[  OK  ] Started Serial Getty on ttyS0.
[  OK  ] Started Getty on tty3.
[  OK  ] Started Getty on tty2.
[  OK  ] Reached target Login Prompts.
[  OK  ] Reached target Multi-User System.
[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
[  OK  ] Started Update UTMP about System Runlevel Changes.
         Starting Load/Save RF Kill Switch Status...
[  OK  ] Started Load/Save RF Kill Switch Status.

Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.10.5' (ECDSA) to the list of known hosts.
2021/02/27 01:25:03 fuzzer started
2021/02/27 01:25:03 dialing manager at 10.128.0.169:33151
2021/02/27 01:25:04 syscalls: 3556
2021/02/27 01:25:04 code coverage: enabled
2021/02/27 01:25:04 comparison tracing: enabled
2021/02/27 01:25:04 extra coverage: enabled
2021/02/27 01:25:04 setuid sandbox: enabled
2021/02/27 01:25:04 namespace sandbox: enabled
2021/02/27 01:25:04 Android sandbox: /sys/fs/selinux/policy does not exist
2021/02/27 01:25:04 fault injection: enabled
2021/02/27 01:25:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2021/02/27 01:25:04 net packet injection: enabled
2021/02/27 01:25:04 net device setup: enabled
2021/02/27 01:25:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2021/02/27 01:25:04 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/02/27 01:25:04 USB emulation: enabled
2021/02/27 01:25:04 hci packet injection: enabled
2021/02/27 01:25:04 wifi device emulation: enabled
2021/02/27 01:25:04 802.15.4 emulation: enabled
2021/02/27 01:25:04 fetching corpus: 0, signal 0/2000 (executing program)
2021/02/27 01:25:04 fetching corpus: 50, signal 41414/45210 (executing program)
2021/02/27 01:25:04 fetching corpus: 100, signal 73059/78502 (executing program)
2021/02/27 01:25:05 fetching corpus: 150, signal 88756/95876 (executing program)
2021/02/27 01:25:05 fetching corpus: 200, signal 107408/116071 (executing program)
2021/02/27 01:25:06 fetching corpus: 250, signal 119062/129262 (executing program)
2021/02/27 01:25:06 fetching corpus: 300, signal 126296/138056 (executing program)
2021/02/27 01:25:06 fetching corpus: 350, signal 134616/147860 (executing program)
2021/02/27 01:25:06 fetching corpus: 400, signal 146243/160842 (executing program)
2021/02/27 01:25:07 fetching corpus: 450, signal 154501/170524 (executing program)
2021/02/27 01:25:07 fetching corpus: 500, signal 160649/178109 (executing program)
2021/02/27 01:25:07 fetching corpus: 550, signal 169911/188671 (executing program)
2021/02/27 01:25:07 fetching corpus: 600, signal 175997/196086 (executing program)
2021/02/27 01:25:08 fetching corpus: 650, signal 184376/205720 (executing program)
2021/02/27 01:25:08 fetching corpus: 700, signal 190964/213609 (executing program)
2021/02/27 01:25:09 fetching corpus: 750, signal 196561/220469 (executing program)
2021/02/27 01:25:09 fetching corpus: 800, signal 206597/231575 (executing program)
syzkaller login: [   71.095862][ T3266] ieee802154 phy0 wpan0: encryption failed: -22
[   71.102467][ T3266] ieee802154 phy1 wpan1: encryption failed: -22
2021/02/27 01:25:09 fetching corpus: 850, signal 210936/237162 (executing program)
2021/02/27 01:25:10 fetching corpus: 900, signal 217125/244558 (executing program)
2021/02/27 01:25:10 fetching corpus: 950, signal 220721/249367 (executing program)
2021/02/27 01:25:10 fetching corpus: 1000, signal 225289/255120 (executing program)
2021/02/27 01:25:11 fetching corpus: 1050, signal 229122/260122 (executing program)
2021/02/27 01:25:11 fetching corpus: 1100, signal 233261/265410 (executing program)
2021/02/27 01:25:11 fetching corpus: 1150, signal 239593/272724 (executing program)
2021/02/27 01:25:12 fetching corpus: 1200, signal 242797/277095 (executing program)
2021/02/27 01:25:12 fetching corpus: 1250, signal 245980/281483 (executing program)
2021/02/27 01:25:12 fetching corpus: 1300, signal 251478/287961 (executing program)
2021/02/27 01:25:12 fetching corpus: 1350, signal 256601/294113 (executing program)
2021/02/27 01:25:13 fetching corpus: 1400, signal 260250/298832 (executing program)
2021/02/27 01:25:13 fetching corpus: 1450, signal 263094/302790 (executing program)
2021/02/27 01:25:13 fetching corpus: 1500, signal 268789/309299 (executing program)
2021/02/27 01:25:13 fetching corpus: 1550, signal 272529/314060 (executing program)
2021/02/27 01:25:14 fetching corpus: 1600, signal 277314/319674 (executing program)
2021/02/27 01:25:14 fetching corpus: 1650, signal 279300/322742 (executing program)
2021/02/27 01:25:14 fetching corpus: 1700, signal 281933/326391 (executing program)
2021/02/27 01:25:14 fetching corpus: 1750, signal 283363/328930 (executing program)
2021/02/27 01:25:15 fetching corpus: 1800, signal 286293/332806 (executing program)
2021/02/27 01:25:15 fetching corpus: 1850, signal 289016/336506 (executing program)
2021/02/27 01:25:15 fetching corpus: 1900, signal 292440/340796 (executing program)
2021/02/27 01:25:15 fetching corpus: 1950, signal 295505/344848 (executing program)
2021/02/27 01:25:16 fetching corpus: 2000, signal 297468/347836 (executing program)
2021/02/27 01:25:16 fetching corpus: 2050, signal 299843/351190 (executing program)
2021/02/27 01:25:16 fetching corpus: 2100, signal 303317/355498 (executing program)
2021/02/27 01:25:17 fetching corpus: 2150, signal 306527/359509 (executing program)
2021/02/27 01:25:17 fetching corpus: 2200, signal 308654/362561 (executing program)
2021/02/27 01:25:17 fetching corpus: 2250, signal 311497/366302 (executing program)
2021/02/27 01:25:17 fetching corpus: 2300, signal 315305/370871 (executing program)
2021/02/27 01:25:17 fetching corpus: 2350, signal 317880/374291 (executing program)
2021/02/27 01:25:18 fetching corpus: 2400, signal 319569/376997 (executing program)
2021/02/27 01:25:18 fetching corpus: 2450, signal 322193/380461 (executing program)
2021/02/27 01:25:18 fetching corpus: 2500, signal 324265/383456 (executing program)
2021/02/27 01:25:18 fetching corpus: 2550, signal 326314/386372 (executing program)
2021/02/27 01:25:19 fetching corpus: 2600, signal 329017/389929 (executing program)
2021/02/27 01:25:19 fetching corpus: 2650, signal 333115/394639 (executing program)
2021/02/27 01:25:19 fetching corpus: 2700, signal 335176/397583 (executing program)
2021/02/27 01:25:19 fetching corpus: 2750, signal 336539/399864 (executing program)
2021/02/27 01:25:20 fetching corpus: 2800, signal 338322/402515 (executing program)
2021/02/27 01:25:20 fetching corpus: 2850, signal 340916/405843 (executing program)
2021/02/27 01:25:20 fetching corpus: 2900, signal 343041/408755 (executing program)
2021/02/27 01:25:20 fetching corpus: 2950, signal 345259/411741 (executing program)
2021/02/27 01:25:21 fetching corpus: 3000, signal 348563/415636 (executing program)
2021/02/27 01:25:21 fetching corpus: 3050, signal 349993/417881 (executing program)
2021/02/27 01:25:21 fetching corpus: 3100, signal 352303/420892 (executing program)
2021/02/27 01:25:22 fetching corpus: 3150, signal 354130/423508 (executing program)
2021/02/27 01:25:22 fetching corpus: 3200, signal 356671/426695 (executing program)
2021/02/27 01:25:22 fetching corpus: 3250, signal 358901/429579 (executing program)
2021/02/27 01:25:23 fetching corpus: 3300, signal 360885/432301 (executing program)
2021/02/27 01:25:23 fetching corpus: 3350, signal 362461/434630 (executing program)
2021/02/27 01:25:23 fetching corpus: 3400, signal 366178/438794 (executing program)
2021/02/27 01:25:23 fetching corpus: 3450, signal 367449/440859 (executing program)
2021/02/27 01:25:23 fetching corpus: 3500, signal 370328/444294 (executing program)
2021/02/27 01:25:24 fetching corpus: 3550, signal 372255/446915 (executing program)
2021/02/27 01:25:24 fetching corpus: 3600, signal 374042/449414 (executing program)
2021/02/27 01:25:24 fetching corpus: 3650, signal 376147/452120 (executing program)
2021/02/27 01:25:25 fetching corpus: 3700, signal 377444/454202 (executing program)
2021/02/27 01:25:25 fetching corpus: 3750, signal 379563/456892 (executing program)
2021/02/27 01:25:25 fetching corpus: 3800, signal 380902/458967 (executing program)
2021/02/27 01:25:25 fetching corpus: 3850, signal 382617/461336 (executing program)
2021/02/27 01:25:26 fetching corpus: 3900, signal 384519/463862 (executing program)
2021/02/27 01:25:26 fetching corpus: 3950, signal 385675/465807 (executing program)
2021/02/27 01:25:26 fetching corpus: 4000, signal 387024/467888 (executing program)
2021/02/27 01:25:26 fetching corpus: 4050, signal 387940/469586 (executing program)
2021/02/27 01:25:27 fetching corpus: 4100, signal 389636/471944 (executing program)
2021/02/27 01:25:27 fetching corpus: 4150, signal 391528/474375 (executing program)
2021/02/27 01:25:27 fetching corpus: 4200, signal 393144/476623 (executing program)
2021/02/27 01:25:27 fetching corpus: 4250, signal 394813/478878 (executing program)
2021/02/27 01:25:28 fetching corpus: 4300, signal 396256/480967 (executing program)
2021/02/27 01:25:28 fetching corpus: 4350, signal 397492/482869 (executing program)
2021/02/27 01:25:28 fetching corpus: 4400, signal 398926/484961 (executing program)
2021/02/27 01:25:28 fetching corpus: 4450, signal 400235/486957 (executing program)
2021/02/27 01:25:29 fetching corpus: 4500, signal 401781/489089 (executing program)
2021/02/27 01:25:29 fetching corpus: 4550, signal 404566/492167 (executing program)
2021/02/27 01:25:29 fetching corpus: 4600, signal 406023/494258 (executing program)
2021/02/27 01:25:30 fetching corpus: 4650, signal 407026/495965 (executing program)
2021/02/27 01:25:30 fetching corpus: 4700, signal 407966/497651 (executing program)
2021/02/27 01:25:30 fetching corpus: 4750, signal 409863/500030 (executing program)
2021/02/27 01:25:31 fetching corpus: 4800, signal 411376/502115 (executing program)
2021/02/27 01:25:31 fetching corpus: 4850, signal 413625/504709 (executing program)
2021/02/27 01:25:31 fetching corpus: 4900, signal 414601/506354 (executing program)
2021/02/27 01:25:31 fetching corpus: 4950, signal 416775/508872 (executing program)
2021/02/27 01:25:32 fetching corpus: 5000, signal 418626/511159 (executing program)
2021/02/27 01:25:32 fetching corpus: 5050, signal 419499/512744 (executing program)
2021/02/27 01:25:32 fetching corpus: 5100, signal 420452/514330 (executing program)
2021/02/27 01:25:33 fetching corpus: 5150, signal 421561/516074 (executing program)
2021/02/27 01:25:33 fetching corpus: 5200, signal 423440/518397 (executing program)
2021/02/27 01:25:33 fetching corpus: 5250, signal 425091/520478 (executing program)
2021/02/27 01:25:34 fetching corpus: 5300, signal 426873/522677 (executing program)
2021/02/27 01:25:34 fetching corpus: 5350, signal 427628/524128 (executing program)
2021/02/27 01:25:34 fetching corpus: 5400, signal 428427/525604 (executing program)
2021/02/27 01:25:34 fetching corpus: 5450, signal 429677/527405 (executing program)
2021/02/27 01:25:34 fetching corpus: 5500, signal 430767/529109 (executing program)
2021/02/27 01:25:35 fetching corpus: 5550, signal 431886/530801 (executing program)
2021/02/27 01:25:35 fetching corpus: 5600, signal 433411/532768 (executing program)
2021/02/27 01:25:35 fetching corpus: 5650, signal 434641/534498 (executing program)
2021/02/27 01:25:36 fetching corpus: 5700, signal 435828/536272 (executing program)
2021/02/27 01:25:36 fetching corpus: 5750, signal 436855/537924 (executing program)
2021/02/27 01:25:36 fetching corpus: 5800, signal 438138/539662 (executing program)
2021/02/27 01:25:37 fetching corpus: 5850, signal 439452/541481 (executing program)
2021/02/27 01:25:37 fetching corpus: 5900, signal 440764/543210 (executing program)
2021/02/27 01:25:37 fetching corpus: 5950, signal 441718/544707 (executing program)
2021/02/27 01:25:37 fetching corpus: 6000, signal 442787/546274 (executing program)
2021/02/27 01:25:38 fetching corpus: 6050, signal 443950/547923 (executing program)
2021/02/27 01:25:38 fetching corpus: 6100, signal 445040/549597 (executing program)
2021/02/27 01:25:38 fetching corpus: 6150, signal 446177/551235 (executing program)
2021/02/27 01:25:39 fetching corpus: 6200, signal 447271/552823 (executing program)
2021/02/27 01:25:39 fetching corpus: 6250, signal 448335/554407 (executing program)
2021/02/27 01:25:39 fetching corpus: 6300, signal 449275/555840 (executing program)
2021/02/27 01:25:39 fetching corpus: 6350, signal 449999/557128 (executing program)
2021/02/27 01:25:39 fetching corpus: 6400, signal 451063/558719 (executing program)
2021/02/27 01:25:40 fetching corpus: 6450, signal 452397/560448 (executing program)
2021/02/27 01:25:40 fetching corpus: 6500, signal 453310/561917 (executing program)
2021/02/27 01:25:40 fetching corpus: 6550, signal 454558/563551 (executing program)
2021/02/27 01:25:41 fetching corpus: 6600, signal 455705/565141 (executing program)
2021/02/27 01:25:41 fetching corpus: 6650, signal 456654/566583 (executing program)
2021/02/27 01:25:41 fetching corpus: 6700, signal 457529/567984 (executing program)
2021/02/27 01:25:41 fetching corpus: 6750, signal 458165/569225 (executing program)
2021/02/27 01:25:42 fetching corpus: 6800, signal 459203/570690 (executing program)
2021/02/27 01:25:42 fetching corpus: 6850, signal 460851/572545 (executing program)
2021/02/27 01:25:42 fetching corpus: 6900, signal 461775/573932 (executing program)
2021/02/27 01:25:42 fetching corpus: 6950, signal 462738/575326 (executing program)
2021/02/27 01:25:43 fetching corpus: 7000, signal 463759/576819 (executing program)
2021/02/27 01:25:43 fetching corpus: 7050, signal 465265/578627 (executing program)
2021/02/27 01:25:43 fetching corpus: 7100, signal 466359/580094 (executing program)
2021/02/27 01:25:43 fetching corpus: 7150, signal 467963/581909 (executing program)
2021/02/27 01:25:44 fetching corpus: 7200, signal 469307/583485 (executing program)
2021/02/27 01:25:44 fetching corpus: 7250, signal 470140/584821 (executing program)
2021/02/27 01:25:44 fetching corpus: 7300, signal 472018/586742 (executing program)
2021/02/27 01:25:45 fetching corpus: 7350, signal 473083/588164 (executing program)
2021/02/27 01:25:45 fetching corpus: 7400, signal 473833/589381 (executing program)
2021/02/27 01:25:45 fetching corpus: 7450, signal 474806/590767 (executing program)
2021/02/27 01:25:45 fetching corpus: 7500, signal 475571/591998 (executing program)
2021/02/27 01:25:46 fetching corpus: 7550, signal 476796/593512 (executing program)
2021/02/27 01:25:46 fetching corpus: 7600, signal 477798/594893 (executing program)
2021/02/27 01:25:46 fetching corpus: 7650, signal 478685/596200 (executing program)
2021/02/27 01:25:46 fetching corpus: 7700, signal 479794/597657 (executing program)
2021/02/27 01:25:47 fetching corpus: 7750, signal 480875/599075 (executing program)
2021/02/27 01:25:47 fetching corpus: 7800, signal 482145/600576 (executing program)
2021/02/27 01:25:47 fetching corpus: 7850, signal 482857/601781 (executing program)
2021/02/27 01:25:47 fetching corpus: 7900, signal 483650/602964 (executing program)
2021/02/27 01:25:47 fetching corpus: 7950, signal 484407/604123 (executing program)
2021/02/27 01:25:48 fetching corpus: 8000, signal 485014/605190 (executing program)
2021/02/27 01:25:48 fetching corpus: 8050, signal 486099/606571 (executing program)
2021/02/27 01:25:48 fetching corpus: 8100, signal 486993/607827 (executing program)
2021/02/27 01:25:48 fetching corpus: 8150, signal 487568/608869 (executing program)
2021/02/27 01:25:49 fetching corpus: 8200, signal 488207/610005 (executing program)
2021/02/27 01:25:49 fetching corpus: 8250, signal 488914/611124 (executing program)
2021/02/27 01:25:49 fetching corpus: 8300, signal 489804/612376 (executing program)
2021/02/27 01:25:49 fetching corpus: 8350, signal 490576/613540 (executing program)
2021/02/27 01:25:50 fetching corpus: 8400, signal 492078/615088 (executing program)
2021/02/27 01:25:50 fetching corpus: 8450, signal 492981/616318 (executing program)
2021/02/27 01:25:50 fetching corpus: 8500, signal 493682/617412 (executing program)
2021/02/27 01:25:50 fetching corpus: 8550, signal 494327/618477 (executing program)
2021/02/27 01:25:50 fetching corpus: 8600, signal 495349/619775 (executing program)
2021/02/27 01:25:51 fetching corpus: 8650, signal 496243/620997 (executing program)
2021/02/27 01:25:51 fetching corpus: 8700, signal 496854/622081 (executing program)
2021/02/27 01:25:51 fetching corpus: 8750, signal 497811/623306 (executing program)
2021/02/27 01:25:52 fetching corpus: 8800, signal 498706/624510 (executing program)
2021/02/27 01:25:52 fetching corpus: 8850, signal 499437/625676 (executing program)
2021/02/27 01:25:52 fetching corpus: 8900, signal 500006/626682 (executing program)
2021/02/27 01:25:52 fetching corpus: 8950, signal 500837/627801 (executing program)
2021/02/27 01:25:53 fetching corpus: 9000, signal 501406/628812 (executing program)
2021/02/27 01:25:53 fetching corpus: 9050, signal 502149/629924 (executing program)
2021/02/27 01:25:53 fetching corpus: 9100, signal 503192/631152 (executing program)
2021/02/27 01:25:53 fetching corpus: 9150, signal 503863/632209 (executing program)
2021/02/27 01:25:53 fetching corpus: 9200, signal 504688/633323 (executing program)
2021/02/27 01:25:54 fetching corpus: 9250, signal 505381/634408 (executing program)
2021/02/27 01:25:54 fetching corpus: 9300, signal 506277/635549 (executing program)
2021/02/27 01:25:54 fetching corpus: 9350, signal 507158/636695 (executing program)
2021/02/27 01:25:54 fetching corpus: 9400, signal 508310/637938 (executing program)
2021/02/27 01:25:55 fetching corpus: 9450, signal 509076/638997 (executing program)
2021/02/27 01:25:55 fetching corpus: 9500, signal 510024/640163 (executing program)
2021/02/27 01:25:55 fetching corpus: 9550, signal 510841/641238 (executing program)
2021/02/27 01:25:55 fetching corpus: 9600, signal 511509/642284 (executing program)
2021/02/27 01:25:56 fetching corpus: 9650, signal 512443/643448 (executing program)
2021/02/27 01:25:56 fetching corpus: 9700, signal 513388/644542 (executing program)
2021/02/27 01:25:56 fetching corpus: 9750, signal 514474/645737 (executing program)
2021/02/27 01:25:56 fetching corpus: 9800, signal 515149/646742 (executing program)
2021/02/27 01:25:57 fetching corpus: 9850, signal 515883/647782 (executing program)
2021/02/27 01:25:57 fetching corpus: 9900, signal 516764/648921 (executing program)
2021/02/27 01:25:57 fetching corpus: 9950, signal 517581/649977 (executing program)
2021/02/27 01:25:58 fetching corpus: 10000, signal 518724/651218 (executing program)
2021/02/27 01:25:58 fetching corpus: 10050, signal 519272/652152 (executing program)
2021/02/27 01:25:58 fetching corpus: 10100, signal 519808/653077 (executing program)
2021/02/27 01:25:58 fetching corpus: 10150, signal 520423/654036 (executing program)
2021/02/27 01:25:59 fetching corpus: 10200, signal 521397/655140 (executing program)
2021/02/27 01:25:59 fetching corpus: 10250, signal 522125/656111 (executing program)
2021/02/27 01:25:59 fetching corpus: 10300, signal 522927/657126 (executing program)
2021/02/27 01:26:00 fetching corpus: 10350, signal 524039/658328 (executing program)
2021/02/27 01:26:00 fetching corpus: 10400, signal 524870/659373 (executing program)
2021/02/27 01:26:00 fetching corpus: 10450, signal 525486/660266 (executing program)
2021/02/27 01:26:00 fetching corpus: 10500, signal 526003/661140 (executing program)
2021/02/27 01:26:01 fetching corpus: 10550, signal 526675/662113 (executing program)
2021/02/27 01:26:01 fetching corpus: 10600, signal 527757/663243 (executing program)
2021/02/27 01:26:01 fetching corpus: 10650, signal 528166/664043 (executing program)
2021/02/27 01:26:01 fetching corpus: 10700, signal 528897/665021 (executing program)
2021/02/27 01:26:02 fetching corpus: 10750, signal 529655/665975 (executing program)
2021/02/27 01:26:02 fetching corpus: 10800, signal 530188/666882 (executing program)
2021/02/27 01:26:02 fetching corpus: 10850, signal 530839/667809 (executing program)
2021/02/27 01:26:02 fetching corpus: 10900, signal 531537/668720 (executing program)
2021/02/27 01:26:03 fetching corpus: 10950, signal 532378/669716 (executing program)
2021/02/27 01:26:03 fetching corpus: 11000, signal 532924/670589 (executing program)
2021/02/27 01:26:03 fetching corpus: 11050, signal 533495/671487 (executing program)
2021/02/27 01:26:03 fetching corpus: 11100, signal 534401/672461 (executing program)
2021/02/27 01:26:04 fetching corpus: 11150, signal 535109/673404 (executing program)
2021/02/27 01:26:04 fetching corpus: 11200, signal 535681/674233 (executing program)
2021/02/27 01:26:04 fetching corpus: 11250, signal 536349/675129 (executing program)
2021/02/27 01:26:04 fetching corpus: 11300, signal 537004/676015 (executing program)
2021/02/27 01:26:04 fetching corpus: 11350, signal 537765/676915 (executing program)
2021/02/27 01:26:05 fetching corpus: 11400, signal 538461/677861 (executing program)
2021/02/27 01:26:05 fetching corpus: 11450, signal 539350/678828 (executing program)
2021/02/27 01:26:05 fetching corpus: 11500, signal 540027/679698 (executing program)
2021/02/27 01:26:05 fetching corpus: 11550, signal 540623/680527 (executing program)
2021/02/27 01:26:06 fetching corpus: 11600, signal 541123/681287 (executing program)
2021/02/27 01:26:06 fetching corpus: 11650, signal 541847/682156 (executing program)
2021/02/27 01:26:06 fetching corpus: 11700, signal 542465/683037 (executing program)
2021/02/27 01:26:06 fetching corpus: 11750, signal 543033/683849 (executing program)
2021/02/27 01:26:06 fetching corpus: 11800, signal 543658/684691 (executing program)
2021/02/27 01:26:07 fetching corpus: 11850, signal 544092/685469 (executing program)
2021/02/27 01:26:07 fetching corpus: 11900, signal 544864/686387 (executing program)
2021/02/27 01:26:07 fetching corpus: 11950, signal 545585/687253 (executing program)
2021/02/27 01:26:07 fetching corpus: 12000, signal 546437/688156 (executing program)
2021/02/27 01:26:07 fetching corpus: 12050, signal 547618/689166 (executing program)
2021/02/27 01:26:08 fetching corpus: 12100, signal 548239/690019 (executing program)
2021/02/27 01:26:08 fetching corpus: 12150, signal 548829/690809 (executing program)
2021/02/27 01:26:08 fetching corpus: 12200, signal 549461/691666 (executing program)
2021/02/27 01:26:09 fetching corpus: 12250, signal 550340/692551 (executing program)
2021/02/27 01:26:09 fetching corpus: 12300, signal 551045/693421 (executing program)
2021/02/27 01:26:09 fetching corpus: 12350, signal 551733/694270 (executing program)
2021/02/27 01:26:10 fetching corpus: 12400, signal 552503/695095 (executing program)
2021/02/27 01:26:10 fetching corpus: 12450, signal 553152/695915 (executing program)
2021/02/27 01:26:10 fetching corpus: 12500, signal 553848/696743 (executing program)
2021/02/27 01:26:10 fetching corpus: 12550, signal 554501/697535 (executing program)
2021/02/27 01:26:10 fetching corpus: 12600, signal 555494/698438 (executing program)
[  132.538467][ T3266] ieee802154 phy0 wpan0: encryption failed: -22
[  132.544834][ T3266] ieee802154 phy1 wpan1: encryption failed: -22
2021/02/27 01:26:11 fetching corpus: 12650, signal 556038/699155 (executing program)
2021/02/27 01:26:11 fetching corpus: 12700, signal 556511/699896 (executing program)
2021/02/27 01:26:11 fetching corpus: 12750, signal 556987/700635 (executing program)
2021/02/27 01:26:11 fetching corpus: 12800, signal 557551/701380 (executing program)
2021/02/27 01:26:12 fetching corpus: 12850, signal 558185/702152 (executing program)
2021/02/27 01:26:12 fetching corpus: 12900, signal 558688/702877 (executing program)
2021/02/27 01:26:12 fetching corpus: 12950, signal 559462/703672 (executing program)
2021/02/27 01:26:12 fetching corpus: 13000, signal 560352/704521 (executing program)
2021/02/27 01:26:13 fetching corpus: 13050, signal 560947/705234 (executing program)
2021/02/27 01:26:13 fetching corpus: 13100, signal 561502/705980 (executing program)
2021/02/27 01:26:13 fetching corpus: 13150, signal 562073/706717 (executing program)
2021/02/27 01:26:13 fetching corpus: 13200, signal 562686/707473 (executing program)
2021/02/27 01:26:14 fetching corpus: 13250, signal 563251/708194 (executing program)
2021/02/27 01:26:14 fetching corpus: 13300, signal 563806/708886 (executing program)
2021/02/27 01:26:14 fetching corpus: 13350, signal 564398/709634 (executing program)
2021/02/27 01:26:14 fetching corpus: 13400, signal 565059/710353 (executing program)
2021/02/27 01:26:15 fetching corpus: 13450, signal 565461/711001 (executing program)
2021/02/27 01:26:15 fetching corpus: 13500, signal 565941/711735 (executing program)
2021/02/27 01:26:15 fetching corpus: 13550, signal 566422/712402 (executing program)
2021/02/27 01:26:15 fetching corpus: 13600, signal 567079/713074 (executing program)
2021/02/27 01:26:16 fetching corpus: 13650, signal 567423/713707 (executing program)
2021/02/27 01:26:16 fetching corpus: 13700, signal 567929/714369 (executing program)
2021/02/27 01:26:16 fetching corpus: 13750, signal 568661/715049 (executing program)
2021/02/27 01:26:17 fetching corpus: 13800, signal 569294/715764 (executing program)
2021/02/27 01:26:17 fetching corpus: 13850, signal 569750/716428 (executing program)
2021/02/27 01:26:17 fetching corpus: 13900, signal 570302/717120 (executing program)
2021/02/27 01:26:17 fetching corpus: 13950, signal 570651/717748 (executing program)
2021/02/27 01:26:17 fetching corpus: 14000, signal 571134/718367 (executing program)
2021/02/27 01:26:18 fetching corpus: 14050, signal 571816/719052 (executing program)
2021/02/27 01:26:18 fetching corpus: 14100, signal 572228/719724 (executing program)
2021/02/27 01:26:18 fetching corpus: 14150, signal 572690/720364 (executing program)
2021/02/27 01:26:18 fetching corpus: 14200, signal 573302/721048 (executing program)
2021/02/27 01:26:18 fetching corpus: 14250, signal 573954/721744 (executing program)
2021/02/27 01:26:19 fetching corpus: 14300, signal 574450/722416 (executing program)
2021/02/27 01:26:19 fetching corpus: 14350, signal 575121/723052 (executing program)
2021/02/27 01:26:19 fetching corpus: 14400, signal 575612/723690 (executing program)
2021/02/27 01:26:19 fetching corpus: 14449, signal 576159/724359 (executing program)
2021/02/27 01:26:20 fetching corpus: 14499, signal 576602/725014 (executing program)
2021/02/27 01:26:20 fetching corpus: 14549, signal 577084/725632 (executing program)
2021/02/27 01:26:20 fetching corpus: 14599, signal 577675/726284 (executing program)
2021/02/27 01:26:21 fetching corpus: 14649, signal 578272/726936 (executing program)
2021/02/27 01:26:21 fetching corpus: 14699, signal 578582/727492 (executing program)
2021/02/27 01:26:21 fetching corpus: 14749, signal 579751/728253 (executing program)
2021/02/27 01:26:21 fetching corpus: 14799, signal 580161/728857 (executing program)
2021/02/27 01:26:21 fetching corpus: 14849, signal 580700/729489 (executing program)
2021/02/27 01:26:22 fetching corpus: 14899, signal 581405/730122 (executing program)
2021/02/27 01:26:22 fetching corpus: 14949, signal 581755/730713 (executing program)
2021/02/27 01:26:22 fetching corpus: 14999, signal 582433/731325 (executing program)
2021/02/27 01:26:22 fetching corpus: 15049, signal 582835/731894 (executing program)
2021/02/27 01:26:23 fetching corpus: 15099, signal 583526/732528 (executing program)
2021/02/27 01:26:23 fetching corpus: 15149, signal 583943/733074 (executing program)
2021/02/27 01:26:23 fetching corpus: 15199, signal 584531/733674 (executing program)
2021/02/27 01:26:24 fetching corpus: 15249, signal 585132/734334 (executing program)
2021/02/27 01:26:24 fetching corpus: 15299, signal 585895/734962 (executing program)
2021/02/27 01:26:24 fetching corpus: 15349, signal 586293/735539 (executing program)
2021/02/27 01:26:24 fetching corpus: 15399, signal 586835/736116 (executing program)
2021/02/27 01:26:25 fetching corpus: 15449, signal 587369/736711 (executing program)
2021/02/27 01:26:25 fetching corpus: 15499, signal 587747/737275 (executing program)
2021/02/27 01:26:25 fetching corpus: 15549, signal 588217/737846 (executing program)
2021/02/27 01:26:25 fetching corpus: 15599, signal 588712/738437 (executing program)
2021/02/27 01:26:25 fetching corpus: 15649, signal 589094/738998 (executing program)
2021/02/27 01:26:26 fetching corpus: 15699, signal 589580/739546 (executing program)
2021/02/27 01:26:26 fetching corpus: 15749, signal 589916/740102 (executing program)
2021/02/27 01:26:26 fetching corpus: 15799, signal 590336/740629 (executing program)
2021/02/27 01:26:26 fetching corpus: 15849, signal 591009/741225 (executing program)
2021/02/27 01:26:26 fetching corpus: 15899, signal 591574/741785 (executing program)
2021/02/27 01:26:27 fetching corpus: 15949, signal 592012/742364 (executing program)
2021/02/27 01:26:27 fetching corpus: 15999, signal 592555/742917 (executing program)
2021/02/27 01:26:28 fetching corpus: 16049, signal 593857/743581 (executing program)
2021/02/27 01:26:28 fetching corpus: 16099, signal 594228/744100 (executing program)
2021/02/27 01:26:28 fetching corpus: 16149, signal 594832/744667 (executing program)
2021/02/27 01:26:28 fetching corpus: 16199, signal 595475/745221 (executing program)
2021/02/27 01:26:28 fetching corpus: 16249, signal 595944/745735 (executing program)
2021/02/27 01:26:29 fetching corpus: 16299, signal 596552/746286 (executing program)
2021/02/27 01:26:29 fetching corpus: 16349, signal 597121/746820 (executing program)
2021/02/27 01:26:29 fetching corpus: 16399, signal 597739/747389 (executing program)
2021/02/27 01:26:29 fetching corpus: 16449, signal 598108/747930 (executing program)
2021/02/27 01:26:30 fetching corpus: 16499, signal 598450/748419 (executing program)
2021/02/27 01:26:30 fetching corpus: 16549, signal 598923/748972 (executing program)
2021/02/27 01:26:30 fetching corpus: 16599, signal 599301/749509 (executing program)
2021/02/27 01:26:31 fetching corpus: 16649, signal 599809/750014 (executing program)
2021/02/27 01:26:31 fetching corpus: 16699, signal 600386/750525 (executing program)
2021/02/27 01:26:31 fetching corpus: 16749, signal 600859/751043 (executing program)
2021/02/27 01:26:31 fetching corpus: 16799, signal 601143/751539 (executing program)
2021/02/27 01:26:32 fetching corpus: 16849, signal 601770/752046 (executing program)
2021/02/27 01:26:32 fetching corpus: 16899, signal 602272/752551 (executing program)
2021/02/27 01:26:32 fetching corpus: 16949, signal 602758/753073 (executing program)
2021/02/27 01:26:32 fetching corpus: 16999, signal 603146/753574 (executing program)
2021/02/27 01:26:33 fetching corpus: 17049, signal 603649/754050 (executing program)
2021/02/27 01:26:33 fetching corpus: 17099, signal 603937/754543 (executing program)
2021/02/27 01:26:33 fetching corpus: 17149, signal 604322/755025 (executing program)
2021/02/27 01:26:33 fetching corpus: 17199, signal 604982/755553 (executing program)
2021/02/27 01:26:33 fetching corpus: 17249, signal 605339/756012 (executing program)
2021/02/27 01:26:34 fetching corpus: 17299, signal 605780/756504 (executing program)
2021/02/27 01:26:34 fetching corpus: 17349, signal 606269/756974 (executing program)
2021/02/27 01:26:34 fetching corpus: 17399, signal 606683/757436 (executing program)
2021/02/27 01:26:34 fetching corpus: 17449, signal 607271/757934 (executing program)
2021/02/27 01:26:35 fetching corpus: 17499, signal 607820/758404 (executing program)
2021/02/27 01:26:35 fetching corpus: 17549, signal 608185/758854 (executing program)
2021/02/27 01:26:35 fetching corpus: 17599, signal 608566/759314 (executing program)
2021/02/27 01:26:35 fetching corpus: 17649, signal 609111/759762 (executing program)
2021/02/27 01:26:35 fetching corpus: 17699, signal 609457/760219 (executing program)
2021/02/27 01:26:36 fetching corpus: 17749, signal 609881/760691 (executing program)
2021/02/27 01:26:36 fetching corpus: 17799, signal 610302/761153 (executing program)
2021/02/27 01:26:36 fetching corpus: 17849, signal 610597/761615 (executing program)
2021/02/27 01:26:36 fetching corpus: 17899, signal 611112/762056 (executing program)
2021/02/27 01:26:37 fetching corpus: 17949, signal 611584/762496 (executing program)
2021/02/27 01:26:37 fetching corpus: 17999, signal 612171/762907 (executing program)
2021/02/27 01:26:37 fetching corpus: 18049, signal 612870/763350 (executing program)
2021/02/27 01:26:37 fetching corpus: 18099, signal 613273/763808 (executing program)
2021/02/27 01:26:38 fetching corpus: 18149, signal 613874/764244 (executing program)
2021/02/27 01:26:38 fetching corpus: 18199, signal 614275/764672 (executing program)
2021/02/27 01:26:38 fetching corpus: 18249, signal 614855/765087 (executing program)
2021/02/27 01:26:39 fetching corpus: 18299, signal 615288/765541 (executing program)
2021/02/27 01:26:39 fetching corpus: 18349, signal 615799/765975 (executing program)
2021/02/27 01:26:40 fetching corpus: 18399, signal 616385/766411 (executing program)
2021/02/27 01:26:40 fetching corpus: 18449, signal 616865/766813 (executing program)
2021/02/27 01:26:40 fetching corpus: 18499, signal 617356/767240 (executing program)
2021/02/27 01:26:41 fetching corpus: 18549, signal 617766/767635 (executing program)
2021/02/27 01:26:41 fetching corpus: 18599, signal 618194/768047 (executing program)
2021/02/27 01:26:41 fetching corpus: 18649, signal 618541/768452 (executing program)
2021/02/27 01:26:41 fetching corpus: 18699, signal 618858/768850 (executing program)
2021/02/27 01:26:41 fetching corpus: 18749, signal 619207/769298 (executing program)
2021/02/27 01:26:41 fetching corpus: 18799, signal 619535/769695 (executing program)
2021/02/27 01:26:42 fetching corpus: 18849, signal 620428/770142 (executing program)
2021/02/27 01:26:42 fetching corpus: 18899, signal 620777/770547 (executing program)
2021/02/27 01:26:42 fetching corpus: 18949, signal 621271/770947 (executing program)
2021/02/27 01:26:43 fetching corpus: 18999, signal 621863/771366 (executing program)
2021/02/27 01:26:43 fetching corpus: 19049, signal 622268/771748 (executing program)
2021/02/27 01:26:43 fetching corpus: 19099, signal 622596/772116 (executing program)
2021/02/27 01:26:43 fetching corpus: 19149, signal 623015/772543 (executing program)
2021/02/27 01:26:44 fetching corpus: 19199, signal 623504/772965 (executing program)
2021/02/27 01:26:44 fetching corpus: 19249, signal 624062/773379 (executing program)
2021/02/27 01:26:44 fetching corpus: 19299, signal 624449/773728 (executing program)
2021/02/27 01:26:44 fetching corpus: 19349, signal 624894/773728 (executing program)
2021/02/27 01:26:45 fetching corpus: 19399, signal 625604/773728 (executing program)
2021/02/27 01:26:45 fetching corpus: 19449, signal 625939/773729 (executing program)
2021/02/27 01:26:45 fetching corpus: 19499, signal 626235/773729 (executing program)
2021/02/27 01:26:45 fetching corpus: 19549, signal 626602/773730 (executing program)
2021/02/27 01:26:46 fetching corpus: 19599, signal 627091/773732 (executing program)
2021/02/27 01:26:46 fetching corpus: 19649, signal 627461/773732 (executing program)
2021/02/27 01:26:46 fetching corpus: 19699, signal 627748/773732 (executing program)
2021/02/27 01:26:46 fetching corpus: 19749, signal 628114/773732 (executing program)
2021/02/27 01:26:47 fetching corpus: 19799, signal 628512/773732 (executing program)
2021/02/27 01:26:47 fetching corpus: 19849, signal 629115/773732 (executing program)
2021/02/27 01:26:47 fetching corpus: 19899, signal 629361/773733 (executing program)
2021/02/27 01:26:47 fetching corpus: 19949, signal 629664/773737 (executing program)
2021/02/27 01:26:47 fetching corpus: 19999, signal 630195/773737 (executing program)
2021/02/27 01:26:47 fetching corpus: 20049, signal 630703/773737 (executing program)
2021/02/27 01:26:48 fetching corpus: 20099, signal 631201/773737 (executing program)
2021/02/27 01:26:48 fetching corpus: 20149, signal 631535/773737 (executing program)
2021/02/27 01:26:48 fetching corpus: 20199, signal 631969/773737 (executing program)
2021/02/27 01:26:48 fetching corpus: 20249, signal 632485/773739 (executing program)
2021/02/27 01:26:48 fetching corpus: 20299, signal 632920/773740 (executing program)
2021/02/27 01:26:49 fetching corpus: 20349, signal 633283/773740 (executing program)
2021/02/27 01:26:49 fetching corpus: 20398, signal 633737/773740 (executing program)
2021/02/27 01:26:49 fetching corpus: 20448, signal 634162/773740 (executing program)
2021/02/27 01:26:49 fetching corpus: 20498, signal 634740/773740 (executing program)
2021/02/27 01:26:50 fetching corpus: 20548, signal 635281/773740 (executing program)
2021/02/27 01:26:50 fetching corpus: 20598, signal 635789/773740 (executing program)
2021/02/27 01:26:50 fetching corpus: 20648, signal 636314/773740 (executing program)
2021/02/27 01:26:50 fetching corpus: 20698, signal 636684/773740 (executing program)
2021/02/27 01:26:51 fetching corpus: 20748, signal 636989/773741 (executing program)
2021/02/27 01:26:51 fetching corpus: 20798, signal 637366/773742 (executing program)
2021/02/27 01:26:51 fetching corpus: 20848, signal 637880/773742 (executing program)
2021/02/27 01:26:51 fetching corpus: 20898, signal 638138/773742 (executing program)
2021/02/27 01:26:51 fetching corpus: 20948, signal 638440/773742 (executing program)
2021/02/27 01:26:52 fetching corpus: 20998, signal 638781/773742 (executing program)
2021/02/27 01:26:52 fetching corpus: 21048, signal 639198/773742 (executing program)
2021/02/27 01:26:52 fetching corpus: 21098, signal 639627/773742 (executing program)
2021/02/27 01:26:52 fetching corpus: 21148, signal 640087/773742 (executing program)
2021/02/27 01:26:52 fetching corpus: 21198, signal 640528/773742 (executing program)
2021/02/27 01:26:53 fetching corpus: 21248, signal 640861/773742 (executing program)
2021/02/27 01:26:53 fetching corpus: 21298, signal 641552/773745 (executing program)
2021/02/27 01:26:53 fetching corpus: 21348, signal 641979/773745 (executing program)
2021/02/27 01:26:53 fetching corpus: 21398, signal 642564/773745 (executing program)
2021/02/27 01:26:54 fetching corpus: 21448, signal 643005/773749 (executing program)
2021/02/27 01:26:54 fetching corpus: 21498, signal 643570/773749 (executing program)
2021/02/27 01:26:54 fetching corpus: 21548, signal 644048/773749 (executing program)
2021/02/27 01:26:54 fetching corpus: 21598, signal 644364/773751 (executing program)
2021/02/27 01:26:55 fetching corpus: 21648, signal 644627/773751 (executing program)
2021/02/27 01:26:55 fetching corpus: 21698, signal 645026/773751 (executing program)
2021/02/27 01:26:55 fetching corpus: 21748, signal 645267/773751 (executing program)
2021/02/27 01:26:55 fetching corpus: 21798, signal 645541/773751 (executing program)
2021/02/27 01:26:56 fetching corpus: 21848, signal 645877/773751 (executing program)
2021/02/27 01:26:56 fetching corpus: 21898, signal 646365/773751 (executing program)
2021/02/27 01:26:56 fetching corpus: 21948, signal 646620/773751 (executing program)
2021/02/27 01:26:56 fetching corpus: 21998, signal 647052/773751 (executing program)
2021/02/27 01:26:57 fetching corpus: 22048, signal 647328/773751 (executing program)
2021/02/27 01:26:57 fetching corpus: 22098, signal 648268/773752 (executing program)
2021/02/27 01:26:57 fetching corpus: 22148, signal 648601/773752 (executing program)
2021/02/27 01:26:57 fetching corpus: 22198, signal 648993/773752 (executing program)
2021/02/27 01:26:58 fetching corpus: 22248, signal 649464/773755 (executing program)
2021/02/27 01:26:58 fetching corpus: 22298, signal 649899/773755 (executing program)
2021/02/27 01:26:58 fetching corpus: 22348, signal 650395/773755 (executing program)
2021/02/27 01:26:58 fetching corpus: 22398, signal 650886/773755 (executing program)
2021/02/27 01:26:59 fetching corpus: 22448, signal 651229/773757 (executing program)
2021/02/27 01:26:59 fetching corpus: 22498, signal 651565/773757 (executing program)
2021/02/27 01:26:59 fetching corpus: 22548, signal 651833/773758 (executing program)
2021/02/27 01:26:59 fetching corpus: 22598, signal 652245/773761 (executing program)
2021/02/27 01:26:59 fetching corpus: 22648, signal 652633/773761 (executing program)
2021/02/27 01:27:00 fetching corpus: 22698, signal 652991/773761 (executing program)
2021/02/27 01:27:00 fetching corpus: 22748, signal 653506/773761 (executing program)
2021/02/27 01:27:00 fetching corpus: 22798, signal 653842/773761 (executing program)
2021/02/27 01:27:00 fetching corpus: 22848, signal 654186/773761 (executing program)
2021/02/27 01:27:01 fetching corpus: 22898, signal 654526/773761 (executing program)
2021/02/27 01:27:01 fetching corpus: 22948, signal 654809/773761 (executing program)
2021/02/27 01:27:01 fetching corpus: 22998, signal 655378/773761 (executing program)
2021/02/27 01:27:01 fetching corpus: 23048, signal 655738/773763 (executing program)
2021/02/27 01:27:02 fetching corpus: 23098, signal 656288/773763 (executing program)
2021/02/27 01:27:02 fetching corpus: 23148, signal 656611/773763 (executing program)
2021/02/27 01:27:02 fetching corpus: 23198, signal 656903/773763 (executing program)
2021/02/27 01:27:02 fetching corpus: 23248, signal 657539/773763 (executing program)
2021/02/27 01:27:02 fetching corpus: 23298, signal 657791/773763 (executing program)
2021/02/27 01:27:03 fetching corpus: 23348, signal 658161/773763 (executing program)
2021/02/27 01:27:03 fetching corpus: 23398, signal 658492/773763 (executing program)
2021/02/27 01:27:03 fetching corpus: 23448, signal 658875/773764 (executing program)
2021/02/27 01:27:03 fetching corpus: 23498, signal 659232/773764 (executing program)
2021/02/27 01:27:03 fetching corpus: 23548, signal 659812/773764 (executing program)
2021/02/27 01:27:04 fetching corpus: 23598, signal 660203/773764 (executing program)
2021/02/27 01:27:04 fetching corpus: 23648, signal 660540/773764 (executing program)
2021/02/27 01:27:04 fetching corpus: 23698, signal 660915/773764 (executing program)
2021/02/27 01:27:04 fetching corpus: 23748, signal 661443/773764 (executing program)
2021/02/27 01:27:04 fetching corpus: 23798, signal 661881/773768 (executing program)
2021/02/27 01:27:05 fetching corpus: 23848, signal 662172/773768 (executing program)
2021/02/27 01:27:05 fetching corpus: 23898, signal 662534/773768 (executing program)
2021/02/27 01:27:05 fetching corpus: 23948, signal 662800/773768 (executing program)
2021/02/27 01:27:06 fetching corpus: 23998, signal 663292/773768 (executing program)
2021/02/27 01:27:06 fetching corpus: 24048, signal 663590/773768 (executing program)
2021/02/27 01:27:06 fetching corpus: 24098, signal 663914/773768 (executing program)
2021/02/27 01:27:06 fetching corpus: 24148, signal 664164/773768 (executing program)
2021/02/27 01:27:06 fetching corpus: 24198, signal 664405/773768 (executing program)
2021/02/27 01:27:07 fetching corpus: 24248, signal 664682/773768 (executing program)
2021/02/27 01:27:07 fetching corpus: 24298, signal 665145/773768 (executing program)
2021/02/27 01:27:07 fetching corpus: 24348, signal 665435/773768 (executing program)
2021/02/27 01:27:07 fetching corpus: 24398, signal 665829/773772 (executing program)
2021/02/27 01:27:08 fetching corpus: 24448, signal 666230/773772 (executing program)
2021/02/27 01:27:08 fetching corpus: 24498, signal 666496/773772 (executing program)
2021/02/27 01:27:08 fetching corpus: 24548, signal 666919/773772 (executing program)
2021/02/27 01:27:08 fetching corpus: 24598, signal 667356/773772 (executing program)
2021/02/27 01:27:09 fetching corpus: 24648, signal 667783/773772 (executing program)
2021/02/27 01:27:09 fetching corpus: 24698, signal 668204/773772 (executing program)
2021/02/27 01:27:09 fetching corpus: 24748, signal 668481/773772 (executing program)
2021/02/27 01:27:09 fetching corpus: 24798, signal 669021/773777 (executing program)
2021/02/27 01:27:09 fetching corpus: 24848, signal 669317/773777 (executing program)
2021/02/27 01:27:10 fetching corpus: 24898, signal 669742/773777 (executing program)
2021/02/27 01:27:10 fetching corpus: 24948, signal 670166/773777 (executing program)
2021/02/27 01:27:10 fetching corpus: 24998, signal 670580/773777 (executing program)
2021/02/27 01:27:11 fetching corpus: 25048, signal 671015/773778 (executing program)
2021/02/27 01:27:11 fetching corpus: 25097, signal 671218/773779 (executing program)
2021/02/27 01:27:11 fetching corpus: 25147, signal 671567/773779 (executing program)
2021/02/27 01:27:11 fetching corpus: 25197, signal 671933/773780 (executing program)
2021/02/27 01:27:12 fetching corpus: 25247, signal 672256/773780 (executing program)
2021/02/27 01:27:12 fetching corpus: 25297, signal 672505/773780 (executing program)
[  193.976049][ T3266] ieee802154 phy0 wpan0: encryption failed: -22
[  193.982535][ T3266] ieee802154 phy1 wpan1: encryption failed: -22
2021/02/27 01:27:12 fetching corpus: 25347, signal 672908/773780 (executing program)
2021/02/27 01:27:13 fetching corpus: 25397, signal 673230/773780 (executing program)
2021/02/27 01:27:13 fetching corpus: 25447, signal 673530/773780 (executing program)
2021/02/27 01:27:13 fetching corpus: 25497, signal 673797/773780 (executing program)
2021/02/27 01:27:13 fetching corpus: 25547, signal 674141/773780 (executing program)
2021/02/27 01:27:13 fetching corpus: 25597, signal 674516/773780 (executing program)
2021/02/27 01:27:14 fetching corpus: 25647, signal 674992/773781 (executing program)
2021/02/27 01:27:14 fetching corpus: 25697, signal 675340/773781 (executing program)
2021/02/27 01:27:14 fetching corpus: 25747, signal 675729/773781 (executing program)
2021/02/27 01:27:14 fetching corpus: 25797, signal 675930/773781 (executing program)
2021/02/27 01:27:15 fetching corpus: 25847, signal 676185/773781 (executing program)
2021/02/27 01:27:15 fetching corpus: 25897, signal 676426/773781 (executing program)
2021/02/27 01:27:15 fetching corpus: 25947, signal 676640/773781 (executing program)
2021/02/27 01:27:15 fetching corpus: 25997, signal 676902/773781 (executing program)
2021/02/27 01:27:15 fetching corpus: 26047, signal 677175/773781 (executing program)
2021/02/27 01:27:15 fetching corpus: 26097, signal 677520/773782 (executing program)
2021/02/27 01:27:16 fetching corpus: 26147, signal 677987/773782 (executing program)
2021/02/27 01:27:16 fetching corpus: 26197, signal 678648/773783 (executing program)
2021/02/27 01:27:16 fetching corpus: 26247, signal 679121/773783 (executing program)
2021/02/27 01:27:17 fetching corpus: 26297, signal 679511/773783 (executing program)
2021/02/27 01:27:17 fetching corpus: 26347, signal 679838/773786 (executing program)
2021/02/27 01:27:17 fetching corpus: 26397, signal 680176/773786 (executing program)
2021/02/27 01:27:17 fetching corpus: 26447, signal 680474/773786 (executing program)
2021/02/27 01:27:18 fetching corpus: 26497, signal 680704/773789 (executing program)
2021/02/27 01:27:18 fetching corpus: 26547, signal 681052/773789 (executing program)
2021/02/27 01:27:18 fetching corpus: 26597, signal 681590/773789 (executing program)
2021/02/27 01:27:18 fetching corpus: 26647, signal 681856/773789 (executing program)
2021/02/27 01:27:18 fetching corpus: 26697, signal 682091/773789 (executing program)
2021/02/27 01:27:19 fetching corpus: 26747, signal 682351/773790 (executing program)
2021/02/27 01:27:19 fetching corpus: 26797, signal 682637/773790 (executing program)
2021/02/27 01:27:19 fetching corpus: 26847, signal 683008/773790 (executing program)
2021/02/27 01:27:19 fetching corpus: 26897, signal 683257/773790 (executing program)
2021/02/27 01:27:19 fetching corpus: 26947, signal 683549/773790 (executing program)
2021/02/27 01:27:19 fetching corpus: 26997, signal 683858/773790 (executing program)
2021/02/27 01:27:19 fetching corpus: 27047, signal 684120/773790 (executing program)
2021/02/27 01:27:20 fetching corpus: 27097, signal 684534/773790 (executing program)
2021/02/27 01:27:20 fetching corpus: 27147, signal 684805/773790 (executing program)
2021/02/27 01:27:20 fetching corpus: 27197, signal 685218/773790 (executing program)
2021/02/27 01:27:20 fetching corpus: 27247, signal 685468/773790 (executing program)
2021/02/27 01:27:20 fetching corpus: 27297, signal 685696/773790 (executing program)
2021/02/27 01:27:20 fetching corpus: 27347, signal 686021/773790 (executing program)
2021/02/27 01:27:20 fetching corpus: 27397, signal 686332/773790 (executing program)
2021/02/27 01:27:21 fetching corpus: 27447, signal 686590/773790 (executing program)
2021/02/27 01:27:21 fetching corpus: 27497, signal 686836/773790 (executing program)
2021/02/27 01:27:21 fetching corpus: 27547, signal 687232/773790 (executing program)
2021/02/27 01:27:21 fetching corpus: 27597, signal 687492/773790 (executing program)
2021/02/27 01:27:21 fetching corpus: 27647, signal 687853/773790 (executing program)
2021/02/27 01:27:21 fetching corpus: 27697, signal 688123/773792 (executing program)
2021/02/27 01:27:21 fetching corpus: 27747, signal 688497/773792 (executing program)
2021/02/27 01:27:21 fetching corpus: 27797, signal 688897/773792 (executing program)
2021/02/27 01:27:21 fetching corpus: 27847, signal 689220/773801 (executing program)
2021/02/27 01:27:22 fetching corpus: 27897, signal 689485/773801 (executing program)
2021/02/27 01:27:22 fetching corpus: 27947, signal 689794/773801 (executing program)
2021/02/27 01:27:22 fetching corpus: 27997, signal 690246/773801 (executing program)
2021/02/27 01:27:22 fetching corpus: 28047, signal 690598/773801 (executing program)
2021/02/27 01:27:22 fetching corpus: 28097, signal 690840/773801 (executing program)
2021/02/27 01:27:22 fetching corpus: 28147, signal 691153/773801 (executing program)
2021/02/27 01:27:22 fetching corpus: 28197, signal 691478/773801 (executing program)
2021/02/27 01:27:22 fetching corpus: 28247, signal 691774/773801 (executing program)
2021/02/27 01:27:22 fetching corpus: 28297, signal 691975/773802 (executing program)
2021/02/27 01:27:23 fetching corpus: 28347, signal 692362/773802 (executing program)
2021/02/27 01:27:23 fetching corpus: 28397, signal 692787/773802 (executing program)
2021/02/27 01:27:23 fetching corpus: 28447, signal 693150/773803 (executing program)
2021/02/27 01:27:23 fetching corpus: 28497, signal 693502/773804 (executing program)
2021/02/27 01:27:23 fetching corpus: 28547, signal 693730/773804 (executing program)
2021/02/27 01:27:23 fetching corpus: 28597, signal 694121/773804 (executing program)
2021/02/27 01:27:23 fetching corpus: 28647, signal 694388/773804 (executing program)
2021/02/27 01:27:23 fetching corpus: 28697, signal 694665/773804 (executing program)
2021/02/27 01:27:23 fetching corpus: 28747, signal 694894/773804 (executing program)
2021/02/27 01:27:24 fetching corpus: 28797, signal 695242/773804 (executing program)
2021/02/27 01:27:24 fetching corpus: 28847, signal 695626/773804 (executing program)
2021/02/27 01:27:24 fetching corpus: 28897, signal 695899/773804 (executing program)
2021/02/27 01:27:24 fetching corpus: 28947, signal 696106/773804 (executing program)
2021/02/27 01:27:24 fetching corpus: 28997, signal 696364/773804 (executing program)
2021/02/27 01:27:24 fetching corpus: 29047, signal 696622/773804 (executing program)
2021/02/27 01:27:24 fetching corpus: 29097, signal 697012/773804 (executing program)
2021/02/27 01:27:24 fetching corpus: 29147, signal 697281/773806 (executing program)
2021/02/27 01:27:25 fetching corpus: 29197, signal 697534/773806 (executing program)
2021/02/27 01:27:25 fetching corpus: 29247, signal 697876/773806 (executing program)
2021/02/27 01:27:25 fetching corpus: 29297, signal 698121/773806 (executing program)
2021/02/27 01:27:25 fetching corpus: 29347, signal 698370/773806 (executing program)
2021/02/27 01:27:25 fetching corpus: 29397, signal 698621/773806 (executing program)
2021/02/27 01:27:25 fetching corpus: 29447, signal 698901/773806 (executing program)
2021/02/27 01:27:25 fetching corpus: 29497, signal 699258/773806 (executing program)
2021/02/27 01:27:25 fetching corpus: 29547, signal 699533/773807 (executing program)
2021/02/27 01:27:26 fetching corpus: 29597, signal 699823/773807 (executing program)
2021/02/27 01:27:26 fetching corpus: 29647, signal 700093/773807 (executing program)
2021/02/27 01:27:26 fetching corpus: 29697, signal 700436/773807 (executing program)
2021/02/27 01:27:26 fetching corpus: 29747, signal 700817/773807 (executing program)
2021/02/27 01:27:26 fetching corpus: 29797, signal 701173/773807 (executing program)
2021/02/27 01:27:26 fetching corpus: 29847, signal 701431/773807 (executing program)
2021/02/27 01:27:26 fetching corpus: 29897, signal 701650/773807 (executing program)
2021/02/27 01:27:26 fetching corpus: 29947, signal 701843/773807 (executing program)
2021/02/27 01:27:26 fetching corpus: 29997, signal 702243/773807 (executing program)
2021/02/27 01:27:26 fetching corpus: 30047, signal 702552/773807 (executing program)
2021/02/27 01:27:27 fetching corpus: 30097, signal 702871/773807 (executing program)
2021/02/27 01:27:27 fetching corpus: 30147, signal 703212/773807 (executing program)
2021/02/27 01:27:27 fetching corpus: 30197, signal 703525/773810 (executing program)
2021/02/27 01:27:27 fetching corpus: 30247, signal 703766/773812 (executing program)
2021/02/27 01:27:27 fetching corpus: 30297, signal 704059/773812 (executing program)
2021/02/27 01:27:27 fetching corpus: 30347, signal 704465/773812 (executing program)
2021/02/27 01:27:27 fetching corpus: 30397, signal 704705/773812 (executing program)
2021/02/27 01:27:27 fetching corpus: 30447, signal 704939/773812 (executing program)
2021/02/27 01:27:27 fetching corpus: 30497, signal 705294/773812 (executing program)
2021/02/27 01:27:28 fetching corpus: 30547, signal 705584/773812 (executing program)
2021/02/27 01:27:28 fetching corpus: 30597, signal 705822/773812 (executing program)
2021/02/27 01:27:28 fetching corpus: 30647, signal 706142/773812 (executing program)
2021/02/27 01:27:28 fetching corpus: 30697, signal 706408/773812 (executing program)
2021/02/27 01:27:28 fetching corpus: 30747, signal 706620/773812 (executing program)
2021/02/27 01:27:28 fetching corpus: 30797, signal 707002/773812 (executing program)
2021/02/27 01:27:28 fetching corpus: 30847, signal 707400/773812 (executing program)
2021/02/27 01:27:29 fetching corpus: 30897, signal 707747/773812 (executing program)
2021/02/27 01:27:29 fetching corpus: 30947, signal 707947/773812 (executing program)
2021/02/27 01:27:29 fetching corpus: 30997, signal 708176/773812 (executing program)
2021/02/27 01:27:29 fetching corpus: 31047, signal 708633/773812 (executing program)
2021/02/27 01:27:29 fetching corpus: 31097, signal 708928/773812 (executing program)
2021/02/27 01:27:29 fetching corpus: 31147, signal 709293/773812 (executing program)
2021/02/27 01:27:29 fetching corpus: 31197, signal 709542/773812 (executing program)
2021/02/27 01:27:29 fetching corpus: 31247, signal 709751/773812 (executing program)
2021/02/27 01:27:29 fetching corpus: 31297, signal 709969/773812 (executing program)
2021/02/27 01:27:29 fetching corpus: 31347, signal 710391/773812 (executing program)
2021/02/27 01:27:30 fetching corpus: 31397, signal 710640/773812 (executing program)
2021/02/27 01:27:30 fetching corpus: 31447, signal 710957/773813 (executing program)
2021/02/27 01:27:30 fetching corpus: 31497, signal 712000/773813 (executing program)
2021/02/27 01:27:30 fetching corpus: 31547, signal 712190/773814 (executing program)
2021/02/27 01:27:30 fetching corpus: 31597, signal 712368/773814 (executing program)
2021/02/27 01:27:30 fetching corpus: 31647, signal 712511/773814 (executing program)
2021/02/27 01:27:30 fetching corpus: 31697, signal 712706/773814 (executing program)
2021/02/27 01:27:30 fetching corpus: 31747, signal 712999/773814 (executing program)
2021/02/27 01:27:31 fetching corpus: 31797, signal 713277/773814 (executing program)
2021/02/27 01:27:31 fetching corpus: 31847, signal 713494/773814 (executing program)
2021/02/27 01:27:31 fetching corpus: 31897, signal 713741/773814 (executing program)
2021/02/27 01:27:31 fetching corpus: 31947, signal 713955/773814 (executing program)
2021/02/27 01:27:31 fetching corpus: 31997, signal 714225/773814 (executing program)
2021/02/27 01:27:31 fetching corpus: 32047, signal 714400/773814 (executing program)
2021/02/27 01:27:31 fetching corpus: 32097, signal 714925/773814 (executing program)
2021/02/27 01:27:31 fetching corpus: 32147, signal 715303/773814 (executing program)
2021/02/27 01:27:31 fetching corpus: 32197, signal 715545/773814 (executing program)
2021/02/27 01:27:31 fetching corpus: 32247, signal 715799/773814 (executing program)
2021/02/27 01:27:32 fetching corpus: 32297, signal 716110/773814 (executing program)
2021/02/27 01:27:32 fetching corpus: 32347, signal 716308/773816 (executing program)
2021/02/27 01:27:32 fetching corpus: 32397, signal 716646/773816 (executing program)
2021/02/27 01:27:32 fetching corpus: 32447, signal 716948/773816 (executing program)
2021/02/27 01:27:32 fetching corpus: 32497, signal 717193/773817 (executing program)
2021/02/27 01:27:32 fetching corpus: 32547, signal 717441/773817 (executing program)
2021/02/27 01:27:32 fetching corpus: 32597, signal 717844/773817 (executing program)
2021/02/27 01:27:33 fetching corpus: 32647, signal 718160/773817 (executing program)
2021/02/27 01:27:33 fetching corpus: 32697, signal 718455/773817 (executing program)
2021/02/27 01:27:33 fetching corpus: 32747, signal 718804/773817 (executing program)
2021/02/27 01:27:33 fetching corpus: 32797, signal 719155/773817 (executing program)
2021/02/27 01:27:33 fetching corpus: 32847, signal 719527/773817 (executing program)
2021/02/27 01:27:33 fetching corpus: 32897, signal 719697/773817 (executing program)
2021/02/27 01:27:33 fetching corpus: 32947, signal 719977/773817 (executing program)
2021/02/27 01:27:33 fetching corpus: 32997, signal 720375/773817 (executing program)
2021/02/27 01:27:34 fetching corpus: 33047, signal 720807/773817 (executing program)
2021/02/27 01:27:34 fetching corpus: 33097, signal 721022/773817 (executing program)
2021/02/27 01:27:34 fetching corpus: 33147, signal 721246/773817 (executing program)
2021/02/27 01:27:34 fetching corpus: 33197, signal 721524/773817 (executing program)
2021/02/27 01:27:34 fetching corpus: 33247, signal 721825/773817 (executing program)
2021/02/27 01:27:34 fetching corpus: 33297, signal 722133/773817 (executing program)
2021/02/27 01:27:34 fetching corpus: 33347, signal 722370/773817 (executing program)
2021/02/27 01:27:34 fetching corpus: 33397, signal 722617/773817 (executing program)
2021/02/27 01:27:35 fetching corpus: 33447, signal 722929/773817 (executing program)
2021/02/27 01:27:35 fetching corpus: 33497, signal 723186/773817 (executing program)
2021/02/27 01:27:35 fetching corpus: 33547, signal 723370/773817 (executing program)
2021/02/27 01:27:35 fetching corpus: 33597, signal 723896/773818 (executing program)
2021/02/27 01:27:35 fetching corpus: 33647, signal 724091/773818 (executing program)
2021/02/27 01:27:35 fetching corpus: 33697, signal 724327/773818 (executing program)
2021/02/27 01:27:35 fetching corpus: 33747, signal 724564/773818 (executing program)
2021/02/27 01:27:35 fetching corpus: 33797, signal 724798/773818 (executing program)
2021/02/27 01:27:35 fetching corpus: 33847, signal 725013/773818 (executing program)
2021/02/27 01:27:36 fetching corpus: 33897, signal 725228/773820 (executing program)
2021/02/27 01:27:36 fetching corpus: 33947, signal 725492/773820 (executing program)
2021/02/27 01:27:36 fetching corpus: 33997, signal 725818/773820 (executing program)
2021/02/27 01:27:36 fetching corpus: 34047, signal 726056/773820 (executing program)
2021/02/27 01:27:36 fetching corpus: 34097, signal 726437/773820 (executing program)
2021/02/27 01:27:36 fetching corpus: 34147, signal 726653/773820 (executing program)
2021/02/27 01:27:36 fetching corpus: 34197, signal 727027/773820 (executing program)
2021/02/27 01:27:36 fetching corpus: 34247, signal 727330/773820 (executing program)
2021/02/27 01:27:37 fetching corpus: 34297, signal 727571/773821 (executing program)
2021/02/27 01:27:37 fetching corpus: 34347, signal 727787/773821 (executing program)
2021/02/27 01:27:37 fetching corpus: 34397, signal 727978/773821 (executing program)
2021/02/27 01:27:37 fetching corpus: 34447, signal 728188/773821 (executing program)
2021/02/27 01:27:37 fetching corpus: 34497, signal 728364/773821 (executing program)
2021/02/27 01:27:37 fetching corpus: 34547, signal 728663/773824 (executing program)
2021/02/27 01:27:37 fetching corpus: 34597, signal 728865/773824 (executing program)
2021/02/27 01:27:37 fetching corpus: 34647, signal 729156/773824 (executing program)
2021/02/27 01:27:38 fetching corpus: 34697, signal 729324/773824 (executing program)
2021/02/27 01:27:38 fetching corpus: 34747, signal 729555/773824 (executing program)
2021/02/27 01:27:38 fetching corpus: 34797, signal 729821/773824 (executing program)
2021/02/27 01:27:38 fetching corpus: 34847, signal 730059/773824 (executing program)
2021/02/27 01:27:38 fetching corpus: 34897, signal 730272/773824 (executing program)
2021/02/27 01:27:38 fetching corpus: 34947, signal 730500/773824 (executing program)
2021/02/27 01:27:38 fetching corpus: 34997, signal 730822/773824 (executing program)
2021/02/27 01:27:38 fetching corpus: 35047, signal 731013/773824 (executing program)
2021/02/27 01:27:38 fetching corpus: 35097, signal 731279/773837 (executing program)
2021/02/27 01:27:39 fetching corpus: 35147, signal 731517/773837 (executing program)
2021/02/27 01:27:39 fetching corpus: 35197, signal 731858/773837 (executing program)
2021/02/27 01:27:39 fetching corpus: 35247, signal 732028/773837 (executing program)
2021/02/27 01:27:39 fetching corpus: 35297, signal 732235/773838 (executing program)
2021/02/27 01:27:39 fetching corpus: 35347, signal 732580/773838 (executing program)
2021/02/27 01:27:39 fetching corpus: 35397, signal 732796/773838 (executing program)
2021/02/27 01:27:39 fetching corpus: 35444, signal 733089/773838 (executing program)
2021/02/27 01:27:39 fetching corpus: 35444, signal 733089/773838 (executing program)
2021/02/27 01:27:41 starting 6 fuzzer processes
01:27:41 executing program 0:
io_setup(0x200, &(0x7f0000000080)=<r0=>0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
io_pgetevents(r0, 0x0, 0x4, 0x0, 0x0, 0x0)

01:27:41 executing program 1:
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = semget(0x0, 0x4, 0x80)
semop(r0, &(0x7f0000000380)=[{0x2, 0x690b, 0x1800}, {0x2, 0x8, 0x1800}], 0x2)
semget(0x3, 0x2, 0x244)
r1 = semget(0x3, 0x0, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
semop(r1, &(0x7f0000000340)=[{0x1, 0x1000, 0x800}], 0x1)

01:27:42 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)={0x14, 0x3, 0x8, 0x101}, 0x14}}, 0x0)

01:27:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

01:27:42 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x26, 0x0, "17d0b6a3ee85fcfa37d59b238ad1b5bde90ef3abec46749a879aba0717b368e1a9522ed676af2fdffec3d7782831721657de045644a0040fbc89c844789f2d050900dc39acd1fd40d40461018155db15"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x9, 0x0, "f71bb8a83ab12c84fc074975fde80d7da520cdf02d3f8bf440136914b0bfb5582e6f5f1de96c6be2051f820a32f63d3f2840e34c731959a0a8c2b0b4fdb5e0df9fe74c4000"}, 0xd8)

01:27:42 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7ea1, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r0, r1], 0x3)

[  224.372295][ T8440] IPVS: ftp: loaded support on port[0] = 21
[  224.539648][ T8440] chnl_net:caif_netlink_parms(): no params data found
[  224.626430][ T8442] IPVS: ftp: loaded support on port[0] = 21
[  224.777630][ T8440] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.785606][ T8440] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.795136][ T8440] device bridge_slave_0 entered promiscuous mode
[  224.813522][ T8444] IPVS: ftp: loaded support on port[0] = 21
[  224.837095][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.858412][ T8440] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.867498][ T8440] device bridge_slave_1 entered promiscuous mode
[  224.916734][ T8440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.929705][ T8440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.006417][ T8440] team0: Port device team_slave_0 added
[  225.025738][ T8440] team0: Port device team_slave_1 added
[  225.069844][ T8442] chnl_net:caif_netlink_parms(): no params data found
[  225.129737][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.157661][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.188404][ T8440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.206105][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.216009][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.249177][ T8440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.337603][ T8446] IPVS: ftp: loaded support on port[0] = 21
[  225.345862][ T8448] IPVS: ftp: loaded support on port[0] = 21
[  225.347947][ T8440] device hsr_slave_0 entered promiscuous mode
[  225.387276][ T8440] device hsr_slave_1 entered promiscuous mode
[  225.434111][ T8444] chnl_net:caif_netlink_parms(): no params data found
[  225.512231][ T8442] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.520317][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.529720][ T8442] device bridge_slave_0 entered promiscuous mode
[  225.561018][ T8442] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.570360][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.580839][ T8442] device bridge_slave_1 entered promiscuous mode
[  225.706215][ T8442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.750223][ T8444] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.787568][ T8579] IPVS: ftp: loaded support on port[0] = 21
[  225.798968][ T8444] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.811478][ T8444] device bridge_slave_0 entered promiscuous mode
[  225.846560][ T8442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.890562][ T8444] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.897929][ T8444] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.907599][ T8444] device bridge_slave_1 entered promiscuous mode
[  225.942047][ T8442] team0: Port device team_slave_0 added
[  225.999786][ T8442] team0: Port device team_slave_1 added
[  226.023683][ T8444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.058312][ T8444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.105560][ T8440] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  226.116446][ T8448] chnl_net:caif_netlink_parms(): no params data found
[  226.146804][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.154240][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.180661][ T8442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.209502][ T8440] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  226.236658][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.244333][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.272576][ T8442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.291195][ T8440] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  226.308550][ T8440] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  226.321603][ T8444] team0: Port device team_slave_0 added
[  226.331864][ T8444] team0: Port device team_slave_1 added
[  226.363355][   T19] Bluetooth: hci0: command 0x0409 tx timeout
[  226.391024][ T8446] chnl_net:caif_netlink_parms(): no params data found
[  226.408727][ T8442] device hsr_slave_0 entered promiscuous mode
[  226.416510][ T8442] device hsr_slave_1 entered promiscuous mode
[  226.424881][ T8442] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  226.435133][ T8442] Cannot create hsr debugfs directory
[  226.447748][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.455655][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.482041][ T8444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.524188][ T1774] Bluetooth: hci1: command 0x0409 tx timeout
[  226.539201][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.547869][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.575521][ T8444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.635490][ T8444] device hsr_slave_0 entered promiscuous mode
[  226.654663][ T8444] device hsr_slave_1 entered promiscuous mode
[  226.664745][ T8444] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  226.672531][ T8444] Cannot create hsr debugfs directory
[  226.732991][ T8579] chnl_net:caif_netlink_parms(): no params data found
[  226.758167][ T8448] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.768023][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.776415][ T8448] device bridge_slave_0 entered promiscuous mode
[  226.778347][ T3884] Bluetooth: hci2: command 0x0409 tx timeout
[  226.817720][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.826904][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.838785][ T8448] device bridge_slave_1 entered promiscuous mode
[  226.890534][ T8448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.906276][ T8446] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.915526][ T8446] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.924176][ T8446] device bridge_slave_0 entered promiscuous mode
[  226.942377][ T8448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.967351][ T8446] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.976455][ T8446] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.985416][ T8446] device bridge_slave_1 entered promiscuous mode
[  227.042128][ T8446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.059249][ T8446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.075221][ T8448] team0: Port device team_slave_0 added
[  227.093771][ T3884] Bluetooth: hci3: command 0x0409 tx timeout
[  227.115561][ T8446] team0: Port device team_slave_0 added
[  227.123556][ T8448] team0: Port device team_slave_1 added
[  227.150186][ T8446] team0: Port device team_slave_1 added
[  227.175244][ T8579] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.182330][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.190883][ T8579] device bridge_slave_0 entered promiscuous mode
[  227.222427][ T8446] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.232817][ T8446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.261543][ T8446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.275398][ T8446] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.283855][ T8446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.310845][ T8446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.323243][    T5] Bluetooth: hci4: command 0x0409 tx timeout
[  227.323514][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.337612][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.364977][ T8448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.377035][ T8579] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.386726][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.395881][ T8579] device bridge_slave_1 entered promiscuous mode
[  227.449930][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.457846][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.484018][ T8448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.510920][ T8579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.529942][ T8446] device hsr_slave_0 entered promiscuous mode
[  227.537388][ T8446] device hsr_slave_1 entered promiscuous mode
[  227.544811][ T8446] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.552408][ T8446] Cannot create hsr debugfs directory
[  227.578297][ T8579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.640821][ T8448] device hsr_slave_0 entered promiscuous mode
[  227.648997][ T8448] device hsr_slave_1 entered promiscuous mode
[  227.656361][ T8448] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.664961][ T8448] Cannot create hsr debugfs directory
[  227.688458][ T8442] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  227.732587][    T5] Bluetooth: hci5: command 0x0409 tx timeout
[  227.760734][ T8440] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.777044][ T8442] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  227.789678][ T8579] team0: Port device team_slave_0 added
[  227.809178][ T8442] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  227.824757][ T8442] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  227.870723][ T8579] team0: Port device team_slave_1 added
[  227.910497][ T8440] 8021q: adding VLAN 0 to HW filter on device team0
[  227.938847][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  227.948227][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  227.969446][ T8444] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  227.979682][ T8444] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  227.997481][ T8579] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.005728][ T8579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.033585][ T8579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.050434][ T8579] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.058619][ T8579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.086578][ T8579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.108653][ T8444] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  228.149221][ T8444] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  228.160820][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  228.180848][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  228.190472][   T19] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.197968][   T19] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.214908][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  228.234148][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  228.245848][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  228.254594][ T8935] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.264574][ T8935] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.285385][ T8579] device hsr_slave_0 entered promiscuous mode
[  228.293357][ T8579] device hsr_slave_1 entered promiscuous mode
[  228.300251][ T8579] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  228.309927][ T8579] Cannot create hsr debugfs directory
[  228.324188][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  228.385228][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  228.395235][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  228.406500][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  228.425572][ T8446] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  228.453691][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  228.462723][    T7] Bluetooth: hci0: command 0x041b tx timeout
[  228.464661][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  228.488000][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  228.497073][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  228.506282][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  228.528264][ T8446] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  228.538664][ T8446] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  228.559709][ T8440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  228.572087][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  228.607279][ T8446] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  228.613685][ T9694] Bluetooth: hci1: command 0x041b tx timeout
[  228.635215][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  228.644938][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  228.716184][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  228.724061][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  228.750852][ T8448] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  228.761992][ T8448] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  228.798890][ T8448] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  228.808875][ T8448] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  228.830218][ T8440] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.850989][ T8442] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.858535][ T9733] Bluetooth: hci2: command 0x041b tx timeout
[  228.952624][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  228.961240][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  229.007277][ T8442] 8021q: adding VLAN 0 to HW filter on device team0
[  229.016690][ T8446] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.025050][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  229.034882][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  229.043846][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  229.052029][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  229.064114][ T8444] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.085774][ T8440] device veth0_vlan entered promiscuous mode
[  229.096589][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  229.106105][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  229.114940][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  229.124230][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  229.132956][   T19] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.140011][   T19] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.168481][ T8440] device veth1_vlan entered promiscuous mode
[  229.172268][ T9733] Bluetooth: hci3: command 0x041b tx timeout
[  229.194480][ T8446] 8021q: adding VLAN 0 to HW filter on device team0
[  229.209685][ T8444] 8021q: adding VLAN 0 to HW filter on device team0
[  229.217376][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  229.227661][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  229.236909][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  229.247295][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  229.255769][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  229.264685][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  229.274966][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  229.284496][ T9594] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.291587][ T9594] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.299741][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  229.308858][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  229.318713][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  229.327196][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  229.347410][ T8448] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.368347][ T8448] 8021q: adding VLAN 0 to HW filter on device team0
[  229.382120][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  229.391834][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  229.401027][ T8935] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.408191][ T8935] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.413096][ T9030] Bluetooth: hci4: command 0x041b tx timeout
[  229.427940][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  229.437901][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  229.447800][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  229.456791][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  229.465207][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  229.475028][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  229.486050][ T8935] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.493204][ T8935] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.502947][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  229.511451][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  229.519363][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  229.527944][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  229.538173][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  229.547311][ T8935] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.554446][ T8935] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.564597][ T8579] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  229.613425][ T8579] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  229.621627][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  229.631446][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  229.645166][ T9594] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.652304][ T9594] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.660224][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  229.669365][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  229.678783][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  229.688174][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  229.697474][ T9594] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.704647][ T9594] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.713233][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  229.721582][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  229.730848][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  229.740153][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  229.749550][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  229.758338][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  229.790836][ T8579] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  229.808505][ T9733] Bluetooth: hci5: command 0x041b tx timeout
[  229.815475][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  229.829004][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  229.837062][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  229.846901][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  229.856062][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  229.864924][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  229.874599][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  229.883961][   T19] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.890998][   T19] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.899077][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  229.908708][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  229.917372][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  229.926154][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  229.934935][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  229.944066][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  229.964745][ T8440] device veth0_macvtap entered promiscuous mode
[  229.975204][ T8579] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  229.991490][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  230.004063][ T8446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  230.017117][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  230.027264][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  230.036574][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  230.046431][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  230.055507][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  230.068832][ T8440] device veth1_macvtap entered promiscuous mode
[  230.128005][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.137620][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  230.147433][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  230.158576][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  230.167679][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  230.176898][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  230.186065][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  230.195226][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  230.204517][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  230.214015][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  230.221439][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  230.229172][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  230.237975][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  230.253754][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  230.261579][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  230.270142][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  230.280127][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  230.290229][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  230.298726][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  230.317802][ T8442] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.329206][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.346114][ T8444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  230.357230][ T8444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  230.369917][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  230.379045][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  230.387873][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  230.396593][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  230.405873][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  230.415451][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  230.424889][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  230.434160][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  230.446172][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  230.459588][ T8440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.469916][ T8440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.479660][ T8440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.489193][ T8440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.526694][ T8448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  230.541062][ T8448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  230.542432][ T3884] Bluetooth: hci0: command 0x040f tx timeout
[  230.582229][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  230.590586][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  230.600412][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  230.610242][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  230.624379][ T8446] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.636950][ T8444] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.652367][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  230.661287][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  230.690961][ T9030] Bluetooth: hci1: command 0x040f tx timeout
[  230.728576][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  230.736367][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  230.761077][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  230.772650][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  230.788505][ T8448] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.905547][ T8579] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.920255][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  230.932281][ T9030] Bluetooth: hci2: command 0x040f tx timeout
[  230.940291][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  230.967733][ T8446] device veth0_vlan entered promiscuous mode
[  230.977231][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  230.993062][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  231.004877][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  231.016295][  T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.033511][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  231.054698][  T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.058096][ T8444] device veth0_vlan entered promiscuous mode
[  231.089253][ T8444] device veth1_vlan entered promiscuous mode
[  231.110165][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  231.118904][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  231.137769][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  231.147179][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  231.156152][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  231.167639][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  231.180488][ T8579] 8021q: adding VLAN 0 to HW filter on device team0
[  231.209979][ T8442] device veth0_vlan entered promiscuous mode
[  231.228119][ T8446] device veth1_vlan entered promiscuous mode
[  231.235476][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  231.244761][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  231.253006][ T9030] Bluetooth: hci3: command 0x040f tx timeout
[  231.255379][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  231.267711][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  231.276469][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  231.285371][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  231.311152][ T8442] device veth1_vlan entered promiscuous mode
[  231.325847][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  231.335027][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  231.344650][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  231.353769][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  231.363937][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  231.372471][ T9594] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.379505][ T9594] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.388066][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  231.397441][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  231.406899][ T9594] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.414060][ T9594] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.446902][ T8482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.456195][ T8482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.458367][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  231.471847][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  231.480221][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  231.489437][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  231.494507][ T9030] Bluetooth: hci4: command 0x040f tx timeout
[  231.499250][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  231.516208][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  231.525390][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  231.571168][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  231.579857][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  231.590909][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  231.600306][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  231.617137][ T8448] device veth0_vlan entered promiscuous mode
[  231.638277][ T8444] device veth0_macvtap entered promiscuous mode
[  231.664842][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  231.679480][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  231.712534][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  231.720955][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  231.746827][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  231.757369][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  231.767129][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  231.777013][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  231.788226][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  231.798094][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  231.812974][ T8442] device veth0_macvtap entered promiscuous mode
[  231.826962][ T8444] device veth1_macvtap entered promiscuous mode
01:27:50 executing program 0:
syz_mount_image$nfs4(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000740)=[{&(0x7f0000000700)}], 0x0, &(0x7f0000000780)={[{'/dev/udmabuf\x00'}], [{@fsname={'fsname', 0x3d, 'mcast_rejoin_interval\x00'}}]})

[  231.877533][ T8442] device veth1_macvtap entered promiscuous mode
[  231.893537][ T1774] Bluetooth: hci5: command 0x040f tx timeout
[  231.919844][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  231.937398][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  231.950569][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  231.967026][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  231.976655][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  231.985932][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  231.996049][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  232.005881][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  232.016190][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  232.032459][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  232.048049][ T8448] device veth1_vlan entered promiscuous mode
[  232.060640][ T8446] device veth0_macvtap entered promiscuous mode
01:27:50 executing program 0:
syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{0x0}], 0x0, 0x0)

[  232.104437][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  232.124445][ T8446] device veth1_macvtap entered promiscuous mode
[  232.154583][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  232.171255][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.187506][ T8442] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.209441][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  232.228284][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.240043][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  232.252792][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.264887][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.281026][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  232.292211][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
01:27:50 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xa0, &(0x7f0000000100)=""/160, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  232.313004][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  232.321738][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  232.340305][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  232.352882][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.364862][ T8442] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.388741][ T8448] device veth0_macvtap entered promiscuous mode
[  232.412328][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  232.440495][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.471853][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  232.490645][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.512617][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.520263][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  232.536353][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  232.566817][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  232.591452][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  232.616246][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  232.634160][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  232.656612][ T8442] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.667262][ T1774] Bluetooth: hci0: command 0x0419 tx timeout
[  232.685923][ T8442] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.705447][ T8442] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.724588][ T8442] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.754004][ T8448] device veth1_macvtap entered promiscuous mode
[  232.762700][    T5] Bluetooth: hci1: command 0x0419 tx timeout
[  232.765262][ T8444] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.809727][ T8444] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.829311][ T8444] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.848422][ T8444] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.875032][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  232.886729][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  232.908558][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  232.955276][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.978031][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  233.001013][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.012273][ T1774] Bluetooth: hci2: command 0x0419 tx timeout
[  233.019212][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  233.032056][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.048529][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.091041][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  233.110683][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  233.122578][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  233.130383][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
01:27:51 executing program 0:
r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x200, 0x55595659})

[  233.144154][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  233.167833][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.186945][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  233.201217][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.212881][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  233.224531][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.237830][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_1
01:27:51 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$llc(r0, &(0x7f0000000080), &(0x7f00000002c0)=0x41)

[  233.272217][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  233.290090][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.305601][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  233.323592][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.335360][ T3884] Bluetooth: hci3: command 0x0419 tx timeout
[  233.342219][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  233.354109][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.364939][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  233.376505][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.391379][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.406622][ T8579] 8021q: adding VLAN 0 to HW filter on device batadv0
01:27:52 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xa0, &(0x7f0000000100)=""/160, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  233.416487][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  233.432682][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  233.452483][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  233.493163][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  233.541261][ T8446] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.562574][ T9733] Bluetooth: hci4: command 0x0419 tx timeout
[  233.565750][ T8446] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
01:27:52 executing program 0:
r0 = socket$pptp(0x18, 0x1, 0x2)
getsockname(r0, 0x0, &(0x7f0000003b80))

[  233.590278][ T8446] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.610471][ T8446] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.635789][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  233.659801][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.681727][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  233.693929][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.709629][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  233.730077][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.748783][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  233.760680][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.810974][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.834529][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  233.850387][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  233.887971][ T8448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.920476][ T8448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.938293][ T8448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.962179][ T9700] Bluetooth: hci5: command 0x0419 tx timeout
[  233.970388][ T8448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.048691][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.092630][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.128389][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  234.148415][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  234.168994][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  234.232685][  T283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.244321][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  234.253894][  T283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.270796][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  234.287324][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  234.295820][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  234.313398][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  234.356374][ T8579] device veth0_vlan entered promiscuous mode
[  234.414352][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.444026][  T283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.467792][  T283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.482018][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.492741][ T8579] device veth1_vlan entered promiscuous mode
[  234.524537][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  234.539609][ T8482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.554158][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  234.564338][  T283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.568731][ T8482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.575050][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  234.598799][  T283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.610481][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  234.618876][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  234.691395][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  234.792502][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  234.801011][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  234.801665][ T8482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
01:27:53 executing program 1:
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[  234.837311][ T8579] device veth0_macvtap entered promiscuous mode
[  234.849213][ T8482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.875234][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
01:27:53 executing program 2:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68)

[  234.877429][  T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.890036][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  234.915251][  T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.919903][ T8579] device veth1_macvtap entered promiscuous mode
[  234.957398][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  234.976195][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  235.091077][ T8579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  235.123998][ T8579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
01:27:53 executing program 3:
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x55000000)

[  235.164471][ T8579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  235.200825][ T8579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
01:27:53 executing program 4:
r0 = socket(0x18, 0x0, 0x0)
getpeername$llc(r0, 0x0, &(0x7f0000000040)=0x3b)

[  235.229842][ T8579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  235.248278][ T8579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.287109][ T8579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  235.300399][ T8579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.318637][ T8579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  235.346276][ T8579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.383890][ T8579] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.397370][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  235.413431][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  235.525911][ T8579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  235.536640][ T8579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.560268][ T8579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  235.574142][ T8579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.586907][ T8579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  235.598504][ T8579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.609630][ T8579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  235.621230][ T8579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.635555][ T8579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  235.647610][ T8579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.664655][ T8579] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.676121][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  235.689348][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  235.703082][ T8579] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.731970][ T8579] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.740896][ T8579] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.758095][ T8579] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.893862][ T8482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.908804][ T8482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.938930][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  235.966798][ T8482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.977701][ T8482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.988331][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
01:27:54 executing program 5:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_map})

01:27:54 executing program 0:
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0)

01:27:54 executing program 1:
r0 = semget$private(0x0, 0x4, 0x0)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/123)

01:27:54 executing program 2:
r0 = socket(0x2b, 0x1, 0x0)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e)

01:27:54 executing program 4:
r0 = semget$private(0x0, 0x4, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xfffb}], 0x1, &(0x7f0000000080))

01:27:54 executing program 3:
r0 = socket(0x23, 0x2, 0x0)
recvmsg$can_raw(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

01:27:54 executing program 1:
syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x1, 0x200)

01:27:54 executing program 4:
set_mempolicy(0x8000, &(0x7f00000000c0), 0x7f)

01:27:54 executing program 2:
r0 = semget$private(0x0, 0x4, 0x0)
semop(r0, &(0x7f0000000080)=[{}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040))

01:27:54 executing program 0:
add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r0 = add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000100)={0x0, "97f2c0fcb37cb47a7fb71e9ac6951d35cae27e0682c7a9b0004554cad9d412731316277b83f5f72022797a5c0019546a90b3ce701510862ae7b83fb679dfb164"}, 0x48, 0xfffffffffffffffb)
keyctl$link(0x3, r0, 0x0)

01:27:54 executing program 5:
syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2, 0x0)

01:27:55 executing program 1:
r0 = semget(0x3, 0x0, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000))

01:27:55 executing program 4:
r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xaf3e, 0x183881)
write$midi(r0, 0x0, 0x0)

01:27:55 executing program 2:
r0 = socket(0xa, 0x5, 0x0)
accept4$llc(r0, 0x0, 0x0, 0x0)

01:27:55 executing program 5:
syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2, 0x0)

01:27:55 executing program 0:
r0 = socket(0xa, 0x1, 0x0)
connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e)

01:27:55 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{}], 0x8)

01:27:55 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)

01:27:55 executing program 2:
ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24000000)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x120, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40090}, 0x8000)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x188400, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x1)
getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340))
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000700))

01:27:55 executing program 0:
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001240)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, 0x0)

01:27:55 executing program 4:
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$fscrypt_v1(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f00000002c0)={0x0, "8743a8c6776a5ca361fcae95c658603975f3e4000f2a244aa0c11da4176c1e828c23d7a15a8bec89e3ede9f814901e6ac05de6531a6cfded325bf24bd8fb3f63"}, 0x48, 0xffffffffffffffff)
keyctl$link(0x17, r0, r1)

01:27:55 executing program 1:
r0 = socket(0xa, 0x1, 0x0)
connect$pptp(r0, 0x0, 0x0)

01:27:55 executing program 5:
syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2, 0x0)

01:27:55 executing program 1:
socketpair(0x2c, 0x0, 0x0, &(0x7f0000000d40))

01:27:55 executing program 5:
syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2, 0x0)

01:27:55 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000700)=0x1000)

01:27:55 executing program 3:
r0 = socket(0x1, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

01:27:55 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0)

01:27:56 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"e88c542b7bfded85a0deea8ca4877161"}}}}, 0xa0)

01:27:56 executing program 0:
process_vm_writev(0x0, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/213, 0xd5}], 0x1, &(0x7f0000000f00)=[{&(0x7f0000000900)=""/93, 0x5d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)

01:27:56 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0)
mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x10, r0, 0x82000000)

01:27:56 executing program 5:
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$link(0x3, r0, 0x0)

01:27:56 executing program 1:
syz_read_part_table(0x0, 0x2, &(0x7f0000004380)=[{&(0x7f0000000380)="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", 0x17e, 0x82}, {&(0x7f0000001380)="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", 0x1c8}])

01:27:56 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @local}, @xdp, @l2={0x1f, 0x0, @none}, 0xfffe})

01:27:56 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)

01:27:56 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
fcntl$lock(r0, 0x1, 0x0)

01:27:56 executing program 4:
r0 = socket(0x1, 0x5, 0x0)
recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  237.624674][T10047] loop1: detected capacity change from 0 to 1
01:27:56 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x45c200)

01:27:56 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x4811)

01:27:56 executing program 3:
r0 = socket(0xa, 0x1, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x24008080)

[  237.692796][T10047] Dev loop1: unable to read RDB block 1
[  237.700177][T10047]  loop1: unable to read partition table
[  237.707455][T10047] loop1: partition table beyond EOD, truncated
[  237.725383][T10047] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
01:27:56 executing program 4:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)

01:27:56 executing program 2:
r0 = socket(0x23, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000240)={'vcan0\x00'})

01:27:56 executing program 5:
syz_emit_ethernet(0x5e, &(0x7f0000000040)={@dev, @multicast, @val, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "b8ca50a17ace904b1ee922c1585f41bc82699e915d1972ca3e917de43f1764181a21b7cafe3b720772b340bd3655231eb3fa437b06c1aa09b36c53e6e6f949a9"}}}}, 0x0)

[  237.813245][T10047] loop1: detected capacity change from 0 to 1
01:27:56 executing program 0:
r0 = inotify_init1(0x0)
inotify_add_watch(r0, 0x0, 0x4200070e)

[  237.859921][T10047] Dev loop1: unable to read RDB block 1
[  237.873084][T10047]  loop1: unable to read partition table
[  237.908105][T10047] loop1: partition table beyond EOD, truncated
[  237.916691][T10047] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
01:27:56 executing program 1:
syz_read_part_table(0x0, 0x1, &(0x7f00000038c0)=[{&(0x7f00000028c0)="4a7facf227bb1645ab98cbcb2cd76854dba0dd14de72da436d548b5a6de1b0b1ecd0a1f3d6d566dbab1bff67b7789662b8d22e7f310c9c40b92b3a0142b94b1315e860e325342c34140356de035c5ff8f86c1bb5e8b82ad8b3849847be74868fd2cb63c6bd5a2cc7b99337c0012bff7e57c07c2a3397bc91a5fa00ef7786719a16ebb842cc160a164325527862d1b28437197e6b5ebe431382ce98ff4880e757b257c14e7db7ab974e1104deba38b82b", 0xb0}])

01:27:56 executing program 3:
r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$apparmor_current(r0, &(0x7f00000000c0)=@profile={'changeprofile ', '\x00'}, 0xf)

01:27:56 executing program 0:
syz_read_part_table(0x0, 0x3, &(0x7f0000004380)=[{&(0x7f0000000380)="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", 0x17e, 0x82}, {&(0x7f0000001380)="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", 0x1df, 0x2}, {&(0x7f0000003380)="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", 0x1de, 0x2}])

01:27:56 executing program 4:
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$fscrypt_v1(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f00000002c0)={0x0, "8743a8c6776a5ca361fcae95c658603975f3e4000f2a244aa0c11da4176c1e828c23d7a15a8bec89e3ede9f814901e6ac05de6531a6cfded325bf24bd8fb3f63"}, 0x48, 0xffffffffffffffff)
keyctl$link(0x6, r1, r0)

01:27:56 executing program 2:
r0 = socket(0x23, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000240)={'vcan0\x00'})

01:27:56 executing program 3:
r0 = add_key$fscrypt_v1(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f00000002c0)={0x0, "8743a8c6776a5ca361fcae95c658603975f3e4000f2a244aa0c11da4176c1e828c23d7a15a8bec89e3ede9f814901e6ac05de6531a6cfded325bf24bd8fb3f63"}, 0x48, 0xffffffffffffffff)
keyctl$link(0x1d, r0, 0x0)

[  238.064826][T10077] loop0: detected capacity change from 0 to 1
01:27:56 executing program 5:
getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0)

[  238.128893][T10077] Dev loop0: unable to read RDB block 1
[  238.136088][T10077]  loop0: unable to read partition table
[  238.143854][T10077] loop0: partition table beyond EOD, truncated
[  238.150143][T10077] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  238.190540][T10077] loop0: detected capacity change from 0 to 1
01:27:56 executing program 2:
r0 = socket(0x23, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000240)={'vcan0\x00'})

[  238.242150][T10077] Dev loop0: unable to read RDB block 1
[  238.249437][T10077]  loop0: unable to read partition table
[  238.278462][T10077] loop0: partition table beyond EOD, truncated
01:27:56 executing program 4:
semop(0x0, &(0x7f0000000100)=[{0x0, 0x100, 0x1000}, {}], 0x2)

01:27:56 executing program 3:
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)

01:27:56 executing program 5:
r0 = socket(0x1, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'})

[  238.338913][T10077] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
01:27:57 executing program 1:
semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)=""/156)

01:27:57 executing program 3:
prlimit64(0x0, 0x7, &(0x7f00000001c0), 0x0)

01:27:57 executing program 5:
add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffff9)

01:27:57 executing program 0:
r0 = socket(0x23, 0x2, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)

01:27:57 executing program 2:
r0 = socket(0x23, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000240)={'vcan0\x00'})

01:27:57 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x7f}}, 0x18)

01:27:57 executing program 5:
waitid(0x2, 0x0, 0x0, 0x4, &(0x7f0000000340))

01:27:57 executing program 3:
r0 = socket(0xa, 0x3, 0x3c)
bind$pptp(r0, 0x0, 0x0)

01:27:57 executing program 2:
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$link(0xe, r0, 0x0)

01:27:58 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[@fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}], 0x58}, 0x20040800)

01:27:58 executing program 0:
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

01:27:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x80}}, 0x0)

01:27:58 executing program 5:
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$link(0x10, r0, 0x0)

01:27:58 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40)

01:27:58 executing program 2:
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000780)={0x0, 0x0})
socketpair(0x28, 0x0, 0x5, &(0x7f0000000040))

01:27:58 executing program 0:
r0 = semget$private(0x0, 0x4, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xfffb}, {}], 0x2, &(0x7f0000000080))

01:27:58 executing program 3:
syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x20003)

01:27:58 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0xffffffffffffff61, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30)

01:27:58 executing program 5:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40e01, 0x0)

01:27:58 executing program 2:
io_setup(0x7, &(0x7f0000000300)=<r0=>0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
io_submit(r0, 0x1, &(0x7f0000002600)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xffff, r1, 0x0, 0x0, 0x0, 0x0, 0x6}])

01:27:58 executing program 1:
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1)
keyctl$link(0x8, r0, r2)

01:27:58 executing program 0:
r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0x3, @output})

01:27:58 executing program 3:
add_key$fscrypt_v1(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f00000002c0)={0x0, "8743a8c6776a5ca361fcae95c658603975f3e4000f2a244aa0c11da4176c1e828c23d7a15a8bec89e3ede9f814901e6ac05de6531a6cfded325bf24bd8fb3f63"}, 0x48, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000240)='logon\x00', &(0x7f0000000000)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f00000002c0)={0x0, "6ef1a8c6776a5ca361fcae95c658603975f3e4000f2a244aa0c13da4176c1e9a8c78a6a58fa3c389e3ede9f814901e6ac05de6531a6cfded325bf24bd8fb3f63"}, 0x36, 0xffffffffffffffff)

01:27:58 executing program 4:
r0 = socket(0x1, 0x1, 0x0)
recvmsg$can_raw(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0)

01:27:58 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}, 0x300}, 0x0)

01:27:58 executing program 1:
ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0)

01:27:58 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000200))

01:27:58 executing program 2:
ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000))
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24000000)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x120, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40090}, 0x8000)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x188400, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x1)

01:27:58 executing program 3:
add_key(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f0000ff1000/0xf000)=nil, 0xf000)

01:27:58 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20)

01:27:58 executing program 4:
r0 = socket(0x29, 0x2, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00', r0)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)

01:27:58 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)

01:27:58 executing program 1:
semop(0x0, &(0x7f0000000100)=[{}, {}], 0x1f4)

01:27:58 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x9a0000, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0x0, [], @ptr}})

01:27:58 executing program 5:
r0 = add_key$fscrypt_v1(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f00000002c0)={0x0, "8743a8c6776a5ca361fcae95c658603975f3e4000f2a244aa0c11da4176c1e828c23d7a15a8bec89e3ede9f814901e6ac05de6531a6cfded325bf24bd8fb3f63"}, 0x48, 0xffffffffffffffff)
keyctl$link(0x2, r0, 0x0)

01:27:58 executing program 2:
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000), 0x4)
getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0))

01:27:58 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

01:27:58 executing program 1:
r0 = socket(0xa, 0x1, 0x0)
recvfrom$llc(r0, 0x0, 0x0, 0x10060, 0x0, 0x0)

01:27:59 executing program 3:
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000840)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000900)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})

01:27:59 executing program 2:
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000), 0x4)
getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0))

01:27:59 executing program 5:
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000380)="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", 0x200}])

01:27:59 executing program 1:
add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000240)={0x0, "cbf76b88af057a9be7003d2af7822d6ede9d623bfeaa3ae0e90c03b916cdf18873185d16c0a078242b4fb9a6425bfc4c8645348ab79fa40514cf8a05fa511de8"}, 0xfffffffffffffff6, 0x0)

[  240.503245][T10216] loop5: detected capacity change from 0 to 1
[  240.571401][T10216] Dev loop5: unable to read RDB block 1
[  240.578432][T10216]  loop5: unable to read partition table
[  240.593011][T10216] loop5: partition table beyond EOD, truncated
[  240.619768][T10216] loop_reread_partitions: partition scan of loop5 () failed (rc=-5)
[  240.714140][T10216] loop5: detected capacity change from 0 to 1
[  240.761551][T10216] Dev loop5: unable to read RDB block 1
[  240.774844][T10216]  loop5: unable to read partition table
[  240.800794][T10216] loop5: partition table beyond EOD, truncated
[  240.807390][T10216] loop_reread_partitions: partition scan of loop5 () failed (rc=-5)
01:27:59 executing program 4:
semtimedop(0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000240)={0x77359400})

01:27:59 executing program 0:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$nfc_llcp(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300)=[{0x0}, {0x0}], 0x2, &(0x7f0000001380)={0x28, 0x0, 0x0, "2df9f569872d437ac5069da13c86fe632c"}, 0x28}, 0x0)

01:27:59 executing program 2:
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000), 0x4)
getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0))

01:27:59 executing program 3:
mremap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x2000, 0x0, &(0x7f0000e26000/0x2000)=nil)

01:27:59 executing program 1:
r0 = semget(0x2, 0x1, 0x200)
semctl$IPC_RMID(r0, 0x0, 0x0)

01:27:59 executing program 5:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e26643b7c6b1e61d420c66f03bb0276e7d36696ce97df42b0aecd20fe54e8c39cc7d8e1f149a931dc252b1ba1a5cc5552f1a781a8b91e83d3b8e0d87c86ae9fa"}, 0x48, r1)

01:27:59 executing program 3:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000001000)='/dev/vim2m\x00', 0x2, 0x0)

01:27:59 executing program 1:
r0 = semget(0x2, 0x1, 0x200)
semctl$IPC_RMID(r0, 0x0, 0x0)

01:27:59 executing program 2:
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000), 0x4)
getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0))

01:27:59 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @mcast2, 0xffffffff}}}, 0x90)

01:27:59 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18)

01:27:59 executing program 4:
add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)

01:27:59 executing program 1:
r0 = semget(0x2, 0x1, 0x200)
semctl$IPC_RMID(r0, 0x0, 0x0)

01:27:59 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x8000}]})

01:27:59 executing program 4:
setrlimit(0x64927b9d7af79d02, &(0x7f0000000200))

01:27:59 executing program 3:
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$fscrypt_v1(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f00000002c0)={0x0, "8743a8c6776a5ca361fcae95c658603975f3e4000f2a244aa0c11da4176c1e828c23d7a15a8bec89e3ede9f814901e6ac05de6531a6cfded325bf24bd8fb3f63"}, 0x48, 0xffffffffffffffff)
keyctl$link(0x9, r0, r1)

01:28:00 executing program 2:
r0 = socket(0xa, 0x1, 0x0)
bind$packet(r0, 0x0, 0x0)

01:28:00 executing program 1:
r0 = semget(0x2, 0x1, 0x200)
semctl$IPC_RMID(r0, 0x0, 0x0)

01:28:00 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000000100))

01:28:00 executing program 2:
r0 = socket(0x1, 0x1, 0x0)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="d8d17640e66d"}, 0x14)

01:28:00 executing program 5:
r0 = syz_open_dev$swradio(&(0x7f0000001100)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0)

01:28:00 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000480)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4}, r1}}, 0x30)

01:28:00 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120)

01:28:00 executing program 4:
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$link(0x1d, r0, 0x0)

01:28:00 executing program 0:
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000001640))

01:28:00 executing program 5:
syz_open_dev$vcsu(&(0x7f0000002600)='/dev/vcsu#\x00', 0x0, 0x0)

01:28:00 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040))

01:28:00 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x210200, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000001080)='team\x00', r0)

01:28:00 executing program 4:
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, 0x0)

01:28:00 executing program 3:
r0 = socket(0xa, 0x3, 0x3c)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0}}, 0x0)

01:28:00 executing program 0:
syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xe5, 0x183881)

01:28:00 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48c8}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x24}}, 0x0)

01:28:00 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000002700)=ANY=[], 0x48c8}}, 0x0)

01:28:00 executing program 1:
r0 = socket(0x2b, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0, 0x2c}}, 0x0)

01:28:00 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

01:28:00 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001240))

01:28:00 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'})

01:28:00 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)

01:28:00 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x111}}, 0x20)

01:28:00 executing program 5:
socketpair(0x18, 0x0, 0x800, &(0x7f0000001780))

01:28:00 executing program 3:
r0 = socket(0x25, 0x5, 0x0)
bind$packet(r0, 0x0, 0x0)

01:28:00 executing program 0:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x6, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9d3fca4a"}, 0x0, 0x0, @fd})

01:28:00 executing program 4:
r0 = socket(0xa, 0x3, 0x3c)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e)

01:28:01 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000001080)='team\x00', r0)

01:28:01 executing program 5:
mremap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x2000, 0x6, &(0x7f0000e26000/0x2000)=nil)

01:28:01 executing program 1:
r0 = socket(0x23, 0x2, 0x0)
recvmsg$can_raw(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40010040)

01:28:01 executing program 4:
add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040), 0x3ff, 0x0)

01:28:01 executing program 3:
r0 = socket(0x23, 0x2, 0x0)
getpeername(r0, 0x0, &(0x7f0000001a00))

01:28:01 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname(r0, &(0x7f0000000300)=@x25={0x9, @remote}, &(0x7f0000000380)=0x80)

01:28:01 executing program 5:
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000380))

01:28:01 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
accept4$nfc_llcp(r0, 0x0, 0x0, 0x0)

01:28:01 executing program 0:
syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0xb8bc, 0x0)

01:28:01 executing program 1:
r0 = semget$private(0x0, 0x2, 0x0)
semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f00000001c0)=""/29)

01:28:01 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002540)={0x0}}, 0x0)

01:28:01 executing program 3:
getresuid(&(0x7f0000000140), &(0x7f0000000180), 0x0)

01:28:01 executing program 0:
r0 = semget$private(0x0, 0x4, 0x0)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000001c0)=""/221)

01:28:01 executing program 5:
r0 = semget$private(0x0, 0x4, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0x8d29}], 0x1)

01:28:01 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {0x0}}, 0x18)

01:28:01 executing program 1:
r0 = semget$private(0x0, 0x4, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080))

01:28:01 executing program 2:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x55000000)

01:28:01 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xffffccce}, 0x8)

01:28:01 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40)

01:28:01 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
sched_rr_get_interval(r0, &(0x7f0000000200))

01:28:01 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0)

01:28:01 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180))

01:28:01 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x0, @private}}}, 0xa0)

01:28:01 executing program 3:
r0 = socket(0x2b, 0x1, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

01:28:01 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0)

01:28:02 executing program 5:
r0 = semget$private(0x0, 0x4, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0x8d29}], 0x1)

01:28:02 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10)

01:28:02 executing program 4:
syz_open_dev$swradio(&(0x7f0000001100)='/dev/swradio#\x00', 0x0, 0x2)

01:28:02 executing program 2:
syz_read_part_table(0x0, 0x1, &(0x7f0000004380)=[{&(0x7f0000000380)="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", 0x17e, 0x82}])

01:28:02 executing program 3:
syz_emit_ethernet(0x5e, &(0x7f0000000080)={@random="43e0d44625db", @local, @val, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "0fad0a902f3625e0422aaa990d50c07e960ee9eba631e93adfc981be0e17fdf5c921a74f28e618a848a5484c13b152431567f5339db273d87e6c0b9cef56b128"}}}}, 0x0)

01:28:02 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0)

01:28:02 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0)

[  243.864270][T10401] loop2: detected capacity change from 0 to 1
01:28:02 executing program 3:
read$rfkill(0xffffffffffffffff, 0x0, 0x0)

01:28:02 executing program 0:
syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2)

01:28:02 executing program 4:
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$link(0x17, r0, 0x0)

[  243.934236][T10401] Dev loop2: unable to read RDB block 1
[  243.955553][T10401]  loop2: unable to read partition table
[  243.991029][T10401] loop2: partition table beyond EOD, truncated
[  244.008208][T10401] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
01:28:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0)

01:28:02 executing program 2:
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video2\x00', 0x2, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000200)={0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x0})

01:28:03 executing program 5:
r0 = semget$private(0x0, 0x4, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0x8d29}], 0x1)

01:28:03 executing program 1:
ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000))
getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340))

01:28:03 executing program 0:
r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xe5, 0x0)
write$midi(r0, 0x0, 0x0)

01:28:03 executing program 4:
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000780)={0x0, 0x0})
socketpair(0x0, 0x0, 0x0, &(0x7f0000000040))

01:28:03 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000280))

01:28:03 executing program 2:
socketpair(0x29, 0x0, 0x0, &(0x7f0000000040))

01:28:03 executing program 0:
remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000008, 0x0, 0x0)

01:28:03 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000700)=0x1000)

01:28:03 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/net/tun\x00', 0x200000, 0x0)

01:28:03 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x3265670853c7842d, 0x1)

01:28:03 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0)

01:28:03 executing program 3:
syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xfff, 0x80141)

[  245.117635][T10467] mmap: syz-executor.0 (10467) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
01:28:04 executing program 5:
r0 = semget$private(0x0, 0x4, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0x8d29}], 0x1)

01:28:04 executing program 1:
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00', 0xffffffffffffffff)
getresuid(&(0x7f0000000140), 0x0, 0x0)
getuid()

01:28:04 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

01:28:04 executing program 4:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_ifreq(r0, 0x0, 0x0)

01:28:04 executing program 3:
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$link(0x6, r0, 0x0)

01:28:04 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000280)={'macvlan0\x00', @ifru_ivalue})

01:28:04 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90)

01:28:04 executing program 2:
r0 = socket(0x1, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000240)={&(0x7f0000000140), 0x2000014c, &(0x7f0000000200)={0x0}}, 0x0)

01:28:04 executing program 1:
set_mempolicy(0x0, &(0x7f0000000000), 0x3)

01:28:04 executing program 0:
r0 = semget$private(0x0, 0x4, 0x0)
semop(r0, &(0x7f0000000040)=[{}, {0x0, 0x401}, {0x0, 0x7fff}], 0x3)

01:28:04 executing program 3:
r0 = semget$private(0x0, 0x4, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$GETVAL(r0, 0x0, 0x10, 0x0)

01:28:04 executing program 4:
r0 = socket(0x29, 0x2, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00', r0)

01:28:05 executing program 0:
r0 = socket(0x2, 0x3, 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private2}})

01:28:05 executing program 2:
openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x40, 0x0)

01:28:05 executing program 1:
r0 = socket(0x1, 0x3, 0x0)
connect$pptp(r0, 0x0, 0x0)

01:28:05 executing program 3:
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)

01:28:05 executing program 5:
socketpair(0x0, 0x8000d, 0x0, &(0x7f0000000940))

01:28:05 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r0, 0x8000451b, 0x0)

01:28:05 executing program 2:
socket(0x11, 0x3, 0x5)

01:28:05 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

01:28:05 executing program 5:
socket(0x3, 0x0, 0x9f1)

01:28:05 executing program 1:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x77}}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}]}}]}}, 0x0)

01:28:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @empty}, {0x2, 0x0, @private}})

01:28:05 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20)

01:28:05 executing program 2:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000009c0)={0xa, 0x4e24, 0x0, @dev, 0x1}, 0x1c)

01:28:05 executing program 0:
syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)

01:28:05 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x0, @rand_addr=0x64010100}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='veth1_macvtap\x00'})

01:28:05 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r0, 0x80104592, 0x0)

01:28:05 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, 0x0)

01:28:05 executing program 0:
socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect$cdc_ecm(0x5, 0x64, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5}, {0xd}, [@mbim_extended={0x8}, @dmm={0x7, 0x24, 0x14, 0x0, 0x3ff}, @mbim_extended={0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}]}}]}}, 0x0)

[  247.250117][ T1774] usb 2-1: new high-speed USB device number 2 using dummy_hcd
01:28:05 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x8040)

01:28:05 executing program 3:
syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xaa56, 0x4ec03)

01:28:06 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x40084504, &(0x7f0000000080)=0xffffffff)

[  247.520388][ T1774] usb 2-1: Using ep0 maxpacket: 8
[  247.610595][ T3884] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  247.650159][ T1774] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  247.860417][ T1774] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  247.870271][ T3884] usb 1-1: Using ep0 maxpacket: 8
[  247.881368][ T1774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.900596][ T1774] usb 2-1: Product: syz
[  247.907848][ T1774] usb 2-1: Manufacturer: syz
[  247.913192][ T1774] usb 2-1: SerialNumber: syz
[  247.977225][T10549] raw-gadget gadget: fail, usb_ep_enable returned -22
[  247.990226][ T3884] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1024
[  248.000720][ T3884] usb 1-1: config 1 interface 0 has no altsetting 0
[  248.170058][ T3884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  248.179975][ T3884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.187987][ T3884] usb 1-1: Product: syz
[  248.193037][ T3884] usb 1-1: Manufacturer: syz
[  248.197670][ T3884] usb 1-1: SerialNumber: syz
[  248.241437][ T1774] cdc_ether: probe of 2-1:1.0 failed with error -71
[  248.246603][T10572] raw-gadget gadget: fail, usb_ep_enable returned -22
[  248.258100][ T1774] usb 2-1: USB disconnect, device number 2
[  248.550975][ T3884] cdc_ether: probe of 1-1:1.0 failed with error -71
[  248.562626][ T3884] usb 1-1: USB disconnect, device number 2
[  249.030125][ T1774] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  249.299760][ T1774] usb 2-1: Using ep0 maxpacket: 8
[  249.430088][ T1774] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  249.630020][ T1774] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  249.639520][ T1774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.654129][ T1774] usb 2-1: Product: syz
[  249.658318][ T1774] usb 2-1: Manufacturer: syz
[  249.663666][ T1774] usb 2-1: SerialNumber: syz
[  249.701131][T10549] raw-gadget gadget: fail, usb_ep_enable returned -22
01:28:08 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x40084504, &(0x7f0000000080))

01:28:08 executing program 2:
syz_io_uring_setup(0x6bd6, &(0x7f00000003c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x1fcf, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000000c0))

01:28:08 executing program 4:
syz_io_uring_setup(0x1fcf, &(0x7f0000000180), &(0x7f0000a91000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x0, 0x0)
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480)='/dev/input/mice\x00', 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000cf1000/0xa000)=nil, 0xa000, 0x0, 0x100010, r0, 0x0)
syz_io_uring_setup(0x58d6, &(0x7f0000000000)={0x0, 0xd3ff}, &(0x7f0000a8c000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100))

01:28:08 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4020940d, &(0x7f0000000000))

01:28:08 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x40084504, &(0x7f0000000080)=0xffffffff)

01:28:08 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000))

[  249.910112][ T1774] cdc_ether: probe of 2-1:1.0 failed with error -71
[  249.974193][ T1774] usb 2-1: USB disconnect, device number 3
01:28:08 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x40084504, &(0x7f0000000080))

01:28:08 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001540)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11}}], 0x30}}], 0x1, 0x0)

01:28:08 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0)

01:28:08 executing program 2:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}]}}]}}, 0x0)

01:28:08 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x13f}}, 0x20)

01:28:08 executing program 0:
syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x0)

01:28:08 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0)

01:28:08 executing program 5:
socketpair(0x9, 0x0, 0x0, &(0x7f0000000600))

01:28:08 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x40284504, &(0x7f0000000080))

01:28:09 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)

01:28:09 executing program 0:
openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/raw/rawctl\x00', 0x0, 0x0)

01:28:09 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r1}})

01:28:09 executing program 5:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x0, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)

01:28:09 executing program 1:
syz_io_uring_setup(0x73ca, &(0x7f0000000240)={0x0, 0x6556}, &(0x7f0000cb3000/0x1000)=nil, &(0x7f00006c0000/0x3000)=nil, &(0x7f00000002c0), 0x0)
syz_io_uring_setup(0x1fcf, &(0x7f0000000180), &(0x7f0000a91000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000340), &(0x7f00000000c0))

[  250.499532][ T9752] usb 3-1: new high-speed USB device number 2 using dummy_hcd
01:28:09 executing program 4:
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[  250.768694][ T9752] usb 3-1: Using ep0 maxpacket: 8
[  250.899593][ T9752] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  251.079848][ T9752] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  251.088941][ T9752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.099350][ T9752] usb 3-1: Product: syz
[  251.104906][ T9752] usb 3-1: Manufacturer: syz
[  251.110704][ T9752] usb 3-1: SerialNumber: syz
[  251.141704][T10650] raw-gadget gadget: fail, usb_ep_enable returned -22
[  251.389747][ T9752] cdc_ether: probe of 3-1:1.0 failed with error -71
[  251.393195][ T9752] usb 3-1: USB disconnect, device number 2
[  252.159433][ T1774] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  252.419427][ T1774] usb 3-1: Using ep0 maxpacket: 8
[  252.549676][ T1774] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  252.739472][ T1774] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  252.748548][ T1774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.757556][ T1774] usb 3-1: Product: syz
[  252.762648][ T1774] usb 3-1: Manufacturer: syz
[  252.767410][ T1774] usb 3-1: SerialNumber: syz
[  252.791419][T10650] raw-gadget gadget: fail, usb_ep_enable returned -22
01:28:11 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x4020940d, &(0x7f0000000080)=0x3)

01:28:11 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r0, 0x80004509, 0x0)

01:28:11 executing program 5:
socketpair(0x0, 0x6, 0x0, &(0x7f0000000000))
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)

01:28:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14}, 0x14}}, 0x840)

01:28:11 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0)

01:28:11 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r0, 0x80044501, 0x0)

[  253.032424][ T1774] cdc_ether: probe of 3-1:1.0 failed with error -71
[  253.084210][ T1774] usb 3-1: USB disconnect, device number 3
01:28:11 executing program 1:
getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, 0x0)

01:28:11 executing program 0:
process_vm_readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/51, 0x33}, {0x0}], 0x2, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/38, 0x26}, {0x0}, {&(0x7f0000000980)=""/7, 0x7}], 0x3, 0x0)

01:28:11 executing program 4:
clock_gettime(0x0, &(0x7f0000000600)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)={0xfff}, &(0x7f0000000640)={0x0, r0+10000000}, &(0x7f00000006c0)={&(0x7f0000000680)={[0x3]}, 0x8})

01:28:11 executing program 5:
syz_io_uring_setup(0x1fcf, &(0x7f0000000180), &(0x7f0000a91000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x0, 0x0)
fork()

01:28:11 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x14, 0x453, 0x0, 0x0, 0x0, '3<'}, 0x14}}, 0x20000800)

01:28:11 executing program 2:
r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0)

01:28:12 executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000006740)={'team0\x00'})

[  253.371010][   T37] audit: type=1107 audit(1614389292.003:2): pid=10735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='3<'
01:28:12 executing program 4:
semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000640)=""/4096)

01:28:12 executing program 0:
socket(0x1d, 0x0, 0x1000)

01:28:12 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000c80)={0x1, 0x10, 0xfa00, {&(0x7f0000000c40), r1}}, 0x18)

01:28:12 executing program 3:
io_uring_setup(0x2469, &(0x7f0000000180)={0x0, 0x0, 0x4})

01:28:12 executing program 5:
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0)

01:28:12 executing program 3:
recvfrom$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
socketpair(0x18, 0x0, 0x0, &(0x7f0000000180))

01:28:12 executing program 4:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
getsockname(r0, 0x0, &(0x7f0000000b00))

01:28:12 executing program 5:
syz_open_dev$char_raw(&(0x7f0000000d40)='/dev/raw/raw#\x00', 0x1, 0x200000)

01:28:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0)

01:28:12 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, 0x0, 0x0)

01:28:12 executing program 2:
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)={0x0})

01:28:12 executing program 5:
socketpair(0x4d, 0x0, 0x0, &(0x7f0000000100))

01:28:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4008051)

01:28:12 executing program 4:
recvfrom$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

01:28:12 executing program 1:
syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff}}]}}}]}}]}}, 0x0)

01:28:12 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x4020940d, &(0x7f0000000080)=0x7)

01:28:12 executing program 2:
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000300)={{0x0, @name="88284c3f53adcc0691f5a439509ac2ae821f40fb3672a2ba3be975cb98446543"}, 0x8})

01:28:12 executing program 5:
socket$isdn(0x22, 0x3, 0x1)

01:28:12 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x80284504, &(0x7f0000000080)=0xffffffff)

01:28:12 executing program 3:
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4002, 0x0)

01:28:12 executing program 0:
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14}, 0x14}}, 0x840)

01:28:12 executing program 4:
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0)

01:28:12 executing program 2:
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xffffffffffffffff, 0x41)

01:28:12 executing program 3:
fork()
syz_open_procfs$namespace(0x0, 0x0)

01:28:12 executing program 5:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x307880, 0x0)

01:28:12 executing program 0:
socket$inet6(0xa, 0x6, 0x4)

[  254.339194][ T3174] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  254.597876][ T3174] usb 2-1: Using ep0 maxpacket: 32
[  254.744626][ T3174] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[  254.929562][ T3174] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  254.944128][ T3174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.958888][ T3174] usb 2-1: Product: syz
[  254.967196][ T3174] usb 2-1: Manufacturer: syz
[  254.978466][ T3174] usb 2-1: SerialNumber: syz
[  255.030542][ T3174] cdc_ether: probe of 2-1:1.0 failed with error -22
[  255.247857][ T3884] usb 2-1: USB disconnect, device number 4
[  255.400400][ T3266] ieee802154 phy0 wpan0: encryption failed: -22
[  255.406734][ T3266] ieee802154 phy1 wpan1: encryption failed: -22
[  256.028978][ T3174] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  256.318944][ T3174] usb 2-1: Using ep0 maxpacket: 32
[  256.449042][ T3174] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[  256.648958][ T3174] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  256.658102][ T3174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.668042][ T3174] usb 2-1: Product: syz
[  256.673266][ T3174] usb 2-1: Manufacturer: syz
[  256.677980][ T3174] usb 2-1: SerialNumber: syz
[  256.740165][ T3174] cdc_ether: probe of 2-1:1.0 failed with error -22
01:28:15 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x40084502, 0x0)

[  256.949044][ T3884] usb 2-1: USB disconnect, device number 5
01:28:15 executing program 2:
socket$inet6_udp(0xa, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, 0x0, 0x0)

01:28:15 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x80044503, 0x0)

01:28:15 executing program 5:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0)

01:28:15 executing program 3:
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000400))

01:28:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14}, 0x14}}, 0x0)

01:28:15 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4$inet(r0, 0x0, 0x0, 0xc0000)

01:28:15 executing program 3:
r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2)
ioctl$VIDIOC_OVERLAY(r0, 0xc0285628, &(0x7f0000000140))

01:28:15 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

01:28:15 executing program 0:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x77, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}]}}]}}, 0x0)

01:28:15 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x40084502, 0x0)

01:28:15 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x80044584, &(0x7f0000000080))

01:28:15 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x40284504, &(0x7f0000000080))

[  257.543760][ T3174] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  257.788958][ T3174] usb 1-1: Using ep0 maxpacket: 8
01:28:16 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000340)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x40]}, 0x45c)

01:28:16 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x40084502, 0x0)

01:28:16 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000d40)={&(0x7f0000000bc0), 0xc, &(0x7f0000000d00)={0x0}}, 0x0)

01:28:16 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)

01:28:16 executing program 5:
process_vm_readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/51, 0x33}], 0x1, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2, 0x0)

[  257.909630][ T3174] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  257.931325][ T3174] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  257.964652][ T3174] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
01:28:16 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000200))

01:28:16 executing program 5:
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)={&(0x7f0000000680), 0x8})

01:28:16 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={0x1, 0x0, &(0x7f00000001c0), 0x2}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
socket(0x6, 0x0, 0x0)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)

[  258.159142][ T3174] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  258.168220][ T3174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.192041][ T3174] usb 1-1: Product: syz
[  258.202993][ T3174] usb 1-1: Manufacturer: syz
[  258.228695][ T3174] usb 1-1: SerialNumber: syz
[  258.269309][T10871] raw-gadget gadget: fail, usb_ep_enable returned -22
[  258.290045][ T3174] cdc_ether: probe of 1-1:1.0 failed with error -22
[  258.503399][ T3174] usb 1-1: USB disconnect, device number 3
[  259.278787][ T1774] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  259.518680][ T1774] usb 1-1: Using ep0 maxpacket: 8
[  259.639870][ T1774] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  259.650579][ T1774] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  259.661650][ T1774] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  259.829232][ T1774] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  259.838314][ T1774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.849390][ T1774] usb 1-1: Product: syz
[  259.853677][ T1774] usb 1-1: Manufacturer: syz
[  259.858288][ T1774] usb 1-1: SerialNumber: syz
[  259.891249][T10871] raw-gadget gadget: fail, usb_ep_enable returned -22
[  259.910431][ T1774] cdc_ether: probe of 1-1:1.0 failed with error -22
01:28:18 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x40284504, &(0x7f0000000080)=0x3)

01:28:18 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x40084502, 0x0)

01:28:18 executing program 2:
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140), 0x10)

01:28:18 executing program 4:
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x280400, 0x0)

01:28:18 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0)

01:28:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x0)

[  260.119240][ T1774] usb 1-1: USB disconnect, device number 4
01:28:18 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x280400, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0)

01:28:18 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x8040)
accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000b80))

01:28:18 executing program 2:
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480)='/dev/input/mice\x00', 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x5452, &(0x7f0000000080)=0x83)

01:28:18 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={0x0}}, 0x0)

01:28:18 executing program 1:
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084502, 0x0)

01:28:19 executing program 0:
syz_io_uring_setup(0x1fcf, &(0x7f0000000180), &(0x7f0000a91000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x0, 0x0)
fork()
syz_io_uring_setup(0x58d6, &(0x7f0000000000), &(0x7f0000a8c000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100))

01:28:19 executing program 4:
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffff2e4, 0x2b}}}}, [@NL80211_PMSR_ATTR_PEERS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x0)
r0 = fork()
syz_open_procfs$namespace(r0, 0x0)

01:28:19 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2}})

01:28:19 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480), 0x2}}, 0x20)

01:28:19 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r0, 0x40004580, 0x0)

01:28:19 executing program 1:
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084502, 0x0)

01:28:19 executing program 0:
syz_open_dev$char_raw(0x0, 0x1, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff}}], {{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3}}}}}]}}]}}, 0x0)

01:28:19 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6b4a, 0x1f}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}]}}]}}, 0x0)

01:28:19 executing program 1:
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084502, 0x0)

01:28:19 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000100))

01:28:19 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000180)={0xebc97c96400991b9, 0x0, 0x0})

01:28:19 executing program 2:
syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1ff, 0x40)

01:28:19 executing program 1:
r0 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x40084502, 0x0)

01:28:19 executing program 4:
r0 = socket$isdn_base(0x22, 0x3, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000a26000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x10000000)

01:28:19 executing program 3:
syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x4000)

01:28:19 executing program 1:
r0 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x40084502, 0x0)

01:28:19 executing program 2:
semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000004c00)=""/10)

01:28:19 executing program 2:
semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000001640))

[  261.088441][   T19] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  261.099292][   T36] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  261.338371][   T19] usb 1-1: Using ep0 maxpacket: 32
[  261.349377][   T36] usb 6-1: Using ep0 maxpacket: 8
[  261.489435][   T36] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  261.503157][   T19] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[  261.709223][   T36] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  261.718413][   T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  261.727461][   T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.738153][   T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.746996][   T19] usb 1-1: Product: syz
[  261.751763][   T36] usb 6-1: Product: syz
[  261.755950][   T36] usb 6-1: Manufacturer: syz
[  261.761686][   T19] usb 1-1: Manufacturer: syz
[  261.766305][   T19] usb 1-1: SerialNumber: syz
[  261.771873][   T36] usb 6-1: SerialNumber: syz
[  261.802316][T10984] raw-gadget gadget: fail, usb_ep_enable returned -22
[  261.807101][T10983] raw-gadget gadget: fail, usb_ep_enable returned -22
[  261.819580][   T36] cdc_ether: probe of 6-1:1.0 failed with error -22
[  261.830247][T10983] raw-gadget gadget: fail, usb_ep_enable returned -22
[  261.869574][   T19] cdc_ether: probe of 1-1:1.0 failed with error -22
[  262.036967][    T5] usb 6-1: USB disconnect, device number 2
[  262.079837][   T19] usb 1-1: USB disconnect, device number 5
01:28:21 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x80800, 0x0)

01:28:21 executing program 4:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0)
getsockname$inet(r0, 0x0, 0x0)

01:28:21 executing program 3:
syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x4000)

01:28:21 executing program 2:
syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0)

01:28:21 executing program 1:
r0 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x40084502, 0x0)

01:28:21 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x80284504, &(0x7f0000000080))

01:28:21 executing program 1:
syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084502, 0x0)

01:28:21 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00', 0xffffffffffffffff)

01:28:21 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x7)

01:28:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={0x0}}, 0x0)

01:28:21 executing program 3:
socketpair(0x27, 0x0, 0x0, &(0x7f00000007c0))

01:28:21 executing program 0:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7f}}}}}]}}]}}, 0x0)

01:28:21 executing program 5:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00')

01:28:21 executing program 1:
syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084502, 0x0)

01:28:21 executing program 4:
r0 = getpid()
clone3(&(0x7f0000000200)={0x20000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0], 0x1}, 0x58)

01:28:21 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040))

01:28:21 executing program 2:
syz_mount_image$affs(0x0, 0x0, 0x0, 0x2, &(0x7f0000002580)=[{0x0, 0x0, 0xffffffff}, {0x0}], 0x0, 0x0)

01:28:21 executing program 1:
syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084502, 0x0)

01:28:21 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5429, 0x0)

01:28:21 executing program 4:
socketpair(0x1e, 0x0, 0x5, &(0x7f0000000000))

[  263.084766][T11078] loop2: detected capacity change from 0 to 264192
01:28:21 executing program 5:
r0 = io_uring_setup(0x4b53, &(0x7f00000031c0))
io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0)

[  263.177949][T11078] loop2: detected capacity change from 0 to 264192
[  263.188215][    T5] usb 1-1: new high-speed USB device number 6 using dummy_hcd
01:28:21 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')

01:28:21 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00')
ioctl$RNDGETENTCNT(r0, 0x80045200, 0x0)

[  263.438221][    T5] usb 1-1: Using ep0 maxpacket: 8
[  263.558620][    T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  263.577004][    T5] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  263.587093][    T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  263.605124][    T5] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  263.776596][    T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  263.786100][    T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.803038][    T5] usb 1-1: Product: syz
[  263.807335][    T5] usb 1-1: Manufacturer: syz
[  263.815174][    T5] usb 1-1: SerialNumber: syz
[  263.859691][    T5] cdc_ether: probe of 1-1:1.0 failed with error -22
[  264.092891][ T9752] usb 1-1: USB disconnect, device number 6
[  264.848045][    T5] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  265.088065][    T5] usb 1-1: Using ep0 maxpacket: 8
[  265.208169][    T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  265.218156][    T5] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  265.229803][    T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  265.240597][    T5] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  265.408118][    T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  265.417377][    T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.425712][    T5] usb 1-1: Product: syz
[  265.430064][    T5] usb 1-1: Manufacturer: syz
[  265.434729][    T5] usb 1-1: SerialNumber: syz
[  265.479939][    T5] cdc_ether: probe of 1-1:1.0 failed with error -22
01:28:24 executing program 0:
io_uring_setup(0x35bf, &(0x7f0000000440))

01:28:24 executing program 4:
r0 = syz_io_uring_setup(0x9b2, &(0x7f0000000680), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000700), &(0x7f0000000740))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x8000000)

01:28:24 executing program 3:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0)

01:28:24 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_pts(r0, 0x84c0)

01:28:24 executing program 5:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$KDSETLED(r0, 0x4b32, 0x0)

01:28:24 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

[  265.688521][ T1774] usb 1-1: USB disconnect, device number 7
01:28:24 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5452, &(0x7f0000000200))

01:28:24 executing program 1:
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0))

01:28:24 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/kvm\x00', 0x200000, 0x0)

01:28:24 executing program 5:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000001b80)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x20)

01:28:24 executing program 2:
r0 = io_uring_setup(0x4b53, &(0x7f00000031c0)={0x0, 0x0, 0x2})
io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0)

01:28:24 executing program 0:
syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00')

01:28:24 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280)='NLBL_MGMT\x00', r1)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x24}}, 0x0)

01:28:24 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = io_uring_setup(0x4b53, &(0x7f00000031c0))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

01:28:24 executing program 5:
r0 = syz_io_uring_setup(0x4b42, &(0x7f0000000580), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)

01:28:24 executing program 1:
syz_mount_image$affs(0x0, 0x0, 0x0, 0x1, &(0x7f0000002580)=[{&(0x7f0000001500)="3c54f2fe2975817fbd6c08eb431e4e3f3b53ae3e75a16403c3376d72d12df273b4b1a3487bcbdd4a80863bae6c067f", 0x2f, 0x100000000}], 0x1000000, &(0x7f0000002600)={[{'%*'}, {}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, ',,\xc6:!$\\+,'}}]})

01:28:24 executing program 0:
getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0)

01:28:24 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0))

01:28:24 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x0)

[  266.251876][T11178] loop1: detected capacity change from 0 to 264192
01:28:24 executing program 0:
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0)

01:28:24 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000003280)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000032c0)={0x6, 0x8, [0x0, 0x0]})

01:28:25 executing program 3:
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r0=>0x0})
select(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x9}, &(0x7f0000000100)={0x0, r0/1000+10000})

01:28:25 executing program 5:
r0 = syz_io_uring_setup(0x67b, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
io_uring_setup(0x4e4e, &(0x7f0000000240)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0})

[  266.392919][T11178] loop1: detected capacity change from 0 to 264192
01:28:25 executing program 1:
select(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x9}, 0x0)

01:28:25 executing program 4:
sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0)

01:28:25 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/nf_conntrack_expect\x00')
read$eventfd(r0, &(0x7f0000000140), 0x8)

01:28:25 executing program 2:
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x305400, 0x0)

01:28:25 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9f}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

01:28:25 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_cache\x00')
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

01:28:25 executing program 3:
r0 = io_uring_setup(0x4b53, &(0x7f00000031c0))
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

01:28:25 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003140)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0)

01:28:25 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5423, 0x0)

01:28:25 executing program 0:
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00', 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x4b42, &(0x7f0000000580), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/kvm\x00', 0x200000, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, r1], 0x2)

01:28:25 executing program 4:
io_uring_setup(0x4934, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2})

01:28:25 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000220001"], 0x14}}, 0x0)

01:28:25 executing program 5:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x41840, 0x0)

01:28:25 executing program 3:
mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000)
r0 = syz_io_uring_setup(0x4b42, &(0x7f0000000580), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/kvm\x00', 0x200000, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, r1], 0x2)

01:28:25 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @in={0x2, 0x0, @private}, @llc, @xdp={0x2c, 0x0, 0x0, 0x18}})

01:28:25 executing program 4:
syz_open_procfs(0x0, 0x0)
r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000002a40)='/dev/fb1\x00', 0x0, 0x0)
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000002a80))

01:28:25 executing program 0:
syz_mount_image$vxfs(&(0x7f0000000140)='vxfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x8000, &(0x7f0000000600))

01:28:25 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe4ffffff, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2={0xff, 0x5}}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x64}}, 0x0)

01:28:25 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_SCRNMAP(r0, 0x4b72, &(0x7f0000000280))

01:28:25 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r0=>0x0})
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, r0/1000+10000})

01:28:25 executing program 3:
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0)
syz_mount_image$affs(&(0x7f0000001380)='affs\x00', 0x0, 0x0, 0x1, &(0x7f0000002580)=[{0x0}], 0x0, &(0x7f0000002600)={[], [{@dont_measure='dont_measure'}, {@subj_type={'subj_type', 0x3d, ',,\xc6:!$\\+,'}}]})
socket(0x0, 0x6, 0x40)

01:28:25 executing program 4:
r0 = syz_io_uring_setup(0x2190, &(0x7f0000004400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000004480), &(0x7f00000044c0))
io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0)

01:28:25 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmmsg(r0, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

01:28:26 executing program 1:
pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), 0x0, 0x0, 0x0)

01:28:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0)

01:28:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f00000046c0)=[{{&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000740)=[{0x0}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000580)=""/205, 0xcd}], 0x3, &(0x7f00000007c0)=""/175, 0xaf}}], 0x1, 0x10000, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000004840)='nl80211\x00', r0)

01:28:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x75}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'vxcan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x44}}, 0x0)

01:28:26 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ppoll(&(0x7f0000000100)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0)

01:28:26 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)

01:28:26 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5452, 0x0)

01:28:26 executing program 0:
r0 = socket$inet(0x2, 0xa, 0x0)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2040)

[  267.894411][T11304] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET)
01:28:26 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, r1}}, 0x38)

01:28:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000057c0)={'batadv_slave_1\x00'})

01:28:26 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x890d, 0x0)

01:28:26 executing program 2:
syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x6, 0x0)

01:28:27 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:28:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3, 0x0)

01:28:27 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5421, 0x0)

01:28:27 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18)

01:28:27 executing program 5:
r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0)

01:28:27 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20)

01:28:27 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8903, 0x0)

01:28:27 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f00000022c0)={0x0, 0x3938700})

01:28:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00', 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x201, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, 0x1c}}, 0x0)

01:28:27 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40049409, 0x0)

01:28:27 executing program 5:
socketpair(0x1d, 0x0, 0x80, &(0x7f0000000000))

01:28:27 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000002100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"0ad02be24d935ae5cc11cf0f3140623d"}}}}, 0xa0)

01:28:27 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20)

01:28:27 executing program 2:
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xfffffffffffff4ae]}, 0x8})

01:28:27 executing program 4:
io_setup(0x8, &(0x7f0000000240)=<r0=>0x0)
io_getevents(r0, 0x0, 0x0, 0x0, 0x0)

01:28:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000005540)=[{{&(0x7f0000000000)=@phonet, 0x80, 0x0}}], 0x1, 0x0, 0x0)

01:28:27 executing program 5:
syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x0, 0x204800)

01:28:27 executing program 3:
openat$hwrng(0xffffffffffffff9c, &(0x7f0000001200)='/dev/hwrng\x00', 0x200001, 0x0)

01:28:27 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

01:28:27 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x11, 0x2, 0x9, &(0x7f0000000000))

01:28:27 executing program 5:
pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x9000}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xfffffffffffff4ae]}, 0x8})

01:28:27 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000009140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

01:28:27 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd_index, 0x0, 0x0}, 0x0)

01:28:27 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd_index=0x4, 0x0, 0x0}, 0x0)

01:28:27 executing program 4:
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x111000, 0x0)

01:28:28 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)

01:28:28 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd_index=0x4, 0x0, 0x0}, 0x0)

01:28:28 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd_index, 0x0, 0x0}, 0x0)

01:28:28 executing program 4:
r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000280)='#{\\@].\')\x00')

01:28:28 executing program 0:
sysinfo(&(0x7f0000000000)=""/169)

01:28:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00', 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

01:28:28 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0)

01:28:28 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000005c0)={0x18, 0x0, {0x4, @random="24694f9b3004", 'lo\x00'}}, 0x1e)

01:28:28 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd_index=0x4, 0x0, 0x0}, 0x0)

01:28:28 executing program 1:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0)
write$FUSE_POLL(r0, 0x0, 0x0)

01:28:28 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd_index, 0x0, 0x0}, 0x0)

01:28:28 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, 0x0)

01:28:29 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000580)='/dev/video#\x00', 0x3, 0x2)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000006c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b780a601"}, 0x0, 0x0, @fd})

01:28:29 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:29 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd_index=0x4, 0x0, 0x0}, 0x0)

01:28:29 executing program 1:
r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000280)='#{\\@].\')\x00')

01:28:29 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd_index, 0x0, 0x0}, 0x0)

01:28:29 executing program 4:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)

01:28:29 executing program 2:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001200)='/dev/hwrng\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00', 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0)
read$FUSE(r0, &(0x7f0000001240)={0x2020}, 0x2020)

01:28:29 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:29 executing program 1:
socketpair(0x1e, 0x0, 0xcc0, &(0x7f0000000000))

01:28:29 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:29 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f00000046c0)=[{{&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000740)=[{0x0}, {0x0}, {&(0x7f0000000580)=""/205, 0xcd}], 0x3, &(0x7f00000007c0)=""/175, 0xaf}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000004840)='nl80211\x00', r0)

01:28:29 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18)

01:28:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x40}}, 0x0)

01:28:30 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:30 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000005540)=[{{&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000002540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0, 0x0)

01:28:30 executing program 4:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$alg(r0, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x13c, 0x0)

01:28:30 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:30 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20)

[  271.590081][    C0] hrtimer: interrupt took 51770 ns
01:28:30 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:30 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:30 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:30 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

01:28:30 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:30 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:30 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x0, 0x0, @mcast2}}}, 0xa0)

01:28:30 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:31 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

01:28:31 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:31 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000080)=""/131, 0x83}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0, 0x0)

01:28:31 executing program 4:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$alg(r0, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x13c, 0x0)

01:28:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:31 executing program 1:
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9000}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xfffffffffffff4ae]}, 0x8})

01:28:31 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:31 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000))

01:28:31 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20)

01:28:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:31 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:31 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:31 executing program 4:
nanosleep(&(0x7f0000003c00)={0x0, 0x989680}, 0x0)

01:28:31 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0x8, 0x4)

01:28:31 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00', 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}]}, 0x24}}, 0x0)

01:28:31 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:31 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20)

01:28:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:32 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:32 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:32 executing program 4:
pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xfffffffffffff4ae]}, 0x8})

01:28:32 executing program 1:
clock_gettime(0x0, &(0x7f0000001d40)={0x0, <r0=>0x0})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001d80)={0x0, r0+10000000})

01:28:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:32 executing program 2:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xb6f6a5adfcbb2d77, 0x0)

01:28:32 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:32 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000001840))

01:28:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000002540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0, 0x0)

01:28:32 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f00000046c0)=[{{&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000740)=[{0x0}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000580)=""/205, 0xcd}], 0x3, &(0x7f00000007c0)=""/175, 0xaf}, 0x8}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000004840)='nl80211\x00', r0)

01:28:32 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00', 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, 0x24}}, 0x0)

01:28:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:33 executing program 5:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:33 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:33 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8953, 0x0)

01:28:33 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:33 executing program 1:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001200)='/dev/hwrng\x00', 0x0, 0x0)
write$tcp_congestion(r0, 0x0, 0x0)

01:28:33 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000005ac0)={0x0, 0x0, &(0x7f0000005a80)={&(0x7f0000000280)={0xf00, 0xd, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xed4, 0x3, 0x0, 0x1, [{0xbb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0xba4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x71, 0x1, "2ade73f5776af482950b643dd972414adfb4846969e086ed9ebf12ab86373a4b0afcd9b585483daa07a71d9864141b60558c382a26d8443ddeae1037d58e6fbef1baf447cf2e538c2145152fef4113e76c1c7cce8008521fae1316ab60b76f3f99458b8fbdf9f5a142af392066"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xa81, 0x1, "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"}, @NFTA_DATA_VALUE={0x1d, 0x1, "a12654007f686e27972a4900b47274c6a9b05b4b5b6bc0ff4e"}, @NFTA_DATA_VALUE={0xd, 0x1, "30ea1d8b1ef8b32386"}, @NFTA_DATA_VALUE={0x4}]}]}, {0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x50, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x70, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x65, 0x1, "3132449b62a60c67340cdb75fc6e35641c77990dd5ceadc6fd4bd3984dfd2db1e3aeb6e10969f592cf75a83c01e73a380ee41145138293fb7fb133e98bc3dbe96b408592672f338b108e0ac7d686f1048d1ca97a693ab846a40f5fb840527475f9"}]}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x254, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY_END={0x208, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "b3dcfc5621c27861812275c3bf3db77a09"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe1, 0x1, "0b5472c30c08b85dd22d0c10d9b7242f4e771a25ba2ab67d3618ceea6b60c8d8f8fdb7001b4b36cbca56afdde4f2be8ef1dc5d429811fb7bbac9e697291b3e202a735ed3d56122f0a393a3def7519192a5beb9063406388d582bed7435ad707bd48a39e75cdad3a65e01bb753e4f5b3f44f43fd1425757824cb7ede9c02d07a36f85bc779491ffa242263ec1366b4d138d43fa42fb9e58a2896575b0289cb417dda2dd302f40bcfbf710a8b95f88750a83912c2cf902e15d2de2f14ee8f544ef7ea84f5c707503f7418b8a91fdd4871b54c6fb9db395d49e17c859b58f"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xf00}}, 0x0)

01:28:33 executing program 5:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:33 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000280))

01:28:33 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:33 executing program 1:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c27e78c0"}, 0x0, 0x0, @planes=0x0})

01:28:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:33 executing program 5:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:33 executing program 2:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c27e78c0"}, 0x0, 0x0, @planes=0x0})

01:28:33 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:33 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @rand_addr=0x64010100}}}})

01:28:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:33 executing program 5:
r0 = syz_io_uring_setup(0x87, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:33 executing program 4:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c27e78c0"}, 0x0, 0x0, @planes=0x0})

01:28:33 executing program 3:
r0 = syz_io_uring_setup(0x87, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:33 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000700)='/proc/capi/capi20\x00', 0x0, 0x0)
getpeername$inet(r0, 0x0, 0x0)

01:28:33 executing program 1:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0)
socketpair(0xb, 0x0, 0x0, &(0x7f0000000100))

01:28:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:33 executing program 5:
r0 = syz_io_uring_setup(0x87, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:34 executing program 4:
socket$inet6(0xa, 0x1, 0x7f)

01:28:34 executing program 3:
r0 = syz_io_uring_setup(0x87, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:34 executing program 2:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c27e78c0"}, 0x0, 0x0, @planes=0x0})

01:28:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}}, 0x0)

01:28:34 executing program 5:
r0 = syz_io_uring_setup(0x87, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:34 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:34 executing program 3:
r0 = syz_io_uring_setup(0x87, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:34 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0)

01:28:34 executing program 1:
getitimer(0x0, &(0x7f0000000540))

01:28:34 executing program 4:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c27e78c0"}, 0x0, 0x0, @planes=0x0})

01:28:34 executing program 2:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000700)='/proc/capi/capi20\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000000))

01:28:34 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:34 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000700)='/proc/capi/capi20\x00', 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0)

01:28:34 executing program 4:
perf_event_open(&(0x7f0000001340)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000001400), 0x4}, 0xa00, 0x6489}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)

01:28:34 executing program 1:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0)

01:28:34 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:34 executing program 2:
syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xe5, 0x0)

01:28:34 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:34 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r0 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

[  276.076141][T11975] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
01:28:34 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:34 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r0 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:34 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={0x0}}, 0x0)

01:28:34 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:34 executing program 2:
r0 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000100)=@ipx, 0x80, &(0x7f00000002c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)

01:28:34 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r0 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:35 executing program 4:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0x80805659, 0x0)

01:28:35 executing program 1:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0x5451, 0x0)

01:28:35 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:35 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:35 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:35 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:35 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:35 executing program 1:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc0505609, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c27e78c0"}, 0x0, 0x0, @planes=0x0})

01:28:35 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:35 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000300), 0x10)

01:28:35 executing program 2:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0x400448c9, 0x0)

01:28:35 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:35 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:35 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:35 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f0000000080))

01:28:36 executing program 4:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc050565d, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c27e78c0"}, 0x0, 0x0, @planes=0x0})

01:28:36 executing program 2:
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0)

01:28:36 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:36 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000040))

01:28:36 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:36 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f0000000240))

01:28:36 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:36 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private}}}})

01:28:36 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:36 executing program 1:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000700)='/proc/capi/capi20\x00', 0x98001, 0x0)

01:28:36 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:36 executing program 4:
syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x8, 0x0)

01:28:36 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:36 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000080))

01:28:36 executing program 1:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0x40049409, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c27e78c0"}, 0x0, 0x0, @planes=0x0})

01:28:36 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:36 executing program 4:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0)

01:28:36 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:36 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:36 executing program 2:
getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0)

01:28:36 executing program 4:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x6108c0, 0x0)

01:28:36 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:36 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:36 executing program 0:
r0 = syz_io_uring_setup(0x87, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:36 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @private, 0x4e23, 0x0, 'wlc\x00'}, 0x2c)

01:28:36 executing program 1:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20\x00', 0x344c0, 0x0)

[  278.275572][T12150] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
01:28:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r0, 0x0, 0x0)

01:28:37 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:37 executing program 0:
r0 = syz_io_uring_setup(0x87, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:37 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:37 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000010c0)={{0x2, 0x0, @broadcast}, {0x1, @random="81f335e280b7"}, 0x0, {}, 'geneve0\x00'})

01:28:37 executing program 1:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'ip6gre0\x00', 0x3}, 0x18)
ioctl(r0, 0x8916, &(0x7f0000000000))
r1 = socket(0x80000000000000a, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
ioctl(r0, 0x8936, &(0x7f0000000000))
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)

01:28:37 executing program 4:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x200400, 0x0)

01:28:37 executing program 0:
r0 = syz_io_uring_setup(0x87, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:37 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:37 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4005)

01:28:37 executing program 1:
r0 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000100)=@ipx, 0x80, 0x0}, 0x0)

01:28:37 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x0, 0x1, &(0x7f0000001280)=@raw=[@ldst], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

01:28:37 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54)

01:28:37 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

01:28:37 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

01:28:37 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:37 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100))
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:37 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:37 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000440)={0x0, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c)

01:28:37 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100))
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:37 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100))
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

[  279.268395][T12207] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0
[  279.271610][T12204] IPVS: ftp: loaded support on port[0] = 21
01:28:37 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

[  279.733778][T12204] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  279.753602][T12204] IPVS: ftp: loaded support on port[0] = 21
01:28:38 executing program 1:
socketpair(0x3d, 0x0, 0x0, &(0x7f0000000000))

01:28:38 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x3a, @private=0xa010102, 0x4e23, 0x0, 'wlc\x00'}, 0x2c)

01:28:38 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:38 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100))
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

[  279.904906][T12204] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  279.917870][T12267] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20003
01:28:38 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000700)='/proc/capi/capi20\x00', 0x0, 0x0)
connect$rds(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)

01:28:38 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100))
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:38 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:38 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:38 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}}})

01:28:38 executing program 1:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c27e78c0"}, 0x0, 0x0, @planes=0x0})

01:28:38 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:38 executing program 1:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc0d05640, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c27e78c0"}, 0x0, 0x0, @planes=0x0})

01:28:38 executing program 4:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0x10, 0x0)

01:28:38 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100))
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:39 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:39 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000500))

01:28:39 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:39 executing program 4:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc050560f, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c27e78c0"}, 0x0, 0x0, @planes=0x0})

01:28:39 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:39 executing program 1:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0x5452, 0x0)

01:28:39 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:39 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001201", 0x2e}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efbc00e09000e000a0000000080000012010000", 0x2e}], 0x1}, 0x0)

01:28:39 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:39 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:39 executing program 4:
socket$inet_udp(0x2, 0x2, 0x11)

01:28:39 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

[  280.834008][T12324] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
01:28:39 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'gretap0\x00', 0x0})

[  280.906989][T12330] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
01:28:39 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:39 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0x8)

01:28:39 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:39 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:39 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:39 executing program 4:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000700)='/proc/capi/capi20\x00', 0x84a00, 0x0)

[  281.508967][T12330] team0: Port device team_slave_0 removed
[  281.757974][T12324] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  281.784623][T12324] team0: Port device team_slave_0 added
[  281.807503][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
01:28:40 executing program 2:
r0 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)

01:28:40 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:40 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:40 executing program 3:
syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:40 executing program 4:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c27e78c0"}, 0x0, 0x0, @planes=0x0})

01:28:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, "37fa43a0"}, &(0x7f0000000040)=0x28)

01:28:40 executing program 1:
socket$inet(0x2, 0xa, 0x7)

01:28:40 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:40 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:40 executing program 3:
syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:40 executing program 4:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c27e78c0"}, 0x0, 0x0, @planes=0x0})

01:28:40 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0)
recvmsg$can_raw(r0, 0x0, 0x0)

01:28:41 executing program 2:
statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0)

01:28:41 executing program 4:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002bc0)={'syztnl2\x00', 0x0})

01:28:41 executing program 3:
syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:41 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:41 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:41 executing program 1:
socketpair(0x22, 0x0, 0x0, &(0x7f0000000280))

01:28:41 executing program 1:
socket$key(0xf, 0x3, 0x2)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./bus\x00', 0x6, 0x0)
ftruncate(r2, 0x2007fff)
sendfile(r0, r0, 0x0, 0x8080fffffffe)
r3 = socket(0x2, 0x803, 0xff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
r4 = dup(r3)
r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)

01:28:41 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:41 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x700)

01:28:41 executing program 2:
perf_event_open(&(0x7f0000001340)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000001400), 0x4}, 0xa00, 0x6489}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='vxcan1\x00', 0x10)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x200880)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, r1, 0x0)
ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)

01:28:41 executing program 5:
syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:28:41 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffdffffffff}}]})

[  283.185856][T12430] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
01:28:41 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x700)

01:28:41 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:42 executing program 5:
syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)

[  283.417816][T12447] hfs: dir_umask requires a value
[  283.423712][   T37] audit: type=1804 audit(1614389322.046:3): pid=12444 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir499788468/syzkaller.gA0aHs/113/bus" dev="sda1" ino=14199 res=1 errno=0
01:28:42 executing program 5:
syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)

[  283.487232][T12447] hfs: unable to parse mount options
01:28:42 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x700)

[  283.619127][T12447] hfs: dir_umask requires a value
[  283.624210][T12447] hfs: unable to parse mount options
01:28:42 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

[  284.258997][   T37] audit: type=1804 audit(1614389322.886:4): pid=12480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir499788468/syzkaller.gA0aHs/113/bus" dev="sda1" ino=14199 res=1 errno=0
01:28:43 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fremovexattr(r0, &(0x7f0000000080)=@random={'btrfs.', '/dev/input/mouse#\x00'})

01:28:43 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x700)

01:28:43 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x700)

01:28:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x24}}, 0x0)

01:28:43 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:43 executing program 2:
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)

[  284.361467][   T37] audit: type=1804 audit(1614389322.936:5): pid=12480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir499788468/syzkaller.gA0aHs/113/bus" dev="sda1" ino=14199 res=1 errno=0
01:28:43 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000300)=@bridge_dellink={0x20, 0x11, 0xe5ad5d33d6762651}, 0x20}}, 0x0)

01:28:43 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done], 0x0, 0x0, 0x0})

01:28:43 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}})

01:28:43 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x700)

01:28:43 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:43 executing program 2:
add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="a1", 0x1, 0xfffffffffffffffe)

01:28:43 executing program 1:
syz_emit_ethernet(0x105a, &(0x7f0000000240)=ANY=[], 0x0)
r0 = eventfd2(0x8001, 0x0)
read$eventfd(r0, &(0x7f0000000000), 0x8)

01:28:43 executing program 3:
add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8)

01:28:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@can_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}]}, 0x1c}}, 0x0)

01:28:43 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xbc, 0x101202)
fremovexattr(r0, 0x0)

01:28:43 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:43 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

01:28:43 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x6814615cac0c3641)
write(r0, 0x0, 0x0)

01:28:43 executing program 5:
add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="a1", 0x1, 0xfffffffffffffffe)

01:28:43 executing program 4:
r0 = socket(0x18, 0x0, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x0, 0x0, 0x0)

01:28:43 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000300))

01:28:43 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:43 executing program 3:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0))

01:28:43 executing program 4:
add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "1b04ae27647b6d2cba0693e525992842af2101f243beae9590314adda4d4756cf9e3e6721b01b2dbbc98de32acc46e549d869b415a497367de8a3cec4d1a60c3"}, 0x48, 0xffffffffffffffff)
r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @auto=[0x61, 0x64, 0x35, 0x35, 0x34, 0x64, 0x15]}, &(0x7f0000000180)={0x0, "046a9c9d585f996bdc5ac02d7ce4ef0ff0fa4258b385195fe995323c6fbd2229ff40d3c6bef44695522f2e9d49c589dae78b553a4746163efb2cffeb98b67e06"}, 0x48, 0xfffffffffffffffe)
keyctl$invalidate(0x15, r0)

01:28:43 executing program 5:
munmap(&(0x7f0000990000/0x3000)=nil, 0x3000)
madvise(&(0x7f0000990000/0x4000)=nil, 0x4000, 0x0)

01:28:43 executing program 1:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
read$alg(r0, 0x0, 0x0)

01:28:44 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:44 executing program 3:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0xf49c91cfd2ce0eb6)

01:28:44 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

01:28:44 executing program 4:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DESTROY(r0, &(0x7f0000001340)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001300)={&(0x7f0000001880)={0xec4, 0x15, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ba89f9874292e4f14b466a4879becdb3221daf8974dce28fba5e5496ce3f197f33190750d879ba831fac6e93385b9525c94307b6d1293fea97703de6c1cc02de45f12868d8c14fe3effe0c5bcab1531201"}, @INET_DIAG_REQ_BYTECODE={0xb5, 0x1, "f68a1347801b28c980c0bce69ed6503978370da4ecb27c120be28178ad348c5dd801dc33ce5aabf9c9956e89c569bb4d202fccab4f0f968042da0f8453a1c03d0df34ed33df3b20b60e22a09f044b121cdfe443766fc249f0943e8eff173869eec89f53201ea2c572ea4232edca5dc952193d3401b6271733f4292c0d6d81ce31fd44f6a660ebff1c01c5f120dd67910228de55ac7b6a5afc6d7122147cb51599649798b3974940fcc1414593e04c2464c"}, @INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "ed793b5b4b4923915158c1887ea1a02a73ad48437a01154e76e60e8f48018cc1c65a270b841af859a9"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "67a1e99b6f2cc6067392f137167dce3943af08dc2e"}, @INET_DIAG_REQ_BYTECODE={0xd51, 0x1, "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"}]}, 0xec4}}, 0x0)

01:28:44 executing program 5:
r0 = add_key(&(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="a1", 0x1, 0xfffffffffffffffe)
add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0x0)
keyctl$invalidate(0x15, r0)
request_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0)

01:28:44 executing program 1:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0)

01:28:44 executing program 3:
request_key(&(0x7f0000001500)='rxrpc_s\x00', &(0x7f0000001540)={'syz', 0x2}, 0x0, 0x0)

01:28:44 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:44 executing program 1:
sigaltstack(&(0x7f000098c000/0x4000)=nil, 0x0)
pkey_mprotect(&(0x7f000098a000/0xb000)=nil, 0xb000, 0x4, 0xffffffffffffffff)

01:28:44 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0)

01:28:44 executing program 5:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000040)='6\x00', 0x2)

01:28:44 executing program 4:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
read$alg(r0, 0x0, 0x5b)

01:28:44 executing program 1:
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000ffd000/0x2000)=nil)

01:28:44 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000140), 0x2c, &(0x7f00000002c0)={0x0}}, 0x0)

01:28:44 executing program 5:
mremap(&(0x7f0000d2b000/0x4000)=nil, 0x4000, 0x14000, 0x3, &(0x7f00007bf000/0x14000)=nil)

01:28:44 executing program 4:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)

01:28:45 executing program 3:
prlimit64(0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100))

01:28:45 executing program 1:
socket(0x1, 0x0, 0xf3)

01:28:45 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x7fe0000000, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100))

01:28:45 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:45 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0x7c4}]})

01:28:45 executing program 4:
clock_gettime(0x6, &(0x7f0000000280))

01:28:45 executing program 3:
r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x2, 0x2)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000003c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "efcbbb0d"}, 0x0, 0x0, @planes=0x0})

01:28:45 executing program 1:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[], 0x14}}, 0x0)

01:28:45 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:45 executing program 2:
ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000040)={0x0, 0x0, [], 0x0})
pkey_mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ced000/0x2000)=nil, 0x2000, 0xc, 0xffffffffffffffff)
munmap(&(0x7f000098f000/0x3000)=nil, 0x3000)

01:28:45 executing program 5:
pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)

01:28:45 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000520007"], 0x14}}, 0x0)

01:28:45 executing program 3:
r0 = socket(0x18, 0x0, 0x0)
getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14)

01:28:45 executing program 4:
request_key(&(0x7f0000001500)='rxrpc_s\x00', &(0x7f0000001540)={'syz', 0x2}, &(0x7f0000001580)='-\x00', 0x0)

01:28:45 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:45 executing program 1:
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc)
sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0)

01:28:45 executing program 2:
r0 = shmget$private(0x0, 0xc000, 0x0, &(0x7f0000485000/0xc000)=nil)
shmat(r0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)

01:28:45 executing program 5:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000001c40))

01:28:45 executing program 3:
r0 = inotify_init()
r1 = inotify_init()
syz_mount_image$gfs2(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
inotify_add_watch(r1, &(0x7f00000035c0)='./file0\x00', 0x22000080)
r2 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x80000000)
inotify_rm_watch(r1, r2)

01:28:45 executing program 4:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00')

01:28:45 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:45 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0)

01:28:45 executing program 2:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})

01:28:45 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)="9b"})

01:28:45 executing program 3:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0xfffffc00}, 0x8)

01:28:46 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00')

01:28:46 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x3f)

01:28:46 executing program 2:
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x5000)

[  287.341821][T12669] binder: 12665:12669 ioctl 40086607 0 returned -22
01:28:46 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

[  287.421774][T12669] binder: 12665:12669 ioctl 40086607 0 returned -22
01:28:46 executing program 3:
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30}, 0x0)

01:28:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000006100)='l2tp\x00', r0)

01:28:46 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:46 executing program 1:
socket(0x22, 0x0, 0x40)

01:28:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008"], 0x24}}, 0x0)

01:28:46 executing program 2:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x109a82, 0x0)

01:28:46 executing program 3:
socket(0x10, 0x2, 0xff80)

01:28:46 executing program 5:
socketpair(0x29, 0x2, 0x200, 0x0)

[  287.800921][T12695] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
01:28:46 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, 0x0)

01:28:46 executing program 2:
syz_emit_ethernet(0x6d, &(0x7f0000000800)={@local, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x5b}, {0x0, 0x0, 0x0, @multicast1, "bab945df9502e5c696ce93677a90ca57b8a176078771281a7a06df7c46d8ebe0c628ae244b9bf8d4b66a804d50323ef41018d463979c4ea89d161f4f70653e"}}}}}, 0x0)

[  287.875801][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
01:28:46 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:46 executing program 4:
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time_for_children\x00')

01:28:46 executing program 3:
syz_emit_ethernet(0x105a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb8100280086dd00000000000c0000fe"], 0x0)

01:28:46 executing program 5:
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)

01:28:46 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000100), 0x4)

01:28:46 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:46 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000100)={"572e57ba1cb2f3d646f3784a3e7fbf9b5836ba07421d4102ea53580f8f57", 0xffffffff})

01:28:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x6814615cac0c3641)
write(r0, 0x0, 0x0)

01:28:46 executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202102, 0x0)
ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408)

01:28:46 executing program 4:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DESTROY(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001880)={0xec4, 0x15, 0x1, 0x0, 0x0, {0x21}, [@INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ba89f9874292e4f14b466a4879becdb3221daf8974dce28fba5e5496ce3f197f33190750d879ba831fac6e93385b9525c94307b6d1293fea97703de6c1cc02de45f12868d8c14fe3effe0c5bcab1531201"}, @INET_DIAG_REQ_BYTECODE={0xb5, 0x1, "f68a1347801b28c980c0bce69ed6503978370da4ecb27c120be28178ad348c5dd801dc33ce5aabf9c9956e89c569bb4d202fccab4f0f968042da0f8453a1c03d0df34ed33df3b20b60e22a09f044b121cdfe443766fc249f0943e8eff173869eec89f53201ea2c572ea4232edca5dc952193d3401b6271733f4292c0d6d81ce31fd44f6a660ebff1c01c5f120dd67910228de55ac7b6a5afc6d7122147cb51599649798b3974940fcc1414593e04c2464c"}, @INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "ed793b5b4b4923915158c1887ea1a02a73ad48437a01154e76e60e8f48018cc1c65a270b841af859a9"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "67a1e99b6f2cc6067392f137167dce3943af08dc2e"}, @INET_DIAG_REQ_BYTECODE={0xd51, 0x1, "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"}]}, 0xec4}}, 0x0)

01:28:47 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000100), 0x4)

01:28:47 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:47 executing program 5:
request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)=']$[,#\x00', 0xfffffffffffffffc)

01:28:47 executing program 4:
socket(0x0, 0xe, 0x0)

01:28:47 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x24}}, 0x0)

01:28:47 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, 0x0)

01:28:47 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000100), 0x4)

01:28:47 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:47 executing program 5:
munmap(&(0x7f00007ff000/0x800000)=nil, 0x800000)
pkey_mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1000003, 0xffffffffffffffff)

01:28:47 executing program 4:
syz_emit_ethernet(0x105a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbb2db704a9ca82fb"], 0x0)

01:28:47 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
recvmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

01:28:47 executing program 2:
r0 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="a1", 0x1, 0xfffffffffffffffe)
add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="a1", 0x1, 0xfffffffffffffffe)
add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, r0)

01:28:47 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000100), 0x4)

01:28:47 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)

01:28:47 executing program 2:
socket(0x11, 0xa, 0x9)

01:28:47 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
recvmmsg(r0, &(0x7f0000006dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12003, 0x0)

01:28:47 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

01:28:47 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:47 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @nfc, @tipc=@name, 0x5})

01:28:47 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @broadcast}, @can})

01:28:48 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:48 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x6814615cac0c3641)

01:28:48 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x1, 0x0, &(0x7f0000000000)='\x00'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="c8"})

01:28:48 executing program 2:
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ea1c63", 0x14, 0x6, 0x0, @private2, @loopback, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

01:28:48 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0)

01:28:48 executing program 4:
r0 = socket(0x11, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xfffffc64, &(0x7f00000002c0)={0x0}}, 0x0)

01:28:48 executing program 0:
syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

[  289.996361][T12809] binder: 12803:12809 ioctl c0389423 0 returned -22
01:28:48 executing program 2:
socket(0x23, 0x0, 0x20)

01:28:48 executing program 0:
syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:48 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

01:28:48 executing program 4:
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x735001, 0x0)

01:28:48 executing program 1:
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x226000, 0x0)

01:28:48 executing program 5:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0)
read$alg(r0, 0x0, 0x0)

01:28:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000800ff7e20d39d7e4f"], 0x24}}, 0x0)

[  290.443847][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  290.470490][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
01:28:49 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x1, 0x0, &(0x7f0000000000)='\x00'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="c8"})

01:28:49 executing program 1:
add_key$fscrypt_v1(&(0x7f0000000600)='logon\x00', &(0x7f0000000640)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000680)={0x0, "4aa23e220daf9fdcdc15916b4eefb946aa212b830f164aebfc1fe86de2bb7f0f5066458a7c1ce68fc740e90e4aca1495d521cc72bd1c4b27e7dfe672c5263527"}, 0x48, 0xfffffffffffffffc)

01:28:49 executing program 0:
syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r2 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:49 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x2, 0x2)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000003c0)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "efcbbb0d"}, 0x0, 0x0, @planes=0x0})

01:28:49 executing program 5:
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x105a, &(0x7f0000000240)=ANY=[], 0x0)

01:28:49 executing program 4:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mISDNtimer\x00', 0x0, 0x0)
ioctl$IMDELTIMER(r0, 0x80044941, 0x0)

[  290.816437][T12809] binder: 12803:12809 ioctl c0389423 0 returned -22
01:28:49 executing program 4:
pkey_mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ced000/0x2000)=nil, 0x2000, 0xc, 0xffffffffffffffff)

01:28:49 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:49 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001280)='/dev/null\x00', 0x0, 0x0)
fcntl$setownex(r0, 0xf, &(0x7f00000012c0))

01:28:49 executing program 1:
syz_emit_ethernet(0x52, &(0x7f0000000000)={@link_local, @broadcast, @val, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0)

[  290.993368][T12853] binder: 12852:12853 ioctl c0389423 0 returned -22
01:28:49 executing program 2:
mlock(&(0x7f0000bd7000/0x2000)=nil, 0x2000)
mlock(&(0x7f0000bd4000/0x4000)=nil, 0x4000)

01:28:49 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
fsetxattr(r0, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)='/dev/nullb0\x00', 0xc, 0x0)

01:28:50 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x1, 0x0, &(0x7f0000000000)='\x00'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="c8"})

01:28:50 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000001480)=[@free_buffer], 0x0, 0x0, 0x0})

01:28:50 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

01:28:50 executing program 5:
syz_mount_image$hfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f00000035c0)='./file0\x00', 0x22000080)
inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x650000c8)

01:28:50 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:50 executing program 4:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x30, r0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="010000004000"}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0)

01:28:50 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:50 executing program 2:
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0xeedb576bbca281ab)

01:28:50 executing program 1:
pkey_mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff)
sigaltstack(&(0x7f0000add000/0x3000)=nil, 0x0)

01:28:50 executing program 5:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x1, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={[], 0x12}}}}, 0xa)

[  291.963760][T12893] binder: 12891:12893 ioctl c0389423 0 returned -22
01:28:50 executing program 4:
munmap(&(0x7f000098f000/0x3000)=nil, 0x3000)
pkey_mprotect(&(0x7f000098f000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)

01:28:50 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:51 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0)

01:28:51 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000800ff7e20d39d7e4f"], 0x24}}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

01:28:51 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x1, 0x0, &(0x7f0000000000)='\x00'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="c8"})

01:28:51 executing program 5:
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))

01:28:51 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x58, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done], 0x1, 0x0, &(0x7f0000000280)='}'})

01:28:51 executing program 5:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r0, 0x0, 0xfff9)

[  292.861663][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  292.893156][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
01:28:51 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:51 executing program 2:
add_key(&(0x7f00000000c0)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)

01:28:51 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x1d1043, 0x0)

[  292.943169][T12983] binder: 12982:12983 ioctl c0389423 0 returned -22
01:28:51 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001780)=ANY=[@ANYBLOB="033e"], 0x4)

01:28:51 executing program 5:
r0 = fanotify_init(0x0, 0x0)
fanotify_mark(r0, 0x4a, 0x10, 0xffffffffffffffff, 0x0)

01:28:51 executing program 4:
bind$rds(0xffffffffffffffff, 0x0, 0x0)

01:28:52 executing program 4:
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

01:28:52 executing program 1:
r0 = inotify_init()
inotify_add_watch(r0, 0x0, 0x1000000)

01:28:52 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:52 executing program 2:
syz_emit_ethernet(0xfc0, &(0x7f00000003c0)={@multicast, @multicast, @void, {@llc_tr={0x11, {@snap={0x0, 0x0, "0e", "76a1a9", 0x0, "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"}}}}}, 0x0)

01:28:52 executing program 5:
eventfd2(0x0, 0xa8d73311f5ef79b3)

01:28:52 executing program 3:
setreuid(0xee01, 0xee01)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x303841, 0x0)

01:28:52 executing program 5:
socketpair(0x1e, 0x0, 0x4, 0x0)

01:28:52 executing program 1:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x3, 0x6, @dev}, 0x10)
close(r0)

01:28:52 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x0, 0x0})

01:28:52 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000040)={"241c2eefbabf3b185eb6b72596446a0500948158d6cead971bbecf5c0cf6"})

01:28:52 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@can_newroute={0x164, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x42, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "3403829291e348e758026fb737e074c88ecb30fd"}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "e2b7fda5d10b7f00"}, 0x3}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "54c26d600c7c01c3"}}}]}, 0x164}}, 0x0)

01:28:52 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:52 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0))
pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x4}, &(0x7f0000000080)={0x2}, 0x0, 0x0)

[  294.054239][T13056] device lo entered promiscuous mode
[  294.095420][T13056] device lo left promiscuous mode
01:28:52 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x1)

01:28:52 executing program 4:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DESTROY(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001880)={0xec4, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ba89f9874292e4f14b466a4879becdb3221daf8974dce28fba5e5496ce3f197f33190750d879ba831fac6e93385b9525c94307b6d1293fea97703de6c1cc02de45f12868d8c14fe3effe0c5bcab1531201"}, @INET_DIAG_REQ_BYTECODE={0xb5, 0x1, "f68a1347801b28c980c0bce69ed6503978370da4ecb27c120be28178ad348c5dd801dc33ce5aabf9c9956e89c569bb4d202fccab4f0f968042da0f8453a1c03d0df34ed33df3b20b60e22a09f044b121cdfe443766fc249f0943e8eff173869eec89f53201ea2c572ea4232edca5dc952193d3401b6271733f4292c0d6d81ce31fd44f6a660ebff1c01c5f120dd67910228de55ac7b6a5afc6d7122147cb51599649798b3974940fcc1414593e04c2464c"}, @INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "ed793b5b4b4923915158c1887ea1a02a73ad48437a01154e76e60e8f48018cc1c65a270b841af859a9"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "67a1e99b6f2cc6067392f137167dce3943af08dc2e"}, @INET_DIAG_REQ_BYTECODE={0xd51, 0x1, "274544b353f3c988194f20c149df25ee10afb11b8fdd845bfcaa2e428573a23f7258e3135016c64e86a8e118ae1ab185a545e1b92fb4e7bc5ab67e1c5d982feae8885033d6624b6c6c201cf3dcaece2f48d12f9190eb3347377b5fae8adc427e024f5fb1b95d09e41b90d19dcfa524bec21ecd8909ab776968eb9ff96d7cfc8ae2efb7a9884d73d1375f759d962c0d653ad179fb79ebf69c4aba6944184abbfb085fb193eba1a06eb1a490200e0f5383773bea73aecf12329d12f6ceb0ac0848bf545f2762b6b21d972ddcaca3530c2f9a86e4e5f8908d94897dd850bf9975aecbad08c1f87602a4687141cb3700a2ab8ea6156545e6d1c3ebefb075c74c7a309ebf601e34fb4e467757bc85f96e3c13769c2226420e521d1fe88f39407cf92d3fe9286c9eaf89f3ef3505c3684eb6aaf5438223fde88704354875e3f7f40cdaed7d07309c1eb3f4182567d12f5f54aa1df532b7b18b59d580b4a0381ba62e8eeb2f7005e2ca646a55dc68112a9ce724007afc933d17350ac14f5e2c48c96fb92d4be3374456cba635133bae8feebfd79a6742596ac55b66200a9c6950a28cef9044c2bdac9ab9f5e182206568b753ffe4f85024198a8e2964e3a57a4c663ef8a6a5178f4f43f0a606dd2e594023ec4ada7f2b374346d5866c0193eb6c9513288ead94ba5e08b21a7ae3448ff66e604dc0edf5d313520d4c1ef3abb66047cdb6bfe7e51a278b336e558d3b9657094da61d18fbbc6a7d1fe098d01845049a0f668623e566a14424a19405f61e814109baf3991034f0b8a8e29ddae5fede0769ffd00dab230d9858b4cb3cbc07d42f0b89a827c1b739794d91f2cf6bb3f0934b7cf062a985aa7a147225a075e91741943f3d9d4affe366256015831eed84cddb597ce48d4daa0366bbb2a2680d47f94e14ff0e0413ec2c12265cb3309847bfd9a75fea9a19bcb531c8873cfe78171ed1d5c1bfd653a9e0e2f0714130aa41aa36554e43a90a82226faaba3580752071250016742e203ac6ac5891a5d69bd53caecf3a9229b385b7180ce5e29e2a1779fb4efa08a80da654a5fdd4e3285cd9b26a68ac7280e175b3c0bef0ae13b9c6b3ca44f1aa5b94e939bed0814c5cec425f510cfb7d3f5d731c9bb60d757dbb9810c9aaed6a08ddf62ed8ad1e6d56b5b8f7efd468fb5b09abf35d1054dfa61cfe81b2f8a5e672f00adf5b43a47bb183544e5faa480946f5b288c0c4e8af5564222ca6c1191389ec94fd98345ab5dab566106fd3286609e9af6d5a15951b47863c3b77d19dff088a3632079b0427865f0253d33c92073fa031a0202b4cc48560f89c69f69d91a14ca5158bb17c27751a1e46acbd0531c5b81d0e4b37cdd9525b4629cf36d04bd7e721b72d30f91962c93f902b524bfaab7377066de26ccc54668a951348367ceb9379e01e3817814cefcda4688b92bcc655a85f4a877ff54890142db14f61fc97996b04dd24a29629602004ab70ea0939aad7d9dfc4aeafa69c102faa2c8c26b583a449a308b8a160e950ac395857822566e6a949539163fc4d241845b0c15dcf6e5bb83f7b0300950663cc3872df8b009a7b3d4eb1d1e011098da1f57dc243c5b073d168589501f559ff31932ce5ff792a30b89e2c3a51d45bf76fcb626d399afaa25750f7ef7a19268ea53a47de482215238ee6d3d8c02f5a8e0edc7c6453be781a7f3113fbb77775f343195a5847174cc7b988b152f2118c5bb385ea5a4f30a91e436e60bbebc6d72822824c1b5e9981eb8773dfd36126a9c38ea42a61500d989f8a2cc9969d659b25633c7333d196a749aba8a57515fa640d9f79294b680f70358a50bbc8b09f8a3a4b8300930b0719bbdaae975a230b49d14504c2e4182974718432716a854b7bd9befee4beb5da3a3abc5588eb57cc77624bfb3360ff8fcbbb8ba61e36b9c0d6ff8f81f223413f45211c76302a16ba5bba2d10291c3a1fead33a0ecffe2ecd5468deaef0fb02a139cd0e8776ce12bd8e6ac8dc8197eedd6f590965bd9990078c53e744345dc84245ee0068a5d6969717a7419de02e50382df57fd28b4e8a4384a9eeb82585ab497001da441ac3501c9aa29905326de133ac4a5feee2662ca7779dca86ad516439e0167858047b027203129ff31f4b23e9cfb3f323770759c129fc96cb3731a0f03f38c0b5788d1bfd5d378f5ada05d41e3bbdd55d25cdea2f18aaba5c7e5a11202d7e81c21d941b0be6b30a82544c6af228d1e80aa8b0bcec4ad9fc9850bd908ca17ade679e3ebeecd510ed073561aa48541b59f56d0a3746991ccbd78df02654382b051226147e49d403b1dee2efbadbaa49fe4019c65377da60669efa3356e5f7c3b3ffbd7ea4cbdd83130b3a17b085458271173f172ffc0d3aa4213303bc54c318a35cf72096de2ca5999806922d379dfe2e7b6ca56c9dfbe4dfb37d6b2feab46a4331a36c5f93d1269f6c7a694b5cbc426933d91bb8aa1ccc35c6ea31e60c6464e88c28343a889fe6692df4e6ec5edc386670487f942800a94de7d1686e390c5e9ac6fb3837b35037d9132f8bef190bbe6ad3b0300591f0a150e9b3211d21e5f54586af17de778bcb2fa5b7ce8bba3f71ece27d095bf3330835569db2e5ecdeb045c8de0ad765afd97e27f9a0cb282b2ba7a8fd3ca35a12394d613b07f8529200c4fe6b83049b533895f522f6ff968ac37bc1dbd6b308842087b171eef6d39685f8969b3cd29d4820642882135ccb577bf6246942ca20a49c82f8caf0f2ebc001d8f90296e3a75f5936d882339388104fbfc292b0e06cddbb278bbb47d17258b9755ea5835fc85728f409d0b88a19beef79132fd139b4fbb0d48f677c0a842acbcae001ecd84715e5a8b65dd80e56666dcaa526b93bc7db872b9d8bbd29324ddca00c46df16accf41472d1522a19b2e8c302614857cbb5d3feffe98dbd4601ae5028497014d9f348aa683569555c96b45e328eddbbf56155652ddf61b086cd0b8c9f05e7f7b5e05d2fc55a2c09bb5a0d1d3bdd037cc016246a4b6589a900a60ece11f3619390192a19328660f25330f675de9cb56b31d460d94144f34172c140c859955f6e19abb8ea2dbfddce11ea57f90a04758291d7744b9b4e6139ffe4536e39563282e9f3192a4b859743947071af745043add7dc32b31c3c8a888cbb31662e5d611fab56f8f990a7a75237bbc57fa8e24f9fa3a28bec7ef3c279e82dd72ee3692d49c17370fbb0fa718024f069be20af730e9e681b906dcb91a2dd26e0acac1c6bc97686c751f312fb8f4c6307b580db1b37c1191aff5c498450d550672bed39274194de1fcab6a67e43791a38418dca04fab696b695090b43da1b92e54d10b5d28635f3d7e8347c4e37ae4a437281270f2a87c0852bacebd10f9a8133b97cff507ea1c383b59d44148b49bc9cbc092503baa2aa2e28a464983310a2955ee0d01aacd3fe875b24ce3dbee569e01ee02a2b1e915a3f1e53f8de3c8bfceea486eab1fbdd8f6f66bb354b13bcb2aeddee0d1068340d87ff3dfbf51c7cb47cb1862c909d630b5582054bac83f138e2fd73dbb8a197ed5f7400bf87049ba00b4ed96cbf797425a8de74a0299f2f5fed49758785cf441b3ba0785009904c351de95e4a0dbd74840b791880f4ca23e212dcc5c72a62975239300db79012b4d80a5d9fd90117bd43a85b8c67d235fcc457f85eda5cb2814fdb68c13e77268615c6d641ac87997c04e1420ad69c3930826f8faf8c598ef3fe6681c0e04ed15c7c145446ff1869f77be4f80cff05eab28354361ac5471c3485b2839f2af16a9ce81cb4f57939ddbdfb44866e1db9e4d9d4f0c7edbe9c100e3953b52a967eb47bf0f67f24c821e10efe89f4688ff29986990a2a718a57720201e9aacc44de5bc9cb70b0d14f90b0715e26ca75aefe485d733a5b5e4b87d261c3e4a6d7088d1f5541f14c82d339d24d50d77d23ee7d98fee39915535eef4140e871341cd5da197372be169fa81a7fb25d4577261fa39e00bdd4924991e7e589b73717b5a31981856548313a36e6d5c9804bd9d7b519c7ce7a57b34fef78a4ba4920174f4ed1ba53d3e33b517c242e26024b8c6332be9c26ffc3e775c4bb160187a54f0dac897950213f1bac0b55c015cb406994cc7f9b446431952f5236e983027b4131815feb4b19af317f3216dbea4440792a1d7e7a84c5399a8f0a73e06474805d91b1f7d577bf12118db034c203e621982168ce2d0ecf7387a623f2a9b1842a26d0498f9d1aca428719c209094585b786eee0d01818567779d5d50a435aaf86db2f0dd20eeae2c21b2b68e86bc0f91f096504b762893560d176bdf1db3c7c6f3b75f21b0995ed982ff0054accc0a04f3c6967e996dc1250ac13a0105e8d4a4c73731b3c10528d6f6abeea2f4ae0ef394c6362271aba7862cc0ce2d88ec329045c896eb9b567d9b9311fff58ecda531794b778edf11a311d58c2e73b684961b2b3ec6cc30ad144e9123183823faa0d00bdd00276bd5b72fdf4e2d67ded224f0b5e1124df24634ec1d17e2079f43d3b6df7a913c74cafa301fe1bcbf4982bb5bd01a7913404904b9b8b471693eff555b69b342deb2867e74eb19dd74f38c06a67e288703a2a992313ba76ce9dfa25a67c2725e63442106ef05d5c60ee3d8f081956b1e05b7d00251b7cf30fb2c83eaf25f4e8e8f2bbd3ebbabfd9c778f69524ae49afd3c933637fb485a9989ef0c9b670d7bb788ba192900809aa47874cceba4b1b7147c3a3524cd321fbb45081acb404c212615399938cd8cda636bc911ec5861044e0717c5cabb4e5af46c525df9a962"}]}, 0xec4}}, 0x0)

01:28:52 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)

01:28:52 executing program 5:
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="02", 0x1, 0xfffffffffffffffd)

01:28:52 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x729cdf1cf04761ae}}, 0x0)

01:28:52 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:53 executing program 4:
syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480))

01:28:53 executing program 3:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
read$alg(r0, &(0x7f0000000280)=""/102394, 0x18ffa)

01:28:53 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
dup3(r1, r2, 0x0)

01:28:53 executing program 2:
socket(0xa, 0x1, 0x1)

01:28:53 executing program 1:
socketpair(0x1d, 0x0, 0x66, 0x0)

01:28:53 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003a80)={'ip_vti0\x00', &(0x7f0000003d00)=ANY=[@ANYBLOB="67726500000000000000000000000000bf8ace017d77b3"]})

[  294.601753][T13136] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
01:28:53 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, 0x0, 0x0)

01:28:53 executing program 1:
munmap(&(0x7f000098f000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000974000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000061b000/0x2000)=nil)

01:28:53 executing program 4:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000011})

01:28:53 executing program 2:
syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001580)={[{@acl='acl'}]})

01:28:53 executing program 5:
pkey_mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff)

01:28:53 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, 0x0, 0x0)

01:28:53 executing program 3:
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x1000)=nil)

01:28:53 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf09, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x0)

[  295.040443][T13177] gfs2: not a GFS2 filesystem
01:28:53 executing program 4:
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @in={0x2, 0x0, @dev}, @nfc, @rc={0x1f, @none}, 0x5})

[  295.133860][T13177] gfs2: not a GFS2 filesystem
01:28:53 executing program 5:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xc, &(0x7f00000002c0)=0x3, 0x4)
socketpair(0x0, 0x1, 0xfffffff9, &(0x7f0000000000))
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
read$alg(r0, &(0x7f0000000240)=""/23, 0x17)

01:28:53 executing program 3:
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x1000)=nil)

01:28:53 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, 0x0, 0x0)

01:28:53 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6fb8c8", 0x44, 0x2f, 0x0, @local, @remote}}}}, 0x0)

01:28:53 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_getanyicast={0x14}, 0x14}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x24}}, 0x0)

01:28:53 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x58, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done], 0x0, 0x0, 0x0})

01:28:54 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x3f)
write$bt_hci(r0, 0x0, 0x9)

01:28:54 executing program 3:
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x1000)=nil)

01:28:54 executing program 4:
r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="02", 0x1, 0xfffffffffffffffd)
add_key$fscrypt_v1(&(0x7f0000000380)='logon\x00', 0x0, 0x0, 0x0, r0)

01:28:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0)

01:28:54 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:54 executing program 2:
pkey_mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff)
mlock(&(0x7f00005c1000/0x2000)=nil, 0x2000)

01:28:54 executing program 3:
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x1000)=nil)

01:28:54 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x3f)
write$bt_hci(r0, 0x0, 0x9)

01:28:54 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0)

01:28:54 executing program 1:
syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x43a004)

01:28:54 executing program 2:
prctl$PR_SET_MM(0x23, 0xe, &(0x7f0000bd5000/0x3000)=nil)

01:28:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'})

01:28:54 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:54 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x3f)
write$bt_hci(r0, 0x0, 0x9)

01:28:54 executing program 4:
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
shmget$private(0x0, 0xc000, 0x0, &(0x7f0000485000/0xc000)=nil)
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)

01:28:54 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
write(r0, 0x0, 0x0)

01:28:54 executing program 2:
madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0x8)

01:28:54 executing program 3:
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x10)

01:28:54 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x3f)
write$bt_hci(r0, 0x0, 0x9)

01:28:54 executing program 4:
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x1000)

01:28:54 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)

01:28:54 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:28:54 executing program 2:
r0 = userfaultfd(0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)

01:28:54 executing program 3:
r0 = eventfd2(0x8001, 0x0)
read$eventfd(r0, &(0x7f0000000000), 0x8)

01:28:54 executing program 5:
renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0)

[  296.310494][T13355] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
01:28:55 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000521fa7"], 0x14}}, 0x0)

01:28:55 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)

01:28:55 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000))
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0)

01:28:55 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0xfffffffe)

01:28:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1a"], 0x30}}, 0x0)

01:28:55 executing program 2:
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)

01:28:55 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6)

01:28:55 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)

01:28:55 executing program 5:
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3)

01:28:55 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000740)='ns/ipc\x00')

01:28:55 executing program 2:
clock_gettime(0xf54d277e5f32eca9, 0x0)

01:28:55 executing program 4:
add_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)

01:28:55 executing program 3:
r0 = socket(0x18, 0x0, 0x0)
getpeername$packet(r0, 0x0, &(0x7f00000000c0))

01:28:55 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)

01:28:55 executing program 5:
r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)={0x0, 0xc, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "67b03359"}, 0x0, 0x0, @fd})

01:28:55 executing program 2:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0xc0481, 0x0)
write$UHID_CREATE(r0, &(0x7f00000003c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0}}, 0x120)

01:28:55 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@can_newroute={0x40, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_FILTER={0xc}, @CGW_SRC_IF={0x8}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "e2b7fda5d10b7f00"}}}]}, 0x40}}, 0x0)

01:28:55 executing program 3:
r0 = inotify_init()
r1 = inotify_init()
syz_mount_image$gfs2(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0)
inotify_add_watch(r1, &(0x7f00000035c0)='./file0\x00', 0x22000080)
r2 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x80000000)
inotify_rm_watch(r1, r2)

01:28:55 executing program 4:
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10000, 0x0)

01:28:55 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00')
pkey_mprotect(&(0x7f0000c20000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
munmap(&(0x7f0000c20000/0x1000)=nil, 0x1000)

01:28:55 executing program 1:
syz_mount_image$gfs2(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

01:28:55 executing program 2:
pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, 0x0, 0x0, 0x0)

01:28:55 executing program 0:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2)

01:28:55 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000040))

01:28:55 executing program 1:
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
r0 = shmget$private(0x0, 0xc000, 0x0, &(0x7f0000485000/0xc000)=nil)
shmat(r0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x4000)

01:28:55 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x3f)
write$bt_hci(r0, &(0x7f0000000080)={0x1, @accept_sync_conn_req={{0x429, 0x15}, {@fixed}}}, 0x19)

01:28:55 executing program 3:
syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xffffffffffff9a79, 0x381000)

01:28:55 executing program 5:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000001740))

01:28:55 executing program 2:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x6001, 0x0)

01:28:55 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x1, 0x0, &(0x7f0000000000)='\x00'})

01:28:56 executing program 0:
syz_emit_ethernet(0x105a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb8100280086dd00000000000c0000fe8000000000000000000000000000bbfe8800000000000000000000000001014e"], 0x0)

01:28:56 executing program 4:
r0 = shmget$private(0x0, 0x800000, 0x0, &(0x7f000048d000/0x800000)=nil)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0)
shmat(r0, &(0x7f000073b000/0x1000)=nil, 0x7000)

01:28:56 executing program 1:
socket(0x22, 0x0, 0x1)

01:28:56 executing program 5:
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
fork()

[  297.413839][T13444] binder: 13443:13444 ioctl c0389423 0 returned -22
[  297.436524][T13444] binder: 13443:13444 ioctl c0306201 20000380 returned -11
[  297.454567][T13444] binder: 13443:13444 ioctl c0389423 0 returned -22
01:28:56 executing program 3:
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

01:28:56 executing program 4:
munmap(&(0x7f000098f000/0x3000)=nil, 0x3000)
clock_getres(0x0, &(0x7f0000000000))

01:28:56 executing program 0:
syz_emit_ethernet(0x68, &(0x7f0000000800)={@local, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, @multicast1, "bab945df9502e5c696ce93677a90ca57b8a176078771281a7a06df7c46d8ebe0c628ae244b9bf8d4b66a804d50323ef41018d463979c4ea89d16"}}}}}, 0x0)

01:28:56 executing program 2:
openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4002)

01:28:56 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x0)
read$alg(r0, 0x0, 0xfffffffffffffd77)

01:28:56 executing program 5:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001440)={[{@codepage={'codepage', 0x3d, 'iso8859-1'}}]})

01:28:56 executing program 3:
r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "36eb1073"}, 0x0, 0x0, @planes=0x0})

01:28:56 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000180)=0x1, 0x4)

01:28:56 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="a74e0000240000000000800300002000100200200000000000004012ab345f0e48bb97f33c127b09a443", 0x2a}], 0x1)

01:28:56 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000000))

01:28:56 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0)

[  297.817910][T13470] hfs: can't find a HFS filesystem on dev loop5
01:28:56 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffad, 0x0)

01:28:56 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000100)={@hyper})

01:28:56 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003a80)={'ip_vti0\x00', &(0x7f0000003d00)=ANY=[]})

01:28:56 executing program 0:
memfd_create(&(0x7f0000000000)='*})!,+\x00', 0x0)

01:28:56 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
write(r0, 0x0, 0x100000030)

[  297.938880][T13470] hfs: can't find a HFS filesystem on dev loop5
01:28:56 executing program 5:
add_key(&(0x7f00000000c0)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)

01:28:56 executing program 1:
sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

01:28:56 executing program 3:
r0 = add_key(&(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="a1", 0x1, 0xfffffffffffffffe)
keyctl$invalidate(0x15, r0)
request_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, r0)

01:28:56 executing program 2:
pkey_mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff)
mlock(&(0x7f0000bd0000/0x1000)=nil, 0x1000)

01:28:56 executing program 0:
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc)
sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

01:28:56 executing program 4:
syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)

01:28:56 executing program 3:
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc)
pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)

01:28:56 executing program 5:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={[{@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@umask={'umask', 0x3d, 0xfffffffffffffff9}}]})

01:28:56 executing program 1:
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
pkey_mprotect(&(0x7f0000bd4000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)

01:28:57 executing program 2:
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000002480))
munmap(&(0x7f000098f000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000974000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000061b000/0x2000)=nil)

01:28:57 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000019000100000000000045f070ef"], 0x24}}, 0x0)

01:28:57 executing program 3:
add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)

01:28:57 executing program 0:
r0 = socket(0x18, 0x0, 0x0)
getpeername$netlink(r0, 0x0, &(0x7f0000000000)=0x3b)

[  298.453909][T13519] hfs: can't find a HFS filesystem on dev loop5
01:28:57 executing program 1:
request_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0)

01:28:57 executing program 4:
r0 = socket(0x11, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000005f80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18}], 0x18}], 0x1, 0x0)

[  298.566210][T13519] hfs: can't find a HFS filesystem on dev loop5
01:28:57 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8001}]})

01:28:57 executing program 2:
syz_emit_ethernet(0x5e, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000800)={@local, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010100}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0)

01:28:57 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
fremovexattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='security./'])

01:28:57 executing program 1:
r0 = socket(0x2, 0xa, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)

01:28:57 executing program 3:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

01:28:57 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

01:28:57 executing program 4:
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
madvise(&(0x7f0000bd1000/0x4000)=nil, 0x4000, 0xc)

01:28:57 executing program 5:
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)

01:28:57 executing program 2:
syz_open_dev$audion(&(0x7f0000001680)='/dev/audio#\x00', 0xfffffffffffffffd, 0x0)

01:28:57 executing program 1:
fanotify_mark(0xffffffffffffffff, 0x4a, 0x10, 0xffffffffffffffff, 0x0)

01:28:57 executing program 0:
openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0)

01:28:57 executing program 3:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xfffffffffffffe02)

01:28:57 executing program 4:
munmap(&(0x7f000061c000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000990000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000061b000/0x2000)=nil)

01:28:57 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000034c0)={'tunl0\x00', &(0x7f0000003400)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}}}})

01:28:57 executing program 2:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)

01:28:57 executing program 1:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x2, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x14e)

01:28:57 executing program 3:
socket(0xa, 0x3, 0x1)

01:28:57 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000100)={0x0, "1b04001cd1f243beae9500000000a4d4756cf9e3e6725b01b2dbbc02de32acc46e549d869b415a497367de8a3cec4d1a60c300", 0x2c}, 0x48, 0xffffffffffffffff)
request_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='logon\x00', r0)

01:28:57 executing program 4:
r0 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x10000, 0x0)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

01:28:58 executing program 5:
r0 = socket(0x18, 0x0, 0x0)
accept4$ax25(r0, 0x0, 0x0, 0x0)

01:28:58 executing program 3:
syz_emit_ethernet(0x32, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c0895", 0x0, "02c5cd"}}}}}}, 0x0)

01:28:58 executing program 1:
shmat(0x0, &(0x7f0000bd3000/0x3000)=nil, 0xe000)
pkey_mprotect(&(0x7f0000bd3000/0x3000)=nil, 0x3000, 0xb, 0xffffffffffffffff)

01:28:58 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @loopback, {[@ssrr={0x89, 0x3}]}}}}})

01:28:58 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x0, 0x0, 0x0})

01:28:58 executing program 4:
socket$rds(0x15, 0x5, 0x0)
getrusage(0x1, &(0x7f00000000c0))

01:28:58 executing program 5:
getresgid(&(0x7f0000000600), 0x0, 0x0)

01:28:58 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]})

01:28:58 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

01:28:58 executing program 1:
pkey_mprotect(&(0x7f0000bd3000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000bd2000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)

01:28:58 executing program 0:
syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}, 0x0)

01:28:58 executing program 4:
syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@part={'part', 0x3d, 0x400000000000000}}]})

01:28:58 executing program 5:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={[{@codepage={'codepage', 0x3d, 'cp864'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'cp857'}}]})

[  299.895032][T13615] hfs: part requires an argument
01:28:58 executing program 2:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x8)

[  299.920930][T13615] hfs: unable to parse mount options
[  299.969688][T13630] hfs: unable to change codepage
01:28:58 executing program 1:
r0 = shmget$private(0x0, 0xc000, 0x0, &(0x7f0000485000/0xc000)=nil)
shmat(r0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)

01:28:58 executing program 0:
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @empty, {[@ra={0x94, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}, 0x0)

01:28:58 executing program 3:
r0 = socket(0x10, 0x2, 0x0)
accept4$ax25(r0, 0x0, 0x0, 0x0)

[  299.994557][T13615] hfs: part requires an argument
[  300.002120][T13630] hfs: unable to parse mount options
[  300.003048][T13615] hfs: unable to parse mount options
01:28:58 executing program 0:
munmap(&(0x7f000098f000/0x3000)=nil, 0x3000)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4)

01:28:58 executing program 2:
pkey_mprotect(&(0x7f00008a8000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
mremap(&(0x7f0000974000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000061b000/0x2000)=nil)

[  300.110671][T13630] hfs: unable to change codepage
[  300.123711][T13630] hfs: unable to parse mount options
01:28:58 executing program 4:
shmat(0x0, &(0x7f0000bd4000/0x2000)=nil, 0xf000)
pkey_mprotect(&(0x7f0000bd5000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff)

01:28:58 executing program 5:
madvise(&(0x7f0000a80000/0x4000)=nil, 0x4000, 0x13)

01:28:59 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
recvmmsg(r0, &(0x7f0000006dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

01:28:59 executing program 3:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="ad8fab088c708698c8433a")

01:28:59 executing program 0:
r0 = fanotify_init(0x0, 0x0)
fanotify_mark(r0, 0x4a, 0x10, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00')

01:28:59 executing program 1:
pkey_mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff)
getitimer(0x1, &(0x7f0000000000))

01:28:59 executing program 4:
pkey_mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff)
mremap(&(0x7f0000974000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000061b000/0x2000)=nil)

01:28:59 executing program 3:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001440)={[{@quiet='quiet'}, {@codepage={'codepage', 0x3d, 'iso8859-1'}}]})

01:28:59 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5}, {0x5}]})

01:28:59 executing program 0:
syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xbc, 0x101202)

01:28:59 executing program 2:
socketpair(0xa, 0x0, 0xffff0000, 0x0)

01:28:59 executing program 1:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)

01:28:59 executing program 0:
pselect6(0xd4, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0)

[  300.729800][T13675] hfs: can't find a HFS filesystem on dev loop3
01:28:59 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, 0x0)

[  300.806108][T13675] hfs: can't find a HFS filesystem on dev loop3
01:28:59 executing program 4:
open(&(0x7f0000000040)='\x00', 0x0, 0x0)

01:28:59 executing program 2:
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @empty}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}, 0x0)

01:28:59 executing program 5:
request_key(&(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0xfffffffffffffffd)

01:28:59 executing program 0:
r0 = shmget$private(0x0, 0xc000, 0x0, &(0x7f0000485000/0xc000)=nil)
shmat(r0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x4000)

01:28:59 executing program 1:
syz_emit_ethernet(0xe, &(0x7f0000000000)={@dev, @multicast, @void}, 0x0)

01:28:59 executing program 5:
socketpair(0x3, 0x0, 0x0, 0x0)

01:28:59 executing program 4:
pkey_mprotect(&(0x7f0000975000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
mremap(&(0x7f0000974000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000061b000/0x2000)=nil)

01:28:59 executing program 0:
syz_emit_ethernet(0x1a, &(0x7f0000000000)={@local, @empty, @val={@void}, {@llc={0x4, {@snap={0x0, 0x0, "e7", "e3c154"}}}}}, 0x0)

01:28:59 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0)

01:28:59 executing program 1:
shmat(0x0, &(0x7f0000bd4000/0x2000)=nil, 0xf000)

01:28:59 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000d0)

01:28:59 executing program 3:
syz_mount_image$gfs2(&(0x7f0000000100)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)={[{@meta='meta'}]})

01:28:59 executing program 4:
pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
mremap(&(0x7f0000974000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000061b000/0x2000)=nil)

01:29:00 executing program 0:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)

01:29:00 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d08, &(0x7f0000000080))

[  301.433374][T13717] gfs2: not a GFS2 filesystem
01:29:00 executing program 5:
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)

01:29:00 executing program 4:
add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:'}, &(0x7f0000000180)={0x0, "046a9c9d585f996bdc5ac02d7ce4ef0ff0fa4258b385195fe995323c6fbd2229ff40d3c6bef44695522f2e9d49c589dae78b553a4746163efb2cffeb98b67e06"}, 0x48, 0xfffffffffffffffe)
keyctl$invalidate(0x15, r0)

01:29:00 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{0x0}, {&(0x7f0000002200)=""/54, 0x36}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/192, 0xc0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000780)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/49, 0x31}, 0x9}, {{0x0, 0x0, 0x0}, 0x7}], 0x6, 0x10000, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x7ff, 0x4}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x610103, 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0xff, 0x8001, 0x3, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_config_ext={0x1, 0x10001}, 0x0, 0x1000000, 0x7fffffff, 0x8, 0x8000000000000000, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000740)='./file0\x00', 0x1c)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0)
socket$inet(0x2, 0x0, 0x9)

[  301.497613][T13717] gfs2: not a GFS2 filesystem
01:29:00 executing program 1:
syz_emit_ethernet(0xe81, &(0x7f00000003c0)={@multicast, @multicast, @void, {@llc_tr={0x11, {@snap={0x0, 0x0, "0e", "76a1a9", 0x0, "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"}}}}}, 0x0)

01:29:00 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000100))

01:29:00 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@can_newroute={0x170, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_FILTER={0xc}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "3403829291e348e758026fb737e074c88ecb30fd"}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "e2b7fda5d10b7f00"}, 0x3}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "54c26d600c7c01c3"}}}]}, 0x170}}, 0x0)

01:29:00 executing program 0:
add_key(&(0x7f0000000100)='blacklist\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)

01:29:00 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000100), 0x4)

01:29:00 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000540))

01:29:00 executing program 1:
syz_emit_ethernet(0x5a, &(0x7f0000000000)={@broadcast, @remote, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "0df06f6c65534df8c946d267399e741d0810afb38dc8ad9fc3b2cc15a30573b0773e4d6ddf6875cfa36edf8c08274eb6d7bab5a622b58845e2bdc5ee7783e29a"}}}}, 0x0)

01:29:00 executing program 5:
syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000001240)={[{@nobarrier='nobarrier'}]})

01:29:00 executing program 0:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0)
read$alg(r0, 0x0, 0x0)

01:29:00 executing program 2:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xb3aabd43ddbcb487, 0x0)

[  301.986093][T13758] gfs2: not a GFS2 filesystem
01:29:00 executing program 2:
mlock(&(0x7f0000976000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000974000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000061b000/0x2000)=nil)

01:29:00 executing program 1:
r0 = eventfd(0x0)
write$eventfd(r0, &(0x7f000000a900), 0x8)

01:29:00 executing program 3:
syz_emit_ethernet(0x9a, &(0x7f0000000000)={@dev, @empty, @val={@void}, {@ipv4={0x800, @igmp={{0x20, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @local, {[@rr={0x7, 0x23, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @private, @broadcast, @loopback, @empty, @private]}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@remote}, {@local}, {@local}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@dev}, {@remote}, {@empty}, {@loopback}, {@remote}]}]}}, {0x0, 0x0, 0x0, @remote}}}}}, 0x0)

[  302.076540][T13758] gfs2: not a GFS2 filesystem
01:29:00 executing program 2:
mlock(&(0x7f0000976000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000974000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000061b000/0x2000)=nil)

01:29:00 executing program 4:
munmap(&(0x7f0000972000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000974000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000061c000/0x1000)=nil)

01:29:00 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12120, 0x0)

01:29:00 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001780)=ANY=[@ANYBLOB="03"], 0x4)

01:29:00 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

01:29:00 executing program 0:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000740)='/dev/sequencer2\x00', 0x4140, 0x0)

01:29:00 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000180)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)

01:29:00 executing program 2:
mlock(&(0x7f0000976000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000974000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000061b000/0x2000)=nil)

01:29:01 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)

01:29:01 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@bridge_dellink={0x20, 0x11, 0xe5ad5d33d6762651}, 0x20}}, 0x0)

01:29:01 executing program 0:
syz_emit_ethernet(0xe, &(0x7f0000000280)={@multicast, @multicast, @void, {@generic={0x805}}}, 0x0)

01:29:01 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="fe"], 0x14}}, 0x0)

01:29:01 executing program 3:
syz_emit_ethernet(0x105a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb8100280086dd"], 0x0)

01:29:01 executing program 2:
mlock(&(0x7f0000976000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000974000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000061b000/0x2000)=nil)

01:29:01 executing program 1:
r0 = shmget$private(0x0, 0xc000, 0x0, &(0x7f0000485000/0xc000)=nil)
shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)

01:29:01 executing program 5:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x90000ab4)

01:29:01 executing program 3:
munmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000)

01:29:01 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xffffffffffff9a79, 0x1dd442)

01:29:01 executing program 1:
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="ff")
munmap(&(0x7f0000187000/0xc00000)=nil, 0xc00000)

01:29:01 executing program 2:
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x105a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb81"], 0x0)

01:29:01 executing program 4:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000040)='\x05\x00\x00', 0x0)
pwritev(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000)
gettid()
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_getaffinity(0x0, 0x8, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0xffffff80, 0x178, 0x178, 0x178, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x178, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x15e)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
syz_open_procfs(0x0, 0x0)

01:29:01 executing program 0:
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)

01:29:01 executing program 3:
pselect6(0x40, &(0x7f0000000000)={0x6}, 0x0, 0x0, 0x0, 0x0)

01:29:01 executing program 1:
syz_emit_ethernet(0x247, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd65bcff6b021106"], 0x0)

01:29:01 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@bridge_dellink={0x28, 0x11, 0xe5ad5d33d6762651, 0x0, 0x25dfdbfd, {}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0)

01:29:01 executing program 2:
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
madvise(&(0x7f0000bd3000/0x1000)=nil, 0x1000, 0x12)

01:29:02 executing program 2:
r0 = shmget$private(0x0, 0xc000, 0x0, &(0x7f0000485000/0xc000)=nil)
shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
r1 = shmget$private(0x0, 0xc000, 0x0, &(0x7f0000485000/0xc000)=nil)
shmat(r1, &(0x7f0000ffe000/0x1000)=nil, 0x5000)

01:29:02 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x0, 0x402)
write$bt_hci(r0, 0x0, 0xb)

01:29:02 executing program 0:
add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "1b04ae27647b6d2cba0693e525992842af2101f243beae9590314adda4d4756cf9e3e6721b01b2dbbc98de32acc46e549d869b415a497367de8a3cec4d1a60c3"}, 0x48, 0xffffffffffffffff)
r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:'}, &(0x7f0000000180)={0x0, "046a9c9d585f996bdc5ac02d7ce4ef0ff0fa4258b385195fe995323c6fbd2229ff40d3c6bef44695522f2e9d49c589dae78b553a4746163efb2cffeb98b67e06"}, 0x48, 0xfffffffffffffffe)
keyctl$invalidate(0x15, r0)

01:29:02 executing program 1:
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
sigaltstack(&(0x7f0000bd3000/0x1000)=nil, 0x0)

01:29:02 executing program 5:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DESTROY(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001880)={0x18, 0x15, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0)

01:29:02 executing program 2:
pkey_mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff)
mremap(&(0x7f0000d68000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ca3000/0x3000)=nil)

01:29:02 executing program 0:
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
mlock(&(0x7f0000bd4000/0x2000)=nil, 0x2000)
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)

01:29:02 executing program 4:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000040)='\x05\x00\x00', 0x0)
pwritev(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000)
gettid()
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_getaffinity(0x0, 0x8, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0xffffff80, 0x178, 0x178, 0x178, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x178, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x15e)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
syz_open_procfs(0x0, 0x0)

01:29:02 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000002c0), &(0x7f0000000300)=0x4)

01:29:02 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x108302, 0x0)
write$UHID_DESTROY(r0, 0x0, 0x0)

01:29:02 executing program 2:
select(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x5}, 0x0, 0x0)

01:29:02 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x6814615cac0c3641)
write(r0, &(0x7f00000000c0)="ba", 0x1)

01:29:02 executing program 0:
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
mlock(&(0x7f0000bd4000/0x2000)=nil, 0x2000)
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)

01:29:02 executing program 4:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000040)='\x05\x00\x00', 0x0)
pwritev(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000)
gettid()
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_getaffinity(0x0, 0x8, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0xffffff80, 0x178, 0x178, 0x178, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x178, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x15e)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
syz_open_procfs(0x0, 0x0)

01:29:03 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@can_newroute={0x40, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_FILTER={0xc}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "e2b7fda5d10b7f00"}}}, @CGW_SRC_IF={0x8}]}, 0x40}}, 0x0)

01:29:03 executing program 0:
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
mlock(&(0x7f0000bd4000/0x2000)=nil, 0x2000)
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)

01:29:03 executing program 5:
add_key(&(0x7f00000000c0)='logon\x00', 0x0, &(0x7f0000000080)="1f", 0x1, 0xfffffffffffffffb)

01:29:03 executing program 1:
prlimit64(0x0, 0x0, 0x0, &(0x7f0000000100))

01:29:03 executing program 3:
mlock(&(0x7f0000976000/0x2000)=nil, 0x2000)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0)
mremap(&(0x7f0000974000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000061b000/0x2000)=nil)

01:29:03 executing program 2:
syz_emit_ethernet(0x5e, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000800)={@local, @multicast, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010100}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0)

01:29:03 executing program 5:
socketpair(0x11, 0xa, 0x7, 0x0)

01:29:03 executing program 4:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000040)='\x05\x00\x00', 0x0)
pwritev(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000)
gettid()
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_getaffinity(0x0, 0x8, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0xffffff80, 0x178, 0x178, 0x178, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x178, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x15e)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
syz_open_procfs(0x0, 0x0)

01:29:03 executing program 0:
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
mlock(&(0x7f0000bd4000/0x2000)=nil, 0x2000)
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)

01:29:03 executing program 1:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

01:29:03 executing program 3:
pkey_mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff)
munmap(&(0x7f000098f000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000974000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000061b000/0x2000)=nil)

01:29:03 executing program 2:
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
r0 = shmget$private(0x0, 0xc000, 0x0, &(0x7f0000485000/0xc000)=nil)
shmat(r0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)

01:29:03 executing program 5:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044cff, &(0x7f00000000c0))

01:29:03 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0))

01:29:03 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x0)
fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0)

01:29:03 executing program 2:
open(&(0x7f0000000140)='./file0\x00', 0x540, 0x0)

01:29:03 executing program 4:
request_key(&(0x7f0000000200)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffffc)

01:29:03 executing program 3:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x5})

01:29:03 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0)
ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000080)='`')

01:29:03 executing program 5:
r0 = shmget$private(0x0, 0xc000, 0x0, &(0x7f0000485000/0xc000)=nil)
shmat(r0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
mlock(&(0x7f0000bd7000/0x2000)=nil, 0x2000)
mlock(&(0x7f0000bd4000/0x4000)=nil, 0x4000)

01:29:03 executing program 3:
modify_ldt$write(0x1, &(0x7f0000000000)={0xc38}, 0x10)

01:29:04 executing program 1:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @rc={0x1f, @any, 0x2b}, @phonet, @can})

01:29:04 executing program 2:
mknodat$loop(0xffffffffffffffff, 0x0, 0x44c0, 0x1)

01:29:04 executing program 4:
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
shmat(0x0, &(0x7f000048a000/0x3000)=nil, 0x5000)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)

01:29:04 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003a80)={'ip_vti0\x00', &(0x7f0000003d00)=ANY=[@ANYBLOB="67726500000000000000000000000000bf8ace017d77b3b30cc03b9d4221cbc610e7567fc8327b400832c9111c"]})

01:29:04 executing program 3:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)

01:29:04 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
getsockopt$ax25_int(r0, 0x101, 0x0, 0x0, 0x0)

01:29:04 executing program 5:
syz_emit_ethernet(0xd7, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000e0000000000008100000008004d"], 0x0)

01:29:04 executing program 3:
syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'cp950'}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]})

01:29:04 executing program 2:
syz_mount_image$hfs(&(0x7f0000000580)='hfs\x00', &(0x7f00000005c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000b40)=[{0x0, 0x0, 0x8000}], 0x0, &(0x7f0000000c00))

01:29:04 executing program 0:
r0 = open(&(0x7f0000000240)='./file0\x00', 0x102e0, 0x0)
fcntl$setsig(r0, 0xa, 0x11)
fcntl$setlease(r0, 0x400, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
truncate(&(0x7f0000000100)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x2)

01:29:04 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
write(r0, 0x0, 0x0)

01:29:04 executing program 1:
pkey_mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000c97000/0x4000)=nil, 0x6000)

01:29:04 executing program 5:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x80000001}, 0x8)

01:29:04 executing program 1:
fork()
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  305.994459][T13965] loop2: detected capacity change from 0 to 128
01:29:04 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000001740))

01:29:04 executing program 5:
r0 = socket(0x18, 0x0, 0x0)
getpeername$packet(r0, 0x0, 0x0)

[  306.063798][T13965] hfs: can't find a HFS filesystem on dev loop2
[  306.080657][T13973] jfs: Unrecognized mount option "rootcontext=system_u" or missing value
01:29:04 executing program 0:
syz_mount_image$gfs2(&(0x7f00000039c0)='gfs2\x00', &(0x7f0000003a00)='./file0\x00', 0x0, 0x0, &(0x7f0000004ec0), 0x0, &(0x7f0000004fc0)={[{@commit={'commit'}}]})

[  306.145711][T13965] loop2: detected capacity change from 0 to 128
[  306.175232][T13965] hfs: can't find a HFS filesystem on dev loop2
01:29:04 executing program 4:
renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00')

[  306.197984][T13973] jfs: Unrecognized mount option "rootcontext=system_u" or missing value
01:29:04 executing program 5:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="747970653d642f3cb32c756d61736b3d30303030303030303030303030303030303030303030312c6769643d", @ANYRESHEX])

[  306.313386][T13994] hfs: invalid gid -1
[  306.327069][T13994] hfs: unable to parse mount options
01:29:05 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x0, 0x402)
write$bt_hci(r0, &(0x7f00000005c0)=ANY=[], 0xb)

01:29:05 executing program 2:
statx(0xffffffffffffffff, 0x0, 0x7c00, 0x0, 0x0)

01:29:05 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[], 0x14}}, 0x0)

[  306.413405][T14001] gfs2: commit mount option requires a positive numeric argument
01:29:05 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x35)
write$bt_hci(r0, &(0x7f0000000040)={0x1, @logical_link_cancel={{0x43b, 0x2}}}, 0x6)

01:29:05 executing program 3:
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)

[  306.512104][T14001] gfs2: commit mount option requires a positive numeric argument
01:29:05 executing program 2:
syz_open_dev$audion(&(0x7f00000052c0)='/dev/audio#\x00', 0x0, 0xc202)

01:29:05 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000000))

01:29:05 executing program 4:
add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "1b04ae27647b6d2cba0693e525992842af2101f243beae9590314adda4d4756cf9e3e6721b01b2dbbc98de32acc46e549d869b415a497367de8a3cec4d1a60c3"}, 0x48, 0xffffffffffffffff)
request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0)

01:29:05 executing program 3:
r0 = socket$l2tp(0x2, 0x2, 0x73)
recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

01:29:05 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ae88bff8241000005a90f57f07703aeff0f64ecace9509fef634f941b46b7bd5e0bbee07962c22772e11b44e2ac8bb8c43b460e4", 0x34}, {&(0x7f0000000040)="a74e0000240000000000800300002000100200200000000000004012ab345f0e48bb97f33c127b09a443", 0x2a}], 0x2)

01:29:05 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "b191f34a7cbca63d"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "3403829291e348e758026fb737e074c88ecb30fd"}}]}, 0x14c}}, 0x0)

01:29:05 executing program 2:
shmget$private(0x0, 0x3000, 0x800, &(0x7f000061b000/0x3000)=nil)

01:29:05 executing program 4:
madvise(&(0x7f0000a82000/0x3000)=nil, 0x3000, 0x3)

01:29:05 executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockopt$ax25_int(r0, 0x101, 0x0, 0x0, 0x0)

01:29:05 executing program 5:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0)
read$alg(r0, 0x0, 0x0)

01:29:05 executing program 2:
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x6814615cac0c3641)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)

01:29:05 executing program 1:
syz_emit_ethernet(0xd7, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000e0000000000008100000008"], 0x0)

01:29:06 executing program 4:
syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000031c0), 0x0, &(0x7f0000003240)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0x1ff0000000}}]})

01:29:06 executing program 0:
syz_emit_ethernet(0x46, &(0x7f0000000280)={@local, @random="0b6c93232d63", @void, {@mpls_mc={0x8848, {[], @ipv6=@dccp_packet={0x0, 0x6, "e01f72", 0x10, 0x21, 0x0, @local, @dev, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e05a33", 0x0, "f6e69a"}}}}}}}}, 0x0)

[  307.406523][T14053] dlm: non-version read from control device 0
01:29:06 executing program 2:
add_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)

[  307.535518][T14058] gfs2: Bad value for 'statfs_quantum'
[  307.601648][T14058] gfs2: Bad value for 'statfs_quantum'
01:29:06 executing program 3:
madvise(&(0x7f0000a82000/0x2000)=nil, 0x2000, 0xf)
madvise(&(0x7f0000a84000/0x1000)=nil, 0x1000, 0x0)

01:29:06 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0)
fsetxattr(r0, &(0x7f0000000180)=@known='system.posix_acl_default\x00', &(0x7f00000001c0)='\x00', 0x1, 0x0)

01:29:06 executing program 1:
r0 = shmget$private(0x0, 0xc000, 0x0, &(0x7f0000485000/0xc000)=nil)
shmat(r0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000)

01:29:06 executing program 2:
munmap(&(0x7f000098f000/0x3000)=nil, 0x3000)
sigaltstack(&(0x7f0000ffd000/0x1000)=nil, 0x0)

01:29:06 executing program 0:
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000641000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000424000/0x2000)=nil)

01:29:06 executing program 4:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x1a1201, 0x0)
read$sequencer(r0, 0x0, 0x0)

01:29:06 executing program 1:
pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x3}, &(0x7f0000000380), 0x0)

01:29:06 executing program 0:
mremap(&(0x7f0000d2b000/0x4000)=nil, 0x4000, 0x14000, 0x3, &(0x7f00007bf000/0x14000)=nil)
mremap(&(0x7f0000a1b000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)

01:29:06 executing program 4:
r0 = shmget$private(0x0, 0xc000, 0x0, &(0x7f0000485000/0xc000)=nil)
shmat(r0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
shmat(r0, &(0x7f000061b000/0x2000)=nil, 0x4000)

01:29:06 executing program 2:
pkey_mprotect(&(0x7f0000a83000/0x4000)=nil, 0x4000, 0x4000003, 0xffffffffffffffff)

01:29:06 executing program 5:
syz_emit_ethernet(0x2e, &(0x7f0000000800)={@local, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0)

01:29:06 executing program 3:
shmat(0x0, &(0x7f0000bd4000/0x2000)=nil, 0xf000)
shmat(0x0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)

01:29:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x24}}, 0x0)

01:29:06 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000100)={{0x0}, 0x0}, 0x20)

01:29:07 executing program 1:
add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0xfffffffffffffffd)

01:29:07 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x28, 0x0, &(0x7f0000000280)=[@acquire={0x40046305, 0x3}, @register_looper, @exit_looper, @request_death, @decrefs], 0x1, 0x0, &(0x7f0000000340)="9b"})

01:29:07 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000080)='`')

01:29:07 executing program 0:
syz_emit_ethernet(0x105a, &(0x7f0000000240)=ANY=[], 0x0)

01:29:07 executing program 2:
fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x0)
mremap(&(0x7f0000974000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000061b000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
r0 = shmget$private(0x0, 0xc000, 0x0, &(0x7f0000485000/0xc000)=nil)
shmat(r0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)

01:29:07 executing program 4:
shmget$private(0x0, 0x1000, 0x30d4887b3583808, &(0x7f0000a3a000/0x1000)=nil)

01:29:07 executing program 1:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={[{@codepage={'codepage', 0x3d, 'cp864'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@umask={'umask', 0x3d, 0xfffffffffffffff9}}, {@codepage={'codepage', 0x3d, 'cp857'}}]})

01:29:07 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mISDNtimer\x00', 0x0, 0x0)
ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100))

01:29:07 executing program 3:
shmat(0x0, &(0x7f0000bd4000/0x2000)=nil, 0xf000)
pkey_mprotect(&(0x7f0000bd3000/0x3000)=nil, 0x3000, 0xb, 0xffffffffffffffff)

01:29:07 executing program 5:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x1, 0x0)
write$bt_hci(r0, 0x0, 0x0)

01:29:07 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@can_newroute={0x14, 0x18, 0x1}, 0x14}}, 0x0)

01:29:07 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003a80)={'ip_vti0\x00', &(0x7f0000003d00)=ANY=[@ANYBLOB="67726500000000000000000000000000bf8ace017d77b3b30cc03b9d4221cbc610e7567fc8327b400832c9111cc2958d13"]})

[  308.672004][T14120] hfs: unable to change codepage
[  308.689439][T14120] hfs: unable to parse mount options
01:29:07 executing program 4:
prlimit64(0x0, 0x8, &(0x7f00000000c0), 0x0)

01:29:07 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001280)='/dev/null\x00', 0x0, 0x0)
fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000040)='\x00', 0x1, 0x0)

01:29:07 executing program 0:
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
r0 = shmget$private(0x0, 0xc000, 0x0, &(0x7f0000485000/0xc000)=nil)
shmat(r0, &(0x7f0000bd2000/0x3000)=nil, 0x6000)
shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)

[  308.809581][T14120] hfs: unable to change codepage
[  308.815770][T14120] hfs: unable to parse mount options
01:29:07 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000200)={0xfffffffffffffffe, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0)

01:29:07 executing program 3:
syz_mount_image$gfs2(&(0x7f00000039c0)='gfs2\x00', &(0x7f0000003a00)='./file0\x00', 0x0, 0x0, &(0x7f0000004ec0), 0x0, &(0x7f0000004fc0)={[{@commit={'commit', 0x3d, 0x1}}]})

01:29:07 executing program 1:
syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x2, 0x301)

01:29:07 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x64, 0x0, &(0x7f0000000280)=[@register_looper, @exit_looper, @request_death, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000340)="9b327d9c"})

01:29:07 executing program 4:
syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x241)

[  308.990741][T14147] gfs2: not a GFS2 filesystem
01:29:07 executing program 0:
socketpair(0x1d, 0x0, 0x0, 0x0)

[  309.052660][T14147] gfs2: not a GFS2 filesystem
01:29:07 executing program 2:
r0 = open(&(0x7f0000000240)='./file0\x00', 0x102e0, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
lchown(&(0x7f0000000040)='./file0\x00', r1, 0x0)
fcntl$setlease(r0, 0x400, 0x0)

01:29:07 executing program 3:
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @empty, {[@ra={0x94, 0x4, 0x1}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}, 0x0)

01:29:07 executing program 4:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001880)={0x2020}, 0x2020)

01:29:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={0x0}}, 0x20000001)

01:29:07 executing program 5:
socketpair(0x29, 0x2, 0x0, 0x0)

01:29:07 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'erspan0\x00', 0x0})

01:29:07 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'})

01:29:08 executing program 1:
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x6000, 0x0)

01:29:08 executing program 2:
r0 = shmget$private(0x0, 0xc000, 0x0, &(0x7f0000485000/0xc000)=nil)
shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3)

01:29:08 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)

01:29:08 executing program 4:
fchownat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee01, 0x0)

01:29:08 executing program 0:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101201, 0x0)

01:29:08 executing program 1:
syz_emit_ethernet(0x38, &(0x7f0000000800)={@local, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x26}, {0x0, 0x0, 0x0, @multicast1, "bab945df9502e5c696ce"}}}}}, 0x0)

01:29:08 executing program 2:
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x3, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x4c], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10)

01:29:08 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f00000000c0)={0x1, @remote_name_req={{0x419, 0xa}, {@none}}}, 0xe)

01:29:08 executing program 4:
clock_gettime(0x0, &(0x7f0000000000))
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

01:29:08 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0})

01:29:08 executing program 0:
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x12)

01:29:08 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0})

01:29:08 executing program 4:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x4, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [0x4c], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

01:29:08 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f00000000c0)={0x1, @remote_name_req={{0x419, 0xa}, {@none}}}, 0xe)

01:29:08 executing program 2:
r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x202082)
bind$bt_sco(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, @none}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0}}, 0x4801)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', r0)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00', 0xffffffffffffffff)
r4 = accept(r0, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000003c0)=0x80)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000940)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000426bd7000fcdbdf250a00000005003500a100000008000600", @ANYRES32=0x0, @ANYBLOB="08002c0000000000050029000100000008000300", @ANYRES32=0x0, @ANYBLOB="d9cb0017a91d738c8862d823fa58fc82f1bba72275d90b6ef59ed9bad530fa0e6b9901ecc684c3d3c8d580ce8f429db9665d825ef5800be63f3d66e0b3d10eb8565441bffc2d4f1cb4ebfb9aca8507a787aee57ce552003a5a3471582af28d09c9de46cc5f794bbcc73aae7918f09082d1c4b646086d4674f9cf93a0b1256a50c6e82acb4b80e0fd41aed180ee73a71ee08f52f8ac5f5f7124cc668f6d24745007d26db35965d1"], 0x3c}, 0x1, 0x0, 0x0, 0x40011}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x24000001)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0)='batadv\x00', 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000240)={0x60, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0xfffffffffffffde8, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40010)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000600)={<r8=>0xffffffffffffffff})
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48015}, 0x0)
ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback=0x7f000014, 0x80}, @hci={0x1f, 0xffffffffffffffff}, @isdn={0x22, 0x0, 0x3, 0x8, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)='veth1\x00', 0x3, 0x0, 0x2})

[  309.791969][T14203] binder: 14199:14203 unknown command 0
[  309.799934][T14203] binder: 14199:14203 ioctl c0306201 20000600 returned -22
01:29:08 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x7, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0x38}}, 0x0)

01:29:08 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x9}, 0x0)
sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

[  309.847601][T14207] binder: 14206:14207 ioctl c0306201 20000140 returned -14
01:29:08 executing program 1:
r0 = socket(0x11, 0x800000003, 0x8)
bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3cd001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001400)=ANY=[], 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

01:29:08 executing program 4:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x4, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [0x4c], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

01:29:08 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f00000000c0)={0x1, @remote_name_req={{0x419, 0xa}, {@none}}}, 0xe)

01:29:08 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @dev}, @l2tp={0x2, 0x0, @local}, @hci, 0x4})

01:29:08 executing program 0:
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000440)="1c0000001a009b8a140900070009042400000000ec9c488dc88d3831", 0x1c)

01:29:08 executing program 4:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x4, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [0x4c], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

01:29:08 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f00000000c0)={0x1, @remote_name_req={{0x419, 0xa}, {@none}}}, 0xe)

01:29:08 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)

01:29:08 executing program 4:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x4, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [0x4c], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

01:29:08 executing program 0:
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000440)="1c0000001a009b8a140900070009042400000000ec9c488dc88d3831", 0x1c)

01:29:09 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)

01:29:09 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x202082)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00', 0xffffffffffffffff)
r2 = accept(r0, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000003c0)=0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x24000001)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r1, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40010)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @dev}, @nfc={0x27, 0x0, 0x2}, @isdn={0x22, 0x0, 0x3, 0x8, 0x7}, 0x104, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='veth1\x00', 0x0, 0x0, 0x2})

01:29:09 executing program 1:
syz_emit_ethernet(0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa2dd9c2ba12bb86dd608b309300092c00fe240000000000000000a4e567fd000700000000000000000000003570cc776e3f61c1"], 0x0)

01:29:09 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @dev}, @l2tp={0x8, 0x0, @multicast1}, @hci, 0x104})

01:29:09 executing program 0:
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000440)="1c0000001a009b8a140900070009042400000000ec9c488dc88d3831", 0x1c)

01:29:09 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8916, &(0x7f0000000780)={'ip6tnl0\x00', 0x0})

01:29:09 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)

01:29:09 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, 0x0)

01:29:09 executing program 2:
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsu\x00', 0x0, 0x0)
select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x9}, 0x0)

01:29:09 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xb, 0x0, 0x6, 0x2}, 0x10}}, 0x0)

01:29:09 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

01:29:09 executing program 0:
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000440)="1c0000001a009b8a140900070009042400000000ec9c488dc88d3831", 0x1c)

01:29:09 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="97")

01:29:09 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)

01:29:09 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/151, 0x97}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f00000003c0), 0xc0000}], 0x3)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0)

01:29:09 executing program 4:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0)

01:29:09 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x48}}, 0x0)

01:29:10 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8906, 0x0)

01:29:10 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @broadcast}, @l2tp={0x2, 0x0, @remote}, @isdn, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='veth0_to_batadv\x00'})

01:29:10 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {0x4}, {0x6}]})

01:29:10 executing program 5:
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0)

01:29:10 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local, @in6=@rand_addr=' \x01\x00'}}]}, 0x50}}, 0x0)

01:29:10 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000700)={0x7}, 0x40)

01:29:10 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/151, 0x97}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f00000003c0), 0xc0000}], 0x3)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0)

[  311.590770][   T37] audit: type=1326 audit(1614389350.218:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14305 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x465ef9 code=0x0
01:29:10 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)

01:29:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/151, 0x97}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f00000003c0), 0xc0000}], 0x3)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0)

[  311.725148][ T1774] Bluetooth: hci0: command 0x0419 tx timeout
01:29:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/151, 0x97}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f00000003c0), 0xc0000}], 0x3)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0)

01:29:10 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local, @in6=@rand_addr=' \x01\x00'}}]}, 0x50}}, 0x0)

01:29:10 executing program 3:
r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x202082)
bind$bt_sco(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, @none}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0}}, 0x4801)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', r0)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00', 0xffffffffffffffff)
r4 = accept(r0, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000003c0)=0x80)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000940)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000426bd7000fcdbdf250a00000005003500a100000008000600", @ANYRES32=0x0, @ANYBLOB="08002c0000000000050029000100000008000300", @ANYRES32=0x0, @ANYBLOB="d9cb0017a91d738c8862d823fa58fc82f1bba72275d90b6ef59ed9bad530fa0e6b9901ecc684c3d3c8d580ce8f429db9665d825ef5800be63f3d66e0b3d10eb8565441bffc2d4f1cb4ebfb9aca8507a787aee57ce552003a5a3471582af28d09c9de46cc5f794bbcc73aae7918f09082d1c4b646086d4674f9cf93a0b1256a50c6e82acb4b80e0fd41aed180ee73a71ee08f52f8ac5f5f7124cc668f6d24745007d26db35965d1"], 0x3c}, 0x1, 0x0, 0x0, 0x40011}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x24000001)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0)='batadv\x00', 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000240)={0x60, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0xfffffffffffffde8, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40010)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000600)={<r8=>0xffffffffffffffff})
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48015}, 0x0)
ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback=0x7f000006, 0x80}, @hci={0x1f, 0xffffffffffffffff}, @isdn={0x22, 0x0, 0x3, 0x8, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)='veth1\x00', 0x3, 0x0, 0x2})

[  312.025047][ T1774] usb 6-1: new high-speed USB device number 3 using dummy_hcd
01:29:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/151, 0x97}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f00000003c0), 0xc0000}], 0x3)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0)

01:29:10 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local, @in6=@rand_addr=' \x01\x00'}}]}, 0x50}}, 0x0)

01:29:10 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/151, 0x97}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f00000003c0), 0xc0000}], 0x3)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0)

[  312.284601][ T1774] usb 6-1: Using ep0 maxpacket: 32
[  312.410538][ T1774] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  312.615005][ T1774] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  312.626156][ T1774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.634537][ T1774] usb 6-1: Product: syz
[  312.638840][ T1774] usb 6-1: Manufacturer: syz
[  312.643561][ T1774] usb 6-1: SerialNumber: syz
[  312.925377][ T9733] usb 6-1: USB disconnect, device number 3
[  313.695604][ T9752] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  313.794180][ T9733] Bluetooth: hci0: command 0x0419 tx timeout
[  313.954444][ T9752] usb 6-1: Using ep0 maxpacket: 32
[  314.084338][ T9752] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  314.294859][ T9752] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  314.308609][ T9752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.317673][ T9752] usb 6-1: Product: syz
[  314.322199][ T9752] usb 6-1: Manufacturer: syz
[  314.328078][ T9752] usb 6-1: SerialNumber: syz
01:29:13 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8903, &(0x7f0000000780)={'ip6tnl0\x00', 0x0})

01:29:13 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/151, 0x97}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f00000003c0), 0xc0000}], 0x3)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0)

01:29:13 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local, @in6=@rand_addr=' \x01\x00'}}]}, 0x50}}, 0x0)

01:29:13 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @dev}, @l2tp={0x8, 0x0, @multicast1}, @hci, 0x4})

01:29:13 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/151, 0x97}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f00000003c0), 0xc0000}], 0x3)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0)

01:29:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/151, 0x97}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f00000003c0), 0xc0000}], 0x3)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0)

[  314.594608][ T3884] usb 6-1: USB disconnect, device number 4
01:29:13 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00', r0)

01:29:13 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0x2, 0x0, 0x0, @private0}}]}, 0x38}}, 0x0)

01:29:13 executing program 5:
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000002540)=ANY=[@ANYBLOB="613b23fa730f82adea97a303fe2f6ae894e73533f5f857a3ee1cb75038784b2e60a4733d46"])

01:29:13 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="977a0baa33000004ac412745581b0c13322e23605653ed4baf39a7e5f63f652f")

01:29:13 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/151, 0x97}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f00000003c0), 0xc0000}], 0x3)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0)

01:29:13 executing program 4:
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6a4c7160d1899118}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e304c3d7f05000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006ee57464657673696d3000800d0087006c325f64726f707300000000"], 0xcc}}, 0x44000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002bc0)={0x0, 0xfffffffffffffd92}}, 0x4801)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000340)=@get={0x1, &(0x7f0000000180)=""/105, 0xfc2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7fff, 0x280)
openat$cgroup_freezer_state(r2, &(0x7f0000000140)='freezer.state\x00', 0x2, 0x0)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010100}, @l2tp={0x2, 0x0, @remote}, @hci, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

01:29:13 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)

01:29:13 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0)

[  315.037809][T14404] fuse: Unknown parameter 'a;#ús‚­ê—£þ/jè”ç53õøW£î·P8xK.`¤s'
[  315.062692][T14409] fuse: Unknown parameter 'a;#ús‚­ê—£þ/jè”ç53õøW£î·P8xK.`¤s'
01:29:13 executing program 2:
timer_create(0x1, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000000200))
timer_gettime(0x0, &(0x7f0000000240))

01:29:13 executing program 1:
socket$key(0xf, 0x3, 0x2)
select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0xea60})

01:29:13 executing program 3:
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000100505a8a440000102030109022400010100000009fcff210207010000090501020000077f0409"], 0x0)

01:29:13 executing program 4:
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@ptr, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x5c}, 0x20)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

01:29:13 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$sock(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2004c014)

01:29:13 executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080))

[  315.301492][T14427] ptrace attach of "/root/syz-executor.4"[14422] was attempted by "/root/syz-executor.4"[14427]
01:29:14 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0)

01:29:14 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0xea60})

01:29:14 executing program 1:
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28}, 0x20)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

01:29:14 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8912, &(0x7f0000000780)={'ip6tnl0\x00', 0x0})

01:29:14 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x80000000}, 0x8)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x2, <r1=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r1, 0x8, 0x10}, 0xc)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, @ax25={0x3, @default, 0x6}, @hci={0x1f, 0x0, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='syz_tun\x00'})

01:29:14 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8904, &(0x7f0000000780)={'ip6tnl0\x00', 0x0})

01:29:14 executing program 4:
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000006c0)=@lang_id={0x4}}, {0x0, 0x0}]})

[  315.504931][T14443] ptrace attach of "/root/syz-executor.1"[14442] was attempted by "/root/syz-executor.1"[14443]
01:29:14 executing program 2:
r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x202082)
bind$bt_sco(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, @none}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0}}, 0x4801)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', r0)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00', 0xffffffffffffffff)
r4 = accept(r0, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000003c0)=0x80)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000940)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000426bd7000fcdbdf250a00000005003500a100000008000600", @ANYRES32=0x0, @ANYBLOB="08002c0000000000050029000100000008000300", @ANYRES32=0x0, @ANYBLOB="d9cb0017a91d738c8862d823fa58fc82f1bba72275d90b6ef59ed9bad530fa0e6b9901ecc684c3d3c8d580ce8f429db9665d825ef5800be63f3d66e0b3d10eb8565441bffc2d4f1cb4ebfb9aca8507a787aee57ce552003a5a3471582af28d09c9de46cc5f794bbcc73aae7918f09082d1c4b646086d4674f9cf93a0b1256a50c6e82acb4b80e0fd41aed180ee73a71ee08f52f8ac5f5f7124cc668f6d24745007d26db35965d1"], 0x3c}, 0x1, 0x0, 0x0, 0x40011}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x24000001)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0)='batadv\x00', 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000240)={0x60, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0xfffffffffffffde8, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40010)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000600)={<r8=>0xffffffffffffffff})
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48015}, 0x0)
ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback=0x7f004100, 0x80}, @hci={0x1f, 0xffffffffffffffff}, @isdn={0x22, 0x0, 0x3, 0x8, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)='veth1\x00', 0x3, 0x0, 0x2})

[  315.614094][ T9733] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  315.863971][ T9733] usb 4-1: Using ep0 maxpacket: 16
[  315.875030][ T3884] Bluetooth: hci0: command 0x0419 tx timeout
[  315.954145][ T1774] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  315.985643][ T9733] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  316.154158][ T9733] usb 4-1: New USB device found, idVendor=0505, idProduct=a4a8, bcdDevice= 0.40
[  316.182854][ T9733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.193287][ T9733] usb 4-1: Product: syz
[  316.207244][ T9733] usb 4-1: Manufacturer: syz
[  316.211990][ T9733] usb 4-1: SerialNumber: syz
[  316.354587][ T1774] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  316.474140][ T9733] usb 4-1: USB disconnect, device number 2
[  316.724119][ T1774] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  316.733200][ T1774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.747454][ T1774] usb 5-1: Product: syz
[  316.752161][ T1774] usb 5-1: SerialNumber: syz
[  316.836594][ T3266] ieee802154 phy0 wpan0: encryption failed: -22
[  316.842964][ T3266] ieee802154 phy1 wpan1: encryption failed: -22
[  317.010767][ T9733] usb 5-1: USB disconnect, device number 2
[  317.266150][   T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  317.523844][   T19] usb 4-1: Using ep0 maxpacket: 16
[  317.673983][   T19] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  317.783913][ T9752] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  317.854044][   T19] usb 4-1: New USB device found, idVendor=0505, idProduct=a4a8, bcdDevice= 0.40
[  317.863288][   T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.872652][   T19] usb 4-1: Product: syz
[  317.877498][   T19] usb 4-1: Manufacturer: syz
[  317.882113][   T19] usb 4-1: SerialNumber: syz
[  317.954147][ T9733] Bluetooth: hci0: command 0x0419 tx timeout
01:29:16 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

01:29:16 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @dev}, @l2tp={0x2, 0x0, @multicast1}, @hci, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='syz_tun\x00'})

01:29:16 executing program 0:
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='binder\x00', 0x0, &(0x7f00000003c0)='fuse\x00')

01:29:16 executing program 1:
socket(0x2, 0x6, 0x7045)

01:29:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)

[  318.149153][   T19] usb 4-1: USB disconnect, device number 3
[  318.183894][ T9752] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
01:29:16 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xc}, {0x5}, {}, {0x0, 0x3}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xc}]}]}}, &(0x7f0000000300)=""/214, 0x5a, 0xd6, 0x1}, 0x20)

01:29:16 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xc}, {0x5}, {}, {0x0, 0x3}]}, @enum]}}, &(0x7f0000000300)=""/214, 0x52, 0xd6, 0x1}, 0x20)

01:29:17 executing program 3:
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsu\x00', 0x288800, 0x0)
select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x9}, &(0x7f0000000140))

01:29:17 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @dev}, @l2tp={0x2, 0x0, @private=0xa010100}, @hci, 0x4})

01:29:17 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
write(r0, 0x0, 0xfffffff4)
write(r0, 0x0, 0x0)

01:29:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)

01:29:17 executing program 1:
syz_emit_ethernet(0x247, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd65bcff6b02"], 0x0)

01:29:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)

01:29:17 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0x40049409, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "290d9f43"}, 0x0, 0x0, @planes=0x0})

01:29:17 executing program 0:
prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x1ff, 0x61b}, &(0x7f0000000100))

01:29:17 executing program 5:
io_setup(0x1, &(0x7f0000000440)=<r0=>0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

[  318.703889][ T9752] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  318.712993][ T9752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.782275][ T9752] usb 5-1: Product: syz
01:29:17 executing program 1:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0)

[  318.864046][ T9752] usb 5-1: can't set config #1, error -71
01:29:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)

01:29:17 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, 0x0, 0x0)

[  318.916270][ T9752] usb 5-1: USB disconnect, device number 3
01:29:17 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:29:17 executing program 4:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:29:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)

01:29:17 executing program 1:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:29:18 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:29:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)

01:29:18 executing program 4:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:29:18 executing program 5:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:29:18 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:29:18 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:29:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)

01:29:18 executing program 4:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

[  320.035839][ T9752] Bluetooth: hci0: command 0x0419 tx timeout
01:29:18 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

01:29:19 executing program 0 (fault-call:4 fault-nth:0):
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:29:19 executing program 4 (fault-call:3 fault-nth:0):
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

[  320.726906][T14765] FAULT_INJECTION: forcing a failure.
[  320.726906][T14765] name failslab, interval 1, probability 0, space 0, times 1
[  320.793784][T14768] FAULT_INJECTION: forcing a failure.
[  320.793784][T14768] name failslab, interval 1, probability 0, space 0, times 1
[  320.817994][T14765] CPU: 1 PID: 14765 Comm: syz-executor.0 Not tainted 5.11.0-next-20210226-syzkaller #0
[  320.827859][T14765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  320.837957][T14765] Call Trace:
[  320.841248][T14765]  dump_stack+0xfa/0x151
[  320.845622][T14765]  should_fail.cold+0x5/0xa
[  320.850147][T14765]  should_failslab+0x5/0x10
[  320.854764][T14765]  kmem_cache_alloc_bulk+0x4b/0x380
[  320.860034][T14765]  io_submit_sqes+0x1355/0x63d0
[  320.864976][T14765]  ? __do_sys_io_uring_enter+0x1173/0x2280
[  320.870807][T14765]  __do_sys_io_uring_enter+0x1173/0x2280
[  320.876477][T14765]  ? lock_release+0x3bb/0x710
[  320.881243][T14765]  ? ksys_write+0x12d/0x250
[  320.885851][T14765]  ? io_sq_thread+0x1ae0/0x1ae0
[  320.890723][T14765]  ? __mutex_unlock_slowpath+0xe2/0x610
[  320.896343][T14765]  ? lock_is_held_type+0xd5/0x130
[  320.901413][T14765]  ? wait_for_completion_io+0x270/0x270
[  320.906983][T14765]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  320.913335][T14765]  ? vfs_write+0x18e/0xa30
[  320.917946][T14765]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[  320.924391][T14765]  ? fput+0x2a/0x50
[  320.928232][T14765]  ? syscall_enter_from_user_mode+0x1d/0x50
[  320.934163][T14765]  do_syscall_64+0x2d/0x70
[  320.938699][T14765]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  320.944820][T14765] RIP: 0033:0x465ef9
[  320.949126][T14765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  320.969827][T14765] RSP: 002b:00007fe7fb399188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  320.979057][T14765] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9
[  320.987143][T14765] RDX: 0000000000000000 RSI: 000000000000450c RDI: 0000000000000003
[  320.995135][T14765] RBP: 00007fe7fb3991d0 R08: 0000000000000000 R09: 0000000000000700
[  321.003556][T14765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.011749][T14765] R13: 00007ffc39058c9f R14: 00007fe7fb399300 R15: 0000000000022000
01:29:19 executing program 1 (fault-call:3 fault-nth:0):
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

[  321.130914][T14768] CPU: 1 PID: 14768 Comm: syz-executor.4 Not tainted 5.11.0-next-20210226-syzkaller #0
[  321.142211][T14768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  321.153853][T14768] Call Trace:
[  321.157154][T14768]  dump_stack+0xfa/0x151
[  321.161429][T14768]  should_fail.cold+0x5/0xa
[  321.166133][T14768]  should_failslab+0x5/0x10
[  321.170693][T14768]  kmem_cache_alloc_bulk+0x4b/0x380
[  321.176125][T14768]  io_submit_sqes+0x1355/0x63d0
[  321.181046][T14768]  ? __do_sys_io_uring_enter+0x1173/0x2280
[  321.186900][T14768]  __do_sys_io_uring_enter+0x1173/0x2280
[  321.192599][T14768]  ? lock_release+0x3bb/0x710
[  321.197384][T14768]  ? ksys_write+0x12d/0x250
[  321.202001][T14768]  ? io_sq_thread+0x1ae0/0x1ae0
[  321.207063][T14768]  ? __mutex_unlock_slowpath+0xe2/0x610
[  321.213601][T14768]  ? lock_is_held_type+0xd5/0x130
[  321.218669][T14768]  ? wait_for_completion_io+0x270/0x270
[  321.224325][T14768]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  321.231212][T14768]  ? vfs_write+0x18e/0xa30
[  321.235743][T14768]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[  321.242010][T14768]  ? fput+0x2a/0x50
[  321.245939][T14768]  ? syscall_enter_from_user_mode+0x1d/0x50
[  321.251952][T14768]  do_syscall_64+0x2d/0x70
[  321.256391][T14768]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  321.262302][T14768] RIP: 0033:0x465ef9
[  321.266347][T14768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  321.291803][T14768] RSP: 002b:00007f44d83eb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  321.302330][T14768] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9
[  321.310843][T14768] RDX: 0000000000000000 RSI: 000000000000450c RDI: 0000000000000003
[  321.318833][T14768] RBP: 00007f44d83eb1d0 R08: 0000000000000000 R09: 0000000000000700
[  321.326819][T14768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.334811][T14768] R13: 00007ffe113abe8f R14: 00007f44d83eb300 R15: 0000000000022000
[  321.366679][T14773] FAULT_INJECTION: forcing a failure.
[  321.366679][T14773] name failslab, interval 1, probability 0, space 0, times 1
[  321.385334][T14773] CPU: 1 PID: 14773 Comm: syz-executor.1 Not tainted 5.11.0-next-20210226-syzkaller #0
[  321.395025][T14773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  321.405102][T14773] Call Trace:
[  321.408396][T14773]  dump_stack+0xfa/0x151
[  321.412682][T14773]  should_fail.cold+0x5/0xa
[  321.417216][T14773]  should_failslab+0x5/0x10
[  321.421748][T14773]  kmem_cache_alloc_bulk+0x4b/0x380
[  321.426977][T14773]  io_submit_sqes+0x1355/0x63d0
[  321.431897][T14773]  ? __do_sys_io_uring_enter+0x1173/0x2280
[  321.437731][T14773]  __do_sys_io_uring_enter+0x1173/0x2280
[  321.443435][T14773]  ? lock_release+0x3bb/0x710
[  321.448134][T14773]  ? ksys_write+0x12d/0x250
[  321.452711][T14773]  ? io_sq_thread+0x1ae0/0x1ae0
[  321.457599][T14773]  ? __mutex_unlock_slowpath+0xe2/0x610
[  321.463196][T14773]  ? lock_is_held_type+0xd5/0x130
[  321.468442][T14773]  ? wait_for_completion_io+0x270/0x270
[  321.475376][T14773]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  321.481679][T14773]  ? vfs_write+0x18e/0xa30
[  321.486415][T14773]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[  321.493052][T14773]  ? fput+0x2a/0x50
[  321.497016][T14773]  ? syscall_enter_from_user_mode+0x1d/0x50
[  321.502963][T14773]  do_syscall_64+0x2d/0x70
[  321.507596][T14773]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  321.513529][T14773] RIP: 0033:0x465ef9
[  321.517534][T14773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  321.537349][T14773] RSP: 002b:00007fec0e9a9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  321.545890][T14773] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9
[  321.553986][T14773] RDX: 0000000000000000 RSI: 000000000000450c RDI: 0000000000000003
[  321.562016][T14773] RBP: 00007fec0e9a91d0 R08: 0000000000000000 R09: 0000000000000700
[  321.570026][T14773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.578021][T14773] R13: 00007ffce4244b7f R14: 00007fec0e9a9300 R15: 0000000000022000
01:29:20 executing program 1 (fault-call:3 fault-nth:1):
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

[  322.235833][T14812] FAULT_INJECTION: forcing a failure.
[  322.235833][T14812] name failslab, interval 1, probability 0, space 0, times 0
[  322.319605][T14812] CPU: 1 PID: 14812 Comm: syz-executor.1 Not tainted 5.11.0-next-20210226-syzkaller #0
[  322.329296][T14812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  322.339368][T14812] Call Trace:
[  322.342660][T14812]  dump_stack+0xfa/0x151
[  322.346931][T14812]  should_fail.cold+0x5/0xa
[  322.351910][T14812]  ? io_setup_async_rw+0x1a5/0x470
[  322.357061][T14812]  ? io_setup_async_rw+0x1a5/0x470
[  322.362197][T14812]  should_failslab+0x5/0x10
[  322.366720][T14812]  __kmalloc+0x72/0x320
[  322.370898][T14812]  io_setup_async_rw+0x1a5/0x470
[  322.376257][T14812]  io_read+0x391/0xaf0
[  322.381129][T14812]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  322.388138][T14812]  ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[  322.393894][T14812]  ? kiocb_done+0x2d0/0x2d0
[  322.398435][T14812]  ? is_bpf_text_address+0xcb/0x160
[  322.403769][T14812]  ? unwind_get_return_address+0x51/0x90
[  322.409546][T14812]  ? create_prof_cpu_mask+0x20/0x20
[  322.414859][T14812]  ? arch_stack_walk+0x93/0xe0
[  322.419748][T14812]  io_issue_sqe+0x183/0x4f00
[  322.424371][T14812]  ? kmem_cache_alloc_bulk+0x165/0x380
[  322.429847][T14812]  ? io_submit_sqes+0x1355/0x63d0
[  322.436815][T14812]  ? __do_sys_io_uring_enter+0x1173/0x2280
[  322.443012][T14812]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  322.449150][T14812]  ? io_recvmsg+0xa50/0xa50
[  322.453932][T14812]  ? lock_is_held_type+0xd5/0x130
[  322.459539][T14812]  ? find_held_lock+0x2d/0x110
[  322.464730][T14812]  ? lock_release+0x3bb/0x710
[  322.469670][T14812]  __io_queue_sqe+0x276/0xd60
[  322.474497][T14812]  ? io_wq_submit_work+0x660/0x660
[  322.480713][T14812]  ? __fget_files+0x288/0x3d0
[  322.485745][T14812]  io_queue_sqe+0x6f7/0xde0
[  322.490469][T14812]  io_submit_sqes+0x520e/0x63d0
[  322.495827][T14812]  ? __do_sys_io_uring_enter+0x1173/0x2280
[  322.501843][T14812]  __do_sys_io_uring_enter+0x1173/0x2280
[  322.507877][T14812]  ? lock_release+0x3bb/0x710
[  322.512694][T14812]  ? ksys_write+0x12d/0x250
[  322.517412][T14812]  ? io_sq_thread+0x1ae0/0x1ae0
[  322.522412][T14812]  ? __mutex_unlock_slowpath+0xe2/0x610
[  322.528010][T14812]  ? lock_is_held_type+0xd5/0x130
[  322.533087][T14812]  ? wait_for_completion_io+0x270/0x270
[  322.538769][T14812]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  322.545142][T14812]  ? vfs_write+0x18e/0xa30
[  322.549608][T14812]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[  322.555885][T14812]  ? fput+0x2a/0x50
[  322.559730][T14812]  ? syscall_enter_from_user_mode+0x1d/0x50
[  322.566456][T14812]  do_syscall_64+0x2d/0x70
[  322.571071][T14812]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  322.578030][T14812] RIP: 0033:0x465ef9
[  322.582044][T14812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  322.601938][T14812] RSP: 002b:00007fec0e9a9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  322.610577][T14812] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9
[  322.618834][T14812] RDX: 0000000000000000 RSI: 000000000000450c RDI: 0000000000000003
[  322.627094][T14812] RBP: 00007fec0e9a91d0 R08: 0000000000000000 R09: 0000000000000700
[  322.635120][T14812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  322.643291][T14812] R13: 00007ffce4244b7f R14: 00007fec0e9a9300 R15: 0000000000022000
01:29:21 executing program 0:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0)

01:29:21 executing program 4:
r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700)

[  349.642396][ T9752] Bluetooth: hci0: command 0x0406 tx timeout
[  349.662774][ T9752] Bluetooth: hci1: command 0x0406 tx timeout
[  349.702279][ T9752] Bluetooth: hci2: command 0x0406 tx timeout
[  349.742652][ T9752] Bluetooth: hci3: command 0x0406 tx timeout
[  349.787630][ T9752] Bluetooth: hci4: command 0x0406 tx timeout
[  349.835089][ T9752] Bluetooth: hci5: command 0x0406 tx timeout
[  378.271954][ T3266] ieee802154 phy0 wpan0: encryption failed: -22
[  378.278520][ T3266] ieee802154 phy1 wpan1: encryption failed: -22
[  439.708727][ T3266] ieee802154 phy0 wpan0: encryption failed: -22
[  439.715632][ T3266] ieee802154 phy1 wpan1: encryption failed: -22
[  474.906433][ T1638] INFO: task iou-wrk-14642:14654 can't die for more than 143 seconds.
[  474.943266][ T1638] task:iou-wrk-14642   state:R  running task     stack:29768 pid:14654 ppid:  8579 flags:0x00004006
[  475.041230][ T1638] Call Trace:
[  475.044668][ T1638]  __schedule+0x90c/0x21a0
[  475.094457][ T1638]  ? io_schedule_timeout+0x140/0x140
[  475.135674][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  475.140958][ T1638]  ? lockdep_hardirqs_on+0x79/0x100
[  475.214305][ T1638]  schedule+0xcf/0x270
[  475.248785][ T1638]  schedule_timeout+0x14a/0x250
[  475.288106][ T1638]  ? usleep_range+0x170/0x170
[  475.325171][ T1638]  ? task_thread.isra.0+0x882/0x1380
[  475.367033][ T1638]  ? __next_timer_interrupt+0x210/0x210
[  475.408558][ T1638]  ? 0xffffffff81000000
[  475.443953][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  475.491995][ T1638]  task_thread.isra.0+0x8d0/0x1380
[  475.532615][ T1638]  ? io_worker_handle_work+0x1910/0x1910
[  475.575987][ T1638]  ? do_raw_spin_lock+0x120/0x2b0
[  475.581085][ T1638]  ? rwlock_bug.part.0+0x90/0x90
[  475.644090][ T1638]  ? task_thread.isra.0+0x1380/0x1380
[  475.680018][ T1638]  task_thread_bound+0x18/0x20
[  475.684848][ T1638]  ret_from_fork+0x1f/0x30
[  475.738077][ T1638] INFO: task iou-wrk-14642:14655 can't die for more than 144 seconds.
[  475.797473][ T1638] task:iou-wrk-14642   state:R  running task     stack:29704 pid:14655 ppid:  8579 flags:0x00004006
[  475.855108][ T1638] Call Trace:
[  475.873188][ T1638]  __schedule+0x90c/0x21a0
[  475.900710][ T1638]  ? io_schedule_timeout+0x140/0x140
[  475.929432][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  475.934694][ T1638]  ? lockdep_hardirqs_on+0x79/0x100
[  476.001603][ T1638]  schedule+0xcf/0x270
[  476.025918][ T1638]  ? io_wq_worker_running+0xc/0x140
[  476.031713][ T1638]  schedule_timeout+0x14a/0x250
[  476.082730][ T1638]  ? usleep_range+0x170/0x170
[  476.115795][ T1638]  ? task_thread.isra.0+0x882/0x1380
[  476.128203][ T1638]  ? __next_timer_interrupt+0x210/0x210
[  476.164994][ T1638]  ? 0xffffffff81000000
[  476.193705][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  476.232240][ T1638]  task_thread.isra.0+0x8d0/0x1380
[  476.268960][ T1638]  ? io_worker_handle_work+0x1910/0x1910
[  476.274666][ T1638]  ? do_raw_spin_lock+0x120/0x2b0
[  476.334338][ T1638]  ? rwlock_bug.part.0+0x90/0x90
[  476.360647][ T1638]  ? task_thread_bound+0x20/0x20
[  476.387048][ T1638]  task_thread_unbound+0x1b/0x20
[  476.392048][ T1638]  ret_from_fork+0x1f/0x30
[  476.441128][ T1638] INFO: task iou-wrk-14642:14656 can't die for more than 144 seconds.
[  476.483463][ T1638] task:iou-wrk-14642   state:R  running task     stack:29480 pid:14656 ppid:  8579 flags:0x00004006
[  476.558165][ T1638] Call Trace:
[  476.561483][ T1638]  __schedule+0x90c/0x21a0
[  476.615024][ T1638]  ? do_raw_spin_lock+0x120/0x2b0
[  476.644308][ T1638]  ? io_schedule_timeout+0x140/0x140
[  476.687697][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  476.692970][ T1638]  ? lockdep_hardirqs_on+0x79/0x100
[  476.754201][ T1638]  schedule+0xcf/0x270
[  476.781459][ T1638]  ? schedule_timeout+0x14a/0x250
[  476.817528][ T1638]  ? usleep_range+0x170/0x170
[  476.823136][ T1638]  ? task_thread.isra.0+0x882/0x1380
[  476.872233][ T1638]  ? __next_timer_interrupt+0x210/0x210
[  476.902068][ T1638]  ? 0xffffffff81000000
[  476.925008][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  476.955777][ T1638]  ? task_thread.isra.0+0x8d0/0x1380
[  476.961146][ T1638]  ? io_worker_handle_work+0x1910/0x1910
[  477.026492][ T1638]  ? do_raw_spin_lock+0x120/0x2b0
[  477.031594][ T1638]  ? rwlock_bug.part.0+0x90/0x90
[  477.091770][ T1638]  ? task_thread.isra.0+0x1380/0x1380
[  477.129636][ T1638]  ? task_thread_bound+0x18/0x20
[  477.134650][ T1638]  ? ret_from_fork+0x1f/0x30
[  477.182541][ T1638] INFO: task iou-wrk-14642:14657 can't die for more than 145 seconds.
[  477.242175][ T1638] task:iou-wrk-14642   state:R  running task     stack:29512 pid:14657 ppid:  8579 flags:0x00004006
[  477.318427][ T1638] Call Trace:
[  477.322201][ T1638]  __schedule+0x90c/0x21a0
[  477.371456][ T1638]  ? io_schedule_timeout+0x140/0x140
[  477.417790][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  477.423169][ T1638]  ? lockdep_hardirqs_on+0x79/0x100
[  477.487313][ T1638]  schedule+0xcf/0x270
[  477.593078][ T1638]  schedule_timeout+0x14a/0x250
[  477.629939][ T1638]  ? usleep_range+0x170/0x170
[  477.667110][ T1638]  ? task_thread.isra.0+0x882/0x1380
[  477.674647][ T1638]  ? __next_timer_interrupt+0x210/0x210
[  477.758947][ T1638]  ? 0xffffffff81000000
[  477.763289][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  477.820834][ T1638]  task_thread.isra.0+0x8d0/0x1380
[  477.848428][ T1638]  ? io_worker_handle_work+0x1910/0x1910
[  477.854122][ T1638]  ? do_raw_spin_lock+0x120/0x2b0
[  477.905617][ T1638]  ? rwlock_bug.part.0+0x90/0x90
[  477.910635][ T1638]  ? task_thread_bound+0x20/0x20
[  477.968305][ T1638]  task_thread_unbound+0x1b/0x20
[  477.973314][ T1638]  ret_from_fork+0x1f/0x30
[  478.031673][ T1638] INFO: task iou-wrk-14642:14659 can't die for more than 146 seconds.
[  478.083842][ T1638] task:iou-wrk-14642   state:R  running task     stack:29768 pid:14659 ppid:  8579 flags:0x00004006
[  478.149134][ T1638] Call Trace:
[  478.168970][ T1638]  __schedule+0x90c/0x21a0
[  478.173570][ T1638]  ? io_schedule_timeout+0x140/0x140
[  478.222203][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  478.260123][ T1638]  ? lockdep_hardirqs_on+0x79/0x100
[  478.298898][ T1638]  schedule+0xcf/0x270
[  478.303029][ T1638]  schedule_timeout+0x14a/0x250
[  478.346975][ T1638]  ? usleep_range+0x170/0x170
[  478.351831][ T1638]  ? task_thread.isra.0+0x882/0x1380
[  478.422276][ T1638]  ? __next_timer_interrupt+0x210/0x210
[  478.453144][ T1638]  ? 0xffffffff81000000
[  478.479062][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  478.484435][ T1638]  task_thread.isra.0+0x8d0/0x1380
[  478.556190][ T1638]  ? io_worker_handle_work+0x1910/0x1910
[  478.597896][ T1638]  ? do_raw_spin_lock+0x120/0x2b0
[  478.604130][ T1638]  ? rwlock_bug.part.0+0x90/0x90
[  478.657443][ T1638]  ? task_thread_bound+0x20/0x20
[  478.662736][ T1638]  task_thread_unbound+0x1b/0x20
[  478.721052][ T1638]  ret_from_fork+0x1f/0x30
[  478.750184][ T1638] INFO: task iou-wrk-14642:14661 can't die for more than 147 seconds.
[  478.807902][ T1638] task:iou-wrk-14642   state:R  running task     stack:29768 pid:14661 ppid:  8579 flags:0x00004006
[  478.876272][ T1638] Call Trace:
[  478.881275][ T1638]  __schedule+0x90c/0x21a0
[  478.939980][ T1638]  ? io_schedule_timeout+0x140/0x140
[  478.973763][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  479.000998][ T1638]  ? lockdep_hardirqs_on+0x79/0x100
[  479.049694][ T1638]  schedule+0xcf/0x270
[  479.053841][ T1638]  schedule_timeout+0x14a/0x250
[  479.125693][ T1638]  ? usleep_range+0x170/0x170
[  479.130437][ T1638]  ? task_thread.isra.0+0x882/0x1380
[  479.189301][ T1638]  ? __next_timer_interrupt+0x210/0x210
[  479.219138][ T1638]  ? 0xffffffff81000000
[  479.223372][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  479.271953][ T1638]  task_thread.isra.0+0x8d0/0x1380
[  479.306280][ T1638]  ? io_worker_handle_work+0x1910/0x1910
[  479.311980][ T1638]  ? do_raw_spin_lock+0x120/0x2b0
[  479.362774][ T1638]  ? rwlock_bug.part.0+0x90/0x90
[  479.396233][ T1638]  ? task_thread.isra.0+0x1380/0x1380
[  479.401680][ T1638]  task_thread_bound+0x18/0x20
[  479.450979][ T1638]  ret_from_fork+0x1f/0x30
[  479.476822][ T1638] INFO: task iou-wrk-14642:14665 can't die for more than 147 seconds.
[  479.541730][ T1638] task:iou-wrk-14642   state:R  running task     stack:29328 pid:14665 ppid:  8579 flags:0x00004006
[  479.613733][ T1638] Call Trace:
[  479.636609][ T1638]  __schedule+0x90c/0x21a0
[  479.641127][ T1638]  ? io_schedule_timeout+0x140/0x140
[  479.691477][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  479.722295][ T1638]  ? lockdep_hardirqs_on+0x79/0x100
[  479.751940][ T1638]  schedule+0xcf/0x270
[  479.774327][ T1638]  schedule_timeout+0x14a/0x250
[  479.811031][ T1638]  ? usleep_range+0x170/0x170
[  479.836974][ T1638]  ? task_thread.isra.0+0x882/0x1380
[  479.842345][ T1638]  ? __next_timer_interrupt+0x210/0x210
[  479.897415][ T1638]  ? 0xffffffff81000000
[  479.901637][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  479.950101][ T1638]  task_thread.isra.0+0x8d0/0x1380
[  479.986210][ T1638]  ? io_worker_handle_work+0x1910/0x1910
[  479.991918][ T1638]  ? do_raw_spin_lock+0x120/0x2b0
[  480.059227][ T1638]  ? rwlock_bug.part.0+0x90/0x90
[  480.064416][ T1638]  ? task_thread.isra.0+0x1380/0x1380
[  480.129700][ T1638]  task_thread_bound+0x18/0x20
[  480.134565][ T1638]  ret_from_fork+0x1f/0x30
[  480.193314][ T1638] INFO: task iou-wrk-14642:14666 can't die for more than 148 seconds.
[  480.249910][ T1638] task:iou-wrk-14642   state:R  running task     stack:29552 pid:14666 ppid:  8579 flags:0x00004006
[  480.318093][ T1638] Call Trace:
[  480.321426][ T1638]  __schedule+0x90c/0x21a0
[  480.381348][ T1638]  ? io_schedule_timeout+0x140/0x140
[  480.418013][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  480.423282][ T1638]  ? lockdep_hardirqs_on+0x79/0x100
[  480.488971][ T1638]  schedule+0xcf/0x270
[  480.493122][ T1638]  schedule_timeout+0x14a/0x250
[  480.544440][ T1638]  ? usleep_range+0x170/0x170
[  480.577257][ T1638]  ? task_thread.isra.0+0x882/0x1380
[  480.582714][ T1638]  ? __next_timer_interrupt+0x210/0x210
[  480.650577][ T1638]  ? 0xffffffff81000000
[  480.679495][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  480.708179][ T1638]  task_thread.isra.0+0x8d0/0x1380
[  480.713734][ T1638]  ? io_worker_handle_work+0x1910/0x1910
[  480.776557][ T1638]  ? do_raw_spin_lock+0x120/0x2b0
[  480.781748][ T1638]  ? rwlock_bug.part.0+0x90/0x90
[  480.846531][ T1638]  ? task_thread_bound+0x20/0x20
[  480.851551][ T1638]  task_thread_unbound+0x1b/0x20
[  480.909730][ T1638]  ret_from_fork+0x1f/0x30
[  480.943094][ T1638] INFO: task iou-wrk-14642:14668 can't die for more than 149 seconds.
[  480.996561][ T1638] task:iou-wrk-14642   state:R  running task     stack:29704 pid:14668 ppid:  8579 flags:0x00004006
[  481.055512][ T1638] Call Trace:
[  481.058869][ T1638]  __schedule+0x90c/0x21a0
[  481.064031][ T1638]  ? io_schedule_timeout+0x140/0x140
[  481.142403][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  481.181421][ T1638]  ? lockdep_hardirqs_on+0x79/0x100
[  481.218300][ T1638]  ? schedule_timeout+0x145/0x250
[  481.313388][ T1638]  ? usleep_range+0x170/0x170
[  481.340531][ T1638]  ? task_thread.isra.0+0x882/0x1380
[  481.377553][ T1638]  ? __next_timer_interrupt+0x210/0x210
[  481.383860][ T1638]  ? 0xffffffff81000000
[  481.435867][ T1638]  ? _raw_spin_unlock_irq+0x1f/0x40
[  481.442806][ T1638]  ? task_thread.isra.0+0x8d0/0x1380
[  481.517653][ T1638]  ? io_worker_handle_work+0x1910/0x1910
[  481.523586][ T1638]  ? do_raw_spin_lock+0x120/0x2b0
[  481.595418][ T1638]  ? rwlock_bug.part.0+0x90/0x90
[  481.600429][ T1638]  ? task_thread_bound+0x20/0x20
[  481.677990][ T1638]  ? task_thread_unbound+0x1b/0x20
[  481.683266][ T1638]  ? ret_from_fork+0x1f/0x30
[  481.743926][ T1638] 
[  481.743926][ T1638] Showing all locks held in the system:
[  481.793545][ T1638] 2 locks held by kworker/u4:0/8:
[  481.826815][ T1638]  #0: ffff888010869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x871/0x1600
[  481.896223][ T1638]  #1: ffffc90000cd7da8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600
[  481.978663][ T1638] 2 locks held by kworker/u4:1/24:
[  481.983821][ T1638]  #0: ffff888010869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x871/0x1600
[  482.069663][ T1638]  #1: ffffc90000defda8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600
[  482.136512][ T1638] 2 locks held by kworker/u4:2/27:
[  482.141714][ T1638]  #0: ffff888010869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x871/0x1600
[  482.230377][ T1638]  #1: ffffc90000e2fda8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600
[  482.293819][ T1638] 2 locks held by kworker/u4:4/214:
[  482.330509][ T1638]  #0: ffff888010869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x871/0x1600
[  482.407413][ T1638]  #1: ffffc9000142fda8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600
[  482.485970][ T1638] 2 locks held by kworker/u4:5/231:
[  482.491307][ T1638]  #0: ffff888010869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x871/0x1600
[  482.589637][ T1638]  #1: ffffc9000199fda8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600
[  482.653482][ T1638] 2 locks held by kworker/u4:6/283:
[  482.686207][ T1638]  #0: ffff888010869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x871/0x1600
[  482.751899][ T1638]  #1: ffffc90001c9fda8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600
[  482.827828][ T1638] 2 locks held by kworker/u4:7/370:
[  482.833076][ T1638]  #0: ffff888010869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x871/0x1600
[  482.931659][ T1638]  #1: ffffc900021ffda8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600
[  483.008239][ T1638] 1 lock held by khungtaskd/1638:
[  483.013403][ T1638]  #0: ffffffff8bf741e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260
[  483.088039][ T1638] 1 lock held by in:imklog/8126:
[  483.093020][ T1638]  #0: ffff888012a234f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100
[  483.171240][ T1638] 2 locks held by kworker/u4:8/8482:
[  483.203002][ T1638]  #0: ffff888010869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x871/0x1600
[  483.272778][ T1638]  #1: ffffc900018efda8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600
[  483.343425][ T1638] 2 locks held by kworker/u4:9/11890:
[  483.387488][ T1638]  #0: ffff888010869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x871/0x1600
[  483.453029][ T1638]  #1: ffffc9000c527da8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600
[  483.541324][ T1638] 2 locks held by kworker/u4:10/12072:
[  483.589953][ T1638]  #0: ffff888010869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x871/0x1600
[  483.657218][ T1638]  #1: ffffc9001639fda8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600
[  483.729204][ T1638] 2 locks held by kworker/u4:11/12103:
[  483.759809][ T1638]  #0: ffff888010869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x871/0x1600
[  483.826856][ T1638]  #1: ffffc9001645fda8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600
[  483.892279][ T1638] 2 locks held by kworker/u4:12/12139:
[  483.924703][ T1638]  #0: ffff888010869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x871/0x1600
[  483.988711][ T1638]  #1: ffffc9001654fda8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600
[  484.075584][ T1638] 2 locks held by kworker/u4:13/12309:
[  484.081117][ T1638]  #0: ffff888010869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x871/0x1600
[  484.195335][ T1638]  #1: ffffc90016cb7da8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600
[  484.262340][ T1638] 3 locks held by kworker/u4:16/12501:
[  484.295077][ T1638] 2 locks held by kworker/u4:19/14398:
[  484.300759][ T1638]  #0: ffff888010869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x871/0x1600
[  484.402034][ T1638]  #1: ffffc90001a1fda8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600
[  484.482684][ T1638] 1 lock held by iou-wrk-14642/14665:
[  484.530563][ T1638] 
[  484.533020][ T1638] =============================================
[  484.533020][ T1638] 
[  484.606220][ T1638] Kernel panic - not syncing: hung_task: blocked tasks
[  484.613526][ T1638] CPU: 0 PID: 1638 Comm: khungtaskd Not tainted 5.11.0-next-20210226-syzkaller #0
[  484.622734][ T1638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  484.632791][ T1638] Call Trace:
[  484.636078][ T1638]  dump_stack+0xfa/0x151
[  484.640439][ T1638]  panic+0x306/0x73d
[  484.644384][ T1638]  ? __warn_printk+0xf3/0xf3
[  484.648996][ T1638]  ? watchdog.cold+0x22d/0x248
[  484.653831][ T1638]  watchdog.cold+0x23e/0x248
[  484.658544][ T1638]  ? trace_sched_process_hang+0x280/0x280
[  484.664297][ T1638]  kthread+0x3b1/0x4a0
[  484.668671][ T1638]  ? __kthread_bind_mask+0xc0/0xc0
[  484.673996][ T1638]  ret_from_fork+0x1f/0x30
[  484.679387][ T1638] Kernel Offset: disabled
[  484.683830][ T1638] Rebooting in 86400 seconds..