/0x210 [ 325.788025][ T9442] ? __ia32_sys_sendfile+0x220/0x220 [ 325.788040][ T9442] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 325.788056][ T9442] ? trace_hardirqs_on+0x5f/0x220 [ 325.788071][ T9442] ? lockdep_hardirqs_on+0x76/0xf0 [ 325.788088][ T9442] do_syscall_64+0x2d/0x70 [ 325.788105][ T9442] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 325.788116][ T9442] RIP: 0033:0x45d189 [ 325.788131][ T9442] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 325.788140][ T9442] RSP: 002b:00007f34e2fa2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 325.788155][ T9442] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d189 [ 325.788164][ T9442] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 325.788173][ T9442] RBP: 00007f34e2fa2ca0 R08: 0000000000000000 R09: 0000000000000000 [ 325.788182][ T9442] R10: 0800000080004101 R11: 0000000000000246 R12: 0000000000000003 [ 325.788192][ T9442] R13: 00007ffc6f39b0ff R14: 00007f34e2fa39c0 R15: 000000000118cf4c 07:45:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004102) 07:45:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:45:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x14, 0x26, 0x1, 0x0, 0x0, "", [@typed={0x4, 0xd}]}, 0x14}], 0x1}, 0x0) 07:45:54 executing program 1 (fault-call:2 fault-nth:4): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:54 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400202, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000080)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 07:45:54 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/l2cap\x00') ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug'}}]}}) [ 325.817917][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.817972][ T9448] netlink: 'syz-executor.2': attribute type 20 has an invalid length. [ 327.443873][ T9472] FAULT_INJECTION: forcing a failure. [ 327.443873][ T9472] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 327.506063][ T9472] CPU: 0 PID: 9472 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 327.514485][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.524548][ T9472] Call Trace: [ 327.527848][ T9472] dump_stack+0x18f/0x20d [ 327.532193][ T9472] should_fail.cold+0x5/0x14 [ 327.536798][ T9472] __alloc_pages_nodemask+0x183/0x810 [ 327.542186][ T9472] ? lock_downgrade+0x830/0x830 [ 327.547056][ T9472] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 327.553847][ T9472] ? lock_is_held_type+0xbb/0xf0 [ 327.558804][ T9472] ? lock_is_held_type+0xbb/0xf0 [ 327.563764][ T9472] alloc_pages_current+0x187/0x280 [ 327.568894][ T9472] push_pipe+0x2a4/0x680 [ 327.573163][ T9472] iov_iter_get_pages_alloc+0x8b5/0x1440 [ 327.578830][ T9472] ? push_pipe+0x680/0x680 [ 327.583264][ T9472] ? stack_trace_consume_entry+0x160/0x160 [ 327.589081][ T9472] ? iov_iter_pipe+0xf1/0x2a0 [ 327.593776][ T9472] default_file_splice_read.constprop.0+0x1c9/0x9e0 [ 327.600376][ T9472] ? kasan_save_stack+0x32/0x40 [ 327.605241][ T9472] ? kasan_save_stack+0x1b/0x40 [ 327.610100][ T9472] ? __kmalloc+0x1a8/0x320 [ 327.614528][ T9472] ? do_splice_direct+0x1b3/0x280 [ 327.619560][ T9472] ? do_sendfile+0x55f/0xd40 [ 327.624161][ T9472] ? __x64_sys_sendfile64+0x1cc/0x210 [ 327.629547][ T9472] ? iter_file_splice_write+0xbe0/0xbe0 [ 327.635107][ T9472] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 327.641098][ T9472] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 327.647093][ T9472] ? unwind_next_frame+0xe3b/0x1f90 [ 327.652313][ T9472] ? find_held_lock+0x2d/0x110 [ 327.657091][ T9472] ? fs_reclaim_release+0xa3/0x160 [ 327.662213][ T9472] ? __fsnotify_parent+0x48c/0x930 [ 327.667336][ T9472] ? lock_is_held_type+0xbb/0xf0 [ 327.672277][ T9472] ? fsnotify+0xf80/0xf80 [ 327.676626][ T9472] ? inode_security+0x102/0x130 [ 327.681487][ T9472] ? avc_policy_seqno+0x9/0x70 [ 327.686347][ T9472] ? selinux_file_permission+0x92/0x520 [ 327.691919][ T9472] ? security_file_permission+0x248/0x560 [ 327.697665][ T9472] do_splice_to+0x137/0x170 [ 327.702186][ T9472] splice_direct_to_actor+0x307/0x980 [ 327.707582][ T9472] ? generic_splice_sendpage+0x140/0x140 [ 327.713237][ T9472] ? do_splice_to+0x170/0x170 [ 327.717915][ T9472] ? security_file_permission+0x248/0x560 [ 327.723713][ T9472] do_splice_direct+0x1b3/0x280 [ 327.728579][ T9472] ? splice_direct_to_actor+0x980/0x980 [ 327.734133][ T9472] ? security_file_permission+0x248/0x560 [ 327.739863][ T9472] do_sendfile+0x55f/0xd40 [ 327.744297][ T9472] ? do_compat_pwritev64+0x1b0/0x1b0 [ 327.749592][ T9472] ? wait_for_completion+0x260/0x260 [ 327.754886][ T9472] ? vfs_write+0x1b0/0x730 [ 327.759325][ T9472] __x64_sys_sendfile64+0x1cc/0x210 [ 327.764533][ T9472] ? __ia32_sys_sendfile+0x220/0x220 [ 327.769831][ T9472] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 327.775820][ T9472] ? trace_hardirqs_on+0x5f/0x220 [ 327.780858][ T9472] ? lockdep_hardirqs_on+0x76/0xf0 [ 327.785984][ T9472] do_syscall_64+0x2d/0x70 [ 327.790411][ T9472] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 327.796307][ T9472] RIP: 0033:0x45d189 [ 327.800218][ T9472] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 327.819847][ T9472] RSP: 002b:00007f34e2fa2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 327.828290][ T9472] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d189 [ 327.836276][ T9472] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 327.844268][ T9472] RBP: 00007f34e2fa2ca0 R08: 0000000000000000 R09: 0000000000000000 07:45:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x14, 0x26, 0x1, 0x0, 0x0, "", [@typed={0x4, 0xd}]}, 0x14}], 0x1}, 0x0) 07:45:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x14, 0x26, 0x1, 0x0, 0x0, "", [@typed={0x4, 0xd}]}, 0x14}], 0x1}, 0x0) 07:45:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) [ 327.852252][ T9472] R10: 0800000080004101 R11: 0000000000000246 R12: 0000000000000004 [ 327.860252][ T9472] R13: 00007ffc6f39b0ff R14: 00007f34e2fa39c0 R15: 000000000118cf4c 07:45:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 07:45:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) 07:45:54 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x101b, r0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000000)={0x7, 0x3, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x4c9]}) r5 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r5, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r6 = signalfd4(r5, &(0x7f0000000040)={[0x8]}, 0x8, 0x80400) chroot(&(0x7f0000001100)='./file0\x00') ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000100)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 07:45:55 executing program 3 (fault-call:4 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) [ 328.259667][ T9525] FAULT_INJECTION: forcing a failure. [ 328.259667][ T9525] name failslab, interval 1, probability 0, space 0, times 0 07:45:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:45:55 executing program 3 (fault-call:4 fault-nth:1): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 328.259686][ T9525] CPU: 0 PID: 9525 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 328.259695][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.259700][ T9525] Call Trace: [ 328.259720][ T9525] dump_stack+0x18f/0x20d [ 328.259740][ T9525] should_fail.cold+0x5/0x14 07:45:55 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f6e756c6c6230004904449c40000000000000008982ec771b321e05b02a"], &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='ocfs2\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x200040) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x1a1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:45:55 executing program 3 (fault-call:4 fault-nth:2): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 328.259761][ T9525] should_failslab+0x5/0xf [ 328.259778][ T9525] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 328.259795][ T9525] kmem_cache_alloc_node+0x53/0x3f0 [ 328.259948][ T9525] __alloc_skb+0x71/0x550 [ 328.260001][ T9525] netlink_sendmsg+0x94f/0xd90 [ 328.260025][ T9525] ? netlink_unicast+0x7d0/0x7d0 [ 328.260080][ T9525] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 328.260093][ T9525] ? netlink_unicast+0x7d0/0x7d0 [ 328.260145][ T9525] sock_sendmsg+0xcf/0x120 [ 328.260161][ T9525] ____sys_sendmsg+0x6e8/0x810 07:45:55 executing program 3 (fault-call:4 fault-nth:3): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 328.260179][ T9525] ? kernel_sendmsg+0x50/0x50 [ 328.260194][ T9525] ? do_recvmmsg+0x6d0/0x6d0 [ 328.260213][ T9525] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 328.260226][ T9525] ? lock_downgrade+0x830/0x830 07:45:55 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local}, {0x4e21, 0x0, 0x8}}}}}, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/135) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000200)={0x1, 0x0, 0x4, 0x10000, 0x3, {0x77359400}, {0x4, 0x0, 0x1, 0x18, 0x9, 0x6, "1a184817"}, 0x1, 0x1, @planes=&(0x7f0000000140)={0x1ff, 0x8000, @userptr=0x121, 0x1}, 0x5}) ioctl$KDDELIO(r0, 0x4b35, 0x3) [ 328.260270][ T9525] ? _parse_integer+0x132/0x180 [ 328.260289][ T9525] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 328.260308][ T9525] ___sys_sendmsg+0xf3/0x170 [ 328.260325][ T9525] ? sendmsg_copy_msghdr+0x160/0x160 [ 328.260348][ T9525] ? __fget_files+0x272/0x400 [ 328.260367][ T9525] ? lock_downgrade+0x830/0x830 [ 328.260384][ T9525] ? find_held_lock+0x2d/0x110 [ 328.260398][ T9525] ? ksys_write+0x212/0x250 [ 328.260415][ T9525] ? __fget_files+0x294/0x400 07:45:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 328.260433][ T9525] ? __fget_light+0xea/0x280 [ 328.260450][ T9525] __sys_sendmsg+0xe5/0x1b0 [ 328.260464][ T9525] ? __sys_sendmsg_sock+0xb0/0xb0 [ 328.260488][ T9525] ? trace_hardirqs_on+0x5f/0x220 [ 328.260505][ T9525] ? lockdep_hardirqs_on+0x76/0xf0 [ 328.260522][ T9525] do_syscall_64+0x2d/0x70 [ 328.260540][ T9525] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 328.260551][ T9525] RIP: 0033:0x45d189 [ 328.260566][ T9525] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 328.260575][ T9525] RSP: 002b:00007f9261392c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.260590][ T9525] RAX: ffffffffffffffda RBX: 000000000002bf80 RCX: 000000000045d189 [ 328.260599][ T9525] RDX: 0000000000000000 RSI: 0000000020005680 RDI: 0000000000000006 [ 328.260608][ T9525] RBP: 00007f9261392ca0 R08: 0000000000000000 R09: 0000000000000000 [ 328.260617][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.260626][ T9525] R13: 00007ffe7d3bf86f R14: 00007f92613939c0 R15: 000000000118cf4c [ 328.488603][ T9540] FAULT_INJECTION: forcing a failure. [ 328.488603][ T9540] name failslab, interval 1, probability 0, space 0, times 0 [ 328.488623][ T9540] CPU: 0 PID: 9540 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 328.488632][ T9540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.488637][ T9540] Call Trace: [ 328.488658][ T9540] dump_stack+0x18f/0x20d [ 328.488679][ T9540] should_fail.cold+0x5/0x14 [ 328.488701][ T9540] should_failslab+0x5/0xf [ 328.488716][ T9540] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 328.488734][ T9540] kmem_cache_alloc_node_trace+0x59/0x400 [ 328.488752][ T9540] ? __alloc_skb+0x71/0x550 [ 328.488855][ T9540] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 328.488875][ T9540] __kmalloc_node_track_caller+0x38/0x60 [ 328.488892][ T9540] __alloc_skb+0xae/0x550 [ 328.488912][ T9540] netlink_sendmsg+0x94f/0xd90 [ 328.488933][ T9540] ? netlink_unicast+0x7d0/0x7d0 [ 328.488956][ T9540] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 328.488971][ T9540] ? netlink_unicast+0x7d0/0x7d0 [ 328.488988][ T9540] sock_sendmsg+0xcf/0x120 [ 328.489006][ T9540] ____sys_sendmsg+0x6e8/0x810 [ 328.489024][ T9540] ? kernel_sendmsg+0x50/0x50 [ 328.489039][ T9540] ? do_recvmmsg+0x6d0/0x6d0 [ 328.489059][ T9540] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 328.489075][ T9540] ? rcu_preempt_deferred_qs_irqrestore+0x217/0xb00 [ 328.489089][ T9540] ? find_held_lock+0x2d/0x110 [ 328.489113][ T9540] ? mark_lock+0xbc/0x1710 [ 328.489131][ T9540] ___sys_sendmsg+0xf3/0x170 [ 328.489147][ T9540] ? sendmsg_copy_msghdr+0x160/0x160 [ 328.489161][ T9540] ? __fget_files+0x272/0x400 [ 328.489177][ T9540] ? lock_downgrade+0x830/0x830 [ 328.489192][ T9540] ? find_held_lock+0x2d/0x110 [ 328.489208][ T9540] ? ksys_write+0x212/0x250 [ 328.489227][ T9540] ? __fget_files+0x294/0x400 [ 328.489245][ T9540] ? __fget_light+0xea/0x280 [ 328.489264][ T9540] __sys_sendmsg+0xe5/0x1b0 [ 328.489280][ T9540] ? __sys_sendmsg_sock+0xb0/0xb0 [ 328.489305][ T9540] ? trace_hardirqs_on+0x5f/0x220 [ 328.489322][ T9540] ? lockdep_hardirqs_on+0x76/0xf0 [ 328.489338][ T9540] do_syscall_64+0x2d/0x70 [ 328.489355][ T9540] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 328.489366][ T9540] RIP: 0033:0x45d189 [ 328.489382][ T9540] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 328.489391][ T9540] RSP: 002b:00007f9261392c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.489405][ T9540] RAX: ffffffffffffffda RBX: 000000000002bf80 RCX: 000000000045d189 [ 328.489415][ T9540] RDX: 0000000000000000 RSI: 0000000020005680 RDI: 0000000000000006 [ 328.489425][ T9540] RBP: 00007f9261392ca0 R08: 0000000000000000 R09: 0000000000000000 [ 328.489434][ T9540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.489444][ T9540] R13: 00007ffe7d3bf86f R14: 00007f92613939c0 R15: 000000000118cf4c [ 328.659832][ T9542] FAULT_INJECTION: forcing a failure. [ 328.659832][ T9542] name failslab, interval 1, probability 0, space 0, times 0 [ 328.659871][ T9542] CPU: 1 PID: 9542 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 328.659881][ T9542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.659886][ T9542] Call Trace: [ 328.659907][ T9542] dump_stack+0x18f/0x20d [ 328.659928][ T9542] should_fail.cold+0x5/0x14 [ 328.659951][ T9542] should_failslab+0x5/0xf [ 328.659966][ T9542] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 328.659983][ T9542] kmem_cache_alloc+0x46/0x3a0 [ 328.660008][ T9542] skb_clone+0x14f/0x3c0 [ 328.660029][ T9542] netlink_deliver_tap+0x990/0xb70 [ 328.660052][ T9542] netlink_unicast+0x5e5/0x7d0 [ 328.660071][ T9542] ? netlink_attachskb+0x810/0x810 [ 328.660085][ T9542] ? _copy_from_iter_full+0x247/0x890 [ 328.660107][ T9542] netlink_sendmsg+0x856/0xd90 [ 328.660126][ T9542] ? netlink_unicast+0x7d0/0x7d0 [ 328.660149][ T9542] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 328.660163][ T9542] ? netlink_unicast+0x7d0/0x7d0 [ 328.660180][ T9542] sock_sendmsg+0xcf/0x120 [ 328.660198][ T9542] ____sys_sendmsg+0x6e8/0x810 [ 328.660217][ T9542] ? kernel_sendmsg+0x50/0x50 [ 328.660233][ T9542] ? do_recvmmsg+0x6d0/0x6d0 [ 328.660254][ T9542] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 328.660269][ T9542] ? lock_downgrade+0x830/0x830 [ 328.660287][ T9542] ? _parse_integer+0x132/0x180 [ 328.660307][ T9542] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 328.660327][ T9542] ___sys_sendmsg+0xf3/0x170 [ 328.660346][ T9542] ? sendmsg_copy_msghdr+0x160/0x160 [ 328.660363][ T9542] ? __fget_files+0x272/0x400 [ 328.660383][ T9542] ? lock_downgrade+0x830/0x830 [ 328.660400][ T9542] ? find_held_lock+0x2d/0x110 [ 328.660418][ T9542] ? ksys_write+0x212/0x250 [ 328.660440][ T9542] ? __fget_files+0x294/0x400 [ 328.660464][ T9542] ? __fget_light+0xea/0x280 [ 328.660495][ T9542] __sys_sendmsg+0xe5/0x1b0 [ 328.660513][ T9542] ? __sys_sendmsg_sock+0xb0/0xb0 [ 328.660542][ T9542] ? trace_hardirqs_on+0x5f/0x220 [ 328.660559][ T9542] ? lockdep_hardirqs_on+0x76/0xf0 [ 328.660578][ T9542] do_syscall_64+0x2d/0x70 [ 328.660595][ T9542] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 328.660606][ T9542] RIP: 0033:0x45d189 [ 328.660621][ T9542] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 328.660630][ T9542] RSP: 002b:00007f9261392c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.660645][ T9542] RAX: ffffffffffffffda RBX: 000000000002bf80 RCX: 000000000045d189 [ 328.660659][ T9542] RDX: 0000000000000000 RSI: 0000000020005680 RDI: 0000000000000006 [ 328.660668][ T9542] RBP: 00007f9261392ca0 R08: 0000000000000000 R09: 0000000000000000 [ 328.660676][ T9542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 328.660684][ T9542] R13: 00007ffe7d3bf86f R14: 00007f92613939c0 R15: 000000000118cf4c [ 328.804470][ T9557] (syz-executor.0,9557,1):ocfs2_fill_super:1003 ERROR: superblock probe failed! [ 328.804562][ T9557] (syz-executor.0,9557,1):ocfs2_fill_super:1190 ERROR: status = -22 [ 328.828419][ T9560] (syz-executor.0,9560,1):ocfs2_fill_super:1003 ERROR: superblock probe failed! [ 328.828439][ T9560] (syz-executor.0,9560,1):ocfs2_fill_super:1190 ERROR: status = -22 [ 328.904936][ T9562] FAULT_INJECTION: forcing a failure. [ 328.904936][ T9562] name failslab, interval 1, probability 0, space 0, times 0 [ 328.905103][ T9562] CPU: 1 PID: 9562 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 328.905113][ T9562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.905119][ T9562] Call Trace: [ 328.905139][ T9562] dump_stack+0x18f/0x20d [ 328.905161][ T9562] should_fail.cold+0x5/0x14 [ 328.905257][ T9562] ? genl_family_rcv_msg_attrs_parse.isra.0+0xb5/0x250 [ 328.905276][ T9562] should_failslab+0x5/0xf [ 328.905291][ T9562] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 328.905308][ T9562] __kmalloc+0x6f/0x320 [ 328.905324][ T9562] ? bpf_lsm_capable+0x5/0x10 [ 328.905347][ T9562] genl_family_rcv_msg_attrs_parse.isra.0+0xb5/0x250 [ 328.905367][ T9562] genl_rcv_msg+0x4a3/0x980 [ 328.905392][ T9562] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 328.905411][ T9562] ? lock_acquire+0x1f1/0xad0 [ 328.905424][ T9562] ? genl_rcv+0x15/0x40 [ 328.905451][ T9562] ? lock_release+0x8e0/0x8e0 [ 328.905492][ T9562] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 328.905513][ T9562] netlink_rcv_skb+0x15a/0x430 [ 328.905533][ T9562] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 328.905550][ T9562] ? netlink_ack+0xa10/0xa10 [ 328.905579][ T9562] genl_rcv+0x24/0x40 [ 328.905594][ T9562] netlink_unicast+0x533/0x7d0 [ 328.905615][ T9562] ? netlink_attachskb+0x810/0x810 [ 328.905631][ T9562] ? _copy_from_iter_full+0x247/0x890 [ 328.905655][ T9562] netlink_sendmsg+0x856/0xd90 [ 328.905675][ T9562] ? netlink_unicast+0x7d0/0x7d0 [ 328.905700][ T9562] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 328.905716][ T9562] ? netlink_unicast+0x7d0/0x7d0 [ 328.905734][ T9562] sock_sendmsg+0xcf/0x120 [ 328.905752][ T9562] ____sys_sendmsg+0x6e8/0x810 [ 328.905772][ T9562] ? kernel_sendmsg+0x50/0x50 [ 328.905787][ T9562] ? do_recvmmsg+0x6d0/0x6d0 [ 328.905809][ T9562] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 328.905825][ T9562] ? lock_downgrade+0x830/0x830 [ 328.905841][ T9562] ? _parse_integer+0x132/0x180 [ 328.905860][ T9562] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 328.905881][ T9562] ___sys_sendmsg+0xf3/0x170 [ 328.905902][ T9562] ? sendmsg_copy_msghdr+0x160/0x160 [ 328.905919][ T9562] ? __fget_files+0x272/0x400 [ 328.905939][ T9562] ? lock_downgrade+0x830/0x830 [ 328.905956][ T9562] ? find_held_lock+0x2d/0x110 [ 328.905974][ T9562] ? ksys_write+0x212/0x250 [ 328.905996][ T9562] ? __fget_files+0x294/0x400 [ 328.906019][ T9562] ? __fget_light+0xea/0x280 [ 328.906048][ T9562] __sys_sendmsg+0xe5/0x1b0 [ 328.906065][ T9562] ? __sys_sendmsg_sock+0xb0/0xb0 [ 328.906094][ T9562] ? trace_hardirqs_on+0x5f/0x220 [ 328.906111][ T9562] ? lockdep_hardirqs_on+0x76/0xf0 [ 328.906129][ T9562] do_syscall_64+0x2d/0x70 [ 328.906149][ T9562] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 328.906161][ T9562] RIP: 0033:0x45d189 [ 328.906177][ T9562] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 328.906187][ T9562] RSP: 002b:00007f9261392c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.906203][ T9562] RAX: ffffffffffffffda RBX: 000000000002bf80 RCX: 000000000045d189 [ 328.906213][ T9562] RDX: 0000000000000000 RSI: 0000000020005680 RDI: 0000000000000006 [ 328.906223][ T9562] RBP: 00007f9261392ca0 R08: 0000000000000000 R09: 0000000000000000 [ 328.906233][ T9562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 328.906243][ T9562] R13: 00007ffe7d3bf86f R14: 00007f92613939c0 R15: 000000000118cf4c 07:45:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004104) 07:45:58 executing program 3 (fault-call:4 fault-nth:4): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:45:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x6, &(0x7f00000014c0)=[{&(0x7f00000000c0)="e267cdc11a56e4cc6d5a2caf070f338ca401f984cac60cf3b19e4862e12a412445489d31e3b756b6776e265c94705f12d538ab99a9160f13783ed06b3956026e1eff37b9cc9b2700836fd9340f207d53b6f298dd02770913a42d3e37d36c53de", 0x60, 0x5}, {&(0x7f0000000140)="6288865a71c23023ee1dd3056498d42f329daa29858acc02d0de89928896153582899bb315f2563e5af12b771de629ab3928a60f40d84c0874707f881377f50f431fd26dbba8f1ca9a230e79dd75fe66df85dd7ec121470d0a551e33cf3f167d80616e88ccdccd8e65e8305c177f48695a0f7062eed09668f2608cfdfe8dede9c4d7790f4dde091f8397ba0126f7890f379016807d9e51b3b34b53232caa089594c43aea0d4572fc2eaf41e49029fa78d631feccbb26305c9e5b72dd9f4ebff093cf58da8720307d2e00ef7d1d35ef3ac7", 0xd1, 0xda}, {&(0x7f0000000300)="8eae883bc7ead0eeb4796b9d9708f00301ab7d9f41bc9c6f9cbef8f304acd01ecaee7ce813c7580ca3e0eeb72e0ca0597f9f954055715adc14a6fbf35e6008e792baa0d6d434f4efcf3f05b11ba3bcd0d5a0444204cecffbbc9aa5cd4eaa0e0617241687c16e331ea07d289fbd85a3819ad273da5d9ba6c357afaabe155c4c7a9a746976a25832929ef5eabda5bfea", 0x8f}, {&(0x7f00000003c0)="3b5618c14be95e5854f5d294cf75b81566749fabb872f23b8fc5e40ac3cf36da99b5ae7ddb6f0e8f43906632f0b6c3001c419d21be3c526907bfec76e728dc5d8c668cd43df454ce1dbf2f816621e30ac5b637c59f336623623caedffb8008de60675682b904512b822d1ec29b9f0b568e8113e9bc6a3a4d7fd116bea959cfa7d660df271cf8ea58d1c3c5d4840e29f69b4cc607279150d1184eb843f50779f75406c118f85251e9f6b0824c970ce8c803703a6c53703540922c64b6e6e8ac33bf3a785cb38ac1bb078e6ddf6a04513ed5f0aac64ba261019ef4268e90d513605cd75094f3", 0xe5, 0x65}, {&(0x7f00000004c0)="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", 0x1000, 0xfffffffffffffffe}, {&(0x7f0000000240)="8051737d13c15a3d0dc96334c6b59bae871016d96cbf674ea4babdcd7f4fa0b470104cc648d27f624b0ab996b5c3278e2a30b8d555891ca38c095fb10bb459c2055d1ae744c0d7908730ffea4f1076fca18253d4f6ac2cb6", 0x58, 0x2}], 0x2024400, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x2}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000001580)={@empty, @mcast2, @remote, 0x3, 0x1000, 0xf321, 0x0, 0x2, 0x41100240, r5}) 07:45:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x100000000, 0x0, 0x80000001, 0x800}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r1], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r2, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 07:45:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080000010) 07:45:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 07:45:58 executing program 3 (fault-call:4 fault-nth:5): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 331.459398][ T9596] FAULT_INJECTION: forcing a failure. [ 331.459398][ T9596] name failslab, interval 1, probability 0, space 0, times 0 [ 331.459417][ T9596] CPU: 1 PID: 9596 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 331.459427][ T9596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.459432][ T9596] Call Trace: [ 331.459453][ T9596] dump_stack+0x18f/0x20d [ 331.459475][ T9596] should_fail.cold+0x5/0x14 [ 331.459607][ T9596] ? wiphy_new_nm+0x6f3/0x1e80 [ 331.459624][ T9596] should_failslab+0x5/0xf [ 331.459639][ T9596] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 331.459656][ T9596] __kmalloc+0x6f/0x320 [ 331.459670][ T9596] ? mark_lock+0xbc/0x1710 [ 331.459692][ T9596] wiphy_new_nm+0x6f3/0x1e80 [ 331.459779][ T9596] ieee80211_alloc_hw_nm+0x390/0x2360 [ 331.459872][ T9596] ? mac80211_hwsim_new_radio+0x166/0x4540 [ 331.459888][ T9596] ? trace_hardirqs_on+0x5f/0x220 [ 331.459910][ T9596] mac80211_hwsim_new_radio+0x1f6/0x4540 [ 331.459931][ T9596] ? lock_acquire+0x1f1/0xad0 [ 331.459949][ T9596] ? fs_reclaim_acquire+0xa8/0x180 [ 331.459972][ T9596] ? hwsim_virtio_rx_work+0x350/0x350 [ 331.459989][ T9596] ? check_nnp_nosuid.isra.0+0x256/0x2a0 [ 331.460009][ T9596] hwsim_new_radio_nl+0x93e/0xf8c [ 331.460029][ T9596] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 331.460057][ T9596] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 331.460072][ T9596] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 331.460092][ T9596] genl_rcv_msg+0x61d/0x980 [ 331.460117][ T9596] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 331.460143][ T9596] ? lock_release+0x8e0/0x8e0 [ 331.460158][ T9596] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 331.460178][ T9596] netlink_rcv_skb+0x15a/0x430 [ 331.460196][ T9596] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 331.460213][ T9596] ? netlink_ack+0xa10/0xa10 [ 331.460239][ T9596] genl_rcv+0x24/0x40 [ 331.460252][ T9596] netlink_unicast+0x533/0x7d0 [ 331.460270][ T9596] ? netlink_attachskb+0x810/0x810 [ 331.460285][ T9596] ? _copy_from_iter_full+0x247/0x890 [ 331.460307][ T9596] netlink_sendmsg+0x856/0xd90 [ 331.460326][ T9596] ? netlink_unicast+0x7d0/0x7d0 [ 331.460350][ T9596] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 331.460364][ T9596] ? netlink_unicast+0x7d0/0x7d0 [ 331.460380][ T9596] sock_sendmsg+0xcf/0x120 [ 331.460397][ T9596] ____sys_sendmsg+0x6e8/0x810 [ 331.460416][ T9596] ? kernel_sendmsg+0x50/0x50 [ 331.460431][ T9596] ? do_recvmmsg+0x6d0/0x6d0 [ 331.460450][ T9596] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 331.460464][ T9596] ? lock_downgrade+0x830/0x830 [ 331.460480][ T9596] ? _parse_integer+0x132/0x180 [ 331.460498][ T9596] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 331.460518][ T9596] ___sys_sendmsg+0xf3/0x170 [ 331.460537][ T9596] ? sendmsg_copy_msghdr+0x160/0x160 [ 331.460553][ T9596] ? __fget_files+0x272/0x400 [ 331.460574][ T9596] ? lock_downgrade+0x830/0x830 [ 331.460592][ T9596] ? find_held_lock+0x2d/0x110 [ 331.460610][ T9596] ? ksys_write+0x212/0x250 [ 331.460632][ T9596] ? __fget_files+0x294/0x400 [ 331.460655][ T9596] ? __fget_light+0xea/0x280 [ 331.460679][ T9596] __sys_sendmsg+0xe5/0x1b0 [ 331.460697][ T9596] ? __sys_sendmsg_sock+0xb0/0xb0 [ 331.460737][ T9596] ? trace_hardirqs_on+0x5f/0x220 [ 331.460756][ T9596] ? lockdep_hardirqs_on+0x76/0xf0 [ 331.460775][ T9596] do_syscall_64+0x2d/0x70 [ 331.460794][ T9596] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 331.460806][ T9596] RIP: 0033:0x45d189 [ 331.460822][ T9596] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 331.460831][ T9596] RSP: 002b:00007f9261392c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.460847][ T9596] RAX: ffffffffffffffda RBX: 000000000002bf80 RCX: 000000000045d189 [ 331.460857][ T9596] RDX: 0000000000000000 RSI: 0000000020005680 RDI: 0000000000000006 [ 331.460867][ T9596] RBP: 00007f9261392ca0 R08: 0000000000000000 R09: 0000000000000000 [ 331.460876][ T9596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 07:45:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 331.460886][ T9596] R13: 00007ffe7d3bf86f R14: 00007f92613939c0 R15: 000000000118cf4c [ 331.628103][ T9605] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:45:58 executing program 3 (fault-call:4 fault-nth:6): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 331.982433][ T9615] FAULT_INJECTION: forcing a failure. [ 331.982433][ T9615] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 331.982453][ T9615] CPU: 0 PID: 9615 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 331.982462][ T9615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.982467][ T9615] Call Trace: [ 331.982490][ T9615] dump_stack+0x18f/0x20d [ 331.982511][ T9615] should_fail.cold+0x5/0x14 [ 331.982531][ T9615] __alloc_pages_nodemask+0x183/0x810 07:45:59 executing program 3 (fault-call:4 fault-nth:7): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 331.982549][ T9615] ? lock_acquire+0x1f1/0xad0 [ 331.982566][ T9615] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 331.982588][ T9615] ? fs_reclaim_release+0xa3/0x160 [ 331.982610][ T9615] cache_grow_begin+0x71/0x430 [ 331.982627][ T9615] cache_alloc_refill+0x27b/0x340 [ 331.982644][ T9615] ? lockdep_hardirqs_off+0x89/0xc0 07:45:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x6, &(0x7f00000014c0)=[{&(0x7f00000000c0)="e267cdc11a56e4cc6d5a2caf070f338ca401f984cac60cf3b19e4862e12a412445489d31e3b756b6776e265c94705f12d538ab99a9160f13783ed06b3956026e1eff37b9cc9b2700836fd9340f207d53b6f298dd02770913a42d3e37d36c53de", 0x60, 0x5}, {&(0x7f0000000140)="6288865a71c23023ee1dd3056498d42f329daa29858acc02d0de89928896153582899bb315f2563e5af12b771de629ab3928a60f40d84c0874707f881377f50f431fd26dbba8f1ca9a230e79dd75fe66df85dd7ec121470d0a551e33cf3f167d80616e88ccdccd8e65e8305c177f48695a0f7062eed09668f2608cfdfe8dede9c4d7790f4dde091f8397ba0126f7890f379016807d9e51b3b34b53232caa089594c43aea0d4572fc2eaf41e49029fa78d631feccbb26305c9e5b72dd9f4ebff093cf58da8720307d2e00ef7d1d35ef3ac7", 0xd1, 0xda}, {&(0x7f0000000300)="8eae883bc7ead0eeb4796b9d9708f00301ab7d9f41bc9c6f9cbef8f304acd01ecaee7ce813c7580ca3e0eeb72e0ca0597f9f954055715adc14a6fbf35e6008e792baa0d6d434f4efcf3f05b11ba3bcd0d5a0444204cecffbbc9aa5cd4eaa0e0617241687c16e331ea07d289fbd85a3819ad273da5d9ba6c357afaabe155c4c7a9a746976a25832929ef5eabda5bfea", 0x8f}, {&(0x7f00000003c0)="3b5618c14be95e5854f5d294cf75b81566749fabb872f23b8fc5e40ac3cf36da99b5ae7ddb6f0e8f43906632f0b6c3001c419d21be3c526907bfec76e728dc5d8c668cd43df454ce1dbf2f816621e30ac5b637c59f336623623caedffb8008de60675682b904512b822d1ec29b9f0b568e8113e9bc6a3a4d7fd116bea959cfa7d660df271cf8ea58d1c3c5d4840e29f69b4cc607279150d1184eb843f50779f75406c118f85251e9f6b0824c970ce8c803703a6c53703540922c64b6e6e8ac33bf3a785cb38ac1bb078e6ddf6a04513ed5f0aac64ba261019ef4268e90d513605cd75094f3", 0xe5, 0x65}, {&(0x7f00000004c0)="242c1ec971dae1037a207fff0d3ea5d4f6dcbb2380b6c0769e73b98033c4bfccf25e9851486fffa6db89d072dcfc3f099d5e24a74cecb42ce372c4a23dd91a07ef0948555ea04776931d0920066498cf3ca07edd63e42fc991709dd6fe02f3678a4be558425962a3dc842b353e77ebc131546cb487ce2e9293f32060c99cc9c05781eeae4660a23c9b0b2ca824a7d2d32f21d60c1f659c70b68e70ac7b1e543e1e0a92e3a551234aa72c3d62ecc04c5a3f28c35773f764c6edc2aeb79c773389d6d2d1dc26f2962753406614e571875fb4ef62a317bae1d200c4ef1a672ca1b6d660ad2bd81064a48dc366852eaf9b0674eefdcde4ae721bc02bef1bdd3a56e9e1b6414b8e7ea093f4bff736e05cc1059d38d31abdd03beaea0ddb1fd6e2729ac3c51cc1d59b5a7c467314fec238938fc7aef93e1e971a0eadf2aee6f99d6a72273edb4c460a7157ae7d44377d9a75c1cb46b8f21373fc94f02e917397a8bcca61da96689a08a31af0890d4c61476bb64dc5a1fe1a8e43c1fc317afdc90eeda4d697c80c603f4121cd22b8056b8d6b009af1379d2b22d0b0ccdf9c93db155e95d34c63732edea1efdabd4d5d226347309bab711eb8e3467719c5ec6ce452e1306505defb1d122acae94fff5c9798f73c673739285ee0f6e752d56e84d7811192b54371768cd4251c1f809505d91186715eadc08c52f4084ffc5f862c5ab2bdc5fc0f3bc3d50c3fc2ecd87aa85ed242d0e036bc036487d1f27deb6f79837868aacea0a90e871041712a7d393fd6bcca1ece8300941d88251c384e0282dd2c3de5ce9d9fa30569397b0f4be7d5748a727ed384152ce039a5b1af4f1d4b88295b99eee90f2acdf47776b4702e9eb13c7db2a71dfe161f5b7e428da909411120135e14e617ea6d19351e4acca356f908178a02fb3e15f9146b249392c5f5de85955b0ae246963d739864cdd500a3f773e59a355229c6585da7336077944c6016cbd17c8004b3781b8622fc44fa2ae4cf141384d2b966ca4ba4bdbd0ab0c9f960584fbe56e58089001c92f37f7e922caa5441b48c4f90db2944dbab902d11232d4fa57cf09066de753fb07b39c173eca70dfdedc067aebb39d22c859b8f171f915b18a2b112e3f5fbae2433e30055eb0ad71d9a3044c1c868e241351a97a06c7873a17f7bafd8a5822cb3df9fd330317932b1d3cc6a84517785f9a7ff67c410cb73533414d0a4ab81cd9a71a685fea74a2ff8d2c104cdfa08de61839090048023d74178c4ded3b179d7c4b5a2a7cb79a4b0db0d0d2535818728e210f9b29df4647b3fc8de47851f6b6b19a1d7ca4390544760a2c3d55a093a0789935e48974bb43e4775ccbbc4cffc7798bc6dc4f593cbcc19971e7e1e42bbdc82537742c339d173eaaa4dde19a50b6c72e0760f1b566461f341f6f310a25ab1e971901259a88a3f288d18007e6f7d191e99f8ed4f756a5eea51ed0f494924ed597567a6a5c6ced77202ccbb84c1e504bc7c84f827af17cec34fdcd971c4ece201faa168d8d7fc9d8d610ba6d095ee8502c1cb1f70b1f2e9d14e400801cdadd1291266cc2ee3ef3e2fc10e904090913a71d222a7c597529b538af117352c7c744a86e020087710f4fd997bcf8bdd3b7909dfbdcf66c04a42a5c47858fc5cd7951013b82485f8b68a7f78adb02a9fba03372ef7ce272766e24fc4de0a28bec51c1b69bf22526cebee354ab2eda24e80b0bcfac1fdfad4c867e66474e2da1f4d3e0542c5aed516a72ae1ffae08ec3877da274ff7cd3bcc505c76e5e963d82d112fff05a66ceea1ecc06bd5888c30833bbe7fbf713309cd8d25757bb6df58dc17b079952e454d66403cda6b55a08864d047ea9d6f928b75dae15c44bc3285d066a3c2c62c4df18808678c19355c6272e17ed680793495822c3e5219b19c82fadac93092eedd439e009866c1dea6e7770c5d4d63d3d9b8d5f0ec2bef28bd4b7a63bebf0d6139c757f36b3d049cd50d30dba1a82e86360c134f2e8f2edd3d98f3bf7daf23765d3bde33ebc1207350fe7e898a75afe6e956fe2b685d4be33102a124b4ab3795bcdef29bba17649583b5aa8c608ec2eebeca9d9ce3c0f74e7fe8aa2de2344c8ac57d1dab09dfaa43479454f712f4a8ea91287ac78337ef25e389736059eb200194c1a0489025542d6e8243992bd1d7cfe9fc43e84d622eaae2956a8bc552de08097fbd0cd49a41377bae5554af6ce65a23d819335ad3f8e974e34440539b61df33cb5ce8c58ca923d6d8903dd88438d648a456e9fba9820d45ffbc23caf06793d3dc1fc155cb6a192f0cff13f86329803e52aefcebe953d127ef0b6565d3b50a799f87ac62eef7abad7e307e203a430589e9df25b7bb19de0d99f913dc9c4a975e0e09b0dc8f9ad4aed28678c13e7b43e70f2ec8053a0129751dab50b29cdb7b14cc453d5b296cdb23c293db9686cddf5b54318dee44087ccaaf321ed7e66fe3f736db92997c3cc6d95c242437c1f11cf186c85f51ce57033fa46be90725accc6f89de0446fce49f4f8344779887e3ef29bb28829755035f552d4860b59491f92256e7311e97141c4d31161b48c014db02dd4824f3390e24119afb9359f131952f3a8043145a8101d6ac5a1e68a2922f1b001cb85faa760cfb03e9c03dde2aa4c4e9901655d0310e3dc93b7ba289629b9da16a4437d08249720b23af8d8e916ecda593ead6563ef4598cc0535003434895ee796908a7ab2a307de4d440e66791f611f147b2d1f076417f7a78ea5d157e2ce03a4702f6403757a8ad50a9542d5886850fc62fc719a810ec2a099e1670b434eabc31684b5229279d26519ba3e807a7b3479ccbf3e0de8afa8ad3c7066da5ef0a850921c85a7a5fcd1ca1d45b384f58cfbab4217142a801be2df55eb70c95226eb5476292df16a2f1a8f922cf1d9fce1c57e299fcea8714ffbaa8ee77824fc4c0f2cbf215e69305f85ff950944ad9581f8852049d7c56b865910e8701dbc3bdaa01037a037f658b4a0cb40988a426f0bb48addeb3d8e48f3e9d149114ae14a108d2dd78847b14a4a85501ce80916b1a5bad3fdf7807fdf7c75fd21c73e9b547e7d8edbdcf40b3d79dcd13eeb2e37613f2d73ff6b2ca8102c1babd5879bdaf354cfbecf034de3675fea3456951f0e95b4ca290126d106f4356bca6b3d2d46caa3582fab0829841981c5290dc5420e953bc961f2060f6ffa7581c468cdea871f087d8ff57e4d2ee77830d676f119dccb4f8ba6299bc9c084de646dee04f9e205e8798bfee239bb7c6ad0fe0923933216168ab1070ce6e03d835cd3e7ff0af78f4ffaa4527a278b437471e928f5d5a79859f528c482fdcc0f0291c96bb41b13b60207fd9205ba1bcfa244f993334ce4a4d9caf48ff5fa3cee9cfc1a53cec78cde2193ee002e1132d12d89f52a9220ed06b8939f0758ca1c846bbc49dc1e25c93496280a078ed9d1998f35bb9c34e0919efc72bed473fd0165f32bc35b681e1fe7730ab36e96cbfc685eb81f79b831e8199c56350bd22431cffb17a46ceccec8d8ac690d96195b6837b660649354540a2113d1f5951ef76f2cd586fa2931f9cb6d7cd269fc7cb8a277d8c2c5c2cf3709f82e1ce8bd0475b136ef2fcf7c4858fcaacef3fbd59daf3f4b0fa36ef320da825a56d4dc78607cbaba4f1b6aef602ee680b1e99145cc3f895a0fe8768e267f7562b3c9c7539088102afc21ae698fc034a840ba97355a2a93b8e0ccaf1f1f391090b1ad5a14b6204a27b281aae5040c9f1b902e311dadf7545c091c8e475598c46e939fcd8ddec69282dcd808dca2c72d2905e542c065b20a6c0a5b414310bbcb4b3d1b4843ef544567f2902e3bb9f11c7c3f1cba5f0c6a55b606ce7c5be5aa7d2babfdd89eac2514f052200130c4998bf896ba3dbd53937e7c454b248c6603807e837056f526992ae4ada3922bd1efa878ae92bdd2891a24e909a6c5e557696b0a8ae0c1c52924c8de9384984d6eaa3a5ec7ecebfbfae7ed01211376649b46eeb164f7f522a6a4a374a6da0eac1077a525a2768fe4a1e4863c7f681930217ec4124a13eb97452c2a0edbc4413478bd9e7de043bf35a0bf7f986bc298af736c8b7423e6e4330f1aaf622d4eaab409013ef90a4d9c3c4e61aca508a08ace884612b59641354df49e24d7b8dcf48d424d28046947f237a56a0a06f4c5f10ea25a6f872e3eb9d5ce21c10cfdd3c6f56e2471cd533abd5e0dfb13f7acfc3351789e95e63723acb0594958e2b221223b236288aebf8a0e06afdef6327a475aa351a1a0348c35c186876027ea289f2732b22f3816a69d87e5def822aa2a693fc70c737ea4eb5d6721df9a802814ccf22df36750de053e4f6881158d1786b30e508f46b3c6a4fce8ce202ca7d818c5706323642f8b1a728e1e7e0edc59e50b7d52f02aa8b907981baedc11115bb379914b39ecec40f4b410585ff79402c1a197106b72a5cc9ac900b3bb51f65eb83b4ee10870075a682fbc81d24e55bf158c41cb9e9b5b95dde6c5fcb9091bebb0739ffafd6ec6c4af3786f17d8de834c02f6b2b0cb7bfebce209b82cfc594f628a32f70ced6f2a031b564040051eaa1c9ace2e63e7ec5237aad4f638e4822d67947d1475e17ba361478314aa7ada561ff406877d3e7d12c4e7d07dccd4251d31a83140d6a7ecab619df06274891dc323569e247fe7d7a7531fed1673a2450254a4894e9b828efadc1a5bc739c254086f68128d7c87082fcdbedccfb8d9615df4797e3c2ea0b3f5a80e2ba4c519e98fd234d51e666a3d2b30b7177a4a798f38a0d77375f32a893475bc57a94b8f0fa1b02895ee8b4a4e76721c679398d18d6378759ff05caa5c17da976c4fb9b986327623e9fea27e7217c426d42532675b30c991438524333c10e1c6dcb67e13f359b53d9a3b179c17110e89adedc2da78cc3f91153d3d89b25903f7d664c423f5e00c8c14292dd5a5b268725e8732ebfc407e07450fbf77d77cf7106e99dd52afd2b870416598d70dd507759c635e8cc855e3ef3cdaab4fbfc4a6430b4bd36c74946a90b81b657ca05e8e4d3b4c459199eca060c6f507c604addafef4cdf625e1bfd217daa0d885e1f26d16e5605ccf50802a818bc4c4a512f4286e9e47cca83d88016a23b45649a4fcb90426931bc7978c18c5a700415aeba79408357469cda431de33d4e43c2a15d8e94c2e74a2f39191ed7f4a752501582fca5712f0a5f0a305cea85ba7e4c8e6c766a9234e52833708becd291c34e57724beed07bb061f2df98181677388cebecd896280c9778f29af904e524ed9e560275c4f8f32ed3c1aa4e759031cf568e57b0693031219e488e163c17a25b12e4b4b34643a7cab1847ee994323fef87530345b637039296f106bd9f170f13c844357c880e5b33b3d0f1557daa1eca5274e7ba6affc37472dbcd71f9c87c509d5a7a37ae58d7b52633bb6876f8f29ddf3193b58aff52cb2785249544f2b508154284339f12b8fdb362570743108090341b7d6dcf9ec6a1bf2c66e3133aaf95c43f40599a9679b1c388abbe3b6e926e719023ec6811fa816afcff9d667827066cb25f1f245136836f7fc01f9000dc7fd2e3125eda627cbca064e987f4ce4894798bd8ed6914de8683c130a3c94ec90867111a8dcd56751359657cdd1f4f65b9e11033489e10ccc598730d9d7263ddd98275cd343c4e327037a9f931a864a5fc6527fc01372e3bccca016fe044dbf1da424451072088a6de40648117fddc94832358512fa371aee4c1dc8c5a8742c878d549552e1766ea78eb3", 0x1000, 0xfffffffffffffffe}, {&(0x7f0000000240)="8051737d13c15a3d0dc96334c6b59bae871016d96cbf674ea4babdcd7f4fa0b470104cc648d27f624b0ab996b5c3278e2a30b8d555891ca38c095fb10bb459c2055d1ae744c0d7908730ffea4f1076fca18253d4f6ac2cb6", 0x58, 0x2}], 0x2024400, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x2}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000001580)={@empty, @mcast2, @remote, 0x3, 0x1000, 0xf321, 0x0, 0x2, 0x41100240, r5}) [ 331.982663][ T9615] ? wiphy_new_nm+0x6f3/0x1e80 07:45:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 331.982675][ T9615] __kmalloc+0x2f5/0x320 [ 331.982707][ T9615] wiphy_new_nm+0x6f3/0x1e80 [ 331.982729][ T9615] ieee80211_alloc_hw_nm+0x390/0x2360 [ 331.982748][ T9615] ? mac80211_hwsim_new_radio+0x166/0x4540 [ 331.982763][ T9615] ? trace_hardirqs_on+0x5f/0x220 [ 331.982784][ T9615] mac80211_hwsim_new_radio+0x1f6/0x4540 [ 331.982804][ T9615] ? lock_acquire+0x1f1/0xad0 [ 331.982820][ T9615] ? fs_reclaim_acquire+0xa8/0x180 [ 331.982843][ T9615] ? hwsim_virtio_rx_work+0x350/0x350 [ 331.982862][ T9615] ? check_nnp_nosuid.isra.0+0x256/0x2a0 [ 331.982883][ T9615] hwsim_new_radio_nl+0x93e/0xf8c [ 331.982903][ T9615] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 331.982932][ T9615] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 331.982949][ T9615] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 331.982969][ T9615] genl_rcv_msg+0x61d/0x980 [ 331.982994][ T9615] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 331.983021][ T9615] ? lock_release+0x8e0/0x8e0 [ 331.983036][ T9615] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 331.983056][ T9615] netlink_rcv_skb+0x15a/0x430 [ 331.983075][ T9615] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 331.983089][ T9615] ? netlink_ack+0xa10/0xa10 [ 331.983114][ T9615] genl_rcv+0x24/0x40 [ 331.983130][ T9615] netlink_unicast+0x533/0x7d0 [ 331.983150][ T9615] ? netlink_attachskb+0x810/0x810 [ 331.983164][ T9615] ? _copy_from_iter_full+0x247/0x890 [ 331.983188][ T9615] netlink_sendmsg+0x856/0xd90 [ 331.983206][ T9615] ? netlink_unicast+0x7d0/0x7d0 [ 331.983227][ T9615] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 331.983243][ T9615] ? netlink_unicast+0x7d0/0x7d0 [ 331.983261][ T9615] sock_sendmsg+0xcf/0x120 [ 331.983279][ T9615] ____sys_sendmsg+0x6e8/0x810 [ 331.983298][ T9615] ? kernel_sendmsg+0x50/0x50 [ 331.983312][ T9615] ? do_recvmmsg+0x6d0/0x6d0 [ 331.983333][ T9615] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 331.983348][ T9615] ? lock_downgrade+0x830/0x830 [ 331.983365][ T9615] ? _parse_integer+0x132/0x180 [ 331.983384][ T9615] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 331.983404][ T9615] ___sys_sendmsg+0xf3/0x170 [ 331.983422][ T9615] ? sendmsg_copy_msghdr+0x160/0x160 [ 331.983445][ T9615] ? __fget_files+0x272/0x400 [ 331.983464][ T9615] ? lock_downgrade+0x830/0x830 [ 331.983483][ T9615] ? find_held_lock+0x2d/0x110 [ 331.983499][ T9615] ? ksys_write+0x212/0x250 [ 331.983519][ T9615] ? __fget_files+0x294/0x400 [ 331.983550][ T9615] ? __fget_light+0xea/0x280 [ 331.983573][ T9615] __sys_sendmsg+0xe5/0x1b0 [ 331.983590][ T9615] ? __sys_sendmsg_sock+0xb0/0xb0 [ 331.983618][ T9615] ? trace_hardirqs_on+0x5f/0x220 [ 331.983635][ T9615] ? lockdep_hardirqs_on+0x76/0xf0 [ 331.983653][ T9615] do_syscall_64+0x2d/0x70 [ 331.983671][ T9615] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 331.983683][ T9615] RIP: 0033:0x45d189 [ 331.983704][ T9615] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 331.983713][ T9615] RSP: 002b:00007f9261371c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.983728][ T9615] RAX: ffffffffffffffda RBX: 000000000002bf80 RCX: 000000000045d189 [ 331.983737][ T9615] RDX: 0000000000000000 RSI: 0000000020005680 RDI: 0000000000000006 [ 331.983747][ T9615] RBP: 00007f9261371ca0 R08: 0000000000000000 R09: 0000000000000000 [ 331.983756][ T9615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 331.983765][ T9615] R13: 00007ffe7d3bf86f R14: 00007f92613729c0 R15: 000000000118cfec [ 332.124639][ T8170] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 332.203075][ T9627] FAULT_INJECTION: forcing a failure. [ 332.203075][ T9627] name failslab, interval 1, probability 0, space 0, times 0 [ 332.203096][ T9627] CPU: 0 PID: 9627 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 332.203106][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.203111][ T9627] Call Trace: [ 332.203133][ T9627] dump_stack+0x18f/0x20d [ 332.203154][ T9627] should_fail.cold+0x5/0x14 [ 332.203173][ T9627] ? kvasprintf_const+0x60/0x190 [ 332.203190][ T9627] should_failslab+0x5/0xf [ 332.203206][ T9627] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 332.203224][ T9627] __kmalloc_track_caller+0x6d/0x310 [ 332.203243][ T9627] ? __sys_sendmsg+0xe5/0x1b0 [ 332.203258][ T9627] ? do_syscall_64+0x2d/0x70 [ 332.203277][ T9627] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.203377][ T9627] kvasprintf+0xb5/0x150 [ 332.203396][ T9627] ? bust_spinlocks+0xe0/0xe0 [ 332.203420][ T9627] ? lock_downgrade+0x830/0x830 [ 332.203444][ T9627] kvasprintf_const+0x60/0x190 [ 332.203462][ T9627] kobject_set_name_vargs+0x56/0x150 [ 332.203556][ T9627] dev_set_name+0xbb/0xf0 [ 332.203575][ T9627] ? device_initialize+0x5c0/0x5c0 [ 332.203591][ T9627] ? trace_kmalloc+0xfd/0x130 [ 332.203612][ T9627] ? wiphy_new_nm+0x6f3/0x1e80 [ 332.203625][ T9627] ? __kmalloc+0x1bf/0x320 [ 332.203648][ T9627] wiphy_new_nm+0x805/0x1e80 [ 332.203669][ T9627] ieee80211_alloc_hw_nm+0x390/0x2360 [ 332.203692][ T9627] ? mac80211_hwsim_new_radio+0x166/0x4540 [ 332.203708][ T9627] ? trace_hardirqs_on+0x5f/0x220 [ 332.203730][ T9627] mac80211_hwsim_new_radio+0x1f6/0x4540 [ 332.203749][ T9627] ? lock_acquire+0x1f1/0xad0 [ 332.203766][ T9627] ? fs_reclaim_acquire+0xa8/0x180 [ 332.203790][ T9627] ? hwsim_virtio_rx_work+0x350/0x350 [ 332.203808][ T9627] ? check_nnp_nosuid.isra.0+0x256/0x2a0 [ 332.203829][ T9627] hwsim_new_radio_nl+0x93e/0xf8c [ 332.203850][ T9627] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 332.203879][ T9627] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 332.203896][ T9627] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 332.203916][ T9627] genl_rcv_msg+0x61d/0x980 [ 332.203941][ T9627] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 332.203968][ T9627] ? lock_release+0x8e0/0x8e0 [ 332.203984][ T9627] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 332.204003][ T9627] netlink_rcv_skb+0x15a/0x430 [ 332.204023][ T9627] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 332.204040][ T9627] ? netlink_ack+0xa10/0xa10 [ 332.204070][ T9627] genl_rcv+0x24/0x40 [ 332.204085][ T9627] netlink_unicast+0x533/0x7d0 [ 332.204106][ T9627] ? netlink_attachskb+0x810/0x810 [ 332.204121][ T9627] ? _copy_from_iter_full+0x247/0x890 [ 332.204143][ T9627] netlink_sendmsg+0x856/0xd90 [ 332.204163][ T9627] ? netlink_unicast+0x7d0/0x7d0 [ 332.204188][ T9627] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 332.204203][ T9627] ? netlink_unicast+0x7d0/0x7d0 [ 332.204220][ T9627] sock_sendmsg+0xcf/0x120 [ 332.204239][ T9627] ____sys_sendmsg+0x6e8/0x810 [ 332.204258][ T9627] ? kernel_sendmsg+0x50/0x50 [ 332.204274][ T9627] ? do_recvmmsg+0x6d0/0x6d0 [ 332.204295][ T9627] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 332.204310][ T9627] ? lock_downgrade+0x830/0x830 [ 332.204328][ T9627] ? _parse_integer+0x132/0x180 [ 332.204346][ T9627] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 332.204367][ T9627] ___sys_sendmsg+0xf3/0x170 07:45:59 executing program 3 (fault-call:4 fault-nth:8): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 332.204387][ T9627] ? sendmsg_copy_msghdr+0x160/0x160 [ 332.204403][ T9627] ? __fget_files+0x272/0x400 [ 332.204423][ T9627] ? lock_downgrade+0x830/0x830 [ 332.204441][ T9627] ? find_held_lock+0x2d/0x110 [ 332.204458][ T9627] ? ksys_write+0x212/0x250 [ 332.204479][ T9627] ? __fget_files+0x294/0x400 [ 332.204502][ T9627] ? __fget_light+0xea/0x280 [ 332.204526][ T9627] __sys_sendmsg+0xe5/0x1b0 [ 332.204544][ T9627] ? __sys_sendmsg_sock+0xb0/0xb0 [ 332.204571][ T9627] ? trace_hardirqs_on+0x5f/0x220 [ 332.204588][ T9627] ? lockdep_hardirqs_on+0x76/0xf0 [ 332.204606][ T9627] do_syscall_64+0x2d/0x70 [ 332.204625][ T9627] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.204637][ T9627] RIP: 0033:0x45d189 [ 332.204653][ T9627] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 332.204662][ T9627] RSP: 002b:00007f9261392c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.204686][ T9627] RAX: ffffffffffffffda RBX: 000000000002bf80 RCX: 000000000045d189 [ 332.204696][ T9627] RDX: 0000000000000000 RSI: 0000000020005680 RDI: 0000000000000006 [ 332.204706][ T9627] RBP: 00007f9261392ca0 R08: 0000000000000000 R09: 0000000000000000 [ 332.204715][ T9627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 332.204726][ T9627] R13: 00007ffe7d3bf86f R14: 00007f92613939c0 R15: 000000000118cf4c [ 332.373584][ T8170] usb 1-1: Using ep0 maxpacket: 16 [ 332.397157][ T9636] FAULT_INJECTION: forcing a failure. [ 332.397157][ T9636] name failslab, interval 1, probability 0, space 0, times 0 [ 332.397185][ T9636] CPU: 0 PID: 9636 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 332.397195][ T9636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.397201][ T9636] Call Trace: [ 332.397228][ T9636] dump_stack+0x18f/0x20d [ 332.397249][ T9636] should_fail.cold+0x5/0x14 [ 332.397378][ T9636] ? rfkill_alloc+0xa6/0x2c0 [ 332.397396][ T9636] should_failslab+0x5/0xf [ 332.397412][ T9636] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 332.397429][ T9636] __kmalloc+0x6f/0x320 [ 332.397445][ T9636] ? __free_object+0xdd0/0xdd0 [ 332.397464][ T9636] ? lockdep_init_map_waits+0x26a/0x8a0 [ 332.397485][ T9636] rfkill_alloc+0xa6/0x2c0 [ 332.397502][ T9636] ? lockdep_init_map_waits+0x26a/0x8a0 [ 332.397522][ T9636] wiphy_new_nm+0x12e3/0x1e80 [ 332.397541][ T9636] ieee80211_alloc_hw_nm+0x390/0x2360 [ 332.397557][ T9636] ? mac80211_hwsim_new_radio+0x166/0x4540 [ 332.397573][ T9636] ? trace_hardirqs_on+0x5f/0x220 [ 332.397595][ T9636] mac80211_hwsim_new_radio+0x1f6/0x4540 07:46:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 332.397614][ T9636] ? lock_acquire+0x1f1/0xad0 [ 332.397631][ T9636] ? fs_reclaim_acquire+0xa8/0x180 [ 332.397654][ T9636] ? hwsim_virtio_rx_work+0x350/0x350 [ 332.397671][ T9636] ? check_nnp_nosuid.isra.0+0x256/0x2a0 [ 332.397691][ T9636] hwsim_new_radio_nl+0x93e/0xf8c [ 332.397712][ T9636] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 332.397740][ T9636] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 332.397757][ T9636] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 332.397777][ T9636] genl_rcv_msg+0x61d/0x980 [ 332.397803][ T9636] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 332.397830][ T9636] ? lock_release+0x8e0/0x8e0 [ 332.397845][ T9636] ? trace_hardirqs_on+0x5f/0x220 [ 332.397864][ T9636] netlink_rcv_skb+0x15a/0x430 [ 332.397884][ T9636] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 332.397902][ T9636] ? netlink_ack+0xa10/0xa10 [ 332.397931][ T9636] genl_rcv+0x24/0x40 [ 332.397945][ T9636] netlink_unicast+0x533/0x7d0 [ 332.397964][ T9636] ? netlink_attachskb+0x810/0x810 [ 332.397980][ T9636] ? _copy_from_iter_full+0x247/0x890 [ 332.398001][ T9636] netlink_sendmsg+0x856/0xd90 [ 332.398022][ T9636] ? netlink_unicast+0x7d0/0x7d0 [ 332.398047][ T9636] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 332.398063][ T9636] ? netlink_unicast+0x7d0/0x7d0 [ 332.398081][ T9636] sock_sendmsg+0xcf/0x120 [ 332.398100][ T9636] ____sys_sendmsg+0x6e8/0x810 [ 332.398120][ T9636] ? kernel_sendmsg+0x50/0x50 [ 332.398136][ T9636] ? do_recvmmsg+0x6d0/0x6d0 [ 332.398157][ T9636] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 332.398180][ T9636] ? lock_downgrade+0x830/0x830 [ 332.398198][ T9636] ? _parse_integer+0x132/0x180 [ 332.398218][ T9636] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 332.398239][ T9636] ___sys_sendmsg+0xf3/0x170 [ 332.398258][ T9636] ? sendmsg_copy_msghdr+0x160/0x160 [ 332.398275][ T9636] ? __fget_files+0x272/0x400 [ 332.398296][ T9636] ? lock_downgrade+0x830/0x830 [ 332.398313][ T9636] ? find_held_lock+0x2d/0x110 [ 332.398330][ T9636] ? ksys_write+0x212/0x250 [ 332.398352][ T9636] ? __fget_files+0x294/0x400 [ 332.398374][ T9636] ? __fget_light+0xea/0x280 [ 332.398397][ T9636] __sys_sendmsg+0xe5/0x1b0 [ 332.398415][ T9636] ? __sys_sendmsg_sock+0xb0/0xb0 [ 332.398444][ T9636] ? trace_hardirqs_on+0x5f/0x220 [ 332.398461][ T9636] ? lockdep_hardirqs_on+0x76/0xf0 [ 332.398480][ T9636] do_syscall_64+0x2d/0x70 [ 332.398499][ T9636] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.398511][ T9636] RIP: 0033:0x45d189 [ 332.398529][ T9636] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 332.398538][ T9636] RSP: 002b:00007f9261392c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.398554][ T9636] RAX: ffffffffffffffda RBX: 000000000002bf80 RCX: 000000000045d189 [ 332.398563][ T9636] RDX: 0000000000000000 RSI: 0000000020005680 RDI: 0000000000000006 [ 332.398573][ T9636] RBP: 00007f9261392ca0 R08: 0000000000000000 R09: 0000000000000000 [ 332.398584][ T9636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 332.398594][ T9636] R13: 00007ffe7d3bf86f R14: 00007f92613939c0 R15: 000000000118cf4c [ 332.504306][ T8170] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 332.504452][ T8170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.504469][ T8170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.504489][ T8170] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 332.504519][ T8170] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 332.504536][ T8170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.509655][ T8170] usb 1-1: config 0 descriptor?? [ 333.174170][ T9653] FAULT_INJECTION: forcing a failure. [ 333.174170][ T9653] name failslab, interval 1, probability 0, space 0, times 0 [ 333.218167][ T8170] usbhid 1-1:0.0: can't add hid device: -22 [ 333.356961][ T9653] CPU: 1 PID: 9653 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 333.361778][ T8170] usbhid: probe of 1-1:0.0 failed with error -22 [ 333.365797][ T9653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.365803][ T9653] Call Trace: [ 333.365827][ T9653] dump_stack+0x18f/0x20d [ 333.365848][ T9653] should_fail.cold+0x5/0x14 [ 333.365869][ T9653] should_failslab+0x5/0xf [ 333.365886][ T9653] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 333.365903][ T9653] kmem_cache_alloc+0x46/0x3a0 [ 333.365925][ T9653] fill_pool+0x255/0x530 [ 333.365941][ T9653] ? lock_acquire+0x1f1/0xad0 [ 333.365956][ T9653] ? __debug_object_init+0x5af/0xce0 [ 333.365975][ T9653] ? find_held_lock+0x2d/0x110 [ 333.833691][ T9653] ? __list_del_entry_valid.cold+0x55/0x55 [ 333.833718][ T9653] ? mark_held_locks+0x9f/0xe0 07:46:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004106) [ 333.833738][ T9653] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 333.833755][ T9653] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 333.833771][ T9653] ? trace_hardirqs_on+0x5f/0x220 [ 333.833792][ T9653] __debug_object_init+0x7a/0xce0 [ 333.833820][ T9653] ? lockdep_init_map_waits+0x26a/0x8a0 [ 333.833836][ T9653] ? __free_object+0xdd0/0xdd0 [ 333.833853][ T9653] ? lockdep_init_map_waits+0x26a/0x8a0 [ 333.833866][ T9653] ? __raw_spin_lock_init+0x34/0x100 [ 333.833973][ T9653] __init_work+0x48/0x50 [ 333.833991][ T9653] wiphy_new_nm+0x1040/0x1e80 [ 333.834011][ T9653] ieee80211_alloc_hw_nm+0x390/0x2360 [ 333.834027][ T9653] ? mac80211_hwsim_new_radio+0x166/0x4540 [ 333.834041][ T9653] ? trace_hardirqs_on+0x5f/0x220 [ 333.834060][ T9653] mac80211_hwsim_new_radio+0x1f6/0x4540 [ 333.834078][ T9653] ? lock_acquire+0x1f1/0xad0 [ 333.834094][ T9653] ? fs_reclaim_acquire+0xa8/0x180 [ 333.834117][ T9653] ? hwsim_virtio_rx_work+0x350/0x350 [ 333.834134][ T9653] ? check_nnp_nosuid.isra.0+0x256/0x2a0 [ 333.834153][ T9653] hwsim_new_radio_nl+0x93e/0xf8c [ 333.834172][ T9653] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 333.834199][ T9653] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 333.834214][ T9653] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 333.834232][ T9653] genl_rcv_msg+0x61d/0x980 [ 333.834253][ T9653] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 333.834277][ T9653] ? lock_release+0x8e0/0x8e0 [ 333.834291][ T9653] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 333.834309][ T9653] netlink_rcv_skb+0x15a/0x430 [ 333.834326][ T9653] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 333.834341][ T9653] ? netlink_ack+0xa10/0xa10 [ 333.834368][ T9653] genl_rcv+0x24/0x40 [ 333.834381][ T9653] netlink_unicast+0x533/0x7d0 [ 333.834399][ T9653] ? netlink_attachskb+0x810/0x810 [ 333.834413][ T9653] ? _copy_from_iter_full+0x247/0x890 [ 333.834433][ T9653] netlink_sendmsg+0x856/0xd90 [ 333.834450][ T9653] ? netlink_unicast+0x7d0/0x7d0 [ 333.834469][ T9653] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 333.834482][ T9653] ? netlink_unicast+0x7d0/0x7d0 [ 333.834495][ T9653] sock_sendmsg+0xcf/0x120 [ 333.834510][ T9653] ____sys_sendmsg+0x6e8/0x810 [ 333.834531][ T9653] ? kernel_sendmsg+0x50/0x50 [ 333.834543][ T9653] ? do_recvmmsg+0x6d0/0x6d0 [ 333.834559][ T9653] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 333.834571][ T9653] ? lock_downgrade+0x830/0x830 [ 333.834585][ T9653] ? _parse_integer+0x132/0x180 [ 333.834600][ T9653] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 333.834616][ T9653] ___sys_sendmsg+0xf3/0x170 [ 333.834632][ T9653] ? sendmsg_copy_msghdr+0x160/0x160 [ 333.834645][ T9653] ? __fget_files+0x272/0x400 [ 333.834662][ T9653] ? lock_downgrade+0x830/0x830 [ 333.834675][ T9653] ? find_held_lock+0x2d/0x110 [ 333.834689][ T9653] ? ksys_write+0x212/0x250 [ 333.834706][ T9653] ? __fget_files+0x294/0x400 [ 333.834724][ T9653] ? __fget_light+0xea/0x280 [ 333.834743][ T9653] __sys_sendmsg+0xe5/0x1b0 [ 333.834757][ T9653] ? __sys_sendmsg_sock+0xb0/0xb0 [ 333.834779][ T9653] ? trace_hardirqs_on+0x5f/0x220 [ 333.834793][ T9653] ? lockdep_hardirqs_on+0x76/0xf0 [ 333.834807][ T9653] do_syscall_64+0x2d/0x70 [ 333.834822][ T9653] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 333.834834][ T9653] RIP: 0033:0x45d189 [ 333.834850][ T9653] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 333.834859][ T9653] RSP: 002b:00007f9261392c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.834873][ T9653] RAX: ffffffffffffffda RBX: 000000000002bf80 RCX: 000000000045d189 [ 333.834881][ T9653] RDX: 0000000000000000 RSI: 0000000020005680 RDI: 0000000000000006 [ 333.834889][ T9653] RBP: 00007f9261392ca0 R08: 0000000000000000 R09: 0000000000000000 [ 333.834897][ T9653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 333.834907][ T9653] R13: 00007ffe7d3bf86f R14: 00007f92613939c0 R15: 000000000118cf4c [ 334.240070][ T8170] usb 1-1: USB disconnect, device number 2 [ 335.053460][ T8153] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 335.304274][ T8153] usb 1-1: Using ep0 maxpacket: 16 [ 335.423798][ T8153] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 335.423836][ T8153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.423854][ T8153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.423876][ T8153] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 335.423903][ T8153] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 335.423920][ T8153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.426079][ T8153] usb 1-1: config 0 descriptor?? [ 335.475394][ T8153] usbhid 1-1:0.0: can't add hid device: -22 [ 335.520538][ T8153] usbhid: probe of 1-1:0.0 failed with error -22 07:46:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x100000000, 0x0, 0x80000001, 0x800}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r1], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r2, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) [ 335.589089][ T8153] usb 1-1: USB disconnect, device number 3 07:46:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004102) 07:46:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00}) 07:46:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 07:46:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004107) 07:46:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00}) 07:46:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00}) [ 336.043464][ T8153] usb 1-1: new high-speed USB device number 4 using dummy_hcd 07:46:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00}) 07:46:03 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x7, 0x0, 0x0, [], {0x0, 0x6, "95669b", 0x0, 0x3a, 0x0, @local, @mcast1, [], "551af2bbcca261e8"}}}}}}}, 0x0) [ 336.304535][ T8153] usb 1-1: Using ep0 maxpacket: 16 07:46:03 executing program 2: r0 = syz_io_uring_setup(0x6b53, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000c5a000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f00000001c0)) r4 = socket$phonet(0x23, 0x2, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 336.444743][ T8153] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 336.444784][ T8153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.444804][ T8153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.444826][ T8153] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 336.444854][ T8153] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 336.444872][ T8153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.446327][ T8153] usb 1-1: config 0 descriptor?? [ 336.495267][ T8153] usbhid 1-1:0.0: can't add hid device: -22 [ 336.495387][ T8153] usbhid: probe of 1-1:0.0 failed with error -22 [ 337.454108][ T8153] usb 1-1: USB disconnect, device number 4 07:46:04 executing program 5 (fault-call:4 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x2, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x2}}}, 0x24}}, 0x0) getsockopt$inet_buf(r2, 0x0, 0x2d, &(0x7f0000000080)=""/11, &(0x7f0000000100)=0xb) r4 = creat(0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x46802) io_setup(0xc32f, &(0x7f0000000000)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x1000001, 0x4012, r6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() io_submit(r5, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 07:46:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 07:46:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004108) 07:46:04 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000001100)={0x80, 0xf9, 0x8, 0x0, 0xffff}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='hfs\x00', 0x20008, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000001240)={0x3b78, 0x4b0, 0x280, 0x300, 0x19bb, 0x7b, 0x1, 0x0, {0x9, 0xe16}, {0x2, 0x8, 0x1}, {0x9e87, 0x7fff}, {0x4, 0x8, 0x1}, 0x1, 0x10, 0x5, 0x20, 0x0, 0x0, 0x3, 0x173, 0x1, 0x0, 0x7fff, 0x10001, 0x1f, 0x2, 0x2, 0xa}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e1e, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r6, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000000)=0xfffffffb) setreuid(0x0, r5) writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)='1', 0x1}], 0x1) [ 338.058119][ T9795] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 338.125866][ T9797] FAULT_INJECTION: forcing a failure. [ 338.125866][ T9797] name failslab, interval 1, probability 0, space 0, times 0 [ 338.125899][ T9797] CPU: 1 PID: 9797 Comm: syz-executor.5 Not tainted 5.8.0-syzkaller #0 07:46:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x2}}}, 0x24}}, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0xdd03, @any, 0x7, 0x1}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0xfffffeec}, 0x48) [ 338.125908][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.125913][ T9797] Call Trace: 07:46:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x3, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 338.125935][ T9797] dump_stack+0x18f/0x20d [ 338.125956][ T9797] should_fail.cold+0x5/0x14 [ 338.126052][ T9797] ? tomoyo_realpath_from_path+0xc3/0x620 [ 338.126070][ T9797] should_failslab+0x5/0xf [ 338.126085][ T9797] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 338.126102][ T9797] __kmalloc+0x6f/0x320 [ 338.126124][ T9797] tomoyo_realpath_from_path+0xc3/0x620 [ 338.126141][ T9797] ? tomoyo_profile+0x42/0x50 [ 338.126158][ T9797] tomoyo_path_number_perm+0x1cb/0x4d0 [ 338.126173][ T9797] ? tomoyo_path_number_perm+0x183/0x4d0 [ 338.126190][ T9797] ? tomoyo_execute_permission+0x470/0x470 [ 338.126203][ T9797] ? delayed_put_pid+0x30/0x30 [ 338.126220][ T9797] ? find_held_lock+0x2d/0x110 [ 338.126245][ T9797] ? lock_is_held_type+0xbb/0xf0 [ 338.126276][ T9797] ? selinux_inode_getsecctx+0x90/0x90 [ 338.126291][ T9797] ? __mutex_unlock_slowpath+0xe2/0x610 07:46:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x8000000200052203, 0x40000000800007f, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="eaf9023a"], &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:46:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x4, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 338.126318][ T9797] ? __fget_files+0x294/0x400 [ 338.126369][ T9797] security_file_ioctl+0x50/0xb0 [ 338.126391][ T9797] __x64_sys_ioctl+0xb3/0x200 [ 338.126409][ T9797] do_syscall_64+0x2d/0x70 [ 338.126427][ T9797] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 338.126440][ T9797] RIP: 0033:0x45d189 [ 338.126457][ T9797] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 338.126466][ T9797] RSP: 002b:00007fcda0796c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.126482][ T9797] RAX: ffffffffffffffda RBX: 000000000000d580 RCX: 000000000045d189 [ 338.126492][ T9797] RDX: 0000000020000200 RSI: 0000000000004601 RDI: 0000000000000005 [ 338.126501][ T9797] RBP: 00007fcda0796ca0 R08: 0000000000000000 R09: 0000000000000000 [ 338.126510][ T9797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.126520][ T9797] R13: 00007ffce757fccf R14: 00007fcda07979c0 R15: 000000000118cf4c [ 338.126543][ T9797] ERROR: Out of memory at tomoyo_realpath_from_path. [ 338.310163][ T9823] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004109) 07:46:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x5, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x9, 0x5, 0x0, 0x3}, 0x10) 07:46:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004104) 07:46:06 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0xa3809, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) 07:46:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x6, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:06 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x4f81c2, 0x34) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000140)) write$P9_RWALK(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="ea"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 07:46:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410a) 07:46:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4600, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:06 executing program 2: signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r1, 0xc0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x70) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0xa3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}}}, 0x24}}, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000480)={0x0, @loopback, 0x4e22, 0x3, 'rr\x00', 0x22, 0x3, 0x4a}, 0x2c) sendfile(r3, r3, &(0x7f00000001c0), 0xa198) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000440)={0x980000, 0x1, 0xff, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x990a2f, 0x5, [], @value=0x7}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000095000000001a00003b9ed4dbd02db4976be8a78c7b6b0e6f17bbe32df8352a050ea3d9915fba468817d8a548e22ed7ab32fcb5f402d52a4541d77bd392e8c252b8d00c380612022b9dea18fa222183803730c8732b"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x1000, &(0x7f0000000f00)=""/4096, 0x0, 0x0, [], 0x0, 0x1, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r5, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x1a9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = request_key(&(0x7f0000000040)='trusted\x00', 0x0, &(0x7f0000000140)='/)\x00', 0x0) keyctl$restrict_keyring(0x1d, r6, &(0x7f0000000180)='encrypted\x00', 0x0) r7 = request_key(&(0x7f0000000040)='trusted\x00', 0x0, &(0x7f0000000140)='/)\x00', 0x0) keyctl$restrict_keyring(0x1d, r7, &(0x7f0000000180)='encrypted\x00', 0x0) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="919c30fa1b1316b905c1f8b83173a48421e080927e3e0b9ab9c34362fe030cee357898de9da73990571a00612c34db816ad50a4e8ccc73d6d833af6607a481c2fef57b7c1cb181e2a23a47f0c74c30b371879127ed918fae6a2cdf7d3f015ac8b954cb66e26c964c46d20213128dfdaecfbf9e6c1aa01553ec7a", 0x7a, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000080)={r6, r7, r8}, &(0x7f00000002c0)=""/75, 0x4b, 0x0) 07:46:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x7, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4602, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:07 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x2}}}, 0x24}}, 0x0) getsockname$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000053ec02050000000000000000000a0000010800044000000002"], 0x1c}}, 0x8801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff6c2b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="0000001f00000000280012800a00010076786c616e"], 0x3}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x10000004ffe6, 0x0) 07:46:07 executing program 2: signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r1, 0xc0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x70) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0xa3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}}}, 0x24}}, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000480)={0x0, @loopback, 0x4e22, 0x3, 'rr\x00', 0x22, 0x3, 0x4a}, 0x2c) sendfile(r3, r3, &(0x7f00000001c0), 0xa198) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000440)={0x980000, 0x1, 0xff, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x990a2f, 0x5, [], @value=0x7}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000095000000001a00003b9ed4dbd02db4976be8a78c7b6b0e6f17bbe32df8352a050ea3d9915fba468817d8a548e22ed7ab32fcb5f402d52a4541d77bd392e8c252b8d00c380612022b9dea18fa222183803730c8732b"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x1000, &(0x7f0000000f00)=""/4096, 0x0, 0x0, [], 0x0, 0x1, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r5, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x1a9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = request_key(&(0x7f0000000040)='trusted\x00', 0x0, &(0x7f0000000140)='/)\x00', 0x0) keyctl$restrict_keyring(0x1d, r6, &(0x7f0000000180)='encrypted\x00', 0x0) r7 = request_key(&(0x7f0000000040)='trusted\x00', 0x0, &(0x7f0000000140)='/)\x00', 0x0) keyctl$restrict_keyring(0x1d, r7, &(0x7f0000000180)='encrypted\x00', 0x0) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="919c30fa1b1316b905c1f8b83173a48421e080927e3e0b9ab9c34362fe030cee357898de9da73990571a00612c34db816ad50a4e8ccc73d6d833af6607a481c2fef57b7c1cb181e2a23a47f0c74c30b371879127ed918fae6a2cdf7d3f015ac8b954cb66e26c964c46d20213128dfdaecfbf9e6c1aa01553ec7a", 0x7a, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000080)={r6, r7, r8}, &(0x7f00000002c0)=""/75, 0x4b, 0x0) 07:46:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 07:46:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x8, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410b) 07:46:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4603, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 340.488545][ T9983] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 07:46:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4604, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004106) 07:46:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x9, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0xa, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 341.280447][T10045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 07:46:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410c) 07:46:08 executing program 0: perf_event_open(&(0x7f0000001180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x394b7000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff0001b5220000000000000000", @ANYRES32=0x0, @ANYBLOB="0312000000000000180012800e00010077697265677561726400"], 0x40}}, 0x4040000) [ 341.614620][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 341.614635][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 07:46:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004107) 07:46:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0xb, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410d) 07:46:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4605, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:09 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400add427323b472545b4560a117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71026000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00B\x00', @ANYRES16=r3, @ANYBLOB="10002dbd9462d9dbe4839e9e6000fb503325f5ffffff05002a0001000000080005000000000000db00000000000000ce1b5e741df2f950788933e8a8e826296202522095042fa4e6a0a4468cee3114857c4c2685d16c008895f688c83baa47508db2dd6cfd974534695eaa12e6d38a62b1acee7ece5f208cd40b8d9f1dbcf47d5efaeca668e451cda9ebea09d49e139aa531526518d5f9ff72"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000880) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000426bd7000ffdbdf250200000005002a000000000008002b00f4000000050030000000000008002c000101100008002b00060000005116e170c45344dccc698eb7c9c6a1bfd65b7e284c70c54e33df075d9802c978c35fcdffbcb5f4f44ecc25121e606296cc3d0bc94e25570c6e8ae967ff1d45e79fc5f97cceeb06183cc5b753a83e73bfd7cbccd36b6bae0201010000bc1ca071b1122f64c836ed9c30c93f98b6eb09710ed75e8d89bc1d0ee3142ec7b67dd314e5ef3f2e63c19468286fe7c6c3153861ac7668211d758be41f87d3ce7cddedae934628ed1713f22604e6a0f792404b40cbbf892b72f5538875a7932e00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, r4, 0x42b, 0x0, 0x0, {{}, {}, {0x10}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r4, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x3ff, 0x1f, 0x1a16, 0x9}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8040) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) 07:46:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4606, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:09 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000001240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="0000001f239ed679280012800a00010076786c616e00000018000280140013"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000890) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x2}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001100)={'syztnl0\x00', &(0x7f0000001180)={'ip6gre0\x00', r6, 0x4, 0x7, 0x7, 0xfffffff9, 0xbcb43f63c2d16c27, @loopback, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x10, 0x9, 0xfffffff9}}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000001200)=ANY=[@ANYRESDEC, @ANYRESDEC], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe2, 0x0) 07:46:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0xc, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004108) 07:46:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4608, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:09 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400add427323b472545b4560a117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71026000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00B\x00', @ANYRES16=r3, @ANYBLOB="10002dbd9462d9dbe4839e9e6000fb503325f5ffffff05002a0001000000080005000000000000db00000000000000ce1b5e741df2f950788933e8a8e826296202522095042fa4e6a0a4468cee3114857c4c2685d16c008895f688c83baa47508db2dd6cfd974534695eaa12e6d38a62b1acee7ece5f208cd40b8d9f1dbcf47d5efaeca668e451cda9ebea09d49e139aa531526518d5f9ff72"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000880) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000426bd7000ffdbdf250200000005002a000000000008002b00f4000000050030000000000008002c000101100008002b00060000005116e170c45344dccc698eb7c9c6a1bfd65b7e284c70c54e33df075d9802c978c35fcdffbcb5f4f44ecc25121e606296cc3d0bc94e25570c6e8ae967ff1d45e79fc5f97cceeb06183cc5b753a83e73bfd7cbccd36b6bae0201010000bc1ca071b1122f64c836ed9c30c93f98b6eb09710ed75e8d89bc1d0ee3142ec7b67dd314e5ef3f2e63c19468286fe7c6c3153861ac7668211d758be41f87d3ce7cddedae934628ed1713f22604e6a0f792404b40cbbf892b72f5538875a7932e00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, r4, 0x42b, 0x0, 0x0, {{}, {}, {0x10}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r4, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x3ff, 0x1f, 0x1a16, 0x9}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8040) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) 07:46:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4609, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410e) 07:46:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0xd, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:09 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400add427323b472545b4560a117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71026000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00B\x00', @ANYRES16=r3, @ANYBLOB="10002dbd9462d9dbe4839e9e6000fb503325f5ffffff05002a0001000000080005000000000000db00000000000000ce1b5e741df2f950788933e8a8e826296202522095042fa4e6a0a4468cee3114857c4c2685d16c008895f688c83baa47508db2dd6cfd974534695eaa12e6d38a62b1acee7ece5f208cd40b8d9f1dbcf47d5efaeca668e451cda9ebea09d49e139aa531526518d5f9ff72"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000880) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000426bd7000ffdbdf250200000005002a000000000008002b00f4000000050030000000000008002c000101100008002b00060000005116e170c45344dccc698eb7c9c6a1bfd65b7e284c70c54e33df075d9802c978c35fcdffbcb5f4f44ecc25121e606296cc3d0bc94e25570c6e8ae967ff1d45e79fc5f97cceeb06183cc5b753a83e73bfd7cbccd36b6bae0201010000bc1ca071b1122f64c836ed9c30c93f98b6eb09710ed75e8d89bc1d0ee3142ec7b67dd314e5ef3f2e63c19468286fe7c6c3153861ac7668211d758be41f87d3ce7cddedae934628ed1713f22604e6a0f792404b40cbbf892b72f5538875a7932e00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, r4, 0x42b, 0x0, 0x0, {{}, {}, {0x10}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r4, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x3ff, 0x1f, 0x1a16, 0x9}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8040) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) 07:46:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x460f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004109) 07:46:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0xe, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:11 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400add427323b472545b4560a117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71026000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00B\x00', @ANYRES16=r3, @ANYBLOB="10002dbd9462d9dbe4839e9e6000fb503325f5ffffff05002a0001000000080005000000000000db00000000000000ce1b5e741df2f950788933e8a8e826296202522095042fa4e6a0a4468cee3114857c4c2685d16c008895f688c83baa47508db2dd6cfd974534695eaa12e6d38a62b1acee7ece5f208cd40b8d9f1dbcf47d5efaeca668e451cda9ebea09d49e139aa531526518d5f9ff72"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000880) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000426bd7000ffdbdf250200000005002a000000000008002b00f4000000050030000000000008002c000101100008002b00060000005116e170c45344dccc698eb7c9c6a1bfd65b7e284c70c54e33df075d9802c978c35fcdffbcb5f4f44ecc25121e606296cc3d0bc94e25570c6e8ae967ff1d45e79fc5f97cceeb06183cc5b753a83e73bfd7cbccd36b6bae0201010000bc1ca071b1122f64c836ed9c30c93f98b6eb09710ed75e8d89bc1d0ee3142ec7b67dd314e5ef3f2e63c19468286fe7c6c3153861ac7668211d758be41f87d3ce7cddedae934628ed1713f22604e6a0f792404b40cbbf892b72f5538875a7932e00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, r4, 0x42b, 0x0, 0x0, {{}, {}, {0x10}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r4, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x3ff, 0x1f, 0x1a16, 0x9}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8040) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) 07:46:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4610, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0xf, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410f) 07:46:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410e) 07:46:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410a) 07:46:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4611, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004107) 07:46:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004110) 07:46:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4615, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410b) 07:46:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4619, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004112) 07:46:12 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d328000000", @ANYRES32=r4, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r5, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r6, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYBLOB="2242816bb5ba096fad7b4b683c15eb1489ec87ecd9a8720761804118693448437ab5c1c1087db888737a406632727f69f78e5c319f316a0e227c4c7b4dfb1fe3742314fa9571089423064dcf9cc282691092b08e03", @ANYBLOB="200002000010000008000a00", @ANYRESDEC], 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x500, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:46:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4650, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 345.350025][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 345.382688][T10287] device bond1 entered promiscuous mode 07:46:12 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x11000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000001100)=0x7) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x2) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_usb_control_io$uac1(r3, &(0x7f0000001940)={0x14, &(0x7f00000011c0)=ANY=[@ANYBLOB="3f3a42ae80473f87d31e9844df8bca95fbce57dfa62cb21b91a161a41bf9a74b167a"], 0x0}, 0x0) [ 345.523494][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 07:46:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410c) [ 345.523509][T10287] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.0'. [ 345.534490][T10287] device veth5 entered promiscuous mode [ 345.559900][T10287] bond1 (unregistering): Released all slaves 07:46:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4b47, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 345.827356][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:46:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x12, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000411e) [ 345.931081][T10287] device bond1 entered promiscuous mode [ 345.931610][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 07:46:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4b49, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410b) [ 345.931624][T10421] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.0'. [ 346.032990][ T3917] usb 3-1: new high-speed USB device number 2 using dummy_hcd 07:46:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410d) 07:46:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4c01, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000414f) 07:46:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x13, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 346.323157][ T3917] usb 3-1: device descriptor read/64, error 18 07:46:13 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000805, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) openat$cgroup_ro(r2, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e21, 0xfffffffb, @private0, 0x5}, @in6={0xa, 0x4e21, 0x5, @local, 0x84}], 0x48) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) sendto$inet(r0, &(0x7f0000000100)="c2", 0x1, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="a3372b293c17dfd9886e3ecd0e1ef43292e67153815625f26de765ba1f3dff0a76aaf3b37de3781c566204b479725ed7d68dad40c1e89d4303d9af7239485d0446c8407eb34e2b0b1a52213e19c1d385ed2bff932426"], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) fanotify_mark(0xffffffffffffffff, 0x105, 0x101b, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7) [ 346.712956][ T3917] usb 3-1: device descriptor read/64, error 18 [ 346.982997][ T3917] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 347.253182][ T3917] usb 3-1: device descriptor read/64, error 18 [ 347.652951][ T3917] usb 3-1: device descriptor read/64, error 18 [ 347.776578][ T3917] usb usb3-port1: attempt power cycle [ 348.492920][ T3917] usb 3-1: new high-speed USB device number 4 using dummy_hcd 07:46:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410e) 07:46:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x541b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x14, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004150) 07:46:15 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x8c100, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000280)=[{{r1, r2/1000+10000}, 0x4, 0x401, 0x2}, {{}, 0x14, 0xffff, 0x40}, {{r3, r4/1000+60000}, 0x14, 0x20, 0x5}, {{r5, r6/1000+10000}, 0x0, 0x1, 0x7577}, {{}, 0x1f, 0x5, 0x4}, {{0x77359400}, 0x1, 0x6, 0x20}, {{0x77359400}, 0x14, 0x800, 0x1}, {{0x77359400}, 0xf, 0x4, 0x3}, {{r7, r8/1000+60000}, 0x0, 0x6, 0x80000000}, {{}, 0x1f, 0x6, 0x2}], 0xf0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x4800, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b0f0008000000000008ea000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r11, @ANYBLOB="0970e5dc34f5fbc2ff9ed163576d4874d61305"], 0x48}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) 07:46:15 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x620, 0x0, 0xfffffffe, 0x0, 0x0, 0xd4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x40c00, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x1c, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x2}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getaddr={0x2c, 0x16, 0x20, 0x70bd2b, 0x25dfdbff, {0xa, 0x8, 0x0, 0x0, r5}, [@IFA_CACHEINFO={0x14, 0x6, {0xfffffff9, 0x4, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x20000000fb], 0x100000, 0x200400}) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 348.663272][ T3917] usb 3-1: device descriptor read/8, error -71 07:46:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x5421, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 348.777356][T10517] batman_adv: Cannot find parent device 07:46:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x101) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) sendfile(r0, r3, 0x0, 0x6) [ 348.861063][T10528] batman_adv: Cannot find parent device [ 348.873003][ T3917] usb 3-1: device descriptor read/8, error -71 [ 348.880652][T10521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x5450, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004150) 07:46:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x15, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x5451, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410f) 07:46:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x5452, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:16 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0xe0000, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) fallocate(r1, 0x4, 0x6, 0x100000001) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r3, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00032bbd7000b40bae566072913e08000400ffffff7f08008100a80000001700060001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c}, 0x8005) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0xfffffffd, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x8, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x40000000}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) 07:46:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x16, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004110) [ 350.116617][T10521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:17 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x6, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r1, 0x0, &(0x7f000089b000)}, 0x20) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000040)={0x3c, 0x0, 0x1, 0x6}, 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x8, [], "e7fe4f582a4bcd8f521f7e6e842d8492"}) 07:46:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004101) 07:46:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x5460, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x17, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:17 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4100, 0x0) write(r0, &(0x7f0000001400)="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", 0x200) sendfile(r0, r1, 0x0, 0x11f08) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x2}}}, 0x24}}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000100)={0x6, 0xb93, 0xffff, @multicast, 'vlan0\x00'}) 07:46:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004112) 07:46:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x6364, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') sendfile(r0, r1, 0x0, 0x800000080004101) [ 350.469775][ T28] audit: type=1800 audit(1597304777.291:19): pid=10644 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 350.518866][ T28] audit: type=1804 audit(1597304777.341:20): pid=10644 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745004034/syzkaller.MGdmZ6/49/file1/file0" dev="loop0" ino=3 res=1 errno=0 [ 350.519257][ T28] audit: type=1800 audit(1597304777.341:21): pid=10644 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 350.603491][T10653] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 07:46:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x8912, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x400000000000024, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) userfaultfd(0x1000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400add427323b472545b4560a117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71026000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00B\x00', @ANYRES16=r3, @ANYBLOB="10002dbd9462d9dbe4839e9e6000fb503325f5ffffff05002a0001000000080005000000000000db00000000000000ce1b5e741df2f950788933e8a8e826296202522095042fa4e6a0a4468cee3114857c4c2685d16c008895f688c83baa47508db2dd6cfd974534695eaa12e6d38a62b1acee7ece5f208cd40b8d9f1dbcf47d5efaeca668e451cda9ebea09d49e139aa531526518d5f9ff72"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000880) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000426bd7000ffdbdf250200000005002a000000000008002b00f4000000050030000000000008002c000101100008002b00060000005116e170c45344dccc698eb7c9c6a1bfd65b7e284c70c54e33df075d9802c978c35fcdffbcb5f4f44ecc25121e606296cc3d0bc94e25570c6e8ae967ff1d45e79fc5f97cceeb06183cc5b753a83e73bfd7cbccd36b6bae0201010000bc1ca071b1122f64c836ed9c30c93f98b6eb09710ed75e8d89bc1d0ee3142ec7b67dd314e5ef3f2e63c19468286fe7c6c3153861ac7668211d758be41f87d3ce7cddedae934628ed1713f22604e6a0f792404b40cbbf892b72f5538875a7932e00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040000) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@flushsa={0x1c, 0x1c, 0x800, 0x70bd2d, 0x25dfdbfd, {0xff}, [@replay_thresh={0x8, 0xb, 0x4}]}, 0x1c}}, 0x10008144) r4 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/70, 0x46}], 0x1}}], 0x1, 0x0, 0x0) 07:46:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x18, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 350.860158][ T28] audit: type=1800 audit(1597304777.681:22): pid=10653 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=3 res=0 errno=0 07:46:17 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x6, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r1, 0x0, &(0x7f000089b000)}, 0x20) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000040)={0x3c, 0x0, 0x1, 0x6}, 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x8, [], "e7fe4f582a4bcd8f521f7e6e842d8492"}) 07:46:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x8933, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 350.862653][T10653] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.203525][T10702] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=10702 comm=syz-executor.0 07:46:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x400448c9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 351.219065][T10702] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=10702 comm=syz-executor.0 07:46:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400add427323b472545b4560a117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71026000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00B\x00', @ANYRES16=r4, @ANYBLOB="10002dbd9462d9dbe4839e9e6000fb503325f5ffffff05002a0001000000080005000000000000db00000000000000ce1b5e741df2f950788933e8a8e826296202522095042fa4e6a0a4468cee3114857c4c2685d16c008895f688c83baa47508db2dd6cfd974534695eaa12e6d38a62b1acee7ece5f208cd40b8d9f1dbcf47d5efaeca668e451cda9ebea09d49e139aa531526518d5f9ff72"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000880) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r5, 0x6, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x25b3, {"a2f37b58646c05fdee55fa545844e45e"}, 0x5, 0x2, 0x401}, @ib={0x1b, 0x0, 0xd9, {"6d2843f50956736af2cd2589b352b296"}, 0x8001, 0xafb5bf8, 0x80000001}}}, 0x118) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000426bd7000ffdbdf250200000005002a000000000008002b00f4000000050030000000000008002c000101100008002b00060000005116e170c45344dccc698eb7c9c6a1bfd65b7e284c70c54e33df075d9802c978c35fcdffbcb5f4f44ecc25121e606296cc3d0bc94e25570c6e8ae967ff1d45e79fc5f97cceeb06183cc5b753a83e73bfd7cbccd36b6bae0201010000bc1ca071b1122f64c836ed9c30c93f98b6eb09710ed75e8d89bc1d0ee3142ec7b67dd314e5ef3f2e63c19468286fe7c6c3153861ac7668211d758be41f87d3ce7cddedae934628ed1713f22604e6a0f792404b40cbbf892b72f5538875a7932e00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r7, 0xc46dfc707e1df77d}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="86a09f4a", @ANYRES16=r7, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x81}, 0x4040895) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x7, 0x3, &(0x7f0000000000)=0x3a}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x1) 07:46:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x19, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004163) [ 351.537174][T10692] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=10692 comm=syz-executor.0 07:46:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x400448dd, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x323001, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x2, 0xfffffffd, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 07:46:18 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x37, 0x6, 0x5, &(0x7f0000000040)) [ 351.537896][T10702] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=10702 comm=syz-executor.0 [ 351.669039][T10733] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=10733 comm=syz-executor.4 07:46:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x400454ca, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:18 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x101b, r0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x8, 0x10001, 0x9, 'syz0\x00', 0x3}, 0x3, 0x40, 0x3, 0xffffffffffffffff, 0xa, 0x7, 'syz1\x00', &(0x7f0000000180)=['!$&[\x00', '*:-\x00', '))(\x00\xdc\x1f\xe5\x01?\xf5\xc1`I\xd7Z\xbb\x13=l\xa5\x19\xbe\xa9\x88M\xb0\xa3\xa8QPa+y\xe6\x9a\x9aP\xc6I\x92\xfd\x89EN\xf5\a@\xc6V\xdc\xa1\xc1\x14m8\xd4X1\x12\xf9\xd6E\xb4#\x87\"\xdf\xed\f\xdbM\xfc\x90\xa6g\x14\x84\xe4\xdb\xd0\xb0\xb3^G\xb0\x13\xbd\xe7', '', 'ip6gre0\x00', '\x00', 'veth0_macvtap\x00', 'SNPT\x00', '\x00', 'macvlan0\x00'], 0x87, [], [0x7, 0x9, 0x9, 0xfffe]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x598, 0xd0, 0x1b8, 0x298, 0x0, 0x0, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_macvtap\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@ipv6={@dev, @local, [], [], 'ip6gre0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, {{@ipv6={@private0, @mcast1, [], [], 'macvlan0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@remote}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) 07:46:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1a, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:18 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000001800)='/dev/vcsa#\x00', 0x0, 0xa000) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x72, &(0x7f0000000000)={r3, 0x4, "99569e6b"}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r3, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x800, 0x40}, 0x90) socket$netlink(0x10, 0x3, 0x15) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000001940)={&(0x7f0000001840), 0xc, 0x0}, 0x4000004) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={0x0, 0x0, 0xa1}, 0x0, 0x0, &(0x7f0000000400)=""/161) pipe2$9p(&(0x7f00000001c0), 0x0) [ 351.938005][T10733] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=10733 comm=syz-executor.4 07:46:18 executing program 2: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a929, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000018d000/0x2000)=nil, &(0x7f0000159000/0x2000)=nil, &(0x7f000003f000/0x4000)=nil, &(0x7f00001e8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000c3000/0x1000)=nil, &(0x7f00001ce000/0x4000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f00000e0000/0xa000)=nil, &(0x7f0000161000/0x3000)=nil, &(0x7f00001bd000/0x1000)=nil, &(0x7f0000000000)="ca975e7ab7b7691eeff63abe1a7c8fca997cd31b3e721ebf7958b410d0e9eef4dd8a0b181d1408e3005fd57e6a511455c232a722325d9febd9ee603125bff83d642d1edf8cc997568196355175f75b300dc0f73beed9716d1425fc9938d5c758ebf0847dff9e79a4b9fb16befac6bbf0c051545228b403a7ccd1d4e2", 0x7c, r0}, 0x68) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xff, 0x0, 0xff, 0x44, 0x2, 0x3e, 0x9, 0x71, 0x40, 0xb7, 0x2f2, 0x5, 0x38, 0x2, 0x8, 0x5, 0x4}, [{0x3, 0x2, 0x2, 0x30, 0x4, 0x1000, 0x2, 0x4ac}], "ff1f47f6254339a3d0d5b471e6dc649b810f818343e803155e159051fb45145952870cc1163affd425a485672e12a7b3768fa7897cd64411977bde63723aa0de6c4879f0722991df7ef52cbae1f9739e7ff3c0a7249f073222ce6f75a6cda4939581dba4c6f63f42834c519f29911c7af5b7216e6389de8b046148e6eb56b9162dcd94f925e04176707a53195881b7d08b1f2eb2257dbd943be7cafbd6e79d00c1a0c097102d34ec6a74597c1a0c3d34170ad890ef21a43f5c19358ea75645499dfe486eb29b98ad49264383a99b3a724449d1027f19e3", [[], [], [], [], [], [], [], [], [], []]}, 0xb4f) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x2}}}, 0x24}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x63, 0x8) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:46:18 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x105, 0x101b, r1, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = fanotify_init(0x0, 0x0) fanotify_mark(r4, 0x105, 0x101b, r3, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = fanotify_init(0x0, 0x0) fanotify_mark(r6, 0x105, 0x101b, r5, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r8, 0xc0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x70) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r11 = fanotify_init(0x0, 0x0) fanotify_mark(r11, 0x105, 0x101b, r10, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="40920000040000008500000015000000950000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000310900000000000016000000950000000000000007448000081b000018220000daef01ca97ce69d893f85ffd34a49ba139f82513aa491caf6d0ab9732d84fa06525ce3bc76dd", @ANYRES32=r3, @ANYBLOB="0000000003010000"], &(0x7f00000000c0)='syzkaller\x00', 0x81, 0xfd, &(0x7f0000000100)=""/253, 0x40f00, 0x2, [], 0x0, 0x18, r5, 0x8, &(0x7f0000000200)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x4, 0x9, 0x8}, 0x10, r9, r10}, 0x78) sendfile(r12, r0, 0x0, 0xfffffffffffffffc) 07:46:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x40049409, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 352.240491][T10788] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x2}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x2}}}, 0x24}}, 0x0) connect$can_j1939(r4, &(0x7f0000000000)={0x1d, r9, 0x1, {0x0, 0xf0, 0x1}}, 0x18) sendfile(r0, r1, 0x0, 0x800000080004101) 07:46:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000000)={0x1, 0x3c, 0xc3f0}) [ 352.446818][T10800] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:19 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x4, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000007c0)=@newtaction={0x14, 0x32, 0x53b}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) setns(r0, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x49) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0xf5, 0x5) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000006000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x6000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000006000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000007000/0x2000)=nil, 0x0}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 352.507253][T10809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 07:46:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x40086602, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 352.558433][T10809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 352.576752][T10783] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 07:46:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1b, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 352.649130][T10783] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 352.667502][T10783] loop0: p2 < > 07:46:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000001180)={0x6d, 0x1000, 0x1, {0xba2a6e3c58c11e92, @pix={0x2, 0x5, 0x59565955, 0x0, 0x3, 0x5, 0xb, 0x9ce, 0x0, 0x1, 0x2, 0x6}}, 0x7}) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = syz_open_dev$audion(&(0x7f0000001100)='/dev/audio#\x00', 0x3, 0x101000) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x1}, 0x1c) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000001280)={0x0, {}, 0x0, {}, 0x100, 0x0, 0x11, 0x19, "c7413bbddb4fc147065cbc350037553854df69961fae5c8573fe8b10fc39e0ea109510845c427632b49f3197ec1f43ed9a5d26e5c298ecf44a606065b714a917", "af13fc2d6a3fded0a2fb1596c0939c39ee471447b2677fd0b3050d849702ae85", [0x7, 0x2]}) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) getsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 352.768502][T10827] tc_dump_action: action bad kind 07:46:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x40087602, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 352.826989][ T3904] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 352.827003][ T3904] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 352.827292][ T3904] loop0: p2 < > 07:46:19 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x4, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000007c0)=@newtaction={0x14, 0x32, 0x53b}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) setns(r0, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x49) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0xf5, 0x5) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000006000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x6000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000006000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000007000/0x2000)=nil, 0x0}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 353.062373][T10849] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 353.079697][T10849] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 353.093330][T10849] loop0: p2 < > [ 353.210204][T10868] tc_dump_action: action bad kind 07:46:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x105, 0x101b, r2, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) sendfile(r0, r1, 0x0, 0x800000080004101) 07:46:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x5, 0x6, 0x7, 0x8, 0x0, "f8d5d698d487419edda8445e7be83bf485014b"}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') write$P9_RLERRORu(r1, &(0x7f0000000040)={0x17, 0x7, 0x1, {{0xa, 'mountinfo\x00'}, 0xffff}}, 0x17) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0x4}) sendfile(r0, r1, 0x0, 0x800000080004101) 07:46:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x40186366, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:20 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000001800)='/dev/vcsa#\x00', 0x0, 0xa000) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x72, &(0x7f0000000000)={r3, 0x4, "99569e6b"}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r3, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x800, 0x40}, 0x90) socket$netlink(0x10, 0x3, 0x15) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000001940)={&(0x7f0000001840), 0xc, 0x0}, 0x4000004) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={0x0, 0x0, 0xa1}, 0x0, 0x0, &(0x7f0000000400)=""/161) pipe2$9p(&(0x7f00000001c0), 0x0) 07:46:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1c, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:20 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x4, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000007c0)=@newtaction={0x14, 0x32, 0x53b}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) setns(r0, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x49) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0xf5, 0x5) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000006000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x6000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000006000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000007000/0x2000)=nil, 0x0}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 07:46:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4020940d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 353.530252][T10901] tc_dump_action: action bad kind 07:46:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x80086301, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x9015bdc77293a790) fanotify_mark(r6, 0x170, 0x3011, r4, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) write$binfmt_elf64(r4, &(0x7f0000001640)=ANY=[@ANYRESOCT], 0xa3) sendfile(r4, r4, &(0x7f00000001c0), 0xa198) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000200)={{0x1, 0x1}, {0x20}, 0x0, 0x2, 0x5c}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x8010, r4, 0x8000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000000), &(0x7f00000000c0)=0xc) socket$nl_route(0x10, 0x3, 0x0) 07:46:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1d, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x105, 0x101b, r2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) r4 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r4, 0x80084121, &(0x7f0000000040)) [ 353.886587][T10894] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 353.898549][T10894] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 353.918364][T10894] loop0: p2 < > 07:46:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x80086601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 354.048353][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x800000080004101) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = fanotify_init(0x0, 0x0) fanotify_mark(r6, 0x105, 0x101b, r5, 0x0) ioctl$KDADDIO(r5, 0x4b34, 0x9) 07:46:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x105, 0x101b, r2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r4, 0x4010ae94, &(0x7f0000000100)={0x1ff, 0x100, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x7, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 07:46:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1e, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x80087601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x9015bdc77293a790) fanotify_mark(r6, 0x170, 0x3011, r4, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) write$binfmt_elf64(r4, &(0x7f0000001640)=ANY=[@ANYRESOCT], 0xa3) sendfile(r4, r4, &(0x7f00000001c0), 0xa198) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000200)={{0x1, 0x1}, {0x20}, 0x0, 0x2, 0x5c}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x8010, r4, 0x8000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000000), &(0x7f00000000c0)=0xc) socket$nl_route(0x10, 0x3, 0x0) 07:46:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = fanotify_init(0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00d2bbb3da020010000100"/31], 0x44}}, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000001100)=0x4) fanotify_mark(r2, 0x105, 0x101b, r1, 0x0) r5 = socket$inet6(0xa, 0x1, 0x287) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r5, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r6 = pidfd_getfd(r1, r5, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f00000000c0)=""/4096, &(0x7f0000000000)=0x1000) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r7, 0x0, 0x800000080004101) dup(r0) 07:46:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0xc0045878, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 354.662782][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:21 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0xff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000001180), &(0x7f00000011c0)=0x14) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) write$binfmt_elf64(r1, &(0x7f0000001100)=ANY=[@ANYRESDEC, @ANYRES64=r2, @ANYRESHEX=r3], 0xa3) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth1_to_team\x00', 0x20}) 07:46:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0xc0045878, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x2}}}, 0x24}}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000)=0x1, 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004101) 07:46:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x21, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 354.977152][T11007] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 07:46:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x9015bdc77293a790) fanotify_mark(r6, 0x170, 0x3011, r4, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) write$binfmt_elf64(r4, &(0x7f0000001640)=ANY=[@ANYRESOCT], 0xa3) sendfile(r4, r4, &(0x7f00000001c0), 0xa198) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000200)={{0x1, 0x1}, {0x20}, 0x0, 0x2, 0x5c}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x8010, r4, 0x8000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000000), &(0x7f00000000c0)=0xc) socket$nl_route(0x10, 0x3, 0x0) 07:46:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x34, 0x0, 0x0, 0x98000000}, [@call={0x3c}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001100)='/dev/full\x00', 0x80880, 0x0) r3 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000740)=0xc) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x38}}, 0x0) ioctl$KDENABIO(r2, 0x4b36) r6 = socket$inet6(0xa, 0x1, 0x84) r7 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r7, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r7, r7, &(0x7f00000001c0), 0xa198) r8 = fsmount(r7, 0x0, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xce20, 0x0, @local, 0xffffffff}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r6, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) 07:46:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0xc0189436, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 355.259861][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0xc020660b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x22, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001240)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180)="9309491e2fc3228059202c035bd0cd1afaffee8707b49e2bc4ae49976a8ddaae0a10c9672ae3c48c0614008473125e2f3aed48cbb2b90d42251752f3ca67c4086a7986e664deaaf3884bfab850b2156bd65558546fab3db27e93aae1ae3b135e0d1018928ef15ae1907d9bbd2173c9269ebf00f9cf58cb197b6e7f2adc29cb1acf259f17b2c0d43dc258b2409bfade0563a1b9bb44782c1eca467f8d94b8007ad8d355434d9d3398c5f7a393b7d5182805be4668", 0xb4, r3}, 0x68) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000000)={0x1, 0x40, 0x5}) 07:46:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x9015bdc77293a790) fanotify_mark(r6, 0x170, 0x3011, r4, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) write$binfmt_elf64(r4, &(0x7f0000001640)=ANY=[@ANYRESOCT], 0xa3) sendfile(r4, r4, &(0x7f00000001c0), 0xa198) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000200)={{0x1, 0x1}, {0x20}, 0x0, 0x2, 0x5c}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x8010, r4, 0x8000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000000), &(0x7f00000000c0)=0xc) socket$nl_route(0x10, 0x3, 0x0) 07:46:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x9, 0x18, 0xa1, &(0x7f00000000c0)}) sendfile(r0, r1, 0x0, 0x800000080004101) [ 355.887111][T11063] __nla_validate_parse: 1 callbacks suppressed [ 355.887122][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0xc0684608, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x23, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup(r0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x35b400, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x72, &(0x7f0000000000)={r7, 0x4, "99569e6b"}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000140)={r7, @in={{0x2, 0x4e23, @broadcast}}, [0x1b9b8950, 0xdbf2, 0x1ff, 0x5, 0x5, 0xfffffffffffff001, 0x6, 0x9, 0x8cac, 0x4, 0x1, 0x0, 0x40, 0x2, 0xfffffffffffffffc]}, &(0x7f0000000280)=0x100) fanotify_mark(r3, 0x105, 0x101b, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f00000000c0)={0x0, {0x8, 0x80000001}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@filestreams='filestreams'}]}) 07:46:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x9015bdc77293a790) fanotify_mark(r6, 0x170, 0x3011, r4, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) write$binfmt_elf64(r4, &(0x7f0000001640)=ANY=[@ANYRESOCT], 0xa3) sendfile(r4, r4, &(0x7f00000001c0), 0xa198) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000200)={{0x1, 0x1}, {0x20}, 0x0, 0x2, 0x5c}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x8010, r4, 0x8000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000000), &(0x7f00000000c0)=0xc) 07:46:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r3 = syz_open_dev$vcsn(&(0x7f0000001100)='/dev/vcs#\x00', 0x325, 0x208000) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000040)='moundinfo\x00\xea\\x\xf0 \xdb\b\xdc\xba=\x86', 0x0, r0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = fanotify_init(0x0, 0x0) fanotify_mark(r5, 0x105, 0x101b, r4, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000011c0)={0x9f0000, 0x9, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000001180)={0x98091b, 0x3, [], @value64=0x5}}) faccessat2(r6, &(0x7f0000001200)='./file0\x00', 0x41, 0x100) 07:46:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x800}) 07:46:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x24, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x9015bdc77293a790) fanotify_mark(r6, 0x170, 0x3011, r4, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) write$binfmt_elf64(r4, &(0x7f0000001640)=ANY=[@ANYRESOCT], 0xa3) sendfile(r4, r4, &(0x7f00000001c0), 0xa198) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000200)={{0x1, 0x1}, {0x20}, 0x0, 0x2, 0x5c}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x8010, r4, 0x8000000) socket$inet_udp(0x2, 0x2, 0x0) [ 356.417680][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 356.448475][T11098] XFS (loop0): Invalid superblock magic number [ 356.829636][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x25, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x9015bdc77293a790) fanotify_mark(r6, 0x170, 0x3011, r4, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) write$binfmt_elf64(r4, &(0x7f0000001640)=ANY=[@ANYRESOCT], 0xa3) sendfile(r4, r4, &(0x7f00000001c0), 0xa198) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000200)={{0x1, 0x1}, {0x20}, 0x0, 0x2, 0x5c}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x8010, r4, 0x8000000) 07:46:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xa3) ioctl$TCXONC(r1, 0x540a, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = fanotify_init(0x0, 0x0) fanotify_mark(r4, 0x105, 0x101b, r3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, r3, 0xf6, 0x3ff, 0x8001, 0x9}) symlinkat(&(0x7f0000000000)='./file1\x00', r3, &(0x7f00000000c0)='./file0\x00') r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = fanotify_init(0x0, 0x0) fanotify_mark(r6, 0x105, 0x101b, r5, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100), 0x0, 0x0, 0x0, r7}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000200), 0x10) sendfile(r0, r1, 0x0, 0x800000080004101) 07:46:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:24 executing program 4: read$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=""/255, 0xff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgid(0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x105, 0x101b, r2, 0x0) ftruncate(r2, 0xdce) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001180)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r2, @ANYBLOB="ab5fb218425fb3577d93db80085ebe88400054656f8385d8f75028940e27c1c3bcd347a69bdceed9eddc15f1565cd27e79670be8ab30debb46b70b496967e4906495f05ebc267a0e2030bb9c0deb4019c337e602d00debc9f253f9c16fbfa28bf3696d"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) syz_open_procfs(r1, &(0x7f0000000040)='net/psched\x00') r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = fanotify_init(0x0, 0x0) fanotify_mark(r6, 0x105, 0x101b, r5, 0x0) r7 = syz_open_pts(r5, 0x400140) r8 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendfile(r8, r7, 0x0, 0x8001) [ 357.196703][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x9015bdc77293a790) fanotify_mark(r6, 0x170, 0x3011, r4, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) write$binfmt_elf64(r4, &(0x7f0000001640)=ANY=[@ANYRESOCT], 0xa3) sendfile(r4, r4, &(0x7f00000001c0), 0xa198) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000200)={{0x1, 0x1}, {0x20}, 0x0, 0x2, 0x5c}) 07:46:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x26, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 357.519298][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x9015bdc77293a790) fanotify_mark(r6, 0x170, 0x3011, r4, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) write$binfmt_elf64(r4, &(0x7f0000001640)=ANY=[@ANYRESOCT], 0xa3) sendfile(r4, r4, &(0x7f00000001c0), 0xa198) 07:46:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000000)) 07:46:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x27, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x9015bdc77293a790) fanotify_mark(r6, 0x170, 0x3011, r4, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) write$binfmt_elf64(r4, &(0x7f0000001640)=ANY=[@ANYRESOCT], 0xa3) 07:46:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x28, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 357.898018][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 358.166252][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:31 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x101b, r0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12d66, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000040)={0xe8a, 0x101, {r3}, {0xee01}, 0x20, 0x5}) write$cgroup_pid(r0, &(0x7f0000000080)=r4, 0x12) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004101) 07:46:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x9015bdc77293a790) fanotify_mark(r6, 0x170, 0x3011, r4, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) 07:46:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x29, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x6) 07:46:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 364.967528][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) r5 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x9015bdc77293a790) fanotify_mark(r5, 0x170, 0x3011, r4, 0x0) 07:46:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x105, 0x101b, r1, 0x0) syz_open_pts(r1, 0x800) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) fgetxattr(r3, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', &(0x7f0000000040)=""/54, 0x36) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x800000080004101) 07:46:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x2c, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x9015bdc77293a790) [ 365.159873][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000000)) 07:46:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) [ 365.459833][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 365.707634][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004101) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000040)={{0x2, 0x0, @reserved="4bea5689b954fcd1c20b79429ed0db77c965ce60b74b620c605f12f2ae24b542"}}) 07:46:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x30, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 07:46:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:46:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x9015bdc77293a790) fanotify_mark(r6, 0x170, 0x3011, r4, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) write$binfmt_elf64(r4, &(0x7f0000001640)=ANY=[@ANYRESOCT], 0xa3) sendfile(r4, r4, &(0x7f00000001c0), 0xa198) 07:46:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) 07:46:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x48, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = epoll_create(0x3) sendfile(r0, r1, 0x0, 0x800000080004101) modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/209, 0xd1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x101b, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000340)={0x6c750d89c1d60812, 0x1f, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x990af4, 0x7fffffff, [], @p_u16=&(0x7f00000002c0)=0x4}}) r7 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r7, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r7, r7, &(0x7f00000001c0), 0xa198) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000003c0)={0x1, r7}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x2}}}, 0x24}}, 0x0) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:46:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x4c, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}, {&(0x7f00000014c0)="28701e1e70d8ba340c65d9db130a0c9dbfec"}], 0x1, 0x0, 0xb}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) [ 366.673272][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 366.757067][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 366.949858][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.100953][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.753347][T11444] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 367.841606][T11453] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 07:46:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = syz_open_procfs(r1, &(0x7f0000000200)='mountstats\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r3, r3, &(0x7f00000001c0), 0xa198) fspick(r3, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f00000000c0)) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r4, r4, &(0x7f00000001c0), 0xa198) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000100)) sendfile(r0, r2, 0x0, 0x800000080004100) 07:46:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10103) r2 = socket$inet(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:35 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001640)='/dev/input/mouse#\x00', 0x101, 0x210a82) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pselect6(0x40, &(0x7f00000014c0)={0x4, 0xa2d1, 0xffffffffffffffff, 0x9, 0x7, 0xfa, 0xfffffffffffffffd}, &(0x7f0000001500)={0x9, 0x9, 0x3ff, 0x2, 0x3, 0x5, 0xffffffff, 0x7}, &(0x7f0000001540)={0x2, 0x10000, 0xadf, 0x8, 0x3, 0x3eeb, 0x5, 0x8001}, &(0x7f0000001580)={0x77359400}, &(0x7f0000001600)={&(0x7f00000015c0)={[0x9]}, 0x8}) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400c4}, 0x40880) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x2}}}, 0x24}}, 0x0) close(0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r6, 0x4, "99569e6b"}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001700)={0x0, 0x7fff, 0x40, 0x6664, 0x2, 0x3, 0x0, 0x1, {r6, @in6={{0xa, 0x4e20, 0x7f, @private0={0xfc, 0x0, [], 0x1}, 0xfc}}, 0xffffffff, 0x1, 0x7, 0x2800000, 0x6}}, &(0x7f00000017c0)=0xb0) sendmsg$xdp(r0, &(0x7f0000001480)={&(0x7f0000000040)={0x2c, 0xc, r4, 0x36}, 0x10, &(0x7f0000001400)=[{&(0x7f00000000c0)="988791e2943d5bccf84e034c0803479da43e1f38eae635b1f95ba0859593262c7172fdeb0530adb8161632232e0efe411d42c744a145521da387dde5d435db9585c63c", 0x43}, {&(0x7f0000000140)="a5994482688e72642787c80f6ce026a6c7a07bcc85fc6848bea05aed8b611a8c397b256e98372f4f99c3069704afa33ef8bd6c1b9df7504906b49bf0d630f8c59ea796cfc89279b91d7ddbe3bf1850d7767a6185389c72a2d077a12e0a8f282d594a2e2421babc27e68a0c898b84f869133fa17bf218634edf3ff4c4c86aa559ca12f1762ae939e8166ae7bc82eedf9d23f2413d2abed1fc86714f4e9ed5ddca1b128a31d541662b4ea0b31488f26f2658bdfbc2439368ca5f9b284a4894bd95e11e95d45ec222173c29", 0xca}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="2c6a28097af5284236caceca88120664b49fba9d503781a53269917bfd84e10ef0969b71fce9f1fc80d67a792c675c247a4b69713e1da29766c684c392d1c1028647143155b89783eccdca6435f653547b14a35e18c8a97cbbba28e69953357a23e8ccfa10c8c0ed0564c2f1fb7e7097691433d12675f25f6cfe056cb3c29163f9f065f934a2f3f9ca31b0826cf6ad89c1", 0x91}, {&(0x7f0000001300)="47c4a0e3ae23284670adf473bd1cb0835d6c06d94e28e0967fe70d79ad742d0581b8f5c35dbd5ae20623102a6ccd66bb672ea2b260ad3de0588580fd758b9d27135c12dc0a1057723ece05a8bdc3e1f3913f65ecf8a53f1a9cfae9c1d59aa99a3f4fd1348194ec2290ded4c896a001edb9c2637f97cd2904f16f67a13c0c996785651e254981eaf4213de01e406723b74cb46ae65e557fb63819178c5d41d539a9d9c14a02b74dc48a49c0b502598770d84a702518d731c7925b19c6cdac7a18922f8d58c967ce5398acfe68105627d0a76e9970f59731776b0e4f282d18534765f0bc41d2bbdb6276bdb967fe5c5aabe7acf2c1f2", 0xf5}], 0x5, 0x0, 0x0, 0x1}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x800000080004101) 07:46:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x60, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) r2 = socket$inet(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, [], [{0x0, 0x4, 0x49b30410, 0x9, 0x40, 0x4}, {0x6, 0x81, 0xffffffff00000001, 0x5, 0x3a9e, 0x3fc000000000000}], [[], []]}) 07:46:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:46:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket$inet(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x68, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:35 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:36 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x6c, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = socket$inet6(0xa, 0x1, 0x84) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) sendfile(r0, r2, 0x0, 0x800000080004101) ioctl$CHAR_RAW_BSZGET(r1, 0x80081270, &(0x7f0000000000)) 07:46:36 executing program 2: r0 = socket$inet(0x10, 0x0, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:36 executing program 2: r0 = socket$inet(0x10, 0x0, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x74, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x81, 0x80000) 07:46:37 executing program 2: r0 = socket$inet(0x10, 0x0, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:37 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x101b, r0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12d66, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000040)={0xe8a, 0x101, {r3}, {0xee01}, 0x20, 0x5}) write$cgroup_pid(r0, &(0x7f0000000080)=r4, 0x12) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004101) 07:46:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x7a, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x7, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:37 executing program 1: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000200)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgid(0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x105, 0x101b, r2, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000180)='net_prio.ifpriomap\x00', 0x2, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x10000, 0x0) close_range(r4, r5, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/144) r7 = syz_open_procfs(r6, &(0x7f0000000040)='net/ip_mr_vif\x00') sendfile(r0, r7, 0x0, 0x800000080004101) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x800, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r8, 0x80045105, &(0x7f0000000140)) 07:46:37 executing program 2: socket$inet(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:37 executing program 2: socket$inet(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:37 executing program 2: socket$inet(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x93, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:37 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) 07:46:37 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) 07:46:38 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x101b, r0, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000000)={0x2, 0xffffffff, 0x10000}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004101) 07:46:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0xf0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:39 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x101b, r0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12d66, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000040)={0xe8a, 0x101, {r3}, {0xee01}, 0x20, 0x5}) write$cgroup_pid(r0, &(0x7f0000000080)=r4, 0x12) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004101) 07:46:39 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) 07:46:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x300, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f00000000c0)={0x0, 0x1, 0x9, 0x4, &(0x7f0000000000)=[{}]}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x72, &(0x7f0000000000)={r5, 0x4, "99569e6b"}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e20, 0x400, @loopback, 0x9}}}, 0x84) 07:46:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:39 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040), 0x0) 07:46:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x3e7, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:39 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040), 0x0) 07:46:39 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040), 0x0) 07:46:39 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00", 0x12) 07:46:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) fsetxattr$security_capability(r3, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x8001, 0x3}, {0x3, 0x8001}], r5}, 0x18, 0x2) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80984120, &(0x7f0000001180)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000000)={0x1}) 07:46:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x500, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r3 = syz_open_dev$vivid(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vim2m\x00', 0x2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r5, r5, &(0x7f00000001c0), 0xa198) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r6, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r7 = syz_open_dev$vcsa(&(0x7f00000006c0)='/dev/vcsa#\x00', 0xfffffffffffffff9, 0x40880) io_submit(0x0, 0x6, &(0x7f0000000740)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x1b0f, r1, &(0x7f0000000040)="1824894ccf3d264b5871869c1807707793033ca83395e1c9b2b6bbd2d503039dbe10ea47c06ee769b8b2a594f5ac33f0a616009b4003c0fa1226a017aafa128cd7535758bdb68c1c144f60401a207fa62d3ab9e673ef2258c834acda167c8a19d8c87f055e6637ddfe391f13", 0x6c, 0x7fff, 0x0, 0xf9d9626b8495e2ab}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x7f, 0xffffffffffffffff, &(0x7f0000000100)="b208c33936a5bd9d4f1fe47290883a51d9bbaf", 0x13, 0x4, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1f, r2, &(0x7f0000000180)="7cad6811f6139f78dff1433a33aac4da8bb2424e7e3e3160c76afb7df1cdf973a37d5fffe3a388dca1786daae7e3094d2980b2dd66b0a16d258e5408a186d38b66b325e8920e7f6df4a9dd9cca75a56cde346b9262304e4e8e29c293d552b1e861bce0e5c61adc87d65c89c10c4260f3f02d16d10008a3bf447395f4099457c9f2dd1da6535f9d8f3c20fcf5a5d8eae1c558b1999ebad000eb12eefef6103693816846ebbeae1dcdfc8a928b336acf0810d91100d197faa3442603b0bd7f2c0a6ba54239c388f9d8902281d2230860d23e097f7f27188f51e9885d18d13ef811bbb23a837eeee1d1ee2a12f804955f8cd7e126e4a837c74b08", 0xf9, 0x7}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x28, r3, &(0x7f0000001180)="ce7d0367d19136bf122172440ca4169cf380e1720d4ceac1d6e7f1b623ef00dc024e5af566d234bd7949b7360560b8b2dd5bb1b16c9c16a59215a1328969edb93d89d9741941c04e42f142a5dcbede6206d915d5f7da8b4dbf65f2e30e3157053b5d580de6473ad6afb41e87af5c7ee6a2a0d279bb88344749d0e0d2485472dadea661b3a466497ac04dd8b21a8c64dd31215bf4aee6ee994277238053c2c74e6edb1e70fb54a0bd3ed1bb224331149e0959f214f97b3936eebaf858e409bf5547a443239f4ec383f1bb3355d2aee99971098901d53ab46c3499e0cb6f", 0xdd, 0x9}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x0, r4, &(0x7f0000000480)="4611c465839f47e59cb1f3ef813bba2644d11256bada76d0ba7473fdde9b5e9eccf28bf5f84a1c26d7fc0e7a824cd5933196da48d6d7edc6e7f72c0880c6bde4f9f91f6ba9552e5fd5ae0db8318d8024cca32164026365275b903e8c73520a0fd73bd030ff4cb85256da6ff04741935b7bdc3ee944ab828d9925a087512244160464206d762c382ce170c656c83dd57c25f03c4f831340e810f9acaa0f9c66dbdc203930e209bcb08fcbb5b31efef9dddd83d391cfcf0f9e1225a1c6e291ff96d8261e326022e4f216228d968b493479e0fe652d3285097b51e8623dc2bc1f68c1acdfa9", 0xe4, 0x8, 0x0, 0x2, r5}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x9, r6, &(0x7f00000005c0)="16d408f8ae9675378740ae0a9627d97b5999a3c38418927f2149b9892ae5a2d30d169816e5d7401b26cd4d984e7f09e5e06c362be8551e3bd5c34ca7dd1881afe92cd48e99557e6b411cf595066bfbeaca129eafb8786b2f6ce3ca733cdf862ad296ff866a14b2e1c69062087eea75f2d1b3e655fa1ab96630b00fda395b5ca215d2db9badece2adefdae0e615a4ea29deaebd1a2901c59f63ff418ac8f3ab97eb03196ac16afd260b89372c8f98f2e06f77b0a91dfd7a3cb8c3c2596ba9ca0a889b437ba9cdb2505c3bebc2007d569c8d", 0xd1, 0x1, 0x0, 0x1, r7}]) sendfile(r0, r1, 0x0, 0x800000080004101) 07:46:40 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00", 0x12) 07:46:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, [], [{0x0, 0x4, 0x49b30410, 0x9, 0x40, 0x4}, {0x6, 0x81, 0xffffffff00000001, 0x5, 0x3a9e, 0x3fc000000000000}], [[], []]}) 07:46:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x1c, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:40 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00", 0x12) 07:46:40 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008", 0x1b) 07:46:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x600, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:41 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008", 0x1b) 07:46:41 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008", 0x1b) 07:46:41 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a000000000000000000080008000900", 0x20) 07:46:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x700, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:46:41 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a000000000000000000080008000900", 0x20) 07:46:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000380)={0xc, 0x40e45f7d, {0x54, 0xfff9, 0x0, {0x4, 0xfff}, {0x8, 0x1}, @rumble={0x4ec, 0x3}}, {0x52, 0x55, 0x2, {0x36, 0x1}, {0x1ff, 0x400}, @period={0x5d, 0xffe1, 0x0, 0x4, 0x23, {0x1f, 0xa93, 0x2, 0xffff}, 0x2, &(0x7f0000000340)=[0x0, 0x5]}}}) prctl$PR_SET_FPEMU(0xa, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x800000080004101) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000000)=""/97, 0x61}, {&(0x7f00000000c0)=""/201, 0xc9}, {&(0x7f00000001c0)=""/198, 0xc6}, {&(0x7f00000002c0)=""/3, 0x3}], 0x4, 0x5, 0x1) 07:46:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r3 = syz_open_dev$vivid(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vim2m\x00', 0x2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r5, r5, &(0x7f00000001c0), 0xa198) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r6, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r7 = syz_open_dev$vcsa(&(0x7f00000006c0)='/dev/vcsa#\x00', 0xfffffffffffffff9, 0x40880) io_submit(0x0, 0x6, &(0x7f0000000740)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x1b0f, r1, &(0x7f0000000040)="1824894ccf3d264b5871869c1807707793033ca83395e1c9b2b6bbd2d503039dbe10ea47c06ee769b8b2a594f5ac33f0a616009b4003c0fa1226a017aafa128cd7535758bdb68c1c144f60401a207fa62d3ab9e673ef2258c834acda167c8a19d8c87f055e6637ddfe391f13", 0x6c, 0x7fff, 0x0, 0xf9d9626b8495e2ab}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x7f, 0xffffffffffffffff, &(0x7f0000000100)="b208c33936a5bd9d4f1fe47290883a51d9bbaf", 0x13, 0x4, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1f, r2, &(0x7f0000000180)="7cad6811f6139f78dff1433a33aac4da8bb2424e7e3e3160c76afb7df1cdf973a37d5fffe3a388dca1786daae7e3094d2980b2dd66b0a16d258e5408a186d38b66b325e8920e7f6df4a9dd9cca75a56cde346b9262304e4e8e29c293d552b1e861bce0e5c61adc87d65c89c10c4260f3f02d16d10008a3bf447395f4099457c9f2dd1da6535f9d8f3c20fcf5a5d8eae1c558b1999ebad000eb12eefef6103693816846ebbeae1dcdfc8a928b336acf0810d91100d197faa3442603b0bd7f2c0a6ba54239c388f9d8902281d2230860d23e097f7f27188f51e9885d18d13ef811bbb23a837eeee1d1ee2a12f804955f8cd7e126e4a837c74b08", 0xf9, 0x7}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x28, r3, &(0x7f0000001180)="ce7d0367d19136bf122172440ca4169cf380e1720d4ceac1d6e7f1b623ef00dc024e5af566d234bd7949b7360560b8b2dd5bb1b16c9c16a59215a1328969edb93d89d9741941c04e42f142a5dcbede6206d915d5f7da8b4dbf65f2e30e3157053b5d580de6473ad6afb41e87af5c7ee6a2a0d279bb88344749d0e0d2485472dadea661b3a466497ac04dd8b21a8c64dd31215bf4aee6ee994277238053c2c74e6edb1e70fb54a0bd3ed1bb224331149e0959f214f97b3936eebaf858e409bf5547a443239f4ec383f1bb3355d2aee99971098901d53ab46c3499e0cb6f", 0xdd, 0x9}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x0, r4, &(0x7f0000000480)="4611c465839f47e59cb1f3ef813bba2644d11256bada76d0ba7473fdde9b5e9eccf28bf5f84a1c26d7fc0e7a824cd5933196da48d6d7edc6e7f72c0880c6bde4f9f91f6ba9552e5fd5ae0db8318d8024cca32164026365275b903e8c73520a0fd73bd030ff4cb85256da6ff04741935b7bdc3ee944ab828d9925a087512244160464206d762c382ce170c656c83dd57c25f03c4f831340e810f9acaa0f9c66dbdc203930e209bcb08fcbb5b31efef9dddd83d391cfcf0f9e1225a1c6e291ff96d8261e326022e4f216228d968b493479e0fe652d3285097b51e8623dc2bc1f68c1acdfa9", 0xe4, 0x8, 0x0, 0x2, r5}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x9, r6, &(0x7f00000005c0)="16d408f8ae9675378740ae0a9627d97b5999a3c38418927f2149b9892ae5a2d30d169816e5d7401b26cd4d984e7f09e5e06c362be8551e3bd5c34ca7dd1881afe92cd48e99557e6b411cf595066bfbeaca129eafb8786b2f6ce3ca733cdf862ad296ff866a14b2e1c69062087eea75f2d1b3e655fa1ab96630b00fda395b5ca215d2db9badece2adefdae0e615a4ea29deaebd1a2901c59f63ff418ac8f3ab97eb03196ac16afd260b89372c8f98f2e06f77b0a91dfd7a3cb8c3c2596ba9ca0a889b437ba9cdb2505c3bebc2007d569c8d", 0xd1, 0x1, 0x0, 0x1, r7}]) sendfile(r0, r1, 0x0, 0x800000080004101) 07:46:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x50, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:42 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a000000000000000000080008000900", 0x20) 07:46:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x900, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:42 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b7", 0x22) 07:46:42 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b7", 0x22) 07:46:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0xa00, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) ioctl$SNDRV_PCM_IOCTL_DELAY(r1, 0x80084121, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x800000080004101) 07:46:42 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b7", 0x22) 07:46:42 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b700", 0x23) 07:46:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0xb00, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) 07:46:42 executing program 0: clock_nanosleep(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) ptrace$peekuser(0x3, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r0, r1, 0x11}, 0x10) unshare(0x40000000) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) prctl$PR_SET_PDEATHSIG(0x1, 0x25) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}}}, 0x24}}, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) [ 376.308769][T11936] IPVS: ftp: loaded support on port[0] = 21 [ 376.590187][T11929] IPVS: ftp: loaded support on port[0] = 21 [ 376.789223][ T117] tipc: TX() has been purged, node left! 07:46:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x1c0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:45 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b700", 0x23) 07:46:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0xc00, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:45 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000befecd4048432355fdfc000000010902120001000000000904"], 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:46:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'vxcan1\x00', 0x4000}) 07:46:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') exit(0x6099e345) sendfile(r0, r1, 0x0, 0x800000080004101) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8, 0x2, 0xffffff01}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x2}}}, 0x24}}, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x72, &(0x7f0000000300)={r7, 0x4, "99569e6b"}, &(0x7f0000000140)=0xc) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000002c0)={0x6c, 0x2, 0x2, 0x8, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}]}, 0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x9651, 0x7, 0x4, 0x7d, 0x6d4, 0x1f, 0x6, 0xfffffffffffffffa, 0x8, 0x80000001, 0x2870, 0x7, 0x5edc, 0x1, 0x1]}, &(0x7f0000000000)=0x100) 07:46:45 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b700", 0x23) 07:46:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x50, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 378.494017][T12025] __nla_validate_parse: 1 callbacks suppressed [ 378.494029][T12025] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 07:46:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0xd00, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 378.541665][ T17] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 378.901989][ T17] usb 1-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 378.902010][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 07:46:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x50, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 378.903387][ T17] usb 1-1: config 0 descriptor?? [ 378.942713][ T17] ch341 1-1:0.0: ch341-uart converter detected 07:46:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0xe00, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x401, 0x3, &(0x7f0000000040)=[0x8, 0x7d9, 0x101], &(0x7f00000000c0)=[0x5, 0x400, 0x6, 0x3f65, 0x8, 0xff, 0x3, 0x8], &(0x7f0000000100)=[0xffff, 0x3ff, 0x62a, 0xc], &(0x7f0000000140)=[0x400, 0x5], 0x0, 0xbf1}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) [ 379.235627][T12082] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 379.301752][ T17] usb 1-1: short control message received (0 < 2) [ 379.301799][ T17] usb 1-1: failed to receive control message: -5 [ 379.302053][ T17] ch341-uart: probe of ttyUSB0 failed with error -5 [ 379.509732][ T17] usb 1-1: USB disconnect, device number 5 [ 379.517772][ T17] ch341 1-1:0.0: device disconnected 07:46:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x1f0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0xf00, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 379.901156][ T117] tipc: TX() has been purged, node left! 07:46:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1100, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) [ 380.343801][ T3917] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 380.742095][ T3917] usb 1-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 380.742115][ T3917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.743924][ T3917] usb 1-1: config 0 descriptor?? [ 380.800625][ T3917] ch341 1-1:0.0: ch341-uart converter detected [ 381.004976][ T3917] usb 1-1: short control message received (0 < 2) [ 381.016160][ T3917] usb 1-1: failed to receive control message: -5 [ 381.045078][ T3917] ch341-uart: probe of ttyUSB0 failed with error -5 07:46:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'vxcan1\x00', 0x4000}) 07:46:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = syz_open_procfs(r1, &(0x7f0000000040)='auxv\x00') sendfile(r0, r2, 0x0, 0x800000080004101) 07:46:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgid(0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/psched\x00') sendfile(r0, r2, 0x0, 0x800000080004101) 07:46:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1200, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x50, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x300, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 381.244844][ T5] usb 1-1: USB disconnect, device number 6 [ 381.308715][ T5] ch341 1-1:0.0: device disconnected 07:46:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) 07:46:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="3c654ba02adbc6772a6f06f68fbef014c504f725d80a99b837bfe3b85c67107cd5963a36d3a8810035c34f25bd8f86d843779ce0e9cd5dea59b6ad48a037014e252e9e2496e1d5c263610a446d3bb765d411458686257acce3e0db", 0x5b}, {&(0x7f00000000c0)="7edce63432909e37a0bdb3b9441b620d862225dae75c992c8429898bf6c63e965b5a07231e76f8c7590444ae5fa0a20ca68984ffc5dba02cc1d81ac122fe20a11a1330177e728259b23045d3584a23f6f19500d3cf34a79fc9c14d03942f858564c3079fc4ade0fb5878635f", 0x6c}, {&(0x7f0000000140)="e02f7cc7194408c5974a7c615ffd67760487c0cfd0b627cb77ae0656b98de0078456c7747d6d075ce600907e958a0fbd710aabca7c581ab4bbdf6cc39413ece587e340ff289d78afbd06c25caccd", 0x4e}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x800000080004101) 07:46:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1300, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rpc\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x8000, 0x6, 0x2}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r3, r3, &(0x7f00000001c0), 0xa198) r4 = open_tree(r3, &(0x7f00000000c0)='./file0\x00', 0x2000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, r6, 0x42b, 0x0, 0x0, {{}, {}, {0x10}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7fdf}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000001) sendfile(r0, r1, 0x0, 0x800000080004101) 07:46:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1400, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:48 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20002, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8000001, 0x90001) sendfile(r1, r0, 0x0, 0x8) [ 381.948212][T12222] tipc: Enabling of bearer <:> rejected, illegal name [ 381.962610][T12229] tipc: Enabling of bearer <:> rejected, illegal name 07:46:50 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x105, 0x101b, r2, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r2, 0x80045113, &(0x7f0000000000)) r4 = syz_open_procfs(r1, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x800000080004101) 07:46:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1500, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:50 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000001100)=0x8) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) sendfile(r3, r0, 0x0, 0x800000080004101) 07:46:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, 0xfffffffffffffffe, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000540)="cd7a4084f205248d24b64602e81c0cf81323d51b94294c80b5801348145e8dac888cdb1edc3e155a1b7af3ed3839fb250166af3c213f2505301a873d6f4c551e183eca8c1a6534d323dcb8d5be4bdf4ef3036c6fd70ba7589cfd7f89f9e2f37e7f8fbc226de7135f675a7e095d2ba02bf0e715a33ca282b5b6bcf43a05f43f8ef76241e46ff144d3a0458b1851f7646d2c7eb718d2fd5a6c4a82855472e5f2b77ccaf4b3fb6578949acac85d1543157d17ce4ba3233d20891d97c6640f164c940fb7a3f2f3495b17ba02290bc0a83157ffb7c6e55b21d70f5ab19beb5869ec12b26c49cec37635a63328ce0cd6fd4adbe7169fd2567cea338a03b66d702dc33a76a084b1f6b431a946406d47f5252db0dd314430239135ee7a99803ff43fbb1617b16ea3e0947e90b5d7f547fce8a67d251667360a35a0f9456a85d51d1e2f3b2c8698716fdb854abb7023e1a0a9ce74bd8b5bc7de9c418359132fff636fe0c80c5fb3ab48231e3c8595c95242bd67fe2f108f95a8ddc0830fc6c5bbd1c7500ae3f8f4af33b37ca37715d8fca4d81d6ac36e56c2ece8219999e70755ae73583109bca8ef343f31564128716be4a041035734fec468c2b99dec8c327061866cec882c535223755354f60c3bd0c756ef2290a7e6fdbee5af2c6c0c37599cf50ddd6ffc7e35ff0da3bba04a3f76517a2db6a74674cd18db4e92fd4cd740030d252197385fc80ca9826d36d06e2ba03e85d49ce01075b4727551637a0862f366c65a45b415fea50ab88490880d10d3c9ac2691bdec6b4ab397a03a6b40ee48fba43b90fdd7de71ddf3f7339abbe997a4c509c590d6b31688632c36de729d58e4fa9beefd0f4dcd022a663aa015181b6f67f4ece17a47d495a4d4bc99ddddb1cf69ef8a0b2f6bd3bd37dcfd03b3fef5ccec5171923515ef58b8acbefe534848f9f736a88dfb712720bc457552bcc6a08dc14b35762b7ffbdb98cd54c0b26b4ed71ec19213566bac7b2120f86a958f9b01b25dd39dcf8ff5a52a0a10ea4740c407e5e684d18b55ee03b85072f82489500163395c261451335979ed3d259eb15c4431a9809bfa6f33906fe95cc5a9ec83188a3cf0e3dc82062d339f04fc347d42edd3948c3fd303be10892f538c86c80a24bdc5110c99701f7d1913352c736579bfdb5f92db8cafe27f59cbc9097816ec93d78c5130d02d5a5b117dfbe9072c175bdf3baa4a42cd674732a96ca42668c28695d7cd332e33df03f1a400badf0957d6857fa55a855adb53265aacb2e1dac5584c8e06f14139a173b77d4782d8d11c250818d80904a5f175a2731ce1dff4f1166db4c10455d90d69a31658a5511f358156cdaae82174a31a181d621d13f428b5d54ed221a9fe496cfe31e6bd266657ec0c9556c74d02437149a11fe9e6eb19e171a855da93773e109c52377a4dd3fca8336df60416499164b0bb15af9083529e4789de7e606332ec2e5b758e360a73f0041368433600f7598129ab40ccfcd4310f633c723c91e96e3df63b8be522be18022dc19041987dc338ba5d75a2c4e0a67683a607a9a48a30125617a04a7b2312b46fc5b1f8dcd6dcc9474e6915a86a9c307b1cbac0f73fdd999524740619ce89e0da8ce231d43d9887822d0ecbb3d304fd173c91c6cf0d73f361c5eca12ad66a93dd8cddcfb217956bea17026b7076e12ecda9aebd1a2e54a1d9528f7e37d8ecb25bb2d05123dc38d0deb66dbd6c8f9c7543af242ff60a47eed5b740fbc5c392a55f59018d7dbc8149fb359abc1c33443e7d288bdd3c5bfb1d079f72322fe511181a36504bbb98fa5512a4f340ee61bef368e3228411252931057bc81ade5b715fda9d34ea0cde540d26c60b1ed20c254dd7b137d32ba622649213f3819003b9189334c8c82b95a2beafee6015362321515e53d6e174f2f7b076dffc27ff081250f61fa176dc35f9196e1cc18dcd94ae4ea553a234fe0a0a7bcd4483e657953e31bdbbefbe7e07c90ced22aa3d113e8c4ff1e625525151", 0x595}], 0xffffffffffffff0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002780)="89", 0x1}, {&(0x7f0000000240)="4b016eae977fc36a4edd773313d7d702f124fae21993eb091f447ef153fee0b6efda0d3f986a4dfd9226a7f1ac32c9a48047f7d473f33a9f1e898a23007c267eaefcc54baa30194e580f49c1c415dfd61089abb429c6e0c9ec7c7ef3d286b278a00abfafe1ebb80b28a2fd121c33c0da1758ece0cd16118b2e459aeb3b5c2ef4da39e666258711d91a775d423e58af2769f3a82888064631cdaa6e27ab94d27c0409183a30cba25fb413d091900f685adf384ffdf943cf4deac1b5f6d50918bb2a87d70e917819b60232042dd8914ba2e4be00b30669f77e"}], 0x3e8}}], 0x2, 0x4004150) 07:46:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x500, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 383.835898][T12275] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 07:46:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r3, 0x0, 0x800000080004101) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1f07, @default, @rose={'rose', 0x0}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 07:46:50 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:50 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x101b, r0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000080)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/58, 0x3a}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x33, 0xcb, 0x23, 0x8, 0x4e6, 0xb, 0x100, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x33, 0x3f, 0xd0}}]}}]}}, 0x0) 07:46:51 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="0f0000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1600, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:51 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="100000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x600, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/ip6_tables_names\x00') sendfile(r0, r2, 0x0, 0x800000080004101) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xa, {0x5, 0x6, 0x20}}, 0xa) 07:46:51 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1b0000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) [ 384.491705][ T8188] usb 3-1: new high-speed USB device number 6 using dummy_hcd 07:46:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1700, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:51 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="520000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) [ 384.736026][ T8188] usb 3-1: Using ep0 maxpacket: 8 07:46:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgid(0x0) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) sendfile(r2, r2, 0x0, 0x24000000) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000000)={0xd9, 0x4, 0x2, 0x401}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = syz_open_procfs(r1, &(0x7f0000000040)='net/fib_trie\x00') sendfile(r0, r3, 0x0, 0x800000080004101) 07:46:51 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000000f005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) [ 384.861772][ T8188] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 384.861791][ T8188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.863978][ T8188] usb 3-1: config 0 descriptor?? [ 384.900870][T12357] netlink: 46 bytes leftover after parsing attributes in process `syz-executor.0'. [ 384.903549][ T8188] usb-storage 3-1:0.0: USB Mass Storage device detected [ 384.931191][ T8188] usb-storage 3-1:0.0: Quirks match for vid 04e6 pid 000b: 4 07:46:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x700, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 385.042926][T12376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=12376 comm=syz-executor.0 [ 385.112000][ T8188] usb 3-1: USB disconnect, device number 6 [ 385.891490][ T8153] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 386.141484][ T8153] usb 3-1: Using ep0 maxpacket: 8 [ 386.281580][ T8153] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 386.295259][ T8153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.326831][ T8153] usb 3-1: config 0 descriptor?? [ 386.372217][ T8153] usb-storage 3-1:0.0: USB Mass Storage device detected [ 386.392109][ T8153] usb-storage 3-1:0.0: Quirks match for vid 04e6 pid 000b: 4 07:46:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x1, 0x84) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) r3 = fanotify_init(0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001140)='/dev/hwrng\x00', 0x0, 0x0) fanotify_mark(r3, 0x105, 0x101b, r2, 0x0) r4 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000a4a000/0x2000)=nil, 0x2000, 0x0, r4) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, r4) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000001100)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x2, &(0x7f00000000c0)=""/4105, &(0x7f0000000000)=0x1009) dup(r1) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = fanotify_init(0x0, 0x0) fanotify_mark(r6, 0x105, 0x101b, r5, 0x0) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000001580)={0x36, 0x2, &(0x7f0000001180)="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"}) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r7, 0x0, 0x800000080004101) 07:46:53 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000010005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1800, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) ioctl$KVM_NMI(r1, 0xae9a) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80000) sendfile(r0, r2, 0x0, 0x800000080004101) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400add427323b472545b4560a117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71026000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00B\x00', @ANYRES16=r5, @ANYBLOB="10002dbd9462d9dbe4839e9e6000fb503325f5ffffff05002a0001000000080005000000000000db00000000000000ce1b5e741df2f950788933e8a8e826296202522095042fa4e6a0a4468cee3114857c4c2685d16c008895f688c83baa47508db2dd6cfd974534695eaa12e6d38a62b1acee7ece5f208cd40b8d9f1dbcf47d5efaeca668e451cda9ebea09d49e139aa531526518d5f9ff72"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000880) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000426bd7000ffdbdf250200000005002a000000000008002b00f4000000050030000000000008002c000101100008002b00060000005116e170c45344dccc698eb7c9c6a1bfd65b7e284c70c54e33df075d9802c978c35fcdffbcb5f4f44ecc25121e606296cc3d0bc94e25570c6e8ae967ff1d45e79fc5f97cceeb06183cc5b753a83e73bfd7cbccd36b6bae0201010000bc1ca071b1122f64c836ed9c30c93f98b6eb09710ed75e8d89bc1d0ee3142ec7b67dd314e5ef3f2e63c19468286fe7c6c3153861ac7668211d758be41f87d3ce7cddedae934628ed1713f22604e6a0f792404b40cbbf892b72f5538875a7932e00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0xdc, r7, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7fff}, @WGDEVICE_A_PEERS={0xac, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0xdc}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) poll(&(0x7f0000000240)=[{r3, 0x8202}, {0xffffffffffffffff, 0x6054}], 0x2, 0x5) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r7, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000005}, 0xc000) 07:46:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x1c00, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 386.584952][ T9834] usb 3-1: USB disconnect, device number 7 07:46:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0xe0, 0x10, 0x25f32caec8b44649, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}, @nested={0x45, 0x0, 0x0, 0x1, [@generic="76a638dc0ffdacad096f8e5bd231646e1deeef2b5a4fc32e1790d016bce9f48c1324336761b070920636092c5c176a268d19e3c14387c45436", @typed={0x8, 0x0, 0x0, 0x0, @uid}]}, @generic="b96f78f6a7eea8424beef26010f71c6624130e762d227476e12fa1911933573696ab7db927a497484774fb6d03f6a8510e7da7e9f3406b39d4e4ec2fd65a55c4974246dce5c23edd54bf67983073474246ea8b4ab4b042a961c0a8a05a954543c5ac39eb776646cb5b6b1b4e7716dddb6b7141abfd00000000"]}, 0xe0}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000814}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x14, 0x1, '/proc/key-users\x00'}]}, 0x28}}, 0x20008040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r3, 0xc46dfc707e1df77d}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfedc21746d208e5e}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0c020000", @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf25030000008c0006804200040067636d28616573290000000000000000000009000000000000000000000000001a00000072b4b71a594b8fe30cc20e043b3de1a4cbfcf917a74f07bc9d0000004200040067636d28616573290000000000000000000000000000000000000000000000001a0000002a68468422c21a957ed627b3a4ce26d5768030ca0cf0ae249ee800000800068004000200500004801c000780080001001f000000080003000300000008000200020000000900010073797a30000000000900010073797a3100000000f0ff000073797aedf80000000c00078008000200d30000006c0005802c000280080001000d000000080001001b00000008000200520a000008000200ffff000008000200080000003c00028008000200fcffffff0800020000080000080001000500000008000100040000000800030040000000080004000020000008000100110000008c00028008000200060000000400040008000200020000003400038008000200010000000800010001000000080001002f0f0000080001000700000008000200c60e000008000100010000000800010000080000040004003400038008000100fdffffff080002000700000008000100000001000800020008000000080002000800000008000100ffffffff0c0003800800020000000000100007800c0003000800000000000000b61d38b5879ad927d2fbb1b8a153934181997c73a0836de099c71e4b3bd11c4771dfa63ab4b6be06025a7e7e2f51dfaedd3b9b89ee644e90f3db395a310b0cde2452be84c6cff6f970a57fa2e6b8096113310b0e363da120add09faa4c82127fd8da9e56ddb578d3ecd6185537770c"], 0x20c}, 0x1, 0x0, 0x0, 0x80}, 0x814) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = fanotify_init(0x0, 0x0) fanotify_mark(r5, 0x105, 0x101b, r4, 0x0) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f0000000140)={0x6, 0x7}) [ 386.750316][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 07:46:53 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000011005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) [ 386.842304][T12443] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=12443 comm=syz-executor.1 07:46:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1900, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:53 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000012005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0xe0, 0x10, 0x25f32caec8b44649, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}, @nested={0x45, 0x0, 0x0, 0x1, [@generic="76a638dc0ffdacad096f8e5bd231646e1deeef2b5a4fc32e1790d016bce9f48c1324336761b070920636092c5c176a268d19e3c14387c45436", @typed={0x8, 0x0, 0x0, 0x0, @uid}]}, @generic="b96f78f6a7eea8424beef26010f71c6624130e762d227476e12fa1911933573696ab7db927a497484774fb6d03f6a8510e7da7e9f3406b39d4e4ec2fd65a55c4974246dce5c23edd54bf67983073474246ea8b4ab4b042a961c0a8a05a954543c5ac39eb776646cb5b6b1b4e7716dddb6b7141abfd00000000"]}, 0xe0}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000814}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x14, 0x1, '/proc/key-users\x00'}]}, 0x28}}, 0x20008040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r3, 0xc46dfc707e1df77d}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfedc21746d208e5e}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0c020000", @ANYRES16=r3, @ANYBLOB="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"], 0x20c}, 0x1, 0x0, 0x0, 0x80}, 0x814) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = fanotify_init(0x0, 0x0) fanotify_mark(r5, 0x105, 0x101b, r4, 0x0) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f0000000140)={0x6, 0x7}) [ 386.897191][T12463] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12463 comm=syz-executor.1 [ 386.951704][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 07:46:53 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000013005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) [ 387.083896][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 07:46:54 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000014005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@private1, @in=@initdev}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) sendfile(r0, r1, 0x0, 0x800000080004101) 07:46:54 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000015005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x1, 0x84) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) r3 = fanotify_init(0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001140)='/dev/hwrng\x00', 0x0, 0x0) fanotify_mark(r3, 0x105, 0x101b, r2, 0x0) r4 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000a4a000/0x2000)=nil, 0x2000, 0x0, r4) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, r4) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000001100)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x2, &(0x7f00000000c0)=""/4105, &(0x7f0000000000)=0x1009) dup(r1) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = fanotify_init(0x0, 0x0) fanotify_mark(r6, 0x105, 0x101b, r5, 0x0) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000001580)={0x36, 0x2, &(0x7f0000001180)="8a6b7d39ef6c65ab9827d4ddfcb1718508298888256f48ae87bad450b19fea6603dcf1622c549a938a3f63cbe4ad9936c974424cb275cc12bf969573eccec85cc93e631d0e4ff98f8ab3d3307f9ea95174e4157656d1997937796e6fc319a5d1a0b1f89388f7128c9f55ff78d8b91f245896b57b7ea3e293040c7ca851711237f9c4900c25cb5dae0f32808ee5ee9636dc48ebae22c021208e4854ce1205c0c6748c38fe7942a40c8dc4ea7b23279db0296316e72d3cd71c8096c0f2b68a88d6b97736ec7c4825bb183b8281fc6f83a06b68e49ae24c4dc9ba1a1e7e1347bc75e7ecad6ad5bc416d5dd523800796dc00e340c4512535677c7a1e7dc8f4422029abb26f72a8b7e33d0ca0086008f63be593d2d1da1c9ed43e9b16bd429e04af2e32f3b7dbd231682ab0c13bc2fcd85c9c1b1502d26f2ed6e6af0973eb1dcbdd120732f573d44e813ef65bb036aab41c274f61ed59454a33d5ca047e7ddb1f712b2f2aa209db3ba74e7e806aec1f50fd478cbf1c12b383d8974c9ace8535a6f81a610876ab137a9ab55f1797d409c8ad28ea90559d338137e62963abf88e7aca683b3c0110d91ed249283467ce038761fb9a7c851d0602e54f3c33cd13aa21364e5a7e895bd00ba77337bbfa065b698488ebc9902fd2780aa53978033ca50bbd49dd7b39e3e5c7147097155ea10b26edff02eac5206a1145d545e7cb10815782527ae6136d4291a700aa48616a1c16bd34f050fe4b7269f9f9b9afc6ff9c6598a3b1149d6fe84d3cdc580b258ae79f8f3650ff70271f7469daed3409990778980340dd10828d3ba2235c8abe221905a47fd7cd9e4d8a51257e6ac3393f89e59fa792cc9bddc5abf6ccfd9ee17a2e4ca47954b8b2c77924e92f0952d11c8c09b700247d2248664d1662d6b066b333cfddc28ea4542921df8d594cf48b84a3d12577674eae64ec2d10c199fd932a9637cc3f4c50b257e1729709c396a42ae7a95902ad92100d15188f84a43baca6ccc9458ee510f907feb39eab80b3634b786da07d4c7bd5b5fa2f271ad7b906e92a3b429a91c92a5ba406e7a2b8ebe470a6cbed618b3ae83f620f1ed3992f63ee371f08acb590ce41aa19ae28976b3a18f5a5ec76ac263d7a94972412353b31c36e2005030b96af7fbb3517f7f6768a38d1a4157623fe6a46e460e1c6b010b41130e3797b43042e36b8f4b71c42d952b365392e4f32464047046e8e311e72244135c4ca337963a6b87b99ea92e2bae1807fdd7bd76d0b9485f9e14e99f04415cdf4e8a6d216265091773c34c56c4a9c837e10e2e4f484172877a21d83b5fc2a3638bff874d855a7f4af2002dac5177b6e490862fc69ef5a8e9389c0168a2d82c37be5f1e5c2c9a5c390eeb0db1e73c1e24dc5e3a7965bbb0c819969fdc318886c1425968b0da21909363216517d83b29564f5a37d"}) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r7, 0x0, 0x800000080004101) [ 387.216037][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 387.351484][T12498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 387.507929][T12463] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=12463 comm=syz-executor.1 [ 387.566712][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:46:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = signalfd4(r0, &(0x7f0000000000)={[0x50bd5d2b]}, 0x8, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x4) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x800000080004101) 07:46:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x2000, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1a00, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:54 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000016005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:54 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000018005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) [ 387.761583][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:46:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x4000, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:54 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000019005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:54 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x40, 0x121002) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x4}, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x2}}}, 0x24}}, 0x0) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000100), 0x2) sendfile(r1, r2, 0x0, 0x800000080004101) r7 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r7, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r7, r7, &(0x7f00000001c0), 0xa198) ioctl$KVM_GET_XCRS(r7, 0x8188aea6, &(0x7f00000000c0)={0x1, 0x9e3, [{0x400, 0x0, 0x6}]}) 07:46:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1b00, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x5000, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0xe0, 0x10, 0x25f32caec8b44649, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}, @nested={0x45, 0x0, 0x0, 0x1, [@generic="76a638dc0ffdacad096f8e5bd231646e1deeef2b5a4fc32e1790d016bce9f48c1324336761b070920636092c5c176a268d19e3c14387c45436", @typed={0x8, 0x0, 0x0, 0x0, @uid}]}, @generic="b96f78f6a7eea8424beef26010f71c6624130e762d227476e12fa1911933573696ab7db927a497484774fb6d03f6a8510e7da7e9f3406b39d4e4ec2fd65a55c4974246dce5c23edd54bf67983073474246ea8b4ab4b042a961c0a8a05a954543c5ac39eb776646cb5b6b1b4e7716dddb6b7141abfd00000000"]}, 0xe0}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000814}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x14, 0x1, '/proc/key-users\x00'}]}, 0x28}}, 0x20008040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r3, 0xc46dfc707e1df77d}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfedc21746d208e5e}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0c020000", @ANYRES16=r3, @ANYBLOB="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"], 0x20c}, 0x1, 0x0, 0x0, 0x80}, 0x814) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = fanotify_init(0x0, 0x0) fanotify_mark(r5, 0x105, 0x101b, r4, 0x0) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f0000000140)={0x6, 0x7}) 07:46:55 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001a005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x105, 0x101b, r2, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) sendfile(r0, r1, 0x0, 0x800000080004101) [ 388.276821][T12557] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:46:55 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001c005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0xc001, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') write$dsp(r1, &(0x7f00000000c0)="d03b56bdd959fe51be886ea31ce0b6bc24aaf13251e6653a323ff0773b6b40c8a68803c1f0408b6d57a974010d8bebef6d5b7ebc05ac1f70bb7276e5cf0ef5f1ef7827a09876fd873551d019f1170ab951713f646bf67c9f6ec78c182c98c30c656ba08a34d08739bde4a4571a731b275f79c949eff44d3bea20e3833b309eb5175666126363b76225e061e86df2c91d497c61c01bffefb94cf1f319188eec44e7a2bf65a0cbe2ed396dc91ebe102b527c4ab4da20be733be5be50004d43611e3d9d43a014bc319a6b9adf77fff2a9186d944fa29c420151c40f61cb91fe786b54b248647d5626b47d63698f48fef79fd0364d7890ff087b4f2c6ebf933d641403220bb513ea5a8835f69a337bed1c537ac2590835b2030633e2ae4cb17267307612b210fec07970217c0566b046590abcce0ab553a0ded48aea7484e4a4f8d8dd1c163983bd91f85359f3a534d31aca", 0x150) sendfile(r0, r1, 0x0, 0x800000080004101) r2 = epoll_create(0x5) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) 07:46:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1c00, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:55 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001d005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:55 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x40, 0x121002) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x4}, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x2}}}, 0x24}}, 0x0) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000100), 0x2) sendfile(r1, r2, 0x0, 0x800000080004101) r7 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r7, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r7, r7, &(0x7f00000001c0), 0xa198) ioctl$KVM_GET_XCRS(r7, 0x8188aea6, &(0x7f00000000c0)={0x1, 0x9e3, [{0x400, 0x0, 0x6}]}) 07:46:55 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240200001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) [ 388.994092][T12620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0xf001, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1d00, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:56 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240300001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004101) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @initdev}, &(0x7f0000000040)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={@private1={0xfc, 0x1, [], 0x1}, 0x2d, r2}) 07:46:56 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240400001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:56 executing program 2: pipe(0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x1, 0xdc5c, 0x1ff, 0x0, 0x0, 0x6, 0x7f}}}, 0x90) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000026bd700000000e980f92a7a98f1d7e0000210000000600980006000100"], 0x1c}}, 0x800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x3ff, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x40000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES16=0x0], 0x27c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYBLOB="d82c8bc153dd6ae6b7bdf1589369c64416bdb0cb41a7ae84378a72bb1b8579d83d733c3aaae008a7e4cb13e74a7b9449aeb3d30b4f06d5d2f461c9efe6cd2b4226560b5cae15ddf7f0a2b53ecaf97d37a23327d5350ccb5aac39fb18bd37cc1de570bec1aaba36e92c400df3e5a6c5a863443278c9a61f31ffd6a3dfe4999660bb5b10883809e459dec3f57424bed9a2e9bc9265eeb27853110c02d619cdefd140dbaeb6329538d31982a2494f4dcea4ed0d3b39807d3221d0deb72dc2f03ac3bf5bdf316715019b4a212459326e1f6ceafed5cc31b970907344cdbf7ea5ca4b42b7143da642", @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRES64, @ANYRESDEC=r0, @ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x3) timerfd_create(0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20c301e2}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000001c0)=0x10001) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 07:46:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1e00, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0xff00, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:56 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240500001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x101302, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@bpq0='bpq0\x00', 0x10) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4aca, 0x0, @perf_bp={&(0x7f00000004c0), 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x401}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r3, r3, &(0x7f00000001c0), 0xa198) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020100000000000000000004000000000000", @ANYBLOB], 0x0, 0x26}, 0x20) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007999d02ff278039a60e2a885a593f9d4827ea4d48e0c452b77d89caec41e7867e971e2000000002613f462acb4244feb138d7505bcafe8b5cc53a631019fefb3e90c2427629135932f9b2f770a21583691283d466b9e480b78939eaefeedc64e968fc06e26729b1045b7d4ef774679f9f294788a20c11390fad2a0702ddc96f825b27643124b69"], &(0x7f0000000140)='GPL\x00', 0xe82, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r6, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r7}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r3, 0x0, 0x1, &(0x7f00000000c0)='\x00', r7}, 0x30) sendfile(r0, r1, 0x0, 0x800000080004101) 07:46:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) close(r1) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='attr/current\x00') sendfile(r0, r4, 0x0, 0x800000080004101) 07:46:56 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240600001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0xff01, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:56 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240800001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x1f00, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x41c1, 0x80480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) mlock2(&(0x7f00006f3000/0x3000)=nil, 0x3000, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYRES16], 0x18) timer_settime(r2, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1) io_submit(0x0, 0x3, &(0x7f0000002a00)=[0x0, 0x0, 0x0]) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = syz_open_dev$vcsu(0x0, 0x2, 0x404400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000140)) fcntl$notify(r4, 0x402, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000280)="6b38f44920e9ee36d5dd3093f4af0f133c76a864f581", &(0x7f00000002c0)=""/245}, 0x1c) fanotify_mark(0xffffffffffffffff, 0x105, 0x101b, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000500)={r5, 0x3, &(0x7f0000000400)=[0x4, 0x800, 0x257], &(0x7f0000000540)=[0x1, 0xffff, 0x8, 0x9af, 0x63d4, 0x9, 0xfff, 0x0, 0x1ed], 0x10, 0x2, 0x3, &(0x7f0000000480)=[0x9, 0x4], &(0x7f00000004c0)=[0x2, 0x1780, 0x1, 0x7f, 0x1, 0x4]}) 07:46:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0xff7f, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') sendfile(r0, r1, 0x0, 0x800000080004101) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x80000000, 0xbe, 0x0, 0x0, 0x10, 0x11, "c8fb566e414e08ee84a2941cbf0ae2c4640781ac03d3c0ba569ae0928b946f3ebf05d0c584a622fca08f012c39204b5bb2bc83dc135b28aade814dd8f7fa19d3", "d463850bdcd17d2ad2b1c2a88def9692df85baee9378326b9cfa6306d813da0f19550bd64791f9293a059b59b2b2b71804d997eba624fb7c2c8782d1e9a6941b", "47287d066ffcddf0eee13687551947b29ca9ef88ebbf9344aac7368a20813395", [0xffff, 0x1]}) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000f1ffffff000000000900010068667363000000001400020010000100000000000000000000000000c66a2ccfb61132e0e19fda6fec8118ef668a3c9ad51901655f965028e2dbe8ecf887932743b8aaeb7f441985f0d6013d93ac2e610a877deadc6a0a6914e9baf48327e17ffbe2c524b77cccd3f39fd3c6789b9a959c12c921822aeea36c0709ff95b02fc0e00ea94f40c6c68bb09661f1acb6071ec670061a44e2d8200b6a848f69c75f78fa09ad1966e6536d17f0cee141aa398c52b75d56797daa30346273d33a854db76c9d238b1c6a6834d3fc43"], 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x2}}}, 0x24}}, 0x0) accept$inet(r4, &(0x7f0000000140), &(0x7f0000000300)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000040)={r7, 0x0, r1, 0x8}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) 07:46:57 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240900001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) [ 390.357119][T12730] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 07:46:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x40000, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:57 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240a00001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xb8) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x101, 0x1013, r1, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r3, r3, &(0x7f00000001c0), 0xa198) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="66b9840200000f320f08260f1f0066b9800000c00f326635008000000f300fc775edba4100edd30966b9760b00000f320fc7ba01000f01d1", 0x38}], 0x1, 0x0, &(0x7f0000001100)=[@cstype3={0x5, 0x13}, @dstype0={0x6, 0x9}], 0x2) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0xaa}}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x800000080004101) r5 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r5, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r6, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) poll(&(0x7f0000001180)=[{0xffffffffffffffff, 0x40}, {r5, 0x2020}, {r3, 0x50e9}, {r5, 0x6}, {r1, 0x5020}, {}, {r2}], 0x1, 0x1) 07:46:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x2000, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x1c0000, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:57 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240c00001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:57 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240e00001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x2100, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xb8) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x101, 0x1013, r1, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r3, r3, &(0x7f00000001c0), 0xa198) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="66b9840200000f320f08260f1f0066b9800000c00f326635008000000f300fc775edba4100edd30966b9760b00000f320fc7ba01000f01d1", 0x38}], 0x1, 0x0, &(0x7f0000001100)=[@cstype3={0x5, 0x13}, @dstype0={0x6, 0x9}], 0x2) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0xaa}}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x800000080004101) r5 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r5, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r6, 0x84, 0x9, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) poll(&(0x7f0000001180)=[{0xffffffffffffffff, 0x40}, {r5, 0x2020}, {r3, 0x50e9}, {r5, 0x6}, {r1, 0x5020}, {}, {r2}], 0x1, 0x1) 07:46:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x1000000, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) 07:46:59 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240f00001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:46:59 executing program 1: sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10040088) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9549647787b681390c10b9881a1f1621ecad782a719b648d975fe9c1ce281fde50a25ca742c5e941cf0e454262fdbe111b679ec6421aa6696f50894f12e409a809be858909cb9598eee7f4b6555b88255c62d5ff469771f47d89ca8ca467a1c72bbf718d04c1f6f608f0ad00c8e7f9202a1c3d42d48c06509257b585f1ed87a603f197c84e87a63ed3d9b08fc8436c9fef79c790a9898a9278bef90b7798597fcc8e9d08dcf1258af0f1132e082ed0e8e53b34737f05648b8f51239bc60dd4dab61571d1bfcc", @ANYRES16, @ANYRESHEX, @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x70, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0x18}}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xffffffffffffffff}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa6e, 0x4}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x2}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r3, 0x29, 0x4, 0x1, 0x6, 0x10, @mcast2, @dev={0xfe, 0x80, [], 0x2f}, 0x40, 0x1, 0x3, 0x1a}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x39, 0x2}}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2004c000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) sendfile(r6, r6, 0x0, 0x24000000) ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000000)) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r7, 0x0, 0x800000080004101) 07:46:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000005680)={0x0, 0x2200, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 07:46:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffe, 0x1ae797}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/dev_mcast\x00') r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0500000076", @ANYRES16=r3, @ANYBLOB="000126bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendfile(r0, r2, 0x0, 0x800000080004101) [ 393.280651][T12842] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 07:47:00 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="241000001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:47:00 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x3, 0x5, 0x2, &(0x7f0000ffc000/0x4000)=nil, 0x20}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004101) 07:47:00 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="242e00001e005f0814fffffffff807000a00000000000000000008000800090000b70000", 0x52) 07:47:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x2000000, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4}) [ 393.805398][T12842] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 393.871184][ C1] ================================================================== [ 393.871343][ C1] BUG: KASAN: global-out-of-bounds in pvclock_gtod_notify+0x522/0x570 [ 393.871352][ C1] Read of size 8 at addr ffffffff8c96d2c0 by task syz-executor.3/12844 [ 393.871355][ C1] [ 393.871366][ C1] CPU: 1 PID: 12844 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 393.871372][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.871375][ C1] Call Trace: [ 393.871380][ C1] [ 393.871392][ C1] dump_stack+0x18f/0x20d [ 393.871402][ C1] ? pvclock_gtod_notify+0x522/0x570 [ 393.871410][ C1] ? pvclock_gtod_notify+0x522/0x570 [ 393.871422][ C1] print_address_description.constprop.0.cold+0x5/0x497 [ 393.871435][ C1] ? lock_release+0x8e0/0x8e0 [ 393.871447][ C1] ? vprintk_func+0x97/0x1a6 [ 393.871457][ C1] ? pvclock_gtod_notify+0x522/0x570 [ 393.871465][ C1] ? pvclock_gtod_notify+0x522/0x570 [ 393.871473][ C1] kasan_report.cold+0x1f/0x37 [ 393.871484][ C1] ? pvclock_gtod_notify+0x522/0x570 [ 393.871494][ C1] pvclock_gtod_notify+0x522/0x570 [ 393.871533][ C1] notifier_call_chain+0xb5/0x200 [ 393.871568][ C1] timekeeping_update+0x28a/0x4a0 [ 393.871581][ C1] timekeeping_advance+0x6ad/0xa40 [ 393.871605][ C1] ? tick_do_update_jiffies64.part.0+0x1ec/0x330 [ 393.871620][ C1] ? timekeeping_inject_offset+0x570/0x570 [ 393.871628][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 393.871639][ C1] ? trace_hardirqs_off+0x27/0x210 [ 393.871653][ C1] tick_do_update_jiffies64.part.0+0x1ec/0x330 [ 393.871664][ C1] tick_sched_timer+0x236/0x2a0 [ 393.871677][ C1] __hrtimer_run_queues+0x1d5/0xfc0 [ 393.871686][ C1] ? can_stop_idle_tick+0x290/0x290 [ 393.871701][ C1] ? lockdep_hardirqs_off+0x71/0xc0 [ 393.871714][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 393.871725][ C1] ? ktime_get_update_offsets_now+0x1c4/0x250 [ 393.871743][ C1] hrtimer_interrupt+0x32a/0x930 [ 393.871803][ C1] __sysvec_apic_timer_interrupt+0x142/0x5e0 [ 393.871840][ C1] asm_call_on_stack+0xf/0x20 [ 393.871845][ C1] [ 393.871855][ C1] sysvec_apic_timer_interrupt+0xb2/0xf0 [ 393.871867][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 393.871900][ C1] RIP: 0010:release_pages+0x1cf/0x17a0 [ 393.871911][ C1] Code: 65 34 31 ff 44 89 e6 e8 df 77 db ff 45 85 e4 0f 84 db 05 00 00 e8 51 7b db ff be 04 00 00 00 48 89 df e8 b4 3c 1b 00 f0 ff 0b <0f> 94 c3 31 ff 89 de e8 75 77 db ff 84 db 0f 84 fd 02 00 00 e8 28 [ 393.871916][ C1] RSP: 0018:ffffc9000876f8f0 EFLAGS: 00000206 [ 393.871925][ C1] RAX: 0000000000000001 RBX: ffffea00016f83b4 RCX: ffffffff8198ce4c [ 393.871931][ C1] RDX: fffff940002df077 RSI: 0000000000000004 RDI: ffffea00016f83b4 [ 393.871937][ C1] RBP: 0000000000000132 R08: 0000000000000001 R09: ffffea00016f83b7 [ 393.871943][ C1] R10: fffff940002df076 R11: 0000000000000000 R12: 0000000000000004 [ 393.871949][ C1] R13: ffffea00016f8380 R14: ffff8880a7e369a8 R15: dffffc0000000000 [ 393.871964][ C1] ? release_pages+0x1cc/0x17a0 [ 393.871983][ C1] ? put_devmap_managed_page+0x160/0x160 [ 393.872000][ C1] tlb_finish_mmu+0x165/0x8c0 [ 393.872012][ C1] exit_mmap+0x2d1/0x530 [ 393.872022][ C1] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 393.872030][ C1] ? lockdep_hardirqs_off+0x89/0xc0 [ 393.872063][ C1] ? __khugepaged_exit+0x2b8/0x3f0 [ 393.872072][ C1] ? kmem_cache_free.part.0+0x1c4/0x1f0 [ 393.872082][ C1] ? __khugepaged_exit+0x2d9/0x3f0 [ 393.872109][ C1] __mmput+0x122/0x470 [ 393.872120][ C1] mmput+0x53/0x60 [ 393.872142][ C1] do_exit+0xa8b/0x29f0 [ 393.872153][ C1] ? lock_acquire+0x1f1/0xad0 [ 393.872164][ C1] ? find_held_lock+0x2d/0x110 [ 393.872173][ C1] ? mm_update_next_owner+0x7a0/0x7a0 [ 393.872182][ C1] ? get_signal+0x332/0x1ee0 [ 393.872194][ C1] ? lock_downgrade+0x830/0x830 [ 393.872205][ C1] ? lock_is_held_type+0xbb/0xf0 [ 393.872217][ C1] do_group_exit+0x125/0x310 [ 393.872229][ C1] get_signal+0x40b/0x1ee0 [ 393.872271][ C1] arch_do_signal+0x82/0x2520 [ 393.872286][ C1] ? __fget_light+0xea/0x280 [ 393.872298][ C1] ? copy_siginfo_to_user32+0xa0/0xa0 [ 393.872307][ C1] ? fput_many+0xf6/0x1a0 [ 393.872324][ C1] ? __sys_sendmsg+0x10c/0x1b0 [ 393.872335][ C1] ? __sys_sendmsg_sock+0xb0/0xb0 [ 393.872353][ C1] ? exit_to_user_mode_prepare+0xce/0x1d0 [ 393.872366][ C1] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 393.872381][ C1] exit_to_user_mode_prepare+0x172/0x1d0 [ 393.872392][ C1] syscall_exit_to_user_mode+0x59/0x2b0 [ 393.872405][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 393.872413][ C1] RIP: 0033:0x45d189 [ 393.872417][ C1] Code: Bad RIP value. [ 393.872422][ C1] RSP: 002b:00007f9261371c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.872432][ C1] RAX: 0000000000000018 RBX: 000000000002bf80 RCX: 000000000045d189 [ 393.872438][ C1] RDX: 0000000000000000 RSI: 0000000020005680 RDI: 0000000000000005 [ 393.872445][ C1] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 393.872451][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 393.872457][ C1] R13: 00007ffe7d3bf86f R14: 00007f92613729c0 R15: 000000000118cfec [ 393.872470][ C1] [ 393.872474][ C1] The buggy address belongs to the variable: [ 393.872549][ C1] no_irq_affinity+0x20/0x40 [ 393.872551][ C1] [ 393.872555][ C1] Memory state around the buggy address: [ 393.872563][ C1] ffffffff8c96d180: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 04 f9 f9 f9 [ 393.872571][ C1] ffffffff8c96d200: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 04 f9 f9 f9 [ 393.872578][ C1] >ffffffff8c96d280: f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 393.872582][ C1] ^ [ 393.872590][ C1] ffffffff8c96d300: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 393.872597][ C1] ffffffff8c96d380: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 393.872600][ C1] ================================================================== [ 393.872604][ C1] Disabling lock debugging due to kernel taint [ 393.872608][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 393.872617][ C1] CPU: 1 PID: 12844 Comm: syz-executor.3 Tainted: G B 5.8.0-syzkaller #0 [ 393.872622][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.872624][ C1] Call Trace: [ 393.872627][ C1] [ 393.872635][ C1] dump_stack+0x18f/0x20d [ 393.872643][ C1] ? pvclock_gtod_notify+0x4f0/0x570 [ 393.872651][ C1] panic+0x2e3/0x75c [ 393.872660][ C1] ? __warn_printk+0xf3/0xf3 [ 393.872672][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0xe0 [ 393.872680][ C1] ? pvclock_gtod_notify+0x522/0x570 [ 393.872687][ C1] ? pvclock_gtod_notify+0x522/0x570 [ 393.872695][ C1] end_report+0x4d/0x53 [ 393.872703][ C1] kasan_report.cold+0xd/0x37 [ 393.872711][ C1] ? pvclock_gtod_notify+0x522/0x570 [ 393.872719][ C1] pvclock_gtod_notify+0x522/0x570 [ 393.872728][ C1] notifier_call_chain+0xb5/0x200 [ 393.872739][ C1] timekeeping_update+0x28a/0x4a0 [ 393.872749][ C1] timekeeping_advance+0x6ad/0xa40 [ 393.872757][ C1] ? tick_do_update_jiffies64.part.0+0x1ec/0x330 [ 393.872768][ C1] ? timekeeping_inject_offset+0x570/0x570 [ 393.872775][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 393.872783][ C1] ? trace_hardirqs_off+0x27/0x210 [ 393.872794][ C1] tick_do_update_jiffies64.part.0+0x1ec/0x330 [ 393.872807][ C1] tick_sched_timer+0x236/0x2a0 [ 393.872816][ C1] __hrtimer_run_queues+0x1d5/0xfc0 [ 393.872825][ C1] ? can_stop_idle_tick+0x290/0x290 [ 393.872834][ C1] ? lockdep_hardirqs_off+0x71/0xc0 [ 393.872844][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 393.872854][ C1] ? ktime_get_update_offsets_now+0x1c4/0x250 [ 393.872867][ C1] hrtimer_interrupt+0x32a/0x930 [ 393.872882][ C1] __sysvec_apic_timer_interrupt+0x142/0x5e0 [ 393.872889][ C1] asm_call_on_stack+0xf/0x20 [ 393.872892][ C1] [ 393.872904][ C1] sysvec_apic_timer_interrupt+0xb2/0xf0 [ 393.872914][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 393.872924][ C1] RIP: 0010:release_pages+0x1cf/0x17a0 [ 393.872932][ C1] Code: 65 34 31 ff 44 89 e6 e8 df 77 db ff 45 85 e4 0f 84 db 05 00 00 e8 51 7b db ff be 04 00 00 00 48 89 df e8 b4 3c 1b 00 f0 ff 0b <0f> 94 c3 31 ff 89 de e8 75 77 db ff 84 db 0f 84 fd 02 00 00 e8 28 [ 393.872936][ C1] RSP: 0018:ffffc9000876f8f0 EFLAGS: 00000206 [ 393.872943][ C1] RAX: 0000000000000001 RBX: ffffea00016f83b4 RCX: ffffffff8198ce4c [ 393.872948][ C1] RDX: fffff940002df077 RSI: 0000000000000004 RDI: ffffea00016f83b4 [ 393.872954][ C1] RBP: 0000000000000132 R08: 0000000000000001 R09: ffffea00016f83b7 [ 393.872959][ C1] R10: fffff940002df076 R11: 0000000000000000 R12: 0000000000000004 [ 393.872965][ C1] R13: ffffea00016f8380 R14: ffff8880a7e369a8 R15: dffffc0000000000 [ 393.872975][ C1] ? release_pages+0x1cc/0x17a0 [ 393.872988][ C1] ? put_devmap_managed_page+0x160/0x160 [ 393.872998][ C1] tlb_finish_mmu+0x165/0x8c0 [ 393.873007][ C1] exit_mmap+0x2d1/0x530 [ 393.873016][ C1] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 393.873024][ C1] ? lockdep_hardirqs_off+0x89/0xc0 [ 393.873035][ C1] ? __khugepaged_exit+0x2b8/0x3f0 [ 393.873042][ C1] ? kmem_cache_free.part.0+0x1c4/0x1f0 [ 393.873051][ C1] ? __khugepaged_exit+0x2d9/0x3f0 [ 393.873059][ C1] __mmput+0x122/0x470 [ 393.873067][ C1] mmput+0x53/0x60 [ 393.873075][ C1] do_exit+0xa8b/0x29f0 [ 393.873084][ C1] ? lock_acquire+0x1f1/0xad0 [ 393.873092][ C1] ? find_held_lock+0x2d/0x110 [ 393.873100][ C1] ? mm_update_next_owner+0x7a0/0x7a0 [ 393.873108][ C1] ? get_signal+0x332/0x1ee0 [ 393.873117][ C1] ? lock_downgrade+0x830/0x830 [ 393.873126][ C1] ? lock_is_held_type+0xbb/0xf0 [ 393.873135][ C1] do_group_exit+0x125/0x310 [ 393.873144][ C1] get_signal+0x40b/0x1ee0 [ 393.873155][ C1] arch_do_signal+0x82/0x2520 [ 393.873164][ C1] ? __fget_light+0xea/0x280 [ 393.873173][ C1] ? copy_siginfo_to_user32+0xa0/0xa0 [ 393.873180][ C1] ? fput_many+0xf6/0x1a0 [ 393.873188][ C1] ? __sys_sendmsg+0x10c/0x1b0 [ 393.873197][ C1] ? __sys_sendmsg_sock+0xb0/0xb0 [ 393.873208][ C1] ? exit_to_user_mode_prepare+0xce/0x1d0 [ 393.873218][ C1] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 393.873228][ C1] exit_to_user_mode_prepare+0x172/0x1d0 [ 393.873237][ C1] syscall_exit_to_user_mode+0x59/0x2b0 [ 393.873247][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 393.873252][ C1] RIP: 0033:0x45d189 [ 393.873255][ C1] Code: Bad RIP value. [ 393.873259][ C1] RSP: 002b:00007f9261371c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.873267][ C1] RAX: 0000000000000018 RBX: 000000000002bf80 RCX: 000000000045d189 [ 393.873272][ C1] RDX: 0000000000000000 RSI: 0000000020005680 RDI: 0000000000000005 [ 393.873277][ C1] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 393.873282][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 393.873288][ C1] R13: 00007ffe7d3bf86f R14: 00007f92613729c0 R15: 000000000118cfec [ 394.955457][ C1] Shutting down cpus with NMI [ 394.956796][ C1] Kernel Offset: disabled [ 396.074458][ C1] Rebooting in 86400 seconds..