(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:36:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = dup3(r0, r1, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x30, 0x0, 0x0) 00:36:21 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000000)=""/28, &(0x7f0000000040)=0x1c) 00:36:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000680), 0x0, 0x68402) write$evdev(r0, 0x0, 0xf0ffffff7f0000) 00:36:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}]}, 0x34}}, 0x0) 00:36:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x17, 0xa, 0x201}, 0x14}}, 0x0) 00:36:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002540)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)='w', 0x1}], 0x1}}], 0x1, 0x0) 00:36:22 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001b00)=ANY=[@ANYBLOB='b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x2c, 0x0, 0xc12, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x2}]}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0', [{0x20, 'sys_exit\x00'}]}, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1582.997132][T26818] netlink: 'syz-executor.1': attribute type 126 has an invalid length. 00:36:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) 00:36:22 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/251) 00:36:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8915, 0x0) 00:36:22 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x5452, &(0x7f00000000c0)) 00:36:22 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) 00:36:22 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x3}, 0xe) 00:36:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) 00:36:22 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001b00)=ANY=[@ANYBLOB='b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x2c, 0x0, 0xc12, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x2}]}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0', [{0x20, 'sys_exit\x00'}]}, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:36:22 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=ANY=[], 0x3b4}}, 0x0) 00:36:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4b47, 0x0) 00:36:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @none, 0x9, 0xd0be61d344cd1153}, 0xe) 00:36:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0x6, 0x0, 0x0, 0x5, 0x8}, 0x48) 00:36:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x5460, 0x0) 00:36:23 executing program 0: request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='/dev/uinput\x00', 0xfffffffffffffffe) 00:36:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000000) 00:36:23 executing program 1: setreuid(0x0, 0xee01) socket(0xf, 0x0, 0x0) 00:36:23 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001b00)=ANY=[@ANYBLOB='b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x2c, 0x0, 0xc12, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x2}]}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0', [{0x20, 'sys_exit\x00'}]}, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:36:23 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}) 00:36:23 executing program 4: syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200006586dd601af77f00200600fe8000000000000000000000000000bbfe8000000000000000000048000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8003000090780000080a00"/20], 0x0) 00:36:24 executing program 0: r0 = socket(0x2, 0x3, 0x7) pipe2(&(0x7f0000000080), 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:36:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8ecf481614248599, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x40005504, 0x0) 00:36:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) 00:36:24 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) 00:36:24 executing program 3: r0 = socket(0x2, 0x3, 0x7) pipe2(&(0x7f0000000080), 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:36:24 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001b00)=ANY=[@ANYBLOB='b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x2c, 0x0, 0xc12, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x2}]}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0', [{0x20, 'sys_exit\x00'}]}, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:36:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) 00:36:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8914, 0x0) 00:36:24 executing program 2: clock_gettime(0x3, &(0x7f0000000340)) 00:36:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x40045566, 0x0) 00:36:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x68, 0x0, &(0x7f0000000140)) 00:36:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) 00:36:25 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001b00)=ANY=[@ANYBLOB='b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x2c, 0x0, 0xc12, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x2}]}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0', [{0x20, 'sys_exit\x00'}]}, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:36:25 executing program 4: r0 = socket(0x2, 0xa, 0x0) getsockname$netlink(r0, 0x0, &(0x7f0000000040)) 00:36:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x112, 0x2, 0x0, 0x0) 00:36:25 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0xc) 00:36:25 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 00:36:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a0, 0x0) 00:36:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000), &(0x7f0000000080)=0x4) 00:36:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@errors_continue}, {@shortname_mixed}, {@fat=@nfs}]}) 00:36:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x11, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000240)=0x1e, 0x4) 00:36:26 executing program 2: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_gettime(0x2, &(0x7f0000000140)) 00:36:26 executing program 0: syz_usbip_server_init(0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 00:36:26 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001b00)=ANY=[@ANYBLOB='b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x2c, 0x0, 0xc12, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x2}]}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0', [{0x20, 'sys_exit\x00'}]}, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:36:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x890b, 0x0) 00:36:26 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x12, 0x2, 0x0, 0x0) [ 1587.336244][T26929] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 00:36:26 executing program 1: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x4000) 00:36:26 executing program 4: pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x7}, &(0x7f0000000180), 0x0) 00:36:26 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:36:26 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003e0000003e"], &(0x7f0000000680)=""/4096, 0x5f, 0x1000, 0x1}, 0x20) 00:36:26 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001b00)=ANY=[@ANYBLOB='b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x2c, 0x0, 0xc12, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x2}]}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0', [{0x20, 'sys_exit\x00'}]}, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:36:27 executing program 0: syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x800, &(0x7f0000000640)) 00:36:27 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={0x0, 0x0, 0x9f}, 0x20) 00:36:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x5421, 0x0) 00:36:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 00:36:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000300)={0x6, 0x9, 0x5d, &(0x7f0000000280)="267e2a094461534113300f70661996326111f06e7ba024f605dd44e6bc17925a7b4399bb858ebab5c5af83a9ba7bc49977ccd54c55883b6f004c8855433e95ff0398dba9f75bdc94ecaa650bcb587058824aab46e66c80bc6887e20113"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'geneve1\x00', 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000340), &(0x7f0000000380)='GPL\x00', 0xdd0, 0x0, 0x0, 0x0, 0x3, '\x00', r3, 0x18, r4, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x0, 0xf3}, 0x10, 0x5c19, r2}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r4) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000300)={0x6, 0x9, 0x5d, &(0x7f0000000280)="267e2a094461534113300f70661996326111f06e7ba024f605dd44e6bc17925a7b4399bb858ebab5c5af83a9ba7bc49977ccd54c55883b6f004c8855433e95ff0398dba9f75bdc94ecaa650bcb587058824aab46e66c80bc6887e20113"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000340), &(0x7f0000000380)='GPL\x00', 0xdd0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x18, r5, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000480)={0x1, 0x5, 0x0, 0xf3}, 0x10, 0x5c19, r1}, 0x80) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f00000000c0)) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001900)=@bpf_tracing={0x1a, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000700)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000740)=""/4096, 0x40e00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = request_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)='geneve1\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='/sys/kernel/debug/binder/stats\x00', r6) 00:36:27 executing program 0: syz_clone(0x10000400, &(0x7f0000000000)="c366f0505aef8b004203621b181cfda4b6d4479971d70d59980bb57bf0cb9e66365b636069529e422d7955f0f8c5b5172931bf81a10e0f43", 0x38, 0x0, &(0x7f0000000140), &(0x7f0000000180)) r0 = syz_clone(0x34200000, &(0x7f0000000d00)="783ad31e0c4b4b98dd6856b53857b3db475b43ca3a8ddb0f67d7811b8ca506aab8a0c05d37ef9418c305d14ac17de7b9ec9aaa342f37c676626a6adc93654aa53b6d014508f6db2c2231ef065f6c66e8e7e4ff051091bc6d03582ca07817eed48b035c7d5323367b7551c7824b4ced844423c360189819450573d3ecc5fb089aaa407ec1d7eec2a6bf4be88eeaf217085656343e40b9e005d8da83aad75f7bcca8d3081da2c5709e2d04d61ef518b1e648233bac276beba5845d132b971b9806aba8c5b8b1b772be2df3a24553f4f1730dba982279ba8bb6945dddd4a27bc30bcd4bc29d7f5d1d154c0764acfae87fc1f0828b5f65382bca98290eff750c9ddeb2368185a3fcb02b8c3eef79219edcb7693dfb18d6dbf58244f3735a28fd57002d2efd8e8278014a6f86b1ae349db36f85281a7cf971c25717d74ae0e57fc1e87e36206c3127df331e4a4ec1c0cd6ca8a2c745ce9aacc715ef9707808636778341ebb0448f2a362dfecf89e21b228d8b32cd213015c730670526a06c5daba07c79fd622f8728c4294b819de7982809fd45ff50afe7ece7c2d6440946e58f65df74632710bd05caeda7910ec93b1d1891ef72e7ef7ea5cf37ee3a8596d3273ce12f26efaf4b9780a9bbe9d9f2ab402ce289c0abe6153dd15e5b4959213c7f9a587f0aa4b358be307e92c61ed3e919eeabd79462404fc964a5bc1576df0f475f8d8250ca4f0c71770189e705707f847f7eefa9cc22e6ea8f29074842e8998fd0d7f7115c0ecf317916f97cd5ff224eb318642aa2ffeaa87c4f1ee15e2f598acb51101ed8df1e12b81c5d696d30e0be75a15ede678a44c07112ca5003db2b6b5ce4e376e65219e545a47e464c40d73912bfde84b5ebd16a3a9d0580ea168722cd462cf32a5920aadff36dd77161e944648d16243291674e9e2693b65e304ce2cd446b474459a5c31809f4c64b69b24b784dc4746938a27973ce45d43187e12af2a4954cf03b12b5204488b5bdd0e2c1ac8105f386084765dc861c8fd69eedb4dad622088183d5d7e491a943d743145487f0aeb348e46c39c308591571f53365e5967edfb20505bf6892a992336cf7c02da7b0bdfdf2baf716fb5f9c139d8b178b2b27b5617dda59a9bd1da98d95dd8a02dd918f34d6c95ae80e74d651777ae559806326c8215d08bec956828e5918d84bbbd49b7e3d184adc51466c68e33d7d9d28d8e0640a87f5ebfd51baca247a0822c521de8ebc2d0f688a98f1a0743d2f393feedb123863d3b5aa24b62e1fb33a92526e477023cae201f6cbb7b756e1ab2de2c4379064b94781bc71e2781efdb88a700cb015de056cd807a0fc46d19f2aceb93874b8f963d8a7719dcfb64daa6fb62572b67d0502421c266a29221a7b833d267e68220e310b8e2808ba766ec6f7b120d573b8696fbc9abbd6b38abcd27934fc54d6c406ea37266b9a67dfad124cf7d40966ce30aad4f756cd2f29079434a25ccea06d48893ba1d2e5388ebfddb7fa15ecd39c77bbacb7040676cbca1577e382e735428c95f9d97bd593aa3b9069903114c66617ebc1ad7bdecd629da07866cd0c9feb8aaf8f4b65384bdce768bcfc8cd1a4024af5171ff24694a363b34adf19d77eed5deea72661076df1c2c2f0479e6990dbfde1e023d38c82e688a97f8ca27147268e3583ff5f6039e89815574c8cc12bc1d5242a594c0d74bea489599d6de6f2022fc44b11564eec3c1e0bb1eaac3eee5f8a649d76acf288e53d6f77b6e2189c109dafe2368afedc8a0b5fdf10544ab1fa895cd03222df66eac251943c1c671acc5d2c88c68e81211c3d084ac6f870be0f67805d066b3fccefc1d705f18c21f9a1e1e5cb187f0c8aff0bc841b5a74f55a9b4ae66c1be61bbd67c73b88e1d1d6e57714f9f3d6148deb9e01e9c679236301aaec6580232914688dda076ff0f11c6cb6bd75353570e1239595ece20178b0991a682c58baa014ce868fff3e824423322dca39fd43c9cd42a80eeb62871a80b55b7b7d7b69b3758e46ca81c71abc432b23805a0aa7a561adcff61f53b613def853ed911d445ccc81c2515b27f246c253548ca0f28ab07d79839acab1fbf4c74af303e2cd5a948ee61794e45f1d8885126c35d19489a6221a7987801ca252988c0db7fb1d90142b6326cb68cc1d48bdb15b3d0de8da3045785e87bdb0548cd7df9d2ca0590668ac8f3bc68d604ff6d28b7724027cfa33af61999318d2a63439effa42402f283a82ea47b8e0567340f7263dabf3c8fca78d72a9d7325d96490d5d7c72ee95a1314d29b8b595298bc68fa3605e6edc49c9a71f49b2a974a0976dff67540cea920863719ce8d002befb8f8521be1239870e3900bc61ff909d4f7deabdd895aa3dbb2689e3ff7d1380fa7ea98eab091528b2ee19375d5394e85722a4a9df9b31b8947b8b87d77c7c34700297a34ce25770d90a8b084e2123f51c86f6f2b5fe9026f40aa3b4c838bc5f73e3ad29ed7658edc173ab1236a96e35b69634e08a480edd41d49a9511805a33c6c5017f55e7f11393a2a4e48c3021883ff4db039dd2a2b9a17c3fb0f421849eb3bd0acbd1ddc5bde53c7e7fe6e528342edcdb21c10b6d4c12c20338911e7704300533baf875a8cf05f3339045b9e59b2e509fcc0abf15f6e30639a7b32af42417e5d33044ff478dc353110a3d6204b087a7862b663ec5804688932cba01c246c0218c1dc41594eb6aa8643e10f43a87b4461ad0082a3e1f92cb90c7f7eae1727424f50fa7dc6bcecba6b48bddc5f636e3fc2995e43b2c3e3d2b7bf34ebd5485f4c3d9621f04d0b299b8111174c98de4f5092cffcfa59cf795a7911b078ca368285ea4c13ca34259e436a2a2a02abfd6d0393f18a758e00c535fca65940db41a78d1c9b54a84efb43eefa480a465366e12bf18ef10733c4dd02565064fb422784a835957b4806d63272b0fca7ba62d89660eb00ebeaf386a4ccb44135435f2b0b9313911036585137e3d3b9ac8adb0c99ccc02ebb60605bcfa7929ff0901d73e58dfabdcd9f389464c5b64b165737f80fbe782ffe09df5b03a528ee787ada20b83132eaa2de329093fa82236359ca7f670b02bde5de33ddf7e44f01d2e77677b8eea73c6c3d116d5ad157577fa45812a7fc1a167fe3d8dad0bf55f7a210751bcc6976c77f4b084f5d55c752eacc36debf3f43b3d7f09a6d9261b54f9f1777879648a3adb12092cab309653f30aa819f2d6030c8d56e6e10d806e2aa22fb3abba4579b7ea21bc8192fa7c9727b928e61b3d2d7b99507c4d742fca777bfd10a9b670ba6255c167f415586b3db33763b93f0f31860f5654a7516ddadfc80337f5916d13389d85078d09dde7dd8abcb27bb956fe11b3591232c6f808c25d1b12e1778e9e4b68d3a719a95faf5db62f3a8a072323e339bf8cad2ac27c1c58e2fa12233e06a354dda65bdaeca8c265ccbfd1d0d86e44ffb59b2f4bcb42e0b344ac90e80ba46b1443f6b243c2b1e545d7141285dc1ea67e75e9d809ebd6cd2892fe6999104301e65735cb50f02cff8cec35c7e9644cb2c2b6ca40cb7e68792f306f0a3e1d7001ff4303f511818a4975ee3c0f3cbf8f5a42f54028bf76c15e4bddfc1a8e27cb12a469b2a5bca434f9f86825fa9fb67f0fac255dfacece666fd5d50dbeeaef169f9aae213ed73c30ebec357b059ecf9daa320b6e5f89bce976354fdacbd19db3f2b2b298ae9b88108d7fe2c30ed5daac2bdff66513d069984d718870dce48b10b35c4838c671b69c8966c241810436a78d5bec0ff4f9dec4a59d6a51a2d48a7c8b97ca1cffd455c246880f00737831fe1561f4060098a620bc16abcf609b02117f48554aae9d7906ddb96105763da41e90212a59b3acbcfca0fe47ae426b6577fb8061ff201465409822ac027f65709342e2744ce5f5a37f04872a9e315afc82f6e0a5efd3806390aebecbe8657aee394e5fe280d3636681a767fd55b78e1723462e141c15c5d4ec4958916f268a5fc93300e1f75fb1b1f3bf1b0fb9d2c12712e7046caa43c01b33950ca942f9a2df1a540e94550a54f2813add63bde46a28fa68bc3b2809901010dc80dd69dda1e49a314999a3a63f09b2b2ad339e7d544f92864d9c78081e5cf0b0069a7e9c1a1206ba13d885bcf63c3e1886876bf7f1bea90d5eb3d0254d550c87dcf11390a216008bd1ec717e6daf258a49b004a1d08b6a8baa69811fee8083bb78d91778c78923d4c86a9801a6964b53e8cc528cf4cbef7763d84403035c0ab2d028d1a5659f48b1ab0d1f29e29071a97b1cbe35bd6c23f81088c027d2ae65e4d1370c6f09b93172bc7bc53b9ec35453f35b5cc0612f595d825694c4a6254bc77e7c0feb83acbda1cc07fc16019c9204dc46faf836dd61bf8a46ad485feea1809b40c793471de9d5adcebd65b2388462c57ba3710712d109a70299668bef3c07291962eaa3e9833d6dfc53e770516e6cba7ce7f7f57cf73eab0c4f604a63f3ab2ac33e3e23c35f4ebbab8746d674bcd6951449597b20a1a15835176ce937182a5e018d0ab78f58db08bd1369d226cb41c7b7ccf52e5618c34e7a9b0d067e2ca57d0cceda7c8cb74a721f8d617986cdf543e9a60c03e84c801d012119c8431fb2163a5d56c39c593b6373cd3dd1d801a81d21dbb62fe21ae07bb7fce37fb4d6f9a87b903667ab8185fc269968ce035a8c80a0a7a7711b2889d7f72a62b4a5a10db4f8d18a647fbf7a77ec0a4171a2c64a0f1cbe7b40fb984e13bb38008b5224b4a0eec65078da204433d73c92ebcef338bb2972129fca14da8b8da24dd952d7433eadd12e6f406130fc27e5fccd1d9693f47ec0e0f1c73fa1518a1229cc5caab6fe19937257cea00810926bf1123e130ebad4a60f6536ba53ab55ef57521a19c97fe80dec288574a035bd4f6c5f7a61f58e0bf5f723b1f8150630c6a379f3035c1f31856ed9b897626cf210ca06b930d9e91b7a231a0f1304e6fa179bbe6a46d49fb285b01e1a925068a2be1755f65ba63982325f056ca9a7ef43990a92ee6feea930b28dcc306decdced365a82a53f10b9ad1d70c1d2372bff7d3677e951bed355a8297f3094eff0e46008d0f8f00989da0785c65643f72352bbef1d9d8c55a672e0c2240a99bd335b22e51a90fcfbafd16f1473cc9cd230dd03ff0f3151b3c46fb7888bcbd14cc15650b931113da6ca9e9b6e425db89df38790fc9c2218d51510045a448dbf78fba94da023b65e61770df901da5fb97e3a5ecdeabbdfc3bebe5f7277ed1d5f1c582268bb918fe68cdf452369150f099f2bb2cf13cb4b8b718b1ef0e699d0a6ef56116a283704e86fbdc907298adbd0f7426eac525b3e0a645bad2749ade6695dcea06e30fe106b40dbe8d91bf0e0bfbbfa95700fa74e7e10a9a7c68cf9de6e37a254f2ad7b316e2037966625d0e3d4f3bc6767fa3cd8bf5abc2d888799fd792cb93b8cdeb00eb746f2cd0ba43d577d250d021579c11418a21fb4276e4962af7f6a971ff9c0e59f3462c84e96e206157a38fb581654df67f6a41b61957c2f4e22de57766ccd129bee3475176ef9a6f45b14b880b36de6b23b6bc37025c2c21d3315df81d27e3ee852e431de7fab4015fd8cb6d14e2b75eb131255c4498ab4700da2018b50c68ac2fc69d7d18507b7322997e5c4b694f46729bb8d1641c855604a8b4398cbe0d8d22f65f9dfe1e851105840d03383e493afaf5dd76c7971498be917d4daad749951191f204326aed4a", 0xfe0, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="dd31b96176e34ba4f692bd50f997b3750ae783200e6098943c797aba1a9008e03a353189d2a458bd6b542cbb257e9cd8dafc03cc") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000200)='#&\x00'}, 0x30) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000fffffffffffffffc0000"], 0x14}}, 0x0) 00:36:27 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 00:36:27 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af60, &(0x7f00000000c0)) 00:36:27 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x4810}, 0xc) 00:36:28 executing program 2: r0 = socket(0xa, 0x3, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:36:28 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 00:36:28 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b4"], 0x3b4}}, 0x0) 00:36:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x0, {0x0, 0x0, 0x0, 0x0, 0x7}}) 00:36:28 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x3b4}}, 0x0) 00:36:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f0000001880), 0x0, &(0x7f0000001940)={[{@utf8}]}) 00:36:28 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x2, &(0x7f00000000c0)) 00:36:28 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 00:36:28 executing program 3: syz_clone(0x29000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 00:36:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8940, 0x0) 00:36:28 executing program 4: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001600), 0x143, 0x0) 00:36:28 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x3c, 0x0, 0x7b}]}}, &(0x7f0000000540)=""/210, 0x2a, 0xd2, 0x1}, 0x20) 00:36:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) 00:36:29 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 00:36:29 executing program 3: r0 = socket(0x2, 0x3, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, 0x0) 00:36:29 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x3f20d496a2011d64, 0x0) 00:36:29 executing program 2: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010100, @dev}}}}) 00:36:29 executing program 4: request_key(&(0x7f0000000000)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffe) 00:36:29 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) 00:36:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x10}) 00:36:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xfffffffffffffeb3, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 00:36:29 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) 00:36:29 executing program 4: pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x7}, 0x0, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 00:36:29 executing program 0: fanotify_mark(0xffffffffffffffff, 0x1a, 0x3, 0xffffffffffffffff, 0x0) 00:36:29 executing program 3: setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x0, 0x7fff, 0x8}) 00:36:30 executing program 1: setfsuid(0xee01) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 00:36:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 00:36:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0xc0}, 0x33fe0}}, 0x0) 00:36:30 executing program 5: r0 = socket(0x2, 0x3, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89e1, 0x0) 00:36:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000180)=0x5, 0x4) 00:36:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 00:36:30 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x800, 0x200000) 00:36:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040), 0x4) 00:36:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8904, 0x0) 00:36:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x40005504, 0x0) 00:36:31 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x74}}, 0x0) 00:36:31 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000680)=""/4096, 0x5f, 0x1000, 0x1}, 0x20) 00:36:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x28, 0x26, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x28}}, 0x0) 00:36:31 executing program 0: syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x4065, &(0x7f0000000540)) 00:36:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) 00:36:31 executing program 3: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 00:36:31 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 00:36:31 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xb0, 0x0, 0x7fff}]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) 00:36:31 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$watch_queue(r0, 0x0, 0x0) 00:36:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x5450, 0x0) 00:36:31 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x2}, 0xe) [ 1592.839192][ T24] audit: type=1326 audit(1659832591.889:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27061 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f86549 code=0x0 00:36:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000003c0)=@ccm_128={{}, "ea2bc741b56503c8", "ed3c9859bee83569dd723a71eb0e1353", "e10656a6", "04d9a95bfaa7aa03"}, 0x28) 00:36:32 executing program 3: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 00:36:32 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x34200000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:36:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3}, 0xe) 00:36:32 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) [ 1593.222351][ T9946] Bluetooth: hci5: command 0x0405 tx timeout 00:36:32 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x54, 0x0, &(0x7f0000000100)=[@increfs, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:36:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x5450, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) syz_clone(0x60000000, &(0x7f0000000600)="1fd9faef1eb541e5f0fbb64642b475414f0773694eb674e718499af84b398b285b4f781f1e1e765f44912890abafd833133afbc77b56fec708696e7fea16", 0x3e, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) 00:36:32 executing program 1: r0 = socket(0x2, 0x3, 0x7) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x7) 00:36:32 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x43a9]}, 0x8}) 00:36:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x0, {0x0, 0x0, 0x7fffffff}}) 00:36:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0x6, 0x0, 0x0, 0x0, 0x8}, 0x48) 00:36:33 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x20000) 00:36:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000140)) 00:36:33 executing program 1: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000002540)=[{&(0x7f00000001c0)="94", 0x1, 0x10001}, {&(0x7f0000001380)='<', 0x1, 0x80000000}], 0x0, 0x0) 00:36:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, &(0x7f0000000540)=""/210, 0x26, 0xd2, 0x1}, 0x20) 00:36:33 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 00:36:33 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 00:36:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 00:36:33 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 00:36:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0xc0189436, 0x0) 00:36:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x4, &(0x7f0000000000)={0x7}, 0x14) 00:36:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x7, 0x4) 00:36:34 executing program 3: syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1c400, &(0x7f0000000400)) 00:36:34 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x5421, 0x20000000) 00:36:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000340)) 00:36:34 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) 00:36:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000acceaf"], 0x14}}, 0x0) 00:36:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x14, 0x30, 0x521}, 0x14}}, 0x0) 00:36:35 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) r1 = memfd_create(&(0x7f0000000180)='.#,\x00', 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000004000000", @ANYRES32=r1, @ANYBLOB="0000000000f0ffffffffffff0000000000000000", @ANYRES32, @ANYBLOB="0000000000000000000021000010"]) 00:36:35 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000500), 0x4) 00:36:35 executing program 1: r0 = epoll_create1(0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 00:36:35 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x42, &(0x7f0000000080), 0x4) 00:36:35 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000340)) 00:36:35 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000006c0)) 00:36:35 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x141100) read$usbfs(r0, 0x0, 0x0) 00:36:35 executing program 0: request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='@{+\x00', 0xfffffffffffffffe) 00:36:35 executing program 5: connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 00:36:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @none}, 0xe) 00:36:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 00:36:35 executing program 4: r0 = socket(0x2, 0x3, 0x7) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:36:36 executing program 0: memfd_create(&(0x7f0000000180)='\x1dm\xf9\xceU\xc4\xce\xf9-\xc2\xa01\xc2\xde\xd2E\xc4\x8b\xd4\xedQt]_\'\xb6t\a\xe7\x004\xc8\x16\x19:\xc1KAl\xef\x87\xe5S\x1a\x90', 0x0) 00:36:36 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 00:36:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1e, &(0x7f0000000000), 0x14) 00:36:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x22, &(0x7f0000000000), 0x14) 00:36:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x40049409, 0x0) 00:36:36 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x5450, 0x0) syz_clone(0x60000000, &(0x7f0000000600)="1fd9faef1eb541e5f0fbb64642b475414f0773694eb674e718499af84b398b285b4f781f1e1e765f44912890abafd833133afbc77b56fec70869", 0x3a, 0x0, 0x0, 0x0) 00:36:36 executing program 0: syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='\a') 00:36:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 00:36:36 executing program 5: add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "a96adee2cb8c01fb3aaa8993047e1e44411d6a3db4dfae74dd08583e6a95ecebc43e42a82530a57334214944807bc985fc883c56c4fbcb72b335d71c72845592"}, 0x48, 0xfffffffffffffffd) 00:36:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), &(0x7f0000000180)=ANY=[], 0x15, 0x0) 00:36:36 executing program 2: r0 = openat$bsg(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) futimesat(r0, 0x0, 0x0) 00:36:37 executing program 5: openat$bsg(0xffffff9c, &(0x7f0000000280), 0x511803, 0x0) 00:36:37 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000a40)='cgroup.procs\x00', 0x2, 0x0) 00:36:37 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000bbf000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x64) 00:36:37 executing program 3: syz_mount_image$tmpfs(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x0, 0x2, &(0x7f0000000cc0)=[{&(0x7f0000000a40)="cd", 0x1}, {&(0x7f0000000b40)='Q', 0x1}], 0x0, &(0x7f0000000d00)) fchmodat(0xffffffffffffffff, &(0x7f00000010c0)='./file0\x00', 0x8) 00:36:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000240)) 00:36:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x1c442493e810ec4f, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:36:38 executing program 1: syz_mount_image$tmpfs(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x0, 0x1, &(0x7f0000000cc0)=[{&(0x7f0000000b40)='Q', 0x1}], 0x0, &(0x7f0000000d00)) 00:36:38 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)) 00:36:38 executing program 4: r0 = openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 00:36:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x2101, 0x0, 0x0) 00:36:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)=ANY=[]) 00:36:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000c4fc94"], 0x4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) 00:36:38 executing program 0: add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "a96adee2cb8c01fb3aaa8993047e1e44411d6a3db4dfae74dd08583e6a95ecebc43e42a82530a57334214944807bc985fc883c56c4fbcb72b335d71c72845592"}, 0x48, 0xfffffffffffffffd) 00:36:38 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) 00:36:38 executing program 2: modify_ldt$write2(0x11, &(0x7f00000004c0)={0x3ff}, 0x10) 00:36:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x15, 0x0) 00:36:38 executing program 5: syz_mount_image$tmpfs(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x1010000, &(0x7f0000000ec0)={[{@huge_advise}, {@nr_blocks={'nr_blocks', 0x3d, [0x67, 0x33]}}]}) 00:36:39 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000002600)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "ae46dd", 0x8, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], "fcd05d07f6642ce4"}}}}}, 0x0) 00:36:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) futimesat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) [ 1600.172391][T27214] tmpfs: Bad value for 'nr_blocks' 00:36:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x891f, &(0x7f0000000080)) 00:36:39 executing program 5: r0 = openat$bsg(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) fchmodat(r0, &(0x7f00000010c0)='./file0\x00', 0x0) 00:36:39 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 00:36:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:36:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000300)) 00:36:39 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) 00:36:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '%(\\*(,-:!['}}], [], 0x6b}}) 00:36:39 executing program 0: timerfd_create(0x0, 0x0) timerfd_create(0x9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000006300)='fdinfo/4\x00') read$FUSE(r0, 0x0, 0x0) 00:36:40 executing program 1: unshare(0x2a040400) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') fchmod(r0, 0x0) 00:36:40 executing program 4: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) 00:36:40 executing program 2: syz_mount_image$tmpfs(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)) lstat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)) 00:36:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r0, &(0x7f0000000000), 0x8) 00:36:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='utf8=1,iocharset=iso8859-2,allow_utime=00000000000000000000005,']) 00:36:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc71646589f612efdfe17a7421041970f48b6"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f08347e6fd971a1dd4e85fddfd28d944aadd03"}) 00:36:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, 0x0}, 0x0) 00:36:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) [ 1601.804536][T27247] FAT-fs (loop3): bogus number of reserved sectors [ 1601.811399][T27247] FAT-fs (loop3): Can't find a valid FAT filesystem 00:36:40 executing program 0: r0 = openat$bsg(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, 0x0, 0x0) 00:36:40 executing program 2: syz_mount_image$tmpfs(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={[], [{@euid_lt}]}) 00:36:41 executing program 1: ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) 00:36:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') close(r0) 00:36:41 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x0) lstat(&(0x7f0000001000)='./file0\x00', 0x0) 00:36:41 executing program 5: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000cc0)=[{&(0x7f0000000b40)='Q', 0x1}], 0x0, 0x0) 00:36:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) futimesat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{}, {0x77359400}}) [ 1602.539459][T27259] tmpfs: Unknown parameter 'euid<00000000000000000000' 00:36:41 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, 0x0) 00:36:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc71646589f612efdfe17a7421041970f48b6"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x1e00, 0x0, 0x0, 0x0, 0x0, "f08347e6fd971a1dd4e85fddfd28d944aadd03"}) 00:36:41 executing program 3: clock_getres(0x0, &(0x7f0000000000)) syz_clone(0x40402000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) ioctl$KDADDIO(r0, 0x4b34, 0x20) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0xffff, 0x80}]}) 00:36:41 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x13) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x4) 00:36:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000580)={&(0x7f0000000400), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) 00:36:41 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 00:36:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000240)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "06bfe2048c924cfec715f0ab7961372eefd59b687c7fb3c830cfd3b541a601a6567811489143c2d75f77fd4ee1af4fc166ae50438f88687b0e23b5bc3a9f5f07", "7c0a694218e13d7f089acb07cf00437bb395f3e30f569264e7d251edc63d05a1cc5dcf9e1a20e919585a115f2f0b1dba09ac85f8a70cc63ab52d2f181826d639", "96cf586e3d1444f8fc7fcd0dc6692afa15aee61bdf66b6acc53a03314c154a05"}}) 00:36:42 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5409, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1dbeaf24a083184528b61f8a2cf09681a44edf"}) 00:36:42 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}}, 0x0) 00:36:42 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000040)='2\x00', 0x2) 00:36:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000c40)="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", 0x122}], 0x1}, 0x40) 00:36:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xc, 0x2, @remote}]}, 0x28}}, 0x0) 00:36:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000180)={'sit0\x00', 0x0}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x1, 0x80, 0x0, 0x1, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x0, 0x0, @broadcast, @empty, {[@rr={0x7, 0x7, 0x59, [@loopback]}, @ssrr={0x89, 0x7, 0x0, [@multicast1]}, @end, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "b03fdcdf"}]}]}}}}}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x4240, 0x0) sched_setparam(0x0, &(0x7f0000006580)) 00:36:42 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:36:44 executing program 3: clock_getres(0x0, &(0x7f0000000000)) syz_clone(0x40402000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) ioctl$KDADDIO(r0, 0x4b34, 0x20) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0xffff, 0x80}]}) 00:36:44 executing program 0: r0 = socket(0x29, 0x5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c}, 0x1c}}, 0x480c1) 00:36:44 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000c40)="1ffd45ca64906a18725d167b5a075ec462acb86af8e7dfd95a3eeecf4e559243ca036e8861859b709e2cb218fefbdd16471de2f0a57cd4dc78180d9b86ee6219463b2e4c18de61a3ff515ef8cbbd2effbc36298967f185b8c8b4676120b93ffc4d4c7c0b16a547cbb5ae865b4fc4c78e16b0848c8832a1d61a1bc63ad3269657b878035f0875900260d071c2fb59eb3b07268ebcc1ee6a3d013470ab85331517a00696351a443026d8be19277f4a3ba174cc82f27a372b96c0636b8f16e1e8b896b70876a11133f2127da54538554a7f53ed55c291702427f990f83e9e0895eda7c20f5e4f317c35d208707606337fde3eb50b894d8c0d580226fad7e9a48670b22a78358a899a98312becedcfdd59a07773160327135b009726b924d524c0991767", 0x122}], 0x1}, 0x40) 00:36:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x40000000}, {0x80000001}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) 00:36:44 executing program 4: syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0000000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000080) 00:36:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x2, 0x4) 00:36:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000700)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xffffff53, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}) 00:36:44 executing program 2: r0 = socket(0x18, 0x800, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:36:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x40000000}, {0x80000001}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) 00:36:45 executing program 4: socketpair$nbd(0x11, 0x3, 0xe301, &(0x7f0000000140)) 00:36:45 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[@rights, @cred, @rights, @rights], 0xe8}, 0x0) 00:36:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 00:36:46 executing program 4: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0xc0145b0e, 0x0) 00:36:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x40000000}, {0x80000001}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) 00:36:46 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x5b15, 0x0) 00:36:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000440)={0x14, &(0x7f0000000180)={0x0, 0x0, 0x9, {0x9, 0x0, "d720eedd3ecca4"}}, 0x0, &(0x7f0000000300), 0x0}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:36:46 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e00)={0x6, 0x5, &(0x7f0000001bc0)=ANY=[], &(0x7f0000001b40)='syzkaller\x00', 0x0, 0x20, &(0x7f0000001c40)=""/32, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001c80), 0x8, 0x10, &(0x7f0000001cc0), 0x10}, 0xb4) 00:36:46 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000004480), 0x0, 0x0) 00:36:46 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') 00:36:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x40000000}, {0x80000001}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) 00:36:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 00:36:46 executing program 3: r0 = msgget$private(0x0, 0x102) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/26) 00:36:46 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') 00:36:46 executing program 2: syz_emit_ethernet(0x22, &(0x7f0000001500)={@broadcast, @local, @val, {@ipv4}}, 0x0) 00:36:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000002940)={0x0, 0x1000}, 0xc) 00:36:47 executing program 3: syz_open_procfs(0x0, &(0x7f0000001780)='net/fib_triestat\x00') socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) 00:36:47 executing program 0: r0 = socket(0x2, 0x6, 0x1ff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x0, 0x5, 0x20, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x8, 0x8, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', r1, 0x40, 0x0, 0x7, 0x769a, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x64, 0x0, 0x87, 0x4, 0x0, @rand_addr=0x64010100, @empty, {[@generic={0x82, 0x2}, @generic={0x0, 0x5, "0bd8d5"}, @timestamp={0x44, 0x4, 0x77, 0x0, 0x3}, @timestamp_addr={0x44, 0x14, 0x6e, 0x1, 0x6, [{@remote, 0xbcf}, {@rand_addr=0x64010102, 0x4}]}, @timestamp_prespec={0x44, 0x1c, 0xd5, 0x3, 0x9, [{@loopback, 0x665c}, {@loopback, 0x2}, {@broadcast}]}]}}}}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000001c0)={{r0}, {@val, @actul_num={@val=0x2d, 0x9, 0x6b}}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000200)={0x0, 0x0, 0x0, [0x0, 0x0, 0x3, 0x3, 0xffffffffffffffc1], [0x2, 0x5, 0x5, 0x2, 0x5f, 0xcb8, 0x4, 0x9, 0x6, 0x5, 0x2, 0x6d7e, 0xfffffffffffff655, 0xc241, 0x200, 0x800, 0x6, 0xfffffffffffffffb, 0x8, 0x5, 0x0, 0x9, 0x9, 0x9, 0x0, 0x7, 0x9, 0x4e87aedc, 0xfffffffffffffffd, 0x2, 0x8, 0xfffffffffffffffc, 0x2, 0x2, 0x0, 0x80000, 0x2, 0x6, 0x80000000, 0x0, 0x1, 0x0, 0x3, 0x0, 0x7fff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffffffff45c1, 0x4, 0x2, 0x0, 0x100000000, 0xb3, 0x4, 0x0, 0x5, 0x8001, 0x4, 0x1, 0x3f, 0x3, 0x5, 0x8, 0x7fffffffffffffff, 0x0, 0x3f, 0x993, 0x200, 0x9, 0xfff, 0x100000001, 0xffffffffffffffff, 0xa8b, 0x0, 0x1, 0xaee3, 0xf8000, 0xdf, 0x2, 0x4, 0x6, 0x7, 0xfffffffffffffffa, 0x0, 0x10001, 0x80000001, 0x81, 0x5, 0x4, 0x1, 0x7fffffff, 0x0, 0x0, 0x4, 0x7, 0x0, 0x54d, 0x9, 0xf743, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x5, 0x0, 0x2, 0x7, 0x3, 0x10001, 0xf101, 0x8, 0x5, 0x809, 0x6, 0x1]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000640)={{r0}, 0x0, 0xc, @unused=[0x0, 0xffffffffffffffff, 0x20, 0x2], @devid=r3}) r4 = syz_open_procfs(0x0, &(0x7f0000001780)='net/fib_triestat\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x2, 0x2, &(0x7f0000001640)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}], 0x0, 0x0, 0x98, &(0x7f00000016c0)=""/152, 0x41000, 0x0, '\x00', 0x0, 0x20, r4, 0x8, &(0x7f00000017c0), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) socket(0xf, 0x800, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d00)={0x6, 0x5, &(0x7f0000001bc0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x7}], &(0x7f0000001c00)='syzkaller\x00', 0x2, 0x20, &(0x7f0000001c40)=""/32, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001d80)={r5}, 0x8) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001dc0)={r4}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000020c0)={'gre0\x00', &(0x7f0000001fc0)={'sit0\x00', 0x0, 0x10, 0x40, 0x7, 0x8, {{0x14, 0x4, 0x0, 0x1, 0x50, 0x0, 0x0, 0x2, 0x4, 0x0, @empty, @empty, {[@timestamp={0x44, 0x8, 0xfe, 0x0, 0x9, [0x3]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x89, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @noop, @noop, @timestamp={0x44, 0xc, 0xca, 0x0, 0x8, [0x0, 0x9]}, @timestamp_prespec={0x44, 0x14, 0x39, 0x3, 0x0, [{@local}, {@multicast2}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000002100)=@bloom_filter={0x1e, 0x800080, 0x0, 0x7f, 0xc, 0xffffffffffffffff, 0x5, '\x00', r1, r6, 0x0, 0x4, 0x0, 0x5}, 0x48) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000002440)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002400)={&(0x7f0000002200)={0x16c, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x16c}}, 0x40080) 00:36:47 executing program 4: syz_open_procfs(0x0, 0x0) syz_clone(0x10049000, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) 00:36:47 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x210400, 0x0) 00:36:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 00:36:47 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x3, &(0x7f0000001240)=@framed, &(0x7f00000012c0)='syzkaller\x00', 0x6, 0xff, &(0x7f0000001300)=""/255, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:36:47 executing program 3: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/207) 00:36:47 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000700)) 00:36:47 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x7, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:36:48 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d00)={0x6, 0x1, &(0x7f0000001bc0)=@raw=[@kfunc], &(0x7f0000001c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80) 00:36:48 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) 00:36:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}, 0x20000040) 00:36:48 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:36:48 executing program 0: syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00') bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 00:36:48 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 00:36:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}}, 0xd1) 00:36:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0098100000080a0103000000000000000001000003041007"], 0x10c0}}, 0x0) 00:36:48 executing program 1: select(0x0, 0x0, &(0x7f00000014c0), 0x0, 0x0) 00:36:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000023c0)={@local}, 0x14) 00:36:49 executing program 5: syz_clone(0x22180a00, 0x0, 0x0, 0x0, 0x0, 0x0) 00:36:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x19, &(0x7f0000000000)="f13a0448", 0x4) 00:36:49 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/160, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:36:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x101}, 0x14}}, 0x0) 00:36:49 executing program 1: pipe2$9p(0x0, 0x84400) 00:36:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 00:36:49 executing program 5: socket(0x11, 0xa, 0x3f) 00:36:49 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f0000000080)=@raw=[@ldst], &(0x7f00000000c0)='syzkaller\x00', 0x10001, 0xa3, &(0x7f0000000100)=""/163, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:36:49 executing program 0: r0 = socket(0x11, 0xa, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 00:36:50 executing program 4: r0 = gettid() r1 = syz_clone(0x220000, &(0x7f0000000080)="f7da0d81a55abcda8cb660298e0278b784755286e462ef4731fb905d49f693cdb2a3dcdb6e6f4ab64341d371b963", 0x2e, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b8fcbae09c48bd913ea29ff3cc90007f35c33310d9f7bb08ef24e07f191a147354facfff66fa63bdb9268c07dc95ceab2a39308dd4f556d5d11c959b421ffeefde53a4478ff1dbf0dda29f563ceeff080bb57fbbffc6d7b92777fab5a454af") sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x148, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000001780)='net/fib_triestat\x00') bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x2, 0x2, &(0x7f0000001640)=@raw=[@btf_id={0x18, 0x9}], &(0x7f0000001680)='GPL\x00', 0x6, 0x98, &(0x7f00000016c0)=""/152, 0x41000, 0x0, '\x00', 0x0, 0x20, r2, 0x8, &(0x7f00000017c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0xd, 0x80, 0x80000000}, 0x10, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d00)={0x6, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="f78039670a3f7f8a891ba1fdb25e56fb19f92a32317de162e0a7bfb65bb08e60bbde", @ANYRES32=r2], &(0x7f0000001c00)='syzkaller\x00', 0x2, 0x20, &(0x7f0000001c40)=""/32, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001c80)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001cc0)={0x0, 0x3, 0x401, 0x5}, 0x10}, 0x80) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x800}) memfd_create(&(0x7f0000000840)='&!{\x00', 0x0) 00:36:50 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d00)={0x6, 0x1, &(0x7f0000001bc0)=@raw=[@kfunc], &(0x7f0000001c00)='syzkaller\x00', 0x0, 0x20, &(0x7f0000001c40)=""/32, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:36:50 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d00)={0x6, 0x2, &(0x7f0000001bc0)=@raw=[@map_val], &(0x7f0000001c00)='syzkaller\x00', 0x2, 0x20, &(0x7f0000001c40)=""/32, 0x41000, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001c80)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001cc0)={0x5, 0x3, 0x401, 0x5}, 0x10}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000020c0)={'gre0\x00', &(0x7f0000001fc0)={'sit0\x00', 0x0, 0x10, 0x0, 0x7, 0x8, {{0x8, 0x4, 0x0, 0x1, 0x20, 0x65, 0x0, 0x2, 0x4, 0x0, @empty, @empty, {[@noop, @timestamp_prespec={0x44, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) 00:36:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 00:36:50 executing program 2: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) 00:36:50 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000001b40)='net/ip_tables_targets\x00') 00:36:51 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0xb7) 00:36:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[], 0x8f4}}, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000340)=""/186, 0xba}], 0x2}, 0x0) 00:36:51 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000002840), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000002940)={0x0, 0x0}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) 00:36:51 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{}]}) 00:36:51 executing program 1: pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_ATTR(r0, &(0x7f0000005940)={0x78}, 0x78) 00:36:51 executing program 4: syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)) 00:36:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000001dc0)={0x0, 0x0, 0x0}, 0x0) 00:36:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x6}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x40000}, 0x0) 00:36:51 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x40000, 0x0) 00:36:51 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "927a78b13a2743400029ad178573efe75c35d79dc30c5e6fc25d190980e68059fb887ff326fc604ef7cc16e4a582f8513e9964659463c5f437467dbf1bec8602"}, 0x48, 0xfffffffffffffffc) keyctl$read(0xb, r0, 0x0, 0x0) 00:36:52 executing program 4: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x80180, &(0x7f0000000400)) 00:36:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', 0x0}) 00:36:52 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000003a80), 0x2, 0x0) 00:36:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[], 0x8f4}}, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000340)=""/186, 0xba}], 0x2}, 0x0) 00:36:52 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/stat\x00') 00:36:52 executing program 1: syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000003400)) 00:36:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000059c0)=@ccm_128={{}, "c8a00d1784c3d99f", "66ce10ba8cc5081475d21e4580313d00", "b078abd4", "da2297f329d235e3"}, 0x28) 00:36:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, 0x0) 00:36:52 executing program 3: syz_clone3(&(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001380)=[0x0], 0x1}, 0x58) syz_clone3(&(0x7f0000001500)={0x182000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[0x0], 0x1}, 0x58) 00:36:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={0x0}, 0x300}, 0x0) 00:36:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, "0036aa8ef6a1554a327d6023fb8d8b2dd7ba9706b8fa375c83087785b59dcfe1f3e9365eaf8a027622a909f45170322261eded3c38998d11051435116a2771d57507293b1fe8d97cf7a948f9b6c6bc1d"}, 0xd8) 00:36:53 executing program 1: syz_mount_image$hfsplus(0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[{&(0x7f0000000140)="01", 0x1, 0x1000}, {&(0x7f0000000300)="c3", 0x1, 0x6267}], 0x0, 0x0) 00:36:53 executing program 2: socket(0x28, 0x0, 0x1a78) 00:36:53 executing program 0: syz_mount_image$squashfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001300)=[{&(0x7f00000001c0)="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", 0x1000}], 0x0, 0x0) 00:36:53 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000031c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@flowinfo={{0x14, 0x29, 0xb, 0x81}}], 0x18}}], 0x1, 0x0) 00:36:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[], 0x8f4}}, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000340)=""/186, 0xba}], 0x2}, 0x0) 00:36:53 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x700) 00:36:53 executing program 1: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x6b070000, &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@session}]}) 00:36:53 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 00:36:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000340)=""/223, 0xdf}, {0x0}, {&(0x7f0000000540)=""/239, 0xef}], 0x4, &(0x7f00000002c0), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0xa}}], 0x40000000000017f, 0x0) syz_open_procfs(0x0, 0x0) 00:36:54 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 00:36:54 executing program 2: getpid() syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:36:54 executing program 0: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0xa002, 0x0) sendfile(r0, r0, 0x0, 0x2) 00:36:54 executing program 4: syz_clone3(&(0x7f00000013c0)={0x40000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:36:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') write$P9_RWRITE(r0, 0x0, 0x0) 00:36:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[], 0x8f4}}, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000340)=""/186, 0xba}], 0x2}, 0x0) 00:36:55 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) 00:36:55 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 00:36:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 00:36:56 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') 00:36:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, "0036aa8ef6a1554a327d6023fb8d8b2dd7ba9706b8fa375c83087785b59dcfe1f3e9365eaf8a027622a909f45170322261eded3c38998d11051435116a2771d57507293b1fe8d97cf7a948f9b6c6bc1d"}, 0xd8) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 00:36:58 executing program 3: syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000002940), 0x0, &(0x7f00000029c0)={[{','}], [{@audit}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) 00:36:58 executing program 0: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@session}]}) 00:36:58 executing program 1: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)) 00:36:58 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, &(0x7f0000000bc0)) 00:36:58 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001c00)='maps\x00') connect$bt_rfcomm(r0, 0x0, 0x700) r1 = getpid() syz_open_procfs(r1, 0x0) r2 = getpid() syz_open_procfs(r2, 0x0) r3 = syz_clone3(&(0x7f00000013c0)={0x40000100, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0xa}, &(0x7f0000000300)=""/121, 0x79, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001440)={0x0, 0x0}) r5 = getpid() r6 = getpid() syz_open_procfs(r6, 0x0) syz_clone3(&(0x7f0000001500)={0x182000100, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x22}, &(0x7f00000000c0)=""/173, 0xad, &(0x7f0000000180)=""/163, &(0x7f00000014c0)=[r1, r2, r3, r4, r5, r6], 0x6, {r0}}, 0x58) 00:36:58 executing program 4: syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000002940), 0x0, &(0x7f00000029c0)={[{','}], [{@audit}, {@seclabel}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) [ 1619.050742][T27559] squashfs: Unknown parameter 'audit' 00:36:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x0, 0x0, 0x0, 0x477}, 0x1c) 00:36:58 executing program 4: syz_clone3(&(0x7f0000000200)={0x800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:36:58 executing program 2: syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_clone3(&(0x7f00000013c0)={0x40000100, &(0x7f0000000240), &(0x7f0000000280), 0x0, {0xa}, &(0x7f0000000300)=""/121, 0x79, 0x0, &(0x7f0000001380)=[0x0], 0x1}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001440)) getpid() [ 1619.529263][T27571] squashfs: Unknown parameter 'audit' 00:36:58 executing program 1: syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x10040) 00:36:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001980)={&(0x7f00000001c0), 0xc, &(0x7f0000001940)={&(0x7f00000004c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x68}}, 0x0) 00:36:59 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9}}]}}]}}, 0x0) 00:36:59 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0105303, &(0x7f0000000000)={{0x0, 0x9}}) 00:36:59 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x2c0080, 0x0) [ 1620.481255][T27587] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. 00:36:59 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv2(r0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/218, 0xda}], 0x1, 0x0, 0x0, 0x1b) 00:36:59 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x801c581f, 0x0) [ 1620.643070][ T9946] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1621.003115][ T9946] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1621.013175][ T9946] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1621.023365][ T9946] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1621.322953][ T9946] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1621.332494][ T9946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.340696][ T9946] usb 4-1: Product: syz [ 1621.345224][ T9946] usb 4-1: Manufacturer: syz [ 1621.349993][ T9946] usb 4-1: SerialNumber: syz [ 1621.757906][T12604] usb 4-1: USB disconnect, device number 33 00:37:00 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5452, &(0x7f0000000000)={{0x0, 0x9}}) 00:37:00 executing program 1: io_cancel(0x0, 0x0, 0x0) pipe(&(0x7f0000001180)) 00:37:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @dev, @private1}}) 00:37:00 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0105303, &(0x7f0000000040)={{0x17}, 'port1\x00'}) 00:37:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000680)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 00:37:01 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5460, 0x0) 00:37:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000640)='d', 0x1}], 0x1}, 0x50) 00:37:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) read(r0, &(0x7f0000000000)=""/180, 0xb4) 00:37:01 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40086602, &(0x7f0000001600)) 00:37:01 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000000)={{0x0, 0x9}}) 00:37:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xffffffffffffffb5, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 00:37:01 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='blkio.bfq.io_queued\x00', 0x0, 0x0) 00:37:02 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, &(0x7f0000000000)) 00:37:02 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x90, 0x82, 0x6b, 0x40, 0xaf0, 0x7901, 0x4d73, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x31, 0x75, 0x34}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:37:02 executing program 2: r0 = getpid() tkill(r0, 0x20) 00:37:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) 00:37:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x17}, 0x0) 00:37:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x17}, 0x0) 00:37:02 executing program 3: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 00:37:02 executing program 0: syz_open_dev$dmmidi(&(0x7f0000000080), 0x0, 0x200) [ 1623.752868][ T9946] usb 5-1: new high-speed USB device number 20 using dummy_hcd 00:37:02 executing program 1: r0 = getpid() process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000003a40)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/93, 0x5d}, {&(0x7f0000002a40)=""/4096, 0x1000}], 0x2, 0x0) 00:37:02 executing program 5: setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000840), 0xffffffffffffffff) 00:37:03 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12812, r0, 0x0) 00:37:03 executing program 1: prctl$PR_SCHED_CORE(0x28, 0x0, 0x0, 0x0, 0x0) 00:37:03 executing program 3: openat$autofs(0xffffffffffffff9c, 0x0, 0x404200, 0x0) [ 1624.512004][ T9946] usb 5-1: string descriptor 0 read error: -22 [ 1624.518716][ T9946] usb 5-1: New USB device found, idVendor=0af0, idProduct=7901, bcdDevice=4d.73 [ 1624.528161][ T9946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.786062][ T9946] usb 5-1: config 0 descriptor?? [ 1624.830254][ T9946] hso 5-1:0.0: Not our interface [ 1625.044564][ T9946] usb 5-1: USB disconnect, device number 20 00:37:04 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40049409, &(0x7f0000001600)) 00:37:04 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv2(r0, &(0x7f0000001540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x700}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) 00:37:04 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x80086601, 0x0) 00:37:04 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 00:37:04 executing program 3: socket$inet(0x2, 0x80803, 0x0) 00:37:04 executing program 0: prctl$PR_SCHED_CORE(0x25, 0x0, 0x0, 0x0, 0x0) 00:37:04 executing program 0: prctl$PR_SCHED_CORE(0x39, 0x0, 0x0, 0x0, 0x0) 00:37:04 executing program 2: socketpair(0x29, 0x5, 0x3, &(0x7f00000000c0)) 00:37:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:37:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x7}, 0x0) [ 1626.034902][ T1192] ieee802154 phy0 wpan0: encryption failed: -22 00:37:05 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 00:37:05 executing program 3: io_setup(0xfff, &(0x7f0000000080)=0x0) io_destroy(r0) 00:37:05 executing program 5: prctl$PR_SCHED_CORE(0x2, 0x0, 0x0, 0x0, 0x0) 00:37:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x200, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:37:05 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x404c534a, &(0x7f0000000000)) 00:37:05 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f0000001600)) 00:37:05 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000001600)) 00:37:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x4005) 00:37:06 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f0000001600)) 00:37:06 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5452, 0x0) 00:37:06 executing program 3: process_vm_writev(0xffffffffffffffff, &(0x7f0000001280)=[{0xfffffffffffffffe}], 0x1, 0x0, 0x0, 0x0) 00:37:06 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000040)) 00:37:06 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 00:37:06 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)='2', 0x1}], 0x1, 0x0, 0x0) 00:37:06 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x401c5820, &(0x7f0000000040)={{0x1b, 0x81}, 'port0\x00'}) 00:37:06 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5460, 0x0) 00:37:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 00:37:06 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0bc5310, &(0x7f0000000000)={{0x0, 0x9}}) 00:37:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x6, 0x4, 0x4}, 0x48) 00:37:07 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)='2', 0x1}], 0x1, 0x0, 0x0) 00:37:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000100)={0x0}}, 0x7) 00:37:07 executing program 5: prctl$PR_SCHED_CORE(0x1c, 0x1ffff000, 0x0, 0x0, 0x0) 00:37:07 executing program 3: prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x90, 0x82, 0x6b, 0x40, 0xaf0, 0x7901, 0x4d73, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xf8, 0x7, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x31, 0x75, 0x34, 0x40, [], [{}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x40}}]}}]}}]}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:37:07 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 00:37:07 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000ffff1b000101e1005a090400000207010208090501022000060081"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x3, 0x0, 0x9, 0xcda06d094196c640, 0x70}, 0x18, &(0x7f0000000140)={0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x3, 0xfffd}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1843}}, {0x12, &(0x7f00000001c0)=@string={0x12, 0x3, "565c228b9318bee038aee23693196d0b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf4eb}}, {0x5b, &(0x7f0000000240)=@string={0x5b, 0x3, "7df5b0ca26260d79f52767384729293675b4926f709990b92ff118f1d5fa91c8ab0271b4b43400edde7e1d3eddcb394898886b50a4cbd79a113d28a4ea57eea7f60ef0579720b8c3b2285527174c297ef10145d06acdac386e"}}, {0x7d, &(0x7f00000002c0)=@string={0x7d, 0x3, "07bb76f7bf05e1794adaf4f5cb01803af145eb6b462cbb6b4ce23707b781001c7d843ca0e68ae5c43185f11c475bf2059210ae5b80ea4f9a2ac859e71afec87d3cc3eaefaea4684e86d5b9e72162a6f77fd18f1c2ac9795450b1efca9e3e57f534427b7288f95674e7ddb420134f04923dc84384ec2f949514a175"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:37:07 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x4040534e, &(0x7f0000000040)={{0x17}, 'port1\x00'}) 00:37:07 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)='2', 0x1}], 0x1, 0x0, 0x0) 00:37:07 executing program 1: ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)) pipe(&(0x7f0000001180)) 00:37:07 executing program 5: prctl$PR_SCHED_CORE(0x2, 0x1ffff000, 0x0, 0x0, 0x0) [ 1628.892213][ T9946] usb 4-1: new full-speed USB device number 34 using dummy_hcd 00:37:08 executing program 0: prctl$PR_SCHED_CORE(0x19, 0x0, 0x0, 0x0, 0x0) 00:37:08 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)='2', 0x1}], 0x1, 0x0, 0x0) 00:37:08 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$TCSETA(r0, 0xc0045878, 0x0) [ 1629.083214][T16220] usb 5-1: new high-speed USB device number 21 using dummy_hcd 00:37:08 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x90, 0x82, 0x6b, 0x40, 0xaf0, 0x7901, 0x4d73, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x31, 0x75, 0x34}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) [ 1629.252864][ T9946] usb 4-1: config 248 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1629.264207][ T9946] usb 4-1: config 248 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1629.324902][T16220] usb 5-1: Using ep0 maxpacket: 8 00:37:08 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1a, 0x0, &(0x7f0000000080)) [ 1629.442569][T16220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1629.454276][T16220] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1629.463662][T16220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.533268][ T9946] usb 4-1: New USB device found, idVendor=0af0, idProduct=7901, bcdDevice=4d.73 [ 1629.542835][ T9946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.551035][ T9946] usb 4-1: Product: syz [ 1629.555758][ T9946] usb 4-1: Manufacturer: syz [ 1629.560561][ T9946] usb 4-1: SerialNumber: syz [ 1629.630145][T16220] usb 5-1: config 0 descriptor?? [ 1629.885937][T21692] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1629.900450][T16220] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1630.004590][ T9946] hso 4-1:248.0: Not our interface [ 1630.062093][ T9946] usb 4-1: USB disconnect, device number 34 [ 1630.098337][T27715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.110982][T27715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1630.372622][T21692] usb 6-1: unable to get BOS descriptor or descriptor too short 00:37:09 executing program 3: syz_open_dev$dri(&(0x7f0000000100), 0x6, 0x201) 00:37:09 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)='2', 0x1}], 0x1, 0x0, 0x0) [ 1630.634024][T21692] usb 6-1: New USB device found, idVendor=0af0, idProduct=7901, bcdDevice=4d.73 [ 1630.643519][T21692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.651927][T21692] usb 6-1: Product: syz [ 1630.656282][T21692] usb 6-1: Manufacturer: syz [ 1630.661064][T21692] usb 6-1: SerialNumber: syz [ 1630.685342][T21692] usb 6-1: config 0 descriptor?? [ 1630.726683][T21692] hso 6-1:0.0: Not our interface [ 1630.933487][T16220] usb 6-1: USB disconnect, device number 19 00:37:10 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000ffff1b000101e1005a090400000207010208090501022000060081"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x3, 0x0, 0x9, 0xcda06d094196c640, 0x70}, 0x18, &(0x7f0000000140)={0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x3, 0xfffd}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1843}}, {0x12, &(0x7f00000001c0)=@string={0x12, 0x3, "565c228b9318bee038aee23693196d0b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf4eb}}, {0x5b, &(0x7f0000000240)=@string={0x5b, 0x3, "7df5b0ca26260d79f52767384729293675b4926f709990b92ff118f1d5fa91c8ab0271b4b43400edde7e1d3eddcb394898886b50a4cbd79a113d28a4ea57eea7f60ef0579720b8c3b2285527174c297ef10145d06acdac386e"}}, {0x7d, &(0x7f00000002c0)=@string={0x7d, 0x3, "07bb76f7bf05e1794adaf4f5cb01803af145eb6b462cbb6b4ce23707b781001c7d843ca0e68ae5c43185f11c475bf2059210ae5b80ea4f9a2ac859e71afec87d3cc3eaefaea4684e86d5b9e72162a6f77fd18f1c2ac9795450b1efca9e3e57f534427b7288f95674e7ddb420134f04923dc84384ec2f949514a175"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:37:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="d9"], 0x14}}, 0x0) 00:37:10 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x7, 0x1, 0x1}}]}}]}}, 0x0) [ 1631.775907][T21577] usb 5-1: USB disconnect, device number 21 00:37:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x4040534e, &(0x7f0000000040)={{0x17}, 'port1\x00'}) 00:37:10 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)='2', 0x1}], 0x1, 0x0, 0x0) 00:37:10 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x4000) socket$inet6_udplite(0xa, 0x2, 0x88) [ 1631.847541][T21577] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected 00:37:11 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)='2', 0x1}], 0x1, 0x0, 0x0) 00:37:11 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000ffff1b000101e1005a090400000207010208090501022000060081"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x3, 0x0, 0x9, 0xcda06d094196c640, 0x70}, 0x18, &(0x7f0000000140)={0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x3, 0xfffd}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1843}}, {0x12, &(0x7f00000001c0)=@string={0x12, 0x3, "565c228b9318bee038aee23693196d0b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf4eb}}, {0x5b, &(0x7f0000000240)=@string={0x5b, 0x3, "7df5b0ca26260d79f52767384729293675b4926f709990b92ff118f1d5fa91c8ab0271b4b43400edde7e1d3eddcb394898886b50a4cbd79a113d28a4ea57eea7f60ef0579720b8c3b2285527174c297ef10145d06acdac386e"}}, {0x7d, &(0x7f00000002c0)=@string={0x7d, 0x3, "07bb76f7bf05e1794adaf4f5cb01803af145eb6b462cbb6b4ce23707b781001c7d843ca0e68ae5c43185f11c475bf2059210ae5b80ea4f9a2ac859e71afec87d3cc3eaefaea4684e86d5b9e72162a6f77fd18f1c2ac9795450b1efca9e3e57f534427b7288f95674e7ddb420134f04923dc84384ec2f949514a175"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:37:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x1, 0x1}}) 00:37:11 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000001480)) [ 1632.222223][T16220] usb 1-1: new high-speed USB device number 23 using dummy_hcd 00:37:11 executing program 2: r0 = syz_open_dev$radio(0x0, 0x2, 0x2) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)='2', 0x1}], 0x1, 0x0, 0x0) 00:37:11 executing program 1: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) [ 1632.564955][ T9946] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1632.583487][T16220] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1632.593742][T16220] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1632.603816][T16220] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1632.822255][T21692] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1632.822757][T16220] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1632.839693][T16220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.848146][T16220] usb 1-1: Product: syz [ 1632.856502][T16220] usb 1-1: Manufacturer: syz [ 1632.861306][T16220] usb 1-1: SerialNumber: syz [ 1632.867960][ T9946] usb 5-1: Using ep0 maxpacket: 8 [ 1632.992793][ T9946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1633.004216][ T9946] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1633.014339][ T9946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.083246][T21692] usb 6-1: Using ep0 maxpacket: 8 [ 1633.114896][ T9946] usb 5-1: config 0 descriptor?? [ 1633.203173][T21692] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1633.214675][T21692] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1633.224437][T21692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.239636][T21692] usb 6-1: config 0 descriptor?? [ 1633.321499][T16220] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1633.346432][T16220] usb 1-1: USB disconnect, device number 23 [ 1633.382402][T16220] usblp0: removed [ 1633.405011][ T9946] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1633.526103][T21692] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1633.627503][T27750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1633.690403][T27750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.736927][T27757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1633.747333][T27757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:37:14 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000ffff1b000101e1005a090400000207010208090501022000060081"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x3, 0x0, 0x9, 0xcda06d094196c640, 0x70}, 0x18, &(0x7f0000000140)={0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x3, 0xfffd}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1843}}, {0x12, &(0x7f00000001c0)=@string={0x12, 0x3, "565c228b9318bee038aee23693196d0b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf4eb}}, {0x5b, &(0x7f0000000240)=@string={0x5b, 0x3, "7df5b0ca26260d79f52767384729293675b4926f709990b92ff118f1d5fa91c8ab0271b4b43400edde7e1d3eddcb394898886b50a4cbd79a113d28a4ea57eea7f60ef0579720b8c3b2285527174c297ef10145d06acdac386e"}}, {0x7d, &(0x7f00000002c0)=@string={0x7d, 0x3, "07bb76f7bf05e1794adaf4f5cb01803af145eb6b462cbb6b4ce23707b781001c7d843ca0e68ae5c43185f11c475bf2059210ae5b80ea4f9a2ac859e71afec87d3cc3eaefaea4684e86d5b9e72162a6f77fd18f1c2ac9795450b1efca9e3e57f534427b7288f95674e7ddb420134f04923dc84384ec2f949514a175"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:37:14 executing program 2: r0 = syz_open_dev$radio(0x0, 0x2, 0x2) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)='2', 0x1}], 0x1, 0x0, 0x0) 00:37:14 executing program 3: mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1a0ab26918f92c7f, 0xffffffffffffffff, 0x0) 00:37:14 executing program 1: syz_io_uring_setup(0x2cc5, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) 00:37:14 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x90, 0x82, 0x6b, 0x40, 0xaf0, 0x7901, 0x4d73, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x31, 0x75, 0x34, 0x0, [], [{{0x9, 0x5, 0xa, 0x0, 0x40}}]}}]}}]}}, 0x0) [ 1635.237851][T16220] usb 5-1: USB disconnect, device number 22 [ 1635.321507][T16220] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected 00:37:14 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5332, &(0x7f0000001600)) 00:37:14 executing program 2: r0 = syz_open_dev$radio(0x0, 0x2, 0x2) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)='2', 0x1}], 0x1, 0x0, 0x0) [ 1635.590349][T21577] usb 6-1: USB disconnect, device number 20 [ 1635.603438][T21692] usb 1-1: new high-speed USB device number 24 using dummy_hcd 00:37:14 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000ffff1b000101e1005a090400000207010208090501022000060081"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x3, 0x0, 0x9, 0xcda06d094196c640, 0x70}, 0x18, &(0x7f0000000140)={0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x3, 0xfffd}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1843}}, {0x12, &(0x7f00000001c0)=@string={0x12, 0x3, "565c228b9318bee038aee23693196d0b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf4eb}}, {0x5b, &(0x7f0000000240)=@string={0x5b, 0x3, "7df5b0ca26260d79f52767384729293675b4926f709990b92ff118f1d5fa91c8ab0271b4b43400edde7e1d3eddcb394898886b50a4cbd79a113d28a4ea57eea7f60ef0579720b8c3b2285527174c297ef10145d06acdac386e"}}, {0x7d, &(0x7f00000002c0)=@string={0x7d, 0x3, "07bb76f7bf05e1794adaf4f5cb01803af145eb6b462cbb6b4ce23707b781001c7d843ca0e68ae5c43185f11c475bf2059210ae5b80ea4f9a2ac859e71afec87d3cc3eaefaea4684e86d5b9e72162a6f77fd18f1c2ac9795450b1efca9e3e57f534427b7288f95674e7ddb420134f04923dc84384ec2f949514a175"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:37:14 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1635.638362][T21577] iowarrior 6-1:0.0: I/O-Warror #1 now disconnected 00:37:14 executing program 3: syz_clone(0x40008000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa2790dade8a8933c, 0x0, 0x0, 0x0, 0x0, 0x0) 00:37:14 executing program 2: syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)='2', 0x1}], 0x1, 0x0, 0x0) [ 1636.023087][T12604] usb 5-1: new high-speed USB device number 23 using dummy_hcd 00:37:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x102) close(r0) [ 1636.172572][T21692] usb 1-1: New USB device found, idVendor=0af0, idProduct=7901, bcdDevice=4d.73 [ 1636.182102][T21692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.190300][T21692] usb 1-1: Product: syz [ 1636.194761][T21692] usb 1-1: Manufacturer: syz [ 1636.199533][T21692] usb 1-1: SerialNumber: syz [ 1636.272116][T12604] usb 5-1: Using ep0 maxpacket: 8 [ 1636.272701][T16220] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1636.523355][T16220] usb 6-1: Using ep0 maxpacket: 8 [ 1636.684656][T21692] usb 1-1: config 0 descriptor?? [ 1636.685254][T16220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1636.701299][T16220] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1636.710754][T16220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.791367][T21692] hso 1-1:0.0: Not our interface [ 1636.867535][T12604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1636.878882][T12604] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1636.888336][T12604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.968488][T21692] usb 1-1: USB disconnect, device number 24 [ 1637.012245][T16220] usb 6-1: config 0 descriptor?? [ 1637.025918][T12604] usb 5-1: config 0 descriptor?? [ 1637.293887][T16220] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1637.298652][T12604] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1637.533718][T27782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.543685][T27782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.599261][T27774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.609677][T27774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:37:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/3483], &(0x7f00000001c0)='GPL\x00'}, 0x48) 00:37:18 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r0, 0xe, 0x0, 0x0, 0x0}, 0x20) 00:37:18 executing program 2: syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)='2', 0x1}], 0x1, 0x0, 0x0) 00:37:18 executing program 3: syz_clone(0x40008000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa2790dade8a8933c, 0x0, 0x0, 0x0, 0x0, 0x0) 00:37:18 executing program 0: mkdir(&(0x7f0000002300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 00:37:18 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000ffff1b000101e1005a090400000207010208090501022000060081"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x3, 0x0, 0x9, 0xcda06d094196c640, 0x70}, 0x18, &(0x7f0000000140)={0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x3, 0xfffd}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1843}}, {0x12, &(0x7f00000001c0)=@string={0x12, 0x3, "565c228b9318bee038aee23693196d0b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf4eb}}, {0x5b, &(0x7f0000000240)=@string={0x5b, 0x3, "7df5b0ca26260d79f52767384729293675b4926f709990b92ff118f1d5fa91c8ab0271b4b43400edde7e1d3eddcb394898886b50a4cbd79a113d28a4ea57eea7f60ef0579720b8c3b2285527174c297ef10145d06acdac386e"}}, {0x7d, &(0x7f00000002c0)=@string={0x7d, 0x3, "07bb76f7bf05e1794adaf4f5cb01803af145eb6b462cbb6b4ce23707b781001c7d843ca0e68ae5c43185f11c475bf2059210ae5b80ea4f9a2ac859e71afec87d3cc3eaefaea4684e86d5b9e72162a6f77fd18f1c2ac9795450b1efca9e3e57f534427b7288f95674e7ddb420134f04923dc84384ec2f949514a175"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) [ 1639.078311][T16220] usb 6-1: USB disconnect, device number 21 [ 1639.083841][T21692] usb 5-1: USB disconnect, device number 23 [ 1639.109675][T21692] iowarrior 5-1:0.0: I/O-Warror #1 now disconnected [ 1639.114891][T16220] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:37:18 executing program 2: syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)='2', 0x1}], 0x1, 0x0, 0x0) 00:37:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001780)={0x0, 0x1000000, &(0x7f0000001680)=[{&(0x7f0000000280)="4b9be005a2705b81efd20b403e38e4f169876bbc02c90cc06221c694d8955e045aa5654024fed84a8ea535fe6b7682466540430b3746f0857442cfc7ebbf61a7cf9b4521726d80e2bb3118242b174ed8dd454b3287e609f7767baede2f0affb7325d1b6e0832eb8865803ac8a04bad3c43a4c56d3f27b7c06d86d53ee9d97bb89657e48cef2430fba3a896d5bb8e0bd7e3d987b3b991499b759798b95823d06619048196b5c2be9ab13882e9ebec6607359ab95ed237de7452a9299ad9de1140a11d8695320adaa9f7fcab0916a423f7c96eb80587a0affc3469113815f19bfd7c72869a74577956fa1ed88517b59f2863fc0d43db2f94b86c2447f01b071ea8a4f8841e958fe2e041066a5d6f2b4c6d82a54b97b0741a6a36b54967fd914e64e9ba0aaea675ba4113596bba262806d6a6ec0bfb59e8fb206fa755ed086b49589cb4a10886aba51dddf27fdc734f9c03c053e3e67dfe98b09503c86d480f76c856d759676706c81e835b86f596f3dea936e0cc74a94d3cc7a98dbce18fd34fba95c41225c92b0697eb5f671915458bec1f04b58585d88e493ea1aee9e6e075883a4fef66764bdcde05097b2d86fe74ed06815d9e3d10fa0b1fd38a2465e87f156e55e002a99aae96ce9a4a2044c807a0291eeee4e9e8304c21461a5cefe4be6722e99b7d8566d2ccadf9c2494b1330aeb9401cff30afc86588c9c2e0f6e359fe436595f9a18234e92dbaa35fb8f499897c5839d590b167324ce2f29bd863afd3ec4a7e0e8cd6865b388599952c5a2c902120065cca2ac99099c8387cdbadd6a09cefc604947d5ec362047e735bf7182c02072b08d6920fb10b86e2a4e2583be79ea0598657d97f8782a14407a52d00e04fc1945b3174c62a4049ef5e8af4f8384f9b20f0738197ca6cde8c27571219b4fad9d0496cb9b17bd9ba2753d976ec5b87652527f206bb497b56c5da0035b952ce8682774c7f43535ab4e7aa3885b5a64a22f065d129985f8c599c2a701225c2b933c31f2a615a1c1ca4d933fac0819ef80daadd0919e3d3f4b81bd5eafabba141a99c540ece01476345b21b6d1b7949b33bd6d2c2ef497a9d0ab2aecd5dea8e98fcc467317ff6869356547c3eca343aa603ed6ce06a5b5e2ef7eb093ffc5b7941a45005af3bd2bbc44abeae87c758a803a8bb7bb44481c3ae724d50327bd6399daa33a1332935cae8aaf4997b7a9fbd248625c097b87250b875e451d02ec5bd8dea3809fa7143b63dcb084299f491e99a5a703ad0ebb6d984ab03168690cb9e255b967ad96ea10772c1cc9593a16ab6699ce157f411d78e6d59969ba27679adaf6b4ca3258bb6514d44c40ee977fe0f2a28ede97d159ec6aee0a97d9e162fec86179699b30df041ed483b2cfdc0ccbb87cc598d4b31f8457b84beee7886aca1a3ad9230b697622175a3a202b56083f6f1310f129febad0750df733919e10880cb10da14e3bcfa684e272f17974c7259e479ff6d01df16c421dd769945456a5e5895e8d75410b77da54854daedfe637d62dc22d56b810780b4869409c1b77512e920a8eb2a7ca90a8d715244338b79199f32a4d424671263858b0aad8e15031c155e5cb572ffeabe33ab11bcb57f01b1080cf8c4e081cc7c3bd661349cc584b30aa1b73b65997c50a2bc28dec45d31688eeb5f2af73732040cf035278caccd6dbd94a4b8e904c3e3154ffe78f3de5e174d08f1a37ca51239f2914c6a3bea574ed1be831f5e4340de0f9e3f3472974f7e87a707091a4ad85c207970933e1675c7955715c647fdacd200a3d7986465e13306c9d4853671e1de783a7da3376fb3517c73a85c92e23f07bb3889abbecf8853a2bb76ab3d7b1c86c2ea51a02abc0e2c8ca8992ace5cfb3269fa107159c6e4636c0372f1f038e4ac35c11e3ed5a99fa527fe3131a36dc86bc667a101253b01294dbff26adb74f747153f1f1fa21e1a1216649ad5541beea5b9da084877c34faa1f03ca3c20cd5d19b61fb450b910f942565811a700b33c90c7f984e9fcf56e885cc61c6b7fe75d2bc2ef0d5a599a97ce13c18d92532d021aae018ab1a22b69f2f3e2553c705c547c59faa1cea6b99ceb018612ec14bf5b5005fad3e55ecdd3f2a842f9530b141dc48a13b5c6c43e3574d91d21e178bc524a1eec0e0334a9cdde6377af0ad71e8c1a2b963e790ede12909f526cfa10edc22e223c49671a357edd796a5d267231a9ede865b528c1eebb0f6a395429b92dbd0acefd164f60f77895f8e635e55bc7a277b627e889f706688711ff3329895359594fd7c3d49f58a091d63711d11d5175194a39a0bbe32dbbcc3928d4d627d5dd456f4457b66c1577ff8b16d19cb46ae00f8330734d8ee221a83f07da1f4dd74b03610afaa24e1d8e5b1f792e7d290833f1175b0346a1720757a804b246e829f1ea9c153440e5d3b43601b795b1fa669187a6b8ae18c6a5477f515098c83b5b1b87276ab7564ea86ba5f7fa4bf26ee03c9726662f70abe380de93607d5eed8765bf80b2f27a23f6a6c46038481919aac05e3b53149baf02168a73072f980f9b02a26a2a0f32586cf5609890f6e8a02327b4c06ea6845171834f9cfd8abb69b210b98c279928bf116c42b672436f74918ade843f915466d6be0eed0eac7ce20799a21a8dbf4ceed83a6f50e6846a9a6a31d294cd7afa4352aa1d047f94a4b45c583051d4e55f8a6b815e88afd31152445c9f2fc1e482737a4104a72540a0f9b09c490993a2cd1472458dacb2f9cb57318380c48049cf4beec2b55a51abd2eaf273fa58b95d2881a29b55179b6f8dbadf70062abb35d65e00e5ca9a9c8ceacde90c4b62ae0025db165067821c8db8969975d1a6dbbb706747ebc1fe09a24ba5aa710391ab502b65196bdca4afcbfd454bb227af8d0d4b14bbc4b985eecb9c461bc56f60c504b6c619f40a6dc943a0f563175b9c0bf9b6ebf458f7e6aa7d0aa8fc732caf9453055124632c92965195d087769bcc42ee5e66f5864660d753bb2bc6dca8ca9242c5fe33b522859c19849b6e21c5395907cd2b0168d9c2bde095585d99530edd349530c130238761a506d65d4a409607fca74d457aeb97ddd98d3f104f2b9d45104579eb103aebdd0a9b689c285370f21d99d37cfa568ce0db831eb18bd3588754e827eb8098ed6c22c8235f0bbe34f97440563d6fd47deb7197629724df4b8271a1ebd6ff71e16c394154adf98f7bd5fc8f07fdbe8f6f5d3bda8fe19cd7dca17d0a8df5a30b3b2c86cb54d99c895f94f1f19d6d7013e156f5b42637354e3de3cef31fc9f1c6711b9fc602d7a36b280edeca5c0e98465b05917ffc10eb3ec55361475e569950f1329debebe4939a92df04ffe8d203f78d0ff43e1d3547f74dbebc12540cb9e67fa8f16c66ec2517fcdf2ef2c715be2829b535291f9d108bef498b603a2061016ab8a580b87f125ac2b5628507b411cd21121d0fb8e616d768302fbcb8ba88315edb4c4d1fc9eed36a2e9a761b38fafd499759eca3013e42e12f3f0c710deb4b3c114b75ee4f841fa0d382973bd10985188110d7247b905d921958ffacd79bf88451fcc3dbbe3754a03004e41b2ddaa696210d32f2f1f603231ea310014d8b6b416928930c136160572570c9f94fabfd5ce6fe71bdc7d3f443bcbc739438c288ae50e4b093963e600972ba2df305948c63fd056daf0e2205192933bae1ac761b62e8be271871e2921981c4c98f4a18975a947e42965ce82445e20a6a1854aea8a6580c3a8acf5df6845a0ad0cd19c63fd44b4438882b5c85dd0195f50cbb1f2bf26d562a8c36f9ad97e8ff7655931848ace7c24d7c2babc1ee15bab4aa6ae1a36372a7ee962f81e219568f95b13e01e808b1967814fc72b966adf399aad05a7f99631cf55bc4c7789ce9fd6a0edae7ae081da6a4d388a393fdd568b3586cf591e7bd88e6346fbc27658fc1a64427c333d55ddf3cd42bead49ab1767ed02b68c583a1bc75ce1a4466f541b7778dfca3184b1cec464598e6bae8ab0e97b579e898697fae22d1c98508edb7fd13b1030d407320e74748b87689e27b13a503f27675f99c3f591aa89e9edb15b83bb7a03ce5789ec34e08b548be33978b51be325553c4e160d21b32e647b937d4a8d889688ffe9c0c3271bf1e9bda534d299abfe0375a7411470f2b978594bccbf104a4027a3183ec523b7874be00f8305ecdeee40a7b49d3ad3210c53ea0f315a386ae626eb358b1c423dd26cfa1d568e3a26b258090f91efd6539136e98949fbbae68f98435ce8c3b926c50b6c22749388a70db5166ae9e5f23e5e265485f5a6f686a3a16a304cc40cd4b462457954b7a60cc58210e22abfe05c2fe5403342791b6cb29b25ddd8e5f770d5c2696344d28857947e0299692da96c9b7868d6b424a69befe00197a56d39d6227182246b7a9eb4dfc929170e4c3067f0c17bae6602fd3dd990d9606ce314b10abc2bc7f26ba88430b7d4fa131d0616a169fe4a36184a16930b139c3521d99ef27290476ab68e09a1116e0e24da0c9af1f280d9480402e2e4b433560e1c1553231b0aec876ad9e7abf6463efab05c31d0a8e40c4c1c0a8e5863e9ef98b6a0a1b350b21ab5e2df8355608c7bf923b9481d4ab2aaba635fd69aafacbd531a728c2bff16f2e89ac77cd93ecf18bf919718b19e79fc19e9ecca3b8873928fb1b8bcfa6d07b031405da490e9d884bf262704f2e5f7ae62bfdb962b561d3a59bbffa787c6401f7cdd162114ac31679d2e9243e86f90f949e5c026c2750fed03a6562395cb55bf61e9bb75e4fe5bda1608b425a898da7e3ecfbd1ae80d1ef70acb8eef054a6c83065315b3ba31daf537c9c4b8f77a10374f6b3b62c5b569a3be877684724fe4af33b17fe8a019931e8e524e71ff815e001895c6ceeda8437c72995583f3901a3203a8333a5a345df74b9fb69f4d10cc666032e4dda603802263db4ba0cdc3e26cb1680f3fe394b20fecba79cf062ee43f65336b760c554a5d4f204fab21caffe78d440f4dea1056fdd1c41d3c04754ad3b208d507948c56fdedd3491e64a1ae0d0206b8db0ad34d00cd62e2b510e47c490a79ab33cb7c1f639101640961fcf34e3cace69dee2465bf2a200f90ee715f8a1b27b3a5c958091a3b5655675f5482059cc29ccdebd8dfe9c305e4a459ea515b6658605f175f3ea8ae22ed6897ee122f35e4dc829d08ff49a6fb17aec4458dbefc21bfc84ee00fa3db3f3aaa8b60dd5519c7b2dfe0d85ed2d167e4120ceb2698d3da4d5fc8a1b1387bb83860f371a5b98ab74a968806cf51b8b2f156456f3e803500d61ccb3394caea5050c15b68e8bed218b715858afd9", 0xec1}], 0x300}, 0x0) 00:37:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000004400)={0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="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", 0xec1}], 0x2}, 0x0) 00:37:18 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) [ 1639.862089][T12604] usb 6-1: new high-speed USB device number 22 using dummy_hcd 00:37:19 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 00:37:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0xf}, 0x0) 00:37:19 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xee01, &(0x7f0000000380)=@framed={{}, [@ldst]}, &(0x7f0000000400)='GPL\x00', 0x0, 0xb5, &(0x7f0000000440)=""/181, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1640.103015][T12604] usb 6-1: Using ep0 maxpacket: 8 00:37:19 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003b00)={&(0x7f0000003a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) [ 1640.232383][T12604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1640.243650][T12604] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1640.253106][T12604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.426634][T12604] usb 6-1: config 0 descriptor?? 00:37:19 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000380)=@framed={{}, [], {0x95, 0x2}}, &(0x7f0000000400)='GPL\x00', 0x3, 0xb5, &(0x7f0000000440)=""/181, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1641.040894][T12604] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1641.163692][T27830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1641.173785][T27830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:37:21 executing program 3: syz_clone(0x40008000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa2790dade8a8933c, 0x0, 0x0, 0x0, 0x0, 0x0) 00:37:21 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 00:37:21 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000ffff1b000101e1005a090400000207010208090501022000060081"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x3, 0x0, 0x9, 0xcda06d094196c640, 0x70}, 0x18, &(0x7f0000000140)={0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x3, 0xfffd}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1843}}, {0x12, &(0x7f00000001c0)=@string={0x12, 0x3, "565c228b9318bee038aee23693196d0b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf4eb}}, {0x5b, &(0x7f0000000240)=@string={0x5b, 0x3, "7df5b0ca26260d79f52767384729293675b4926f709990b92ff118f1d5fa91c8ab0271b4b43400edde7e1d3eddcb394898886b50a4cbd79a113d28a4ea57eea7f60ef0579720b8c3b2285527174c297ef10145d06acdac386e"}}, {0x7d, &(0x7f00000002c0)=@string={0x7d, 0x3, "07bb76f7bf05e1794adaf4f5cb01803af145eb6b462cbb6b4ce23707b781001c7d843ca0e68ae5c43185f11c475bf2059210ae5b80ea4f9a2ac859e71afec87d3cc3eaefaea4684e86d5b9e72162a6f77fd18f1c2ac9795450b1efca9e3e57f534427b7288f95674e7ddb420134f04923dc84384ec2f949514a175"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/74, 0x4a) 00:37:21 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000280)="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", 0xec1}], 0x300}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) 00:37:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x5450, 0x0) 00:37:21 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000400)='GPL\x00', 0x3, 0xb5, &(0x7f0000000440)=""/181, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:37:21 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(r0, 0x0, 0x0, 0x0, 0x0) [ 1642.756700][T12604] usb 6-1: USB disconnect, device number 22 00:37:22 executing program 4: socketpair(0x1d, 0x0, 0x2, &(0x7f0000000580)) 00:37:22 executing program 1: syz_clone(0x11009100, &(0x7f00000003c0)="bf8a36e22dd49ae8edc1e4e0d3d7ac384965dba0f1d50feb9f2096d6c31c3f96e6021ff5fe5a3a7347744b8aebc43016dd0357beceee288a04fa3d920bc4adaadf1f45bdb1eb255f2a35a6d47e9e8c639264ccfd8eb73b757b2c03ef841b3abfeeb0c2a94b6056d186ba5d018cf67e8ace8c31bca029cec3e087da5ce202ff3a2beefeaf1408b98d2dcef07d9eb3ead011d12526eff0043ff28226e2a71ab9a8e8162d6d8117576a021d596105810bba6bdfd7a8ac6068be866ab9528fb5c033bb1f0ee18211618d46a572655e0b4871ca2d6d8a2cb2333ec40e", 0xcc, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000280)="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") r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000007c0)={r0}, 0x8) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 00:37:22 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580), 0x10) 00:37:22 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(r0, &(0x7f0000000380), 0x0, 0x0, 0x0) [ 1643.119577][T12604] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:37:22 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(r0, &(0x7f0000000380), 0x0, 0x0, 0x0) [ 1643.714583][T12604] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1643.984646][T12604] usb 6-1: Using ep0 maxpacket: 8 [ 1644.123552][T12604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1644.134873][T12604] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1644.144251][T12604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.223115][T12604] usb 6-1: config 0 descriptor?? [ 1644.504305][T12604] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1644.738489][T27846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.749573][T27846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.158639][T16220] usb 6-1: USB disconnect, device number 23 [ 1646.257480][T16220] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:37:27 executing program 3: syz_clone(0x40008000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa2790dade8a8933c, 0x0, 0x0, 0x0, 0x0, 0x0) 00:37:27 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) 00:37:27 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000380)=@framed={{}, [@ldst={0x7}]}, &(0x7f0000000400)='GPL\x00', 0x3, 0xb5, &(0x7f0000000440)=""/181, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:37:27 executing program 1: syz_clone(0x8000000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 00:37:27 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(r0, &(0x7f0000000380), 0x0, 0x0, 0x0) 00:37:27 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000ffff1b000101e1005a090400000207010208090501022000060081"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x3, 0x0, 0x9, 0xcda06d094196c640, 0x70}, 0x18, &(0x7f0000000140)={0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x3, 0xfffd}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1843}}, {0x12, &(0x7f00000001c0)=@string={0x12, 0x3, "565c228b9318bee038aee23693196d0b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf4eb}}, {0x5b, &(0x7f0000000240)=@string={0x5b, 0x3, "7df5b0ca26260d79f52767384729293675b4926f709990b92ff118f1d5fa91c8ab0271b4b43400edde7e1d3eddcb394898886b50a4cbd79a113d28a4ea57eea7f60ef0579720b8c3b2285527174c297ef10145d06acdac386e"}}, {0x7d, &(0x7f00000002c0)=@string={0x7d, 0x3, "07bb76f7bf05e1794adaf4f5cb01803af145eb6b462cbb6b4ce23707b781001c7d843ca0e68ae5c43185f11c475bf2059210ae5b80ea4f9a2ac859e71afec87d3cc3eaefaea4684e86d5b9e72162a6f77fd18f1c2ac9795450b1efca9e3e57f534427b7288f95674e7ddb420134f04923dc84384ec2f949514a175"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/74, 0x4a) 00:37:27 executing program 4: socketpair(0x23, 0x0, 0x5, &(0x7f0000000040)) 00:37:27 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(r0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0) 00:37:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'syzkaller0\x00', 0x400}) 00:37:27 executing program 0: syz_clone(0x11009100, &(0x7f00000003c0), 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000280)="bb928ade64e75b3787d9ba3fb7058f43bcf9700f00d1f81cd63da302f4b5f2fa7985e6e26deb2435ca1f6275c3a6a90fa6d53c3a2461d53c251935d71357549235eb1245aac49453a12b2f0a78479986c84c2de80af42b97cc4804f6c3c42c1fc7644e821da7d9c884ae98aa21e0bbafbf7efd044dc998125b561bd90fedf625b3095cc098f5f2f84b130016ebe597c141796a03f70df6bf04086400151ca7d195e459b20857fa8ed1eb8eed7d95049aaea8c40ddead109cbb16b9c7482aab3c2f42c06f1dcb34373868c16677e62c8a19c82bcd2fedb94e5a8c0f2d51837b5ac842077a8f245c8f066e92a929085543") openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) [ 1648.852204][T16220] usb 6-1: new high-speed USB device number 24 using dummy_hcd 00:37:28 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(r0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0) [ 1649.124593][T16220] usb 6-1: Using ep0 maxpacket: 8 [ 1649.248130][T16220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1649.259697][T16220] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1649.269184][T16220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:37:28 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85000000}}, &(0x7f0000000400)='GPL\x00', 0x3, 0xb5, &(0x7f0000000440)=""/181, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1649.674507][T16220] usb 6-1: config 0 descriptor?? [ 1650.177745][T16220] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1650.436151][T27870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1650.445939][T27870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:37:30 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(r0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0) 00:37:30 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) 00:37:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) 00:37:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x0, 0x0, 0x1c}, 0x48) 00:37:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000280)="4b9be005a2705b81efd20b403e38e4f169876bbc02c90cc06221c694d8955e045aa5654024fed84a8ea535fe6b7682466540430b3746f0857442cfc7ebbf61a7cf9b4521726d80e2bb3118242b174ed8dd454b3287e609f7767baede2f0affb7325d1b6e0832eb8865803ac8a04bad3c43a4c56d3f27b7c06d86d53ee9d97bb89657e48cef2430fba3a896d5bb8e0bd7e3d987b3b991499b759798b95823d06619048196b5c2be9ab13882e9ebec6607359ab95ed237de7452a9299ad9de1140a11d869532", 0xc5}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x300) 00:37:31 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000ffff1b000101e1005a090400000207010208090501022000060081"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x3, 0x0, 0x9, 0xcda06d094196c640, 0x70}, 0x18, &(0x7f0000000140)={0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x3, 0xfffd}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1843}}, {0x12, &(0x7f00000001c0)=@string={0x12, 0x3, "565c228b9318bee038aee23693196d0b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf4eb}}, {0x5b, &(0x7f0000000240)=@string={0x5b, 0x3, "7df5b0ca26260d79f52767384729293675b4926f709990b92ff118f1d5fa91c8ab0271b4b43400edde7e1d3eddcb394898886b50a4cbd79a113d28a4ea57eea7f60ef0579720b8c3b2285527174c297ef10145d06acdac386e"}}, {0x7d, &(0x7f00000002c0)=@string={0x7d, 0x3, "07bb76f7bf05e1794adaf4f5cb01803af145eb6b462cbb6b4ce23707b781001c7d843ca0e68ae5c43185f11c475bf2059210ae5b80ea4f9a2ac859e71afec87d3cc3eaefaea4684e86d5b9e72162a6f77fd18f1c2ac9795450b1efca9e3e57f534427b7288f95674e7ddb420134f04923dc84384ec2f949514a175"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/74, 0x4a) 00:37:31 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x401c5820, &(0x7f0000000040)={{0x17}, 'port1\x00'}) 00:37:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x10, &(0x7f0000000000), 0x14) 00:37:31 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0) 00:37:31 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000001640), &(0x7f0000001680)=0xc) 00:37:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000000c0)={0x0, @in, 0xfffffff9, 0x0, 0x200, 0x0, 0x40}, 0x98) [ 1651.909762][T21692] usb 6-1: USB disconnect, device number 24 [ 1651.939923][T21692] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:37:31 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f00000000c0)={0x4a, 0x1c, 0x2}, 0x1c) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/159, 0x9f}, 0xc0) 00:37:31 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0xc}, 0x0) 00:37:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f00000002c0)=@in6={0x1c, 0x1c}, 0x1c) 00:37:31 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0) 00:37:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 00:37:31 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0) [ 1652.662537][T21692] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1652.914323][T21692] usb 6-1: Using ep0 maxpacket: 8 [ 1653.033251][T21692] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1653.044865][T21692] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1653.054285][T21692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.203943][T21692] usb 6-1: config 0 descriptor?? [ 1653.457549][T21692] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1653.664365][T27912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1653.674409][T27912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:37:34 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000ffff1b000101e1005a090400000207010208090501022000060081"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x3, 0x0, 0x9, 0xcda06d094196c640, 0x70}, 0x18, &(0x7f0000000140)={0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x3, 0xfffd}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1843}}, {0x12, &(0x7f00000001c0)=@string={0x12, 0x3, "565c228b9318bee038aee23693196d0b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf4eb}}, {0x5b, &(0x7f0000000240)=@string={0x5b, 0x3, "7df5b0ca26260d79f52767384729293675b4926f709990b92ff118f1d5fa91c8ab0271b4b43400edde7e1d3eddcb394898886b50a4cbd79a113d28a4ea57eea7f60ef0579720b8c3b2285527174c297ef10145d06acdac386e"}}, {0x7d, &(0x7f00000002c0)=@string={0x7d, 0x3, "07bb76f7bf05e1794adaf4f5cb01803af145eb6b462cbb6b4ce23707b781001c7d843ca0e68ae5c43185f11c475bf2059210ae5b80ea4f9a2ac859e71afec87d3cc3eaefaea4684e86d5b9e72162a6f77fd18f1c2ac9795450b1efca9e3e57f534427b7288f95674e7ddb420134f04923dc84384ec2f949514a175"}}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:37:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0xbb39f1112b1bfed0) 00:37:34 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 00:37:34 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x1}, 0x1c) 00:37:34 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200), 0x98) 00:37:34 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000280)=""/187, 0xbb}], 0x1) [ 1655.323475][T21692] usb 6-1: USB disconnect, device number 25 [ 1655.411290][T21692] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:37:34 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x15, &(0x7f0000000080)={0x0, 0x2}, 0x8) 00:37:34 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) 00:37:34 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000007c0)={0x10, 0x2}, 0x10) 00:37:35 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) connect$inet(r1, &(0x7f00000003c0)={0x10, 0x2}, 0x10) 00:37:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000000), &(0x7f0000000080)=0x8) [ 1656.152225][T12604] usb 6-1: new high-speed USB device number 26 using dummy_hcd 00:37:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x23, &(0x7f0000000040), 0x90) [ 1656.402686][T12604] usb 6-1: Using ep0 maxpacket: 8 [ 1656.532883][T12604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1656.544134][T12604] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1656.553500][T12604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.673466][T12604] usb 6-1: config 0 descriptor?? [ 1656.952038][T12604] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1657.151104][T27947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.160907][T27947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:37:37 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000ffff1b000101e1005a090400000207010208090501022000060081"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x3, 0x0, 0x9, 0xcda06d094196c640, 0x70}, 0x18, &(0x7f0000000140)={0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x3, 0xfffd}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1843}}, {0x12, &(0x7f00000001c0)=@string={0x12, 0x3, "565c228b9318bee038aee23693196d0b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf4eb}}, {0x5b, &(0x7f0000000240)=@string={0x5b, 0x3, "7df5b0ca26260d79f52767384729293675b4926f709990b92ff118f1d5fa91c8ab0271b4b43400edde7e1d3eddcb394898886b50a4cbd79a113d28a4ea57eea7f60ef0579720b8c3b2285527174c297ef10145d06acdac386e"}}, {0x7d, &(0x7f00000002c0)=@string={0x7d, 0x3, "07bb76f7bf05e1794adaf4f5cb01803af145eb6b462cbb6b4ce23707b781001c7d843ca0e68ae5c43185f11c475bf2059210ae5b80ea4f9a2ac859e71afec87d3cc3eaefaea4684e86d5b9e72162a6f77fd18f1c2ac9795450b1efca9e3e57f534427b7288f95674e7ddb420134f04923dc84384ec2f949514a175"}}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:37:37 executing program 2: syz_emit_ethernet(0x22, &(0x7f00000000c0)={@random="4d549af73517", @remote, @val, {@ipv4}}, 0x0) 00:37:37 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="cb98abf43214", @random="d2b3668c9cce", @val, {@ipv6}}, 0x0) 00:37:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000001340), &(0x7f0000001400)=0x98) 00:37:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000000), &(0x7f0000000040)=0x8) 00:37:37 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x10) [ 1658.885623][T12604] usb 6-1: USB disconnect, device number 26 [ 1658.942909][T12604] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:37:38 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000001600)={0x1c, 0x1c, 0x3}, 0x1c) 00:37:38 executing program 1: r0 = socket(0x1c, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x1c, 0x1c, 0x3}, 0x1c) 00:37:38 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000000), &(0x7f0000001700)=0x4) 00:37:38 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x20, &(0x7f00000001c0), 0x4) 00:37:38 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f00000011c0), 0xc) 00:37:38 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) execve(0x0, 0x0, 0x0) [ 1659.622359][T12604] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1659.883249][T12604] usb 6-1: Using ep0 maxpacket: 8 [ 1660.036733][T12604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1660.048182][T12604] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1660.058179][T12604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.234264][T12604] usb 6-1: config 0 descriptor?? [ 1660.506238][T12604] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1660.699387][T27976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1660.712782][T27976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:37:41 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000ffff1b000101e1005a090400000207010208090501022000060081"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x3, 0x0, 0x9, 0xcda06d094196c640, 0x70}, 0x18, &(0x7f0000000140)={0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x3, 0xfffd}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1843}}, {0x12, &(0x7f00000001c0)=@string={0x12, 0x3, "565c228b9318bee038aee23693196d0b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf4eb}}, {0x5b, &(0x7f0000000240)=@string={0x5b, 0x3, "7df5b0ca26260d79f52767384729293675b4926f709990b92ff118f1d5fa91c8ab0271b4b43400edde7e1d3eddcb394898886b50a4cbd79a113d28a4ea57eea7f60ef0579720b8c3b2285527174c297ef10145d06acdac386e"}}, {0x7d, &(0x7f00000002c0)=@string={0x7d, 0x3, "07bb76f7bf05e1794adaf4f5cb01803af145eb6b462cbb6b4ce23707b781001c7d843ca0e68ae5c43185f11c475bf2059210ae5b80ea4f9a2ac859e71afec87d3cc3eaefaea4684e86d5b9e72162a6f77fd18f1c2ac9795450b1efca9e3e57f534427b7288f95674e7ddb420134f04923dc84384ec2f949514a175"}}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:37:41 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) getpeername(r0, 0x0, 0x0) 00:37:41 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, &(0x7f0000000000)='}', 0x1, 0x0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x3}, 0x8) 00:37:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0xa, 0x0, 0x12) 00:37:41 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000240)=@abs={0x1, 0x14, 0x1}, 0x8) 00:37:41 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x0) fcntl$setown(r0, 0x6, 0x0) [ 1662.220954][T12604] usb 6-1: USB disconnect, device number 27 [ 1662.234656][T12604] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:37:41 executing program 3: fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)) 00:37:41 executing program 2: mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x9011, 0xffffffffffffffff, 0x0) 00:37:41 executing program 0: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) readlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 00:37:41 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 00:37:41 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x142) lstat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) utimensat(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 00:37:41 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) [ 1663.002764][T12604] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1663.253741][T12604] usb 6-1: Using ep0 maxpacket: 8 [ 1663.392339][T12604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1663.403723][T12604] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1663.413167][T12604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.430458][T12604] usb 6-1: config 0 descriptor?? [ 1663.698108][T12604] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1663.896128][T28009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.905592][T28009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:37:44 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:37:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f00000000c0), 0x4) 00:37:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x0, 0x0, 0x0) 00:37:44 executing program 1: syz_emit_ethernet(0x4f, &(0x7f0000000000)={@remote, @broadcast, @val, {@ipv6}}, 0x0) 00:37:44 executing program 4: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f000000f000/0x3000)=nil, 0x0) 00:37:44 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0xd7) mkdir(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x0) stat(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)) [ 1665.657312][T16220] usb 6-1: USB disconnect, device number 28 [ 1665.752865][T16220] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:37:44 executing program 4: open$dir(&(0x7f00000000c0)='./file0\x00', 0xa00, 0x0) 00:37:44 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000046c0)={@random="31d2e3d3ff00", @remote, @val, {@ipv6}}, 0x0) 00:37:44 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff) 00:37:45 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) 00:37:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2811, r0, 0x0) 00:37:45 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000000c0)="2a8d37a2881f2579c527d93b0c45a96bf345594b4ee087670c57ad2c4c15c0c5a8a0d4a8cf257db40d89ee3cb29eab4c4a1f8cff6c49604d1635257d1be95b00ba9a84d6c0f4f5678fa8bc1680ef2cd78dc57d7527d0881ae4cce1f8ef217df3e90eb048bd8b66331aeedd72e088a954a67cda2b943383e2163cbcc88d28851148e598405f50b198dcfb50ef24e2f1c7f4986c45a4d889cad9983db95a58661dbe100b0d6e8a8dc1d25cfda22a683a5292", 0xb1}, {&(0x7f0000000180)="a1ce8463a8e0a82b78b268b4b4cb747bde45e3faf2c33b45811f0e424b8f658b84125b08bdd208322049efdc0da636f59b6c5ae742e96898b13b85dfb91c6c73047fc4c7e320c86193eea704b4c7b7196aec38ee5159676e2d58cd7b06b2dd6c54ad3bbaea8867356f5fd549d2a6aec1fde4b13be78b8ebc59107c130bf9538d0e4f1d7e7dd74c0cd8fea9bfb0ca7abec4302c35723edf8d67cbb21c8e81cfcb01c49138543dde4d977cf39dbf829dffd6ab4b", 0xb3}, {&(0x7f0000000240)="1b8fe8608f37eb5fdf81299d84ab846f34a6673ad5ee32cc27fa699046bde006d839eca586f04f0f66e4ba91296a93f4b194bb20d1e5bc93f3426a7a4fd6b74f756dd8cb331e7d5ab958d7128374fd2bcf2ae4828459d6c79435754b0b9a75b3190ff893fed6a0b3091cf72a6bd9249b8c7143efa0c55268def38484f7d8b9747b5d909adceba1af31785cc251167a299cfac9dc38ca608c11cf96f5ec60cb07c227db64dcc951fdff64d70368b8f33016da719149c63ee3dd29789f8f5722", 0xbf}, {&(0x7f0000000300)="6b9caa46e83c23160b5fc4e9bce66ee86b61d045bfdbeadc72f9a932e36f79c07f4b1c9928c162eee68439195c1ad8e80b0f7ddca9c62357eb273d56602d79eb9241e8e7e219cdecdf5d12581b01ec67a5a82537d8c008afa6a652923572ace6441387200dbecc9443cadd5df20683f42248a6408bd4e626d9aff9b9124f0a3184e8f75fab3a091b13f29434a39948658e55be1c2d2ea276e33e469d63da9dafb28ed62ad6b1f32869f82e21d6327ba6377ea446bb39f3696da8c247d4758ab05334b6955dbeae83cb0d4fd171f72dd6b6f7b89afcadbd9f02ea83247377cbc662032fcae87c3fb29d1a59954173323a", 0xf0}, {&(0x7f0000000400)="9095c679ddaabafe5a7c2f7597f97fd49556a36e623cd4a84d", 0x19}, {&(0x7f0000000440)="35395a78b7ed1e32bf83664707d3257e2024f0408a622c4eef5c37c08c52acd10daf274fd161dfdacdda1e728b73c4890541d88b838f8733780526e128dfc862e94a688aba8e91dacbd09199fae3a9be467821bc31312b4d16fec325d06a827f84e4edd237eb887c90c470ff509bd294ebc0d46434c25aa0e7ea6ae74df6f19da2ae7885b7e14939dfc75eb6e8f4be2830c51e8daa7c0cafcc1368eacb0d978004ea887c09f6feab5db9b0b60e28af6b684cbd6ef456211dadfb9612553c860946d1251a7329510118fd1ae40720", 0xce}, {&(0x7f0000000540)="a1ea1636f4b5", 0x6}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="e5b5124011b8583231fd9a712a94ef069bca8a694c519b18693d94d4f5dd561c94ef5a6cce19707f03753581074afdcfd1b6cb79d0867f94798293ae03624e935370029506413a539573836b0c97e9cac7a7003f8ab2b5098ad1904c4c101702a6740bbe970a42855e92e6b7efc90929b5eff713f2f3aa4a40ebf7dd9c65c6d0d218827bc87a38c026c1edd3b3a3fca4a463401b60bb4f2d9637db78d86d3336125b60b0846538fed0841377377ff4d190aab70ec3c2e19fb391b05305d56a629bbb5ba7018a417c923804240aa8fcfa70ea88", 0xd3}], 0x10000000000002c2, &(0x7f0000002740)=[{0x88, 0x0, 0x0, "09f44010f52162141ba2447d8b1dbfa093d19faa2d2588a74d3ef4f8343fb1bdf026e5ac2649e3ae297ae9142016c09c10160bac73a11091795bd38536166ab0d876cdd3d9e8854a266ecd63e9270fe7a5491e150bf08e87a8a76c9ebd2fa4b14e03fa360b08bd39955a453b26ea8bdc5bf741"}, {0xb8, 0x0, 0x0, "2cfca52198c4b95838b7af2580523fe9856c7a341062b1aae2bd79ac37b10f4263cca2cd87a9b7b1988d60177e66a196b8cb3e5ebc0b6953932a179d290edd0f29e65d40900266f3262fbe9d5149b5490b90f98e29ed4dc5e2cf2bedb5cc177bfcdd8483e2cf5e051505896cd8d06a08be0a10958338725be3d1ce4bed69127bfd84db8c8a67aad4853a2a6e1f5d49806d001dd6f316f1c5bd923a1a23f1420f69aba5501afe9cae"}, {0x1010, 0x0, 0x0, "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"}], 0x1150}, 0xc) [ 1666.402562][T12604] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1666.654490][T12604] usb 6-1: Using ep0 maxpacket: 8 [ 1666.792893][T12604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1666.804171][T12604] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1666.814134][T12604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.831258][T12604] usb 6-1: config 0 descriptor?? [ 1667.108373][T12604] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 00:37:48 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:37:48 executing program 2: getrlimit(0x0, &(0x7f0000001380)) 00:37:48 executing program 0: open(&(0x7f0000000040)='.\x00', 0x2, 0x0) 00:37:48 executing program 1: syz_emit_ethernet(0x1fbf, &(0x7f00000046c0)={@random="31d2e3d3ff00", @remote, @val, {@ipv6}}, 0x0) 00:37:48 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 00:37:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000680)={&(0x7f00000007c0)=@file={0x0, './file0/file0\x00'}, 0x8, &(0x7f0000000580)=[{&(0x7f00000000c0)="b8d16d7a4571adfb223d54459ce4a8080355cf889c38e6c74465df961c871865bd6086e29622ad0957f4bca188e816796a375038e2ec64fc0c305dbc194988e575197b71e1870d5f2f39a749b6d193b80785c8451942779f4cc2550200e3f0825925f7ac0b66a8d3", 0x68}, {&(0x7f00000001c0)="258b74810f96aaca84b3ae1b40197de7d84ea8c800129a5492c057b0d15f95605c38e0c2dd47b1359a28c6314aefec87a9d55a6530b318a0cc7bd78a92cc6da525d3b84cc7a9de5b563daf3714cfd7db4105681c2fb5b99ed146c678bfadb2f0f69f58bcbfffc9f20106d49c7744fb72483dde15a776bec6cfcc104e29fd001fa215ab1a2b6013ea79f8938e9530f17a477667d0a55015f53ba64a1736467ea5d8fc", 0xa2}, {&(0x7f0000000280)="f82968862c0403fdea6c1b50b2892902b66c2fd550cf3063bcbb88e5ee7ae5b8fb8acea95dbff4bf40cfc58f9c722c685fa8a7eeb396462a00a1324431eb4003f539ab6fcde8d7a525243f92133dff408ef0894c0555ccb8304b312b67ef4ee14f1627173a313de5c9fc", 0x6a}, {&(0x7f0000000300)="9aea252805f240ed9df2f0131de73d70333553512394accda998c1c7340fe1bf8050ea090e71b18c3fe82bdd7c486db7edc25f3de05a8ccc3e9cd75cbd361e50de62bf754b90c4d6fe77e04ffc8dc16287bab5aace52422884678c4efbc9b61580e85b4a1f2ae8589fdd0a13c5876f5df07661dae2685c7c1fc07dd258fb88fffa287525a288112f88c21b75eac9418d7d518fc4dc86528c47f9358c8ec4ad8d2f99419fd45e0b37b68370cc2a091dd69f51a0aedf7d85117409ec142a9d7bda5f35e36239bff67ef7", 0xc9}, {&(0x7f0000000400)="ff586f46b85e9729fa22992ab5a7ed5c91f59f7a6e53f8d463b3f0e17be3f9e2796adc76bb4603955e782684eb1c111e10e24eb37f550b42d5f9bd39e83a95da859dbec3e014545c783ed42c529afe2070d90187f919aa6ccd957534da08c8fb6f7ec6b35339586fd2538bf304de35ee327e4851a8701b84358d65f37512af17ffe2c192d1eef9693fd04373f13e905d36d5db692a87cc50fe60139ad956c721af580196d85d2f0d80ba52af8aeacdf69b6f5ccac3212a797baee33407b28ceb777e", 0xc2}, {&(0x7f0000000500)="c2d15380f8c5c0669d92f3502bcfaaa9ad064863aecc180507a7e77d85630549ee980b92d564dfd32ec76c3e7247fcec46c85f74ae49955f9e07ed34cdb326f48a95f64db3b8890d8de315", 0x4b}], 0x6, &(0x7f0000000840)=[@rights, @cred], 0xfffffffffffffe73}, 0x0) [ 1669.062983][T16220] usb 6-1: USB disconnect, device number 29 [ 1669.127290][T16220] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:37:48 executing program 1: open$dir(&(0x7f0000000640)='./file\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file\x00', 0x200, 0x0) 00:37:48 executing program 3: mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) 00:37:48 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) 00:37:48 executing program 0: getpgrp(0x0) syz_clone(0x51088100, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0), 0x0) 00:37:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0x19, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:37:48 executing program 1: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8929, &(0x7f00000000c0)={'sit0\x00', 0x0}) [ 1669.732465][T16220] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1669.973752][T16220] usb 6-1: Using ep0 maxpacket: 8 [ 1670.103304][T16220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1670.114679][T16220] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1670.124054][T16220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.212948][T16220] usb 6-1: config 0 descriptor?? [ 1672.437468][T16220] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 00:37:51 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:37:51 executing program 2: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891f, &(0x7f00000000c0)={'sit0\x00', 0x0}) 00:37:51 executing program 3: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8913, &(0x7f00000000c0)={'sit0\x00', 0x0}) 00:37:51 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@unhide}]}) 00:37:51 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup2(r2, r1) r4 = dup2(r3, r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x22, &(0x7f00000001c0), 0x7) 00:37:51 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f0000000400)='./file0\x00'}, 0x10) [ 1672.498519][T16220] usb 6-1: USB disconnect, device number 30 [ 1672.576715][T16220] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:37:51 executing program 3: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8923, &(0x7f00000000c0)={'sit0\x00', 0x0}) 00:37:51 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000001440)=[{&(0x7f0000000080)="51fabf7165abe1", 0x7, 0xfffffffffffffff9}, {&(0x7f00000000c0)='&', 0x1}], 0x0, 0x0) 00:37:51 executing program 2: shmget$private(0x0, 0x1000, 0x54000a00, &(0x7f0000ffc000/0x1000)=nil) [ 1673.064031][T28079] ISOFS: Unable to identify CD-ROM format. 00:37:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f00000004c0)="34352e44c45fd3", 0x7, 0x8}, {0x0, 0x0, 0x1000100000000}], 0x0, &(0x7f0000000400)) 00:37:52 executing program 4: io_uring_setup(0x1046, &(0x7f0000000280)) [ 1673.371936][T12604] usb 6-1: new high-speed USB device number 31 using dummy_hcd 00:37:52 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)='H', 0x1, 0x10000}], 0x0, &(0x7f0000000200)={[{@cruft}], [{@dont_appraise}]}) [ 1673.635723][T12604] usb 6-1: Using ep0 maxpacket: 8 [ 1673.753075][T12604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1673.764693][T12604] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1673.774274][T12604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.833110][T12604] usb 6-1: config 0 descriptor?? 00:37:55 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:37:55 executing program 3: r0 = socket(0x2, 0x5, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:37:55 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001540), 0x329200, 0x0) write$UHID_INPUT2(r0, 0x0, 0x0) 00:37:55 executing program 0: r0 = socket(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x890c, 0x0) 00:37:55 executing program 4: r0 = memfd_secret(0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x40000000000) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2, 0x1, 0x11, r0, 0x0) 00:37:55 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='huge=never,huge=within_size,']) [ 1676.043869][T12604] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1676.135487][T12604] usb 6-1: USB disconnect, device number 31 [ 1676.209984][T12604] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:37:55 executing program 3: r0 = epoll_create(0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x10000000) 00:37:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '@(^\x00'}]}, 0x24}}, 0x0) 00:37:55 executing program 4: r0 = memfd_secret(0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x40000000000) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2, 0x1, 0x11, r0, 0x0) 00:37:55 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)) 00:37:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000013c0)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001300)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x1e, 0x1, 0xf}]}}}], 0x18}, 0x0) 00:37:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x22, 0x0, 0x0) [ 1676.752691][T12604] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1677.002489][T12604] usb 6-1: Using ep0 maxpacket: 8 [ 1677.123805][T12604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1677.135209][T12604] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1677.144570][T12604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.166656][T12604] usb 6-1: config 0 descriptor?? 00:37:58 executing program 5: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/74, 0x4a) 00:37:58 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d429735f00010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x4, "3ecee801"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:37:58 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x5, 0x0, 0x1, [{0x0, 0x0}]}) 00:37:58 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001080), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000000c0)=""/102) 00:37:58 executing program 0: syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x200000) 00:37:58 executing program 2: syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffff800, 0x1) [ 1679.347085][T12604] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1679.436226][T12604] usb 6-1: USB disconnect, device number 32 00:37:58 executing program 0: syz_open_dev$evdev(&(0x7f0000001080), 0x7a1, 0x0) [ 1679.506225][T12604] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:37:58 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x16}]}}, &(0x7f0000000040)=""/254, 0x2a, 0xfe, 0x1}, 0x20) 00:37:58 executing program 1: syz_open_dev$mouse(&(0x7f0000000000), 0xfff, 0x0) [ 1679.702786][T16220] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1679.762555][T16218] usb 4-1: new high-speed USB device number 35 using dummy_hcd 00:37:58 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="98"], 0x0, 0x0, 0x0}) 00:37:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x1b, &(0x7f0000000000)=@ccm_128={{}, "489da00f01552a45", "b52cd6660bd0d31b7c9d0712a99583f9", "d7dfb7c0", 'o5\b}\rui?'}, 0x28) [ 1679.952486][T16220] usb 5-1: Using ep0 maxpacket: 16 00:37:59 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002840), 0x0, 0xa880) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x3}) [ 1680.032256][T28143] binder: 28142:28143 unknown command 152 [ 1680.038195][T28143] binder: 28142:28143 ioctl c0306201 20000180 returned -22 [ 1680.093762][T16220] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1680.105692][T16220] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1680.116158][T16220] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 00:37:59 executing program 5: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/74, 0x4a) [ 1680.323239][T16218] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=29.d4 [ 1680.332904][T16218] usb 4-1: New USB device strings: Mfr=115, Product=95, SerialNumber=0 [ 1680.341393][T16218] usb 4-1: Product: syz [ 1680.346387][T16218] usb 4-1: Manufacturer: syz [ 1680.397008][T16218] usb 4-1: config 0 descriptor?? [ 1680.454960][T16220] usb 5-1: string descriptor 0 read error: -22 [ 1680.461664][T16220] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1680.475057][T16220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.560469][T16220] usb 5-1: 0:2 : does not exist [ 1680.766058][T16220] usb 5-1: USB disconnect, device number 24 [ 1680.872780][T16218] gs_usb 4-1:0.0: Configuring for 2 interfaces [ 1681.325985][T16218] gs_usb 4-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 1681.416745][T16218] gs_usb: probe of 4-1:0.0 failed with error -71 [ 1681.433604][T16218] usb 4-1: USB disconnect, device number 35 00:38:00 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d429735f00010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x4, "3ecee801"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:00 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 00:38:00 executing program 1: syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 00:38:00 executing program 2: mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3) 00:38:00 executing program 5: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/74, 0x4a) 00:38:00 executing program 4: syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:38:01 executing program 2: bpf$MAP_CREATE(0x4, 0x0, 0x7800) 00:38:01 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x2000410) 00:38:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) 00:38:01 executing program 4: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) 00:38:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) 00:38:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000080)={0xe84, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xe5c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xd7, 0x5, "66b266551b3069f58284f0f3f88b77a4a2fcd059c83693206ca6b66bbcc29a47b06ea924da93c671b06833d81af59d9661414d5676797c7ec088de5f54c4e387421d5cb4ba7ed4f0fe01a4ce74d62deeea3ef40c02ca6f3f75c44cf71960d63d02f2db9aeb7fd7476c02f19f9577c8d77b7bac87f46d6a5723b9b3a3cd4eb3623dcd0b0f8e61f8d02b635450d381c8d450a47337ee01d19d36301617524d77ba8e8c41f0da80d379bf1fc5cdc20866fd2e03910df35991cb8f2acb22551b6d440fff64c2d1ee605a2273b5d70b44a2af558865"}, @ETHTOOL_A_BITSET_MASK={0x39, 0x5, "f3798bb55258c47d7c73e01677950ab8f80019f31260c137a541d1dc82cca881d9b1d485d97ae6a7068d37afb77d13ac06155f527e"}, @ETHTOOL_A_BITSET_MASK={0xd2e, 0x5, "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"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xe84}}, 0x0) [ 1682.532347][T16220] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1683.054056][T16220] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=29.d4 [ 1683.063588][T16220] usb 4-1: New USB device strings: Mfr=115, Product=95, SerialNumber=0 [ 1683.072249][T16220] usb 4-1: Product: syz [ 1683.076586][T16220] usb 4-1: Manufacturer: syz [ 1683.091394][T16220] usb 4-1: config 0 descriptor?? [ 1683.572243][T16220] gs_usb 4-1:0.0: Configuring for 2 interfaces [ 1684.002291][T16220] gs_usb 4-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 1684.056711][T16220] gs_usb: probe of 4-1:0.0 failed with error -71 [ 1684.083265][T16220] usb 4-1: USB disconnect, device number 36 00:38:03 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d429735f00010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x4, "3ecee801"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:03 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:03 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x54, 0x0, &(0x7f00000003c0)=[@clear_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:38:03 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x10001}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 00:38:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x10, &(0x7f0000000000)=@ccm_128={{}, "489da00f01552a45", "b52cd6660bd0d31b7c9d0712a99583f9", "d7dfb7c0", 'o5\b}\rui?'}, 0x28) 00:38:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x500}, 0x0) 00:38:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000c1517700"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) 00:38:03 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 00:38:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="c9"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:38:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x1000000}, 0x0) 00:38:04 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1685.152191][T12604] usb 4-1: new high-speed USB device number 37 using dummy_hcd 00:38:04 executing program 2: syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x20282) [ 1685.633137][T12604] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=29.d4 [ 1685.642527][T12604] usb 4-1: New USB device strings: Mfr=115, Product=95, SerialNumber=0 [ 1685.651020][T12604] usb 4-1: Product: syz [ 1685.655494][T12604] usb 4-1: Manufacturer: syz [ 1685.664658][T12604] usb 4-1: config 0 descriptor?? [ 1686.142314][T12604] gs_usb 4-1:0.0: Configuring for 2 interfaces [ 1686.582393][T12604] gs_usb 4-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 1686.633131][T12604] gs_usb: probe of 4-1:0.0 failed with error -71 [ 1686.659237][T12604] usb 4-1: USB disconnect, device number 37 00:38:06 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x44080, 0x0) 00:38:06 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="e6"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:38:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000002c0)=ANY=[]}) 00:38:06 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 00:38:06 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d429735f00010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x4, "3ecee801"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:06 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmmsg$inet6(r0, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:38:06 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts={{0x18}}], 0x18}}], 0x1, 0x0) 00:38:06 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x32) [ 1687.476493][ T1192] ieee802154 phy0 wpan0: encryption failed: -22 00:38:06 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/254, 0x0, 0xfe, 0x1}, 0x20) 00:38:06 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:06 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) 00:38:06 executing program 1: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) 00:38:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000780)=[{{&(0x7f0000000480)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000100)="c283b880b41a78f9f718cdcde0239920", 0x10}], 0x2, &(0x7f00000006c0)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [r2, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0xa8, 0x890}}], 0x1, 0x20040000) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000540)='./file0\x00', 0x0, 0x60) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000002c0)) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{0x0, 0x0, 0x8}], 0x5000, &(0x7f00000003c0)={[{@user_xattr}, {@data_journal}], [{@smackfsdef}, {@context={'context', 0x3d, 'user_u'}}, {@obj_role={'obj_role', 0x3d, ':'}}, {@seclabel}, {@appraise}, {@dont_hash}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}) statx(r3, 0x0, 0x400, 0x20, &(0x7f000000bb00)) [ 1687.913424][T16218] usb 4-1: new high-speed USB device number 38 using dummy_hcd 00:38:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001c40)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000440)={0xa, 0x4e24, 0x0, @remote, 0x70}, 0x1c, 0x0}}], 0x2, 0x0) 00:38:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x0, 0x0, 0x8}, 0x48) 00:38:07 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x0) [ 1688.431548][T16218] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=29.d4 [ 1688.440975][T16218] usb 4-1: New USB device strings: Mfr=115, Product=95, SerialNumber=0 [ 1688.449574][T16218] usb 4-1: Product: syz [ 1688.453991][T16218] usb 4-1: Manufacturer: syz [ 1688.491414][T16218] usb 4-1: config 0 descriptor?? [ 1689.087402][T28242] not chained 800000 origins [ 1689.092293][T28242] CPU: 0 PID: 28242 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1689.102953][T28242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1689.113112][T28242] Call Trace: [ 1689.116464][T28242] [ 1689.119472][T28242] dump_stack_lvl+0x1c8/0x256 [ 1689.124332][T28242] dump_stack+0x1a/0x1c [ 1689.128638][T28242] kmsan_internal_chain_origin+0x78/0x120 [ 1689.134535][T28242] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1689.140771][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1689.147190][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1689.153239][T28242] ? __get_compat_msghdr+0x5b/0x750 [ 1689.158604][T28242] ? get_compat_msghdr+0x8c/0x1c0 [ 1689.163800][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1689.169774][T28242] ? __get_compat_msghdr+0x5b/0x750 [ 1689.175177][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1689.181149][T28242] ? should_fail+0x3f/0x810 [ 1689.185796][T28242] ? __stack_depot_save+0x21/0x4b0 [ 1689.191050][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1689.197455][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1689.203413][T28242] __msan_chain_origin+0xbd/0x140 [ 1689.208581][T28242] __get_compat_msghdr+0x514/0x750 [ 1689.213896][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1689.218913][T28242] ? ___sys_recvmsg+0xa9/0x890 [ 1689.223802][T28242] ? do_recvmmsg+0x63a/0x10a0 [ 1689.228634][T28242] ___sys_recvmsg+0x19d/0x890 [ 1689.233457][T28242] ? __schedule+0x1609/0x21d0 [ 1689.238275][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1689.244239][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1689.250204][T28242] do_recvmmsg+0x63a/0x10a0 [ 1689.254852][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1689.261282][T28242] ? __sys_recvmmsg+0x52/0x450 [ 1689.266168][T28242] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1689.272737][T28242] __sys_recvmmsg+0x113/0x450 [ 1689.277555][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1689.283969][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1689.289119][T28242] ? exit_to_user_mode_prepare+0x119/0x220 [ 1689.295069][T28242] do_fast_syscall_32+0x33/0x70 [ 1689.300043][T28242] do_SYSENTER_32+0x1b/0x20 [ 1689.304668][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1689.311182][T28242] RIP: 0023:0xf7f6e549 [ 1689.315347][T28242] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1689.335111][T28242] RSP: 002b:00000000f7f485cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1689.343664][T28242] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1689.351747][T28242] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1689.359823][T28242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1689.367914][T28242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1689.376161][T28242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1689.384256][T28242] [ 1689.392060][T28242] Uninit was stored to memory at: [ 1689.397285][T28242] __get_compat_msghdr+0x514/0x750 [ 1689.402932][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1689.407947][T28242] ___sys_recvmsg+0x19d/0x890 [ 1689.412930][T28242] do_recvmmsg+0x63a/0x10a0 [ 1689.417558][T28242] __sys_recvmmsg+0x113/0x450 [ 1689.422501][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1689.428889][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1689.434131][T28242] do_fast_syscall_32+0x33/0x70 [ 1689.439122][T28242] do_SYSENTER_32+0x1b/0x20 [ 1689.443836][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1689.450352][T28242] [ 1689.452822][T28242] Uninit was stored to memory at: [ 1689.458465][T28242] __get_compat_msghdr+0x514/0x750 [ 1689.463840][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1689.468858][T28242] ___sys_recvmsg+0x19d/0x890 [ 1689.473755][T28242] do_recvmmsg+0x63a/0x10a0 [ 1689.478384][T28242] __sys_recvmmsg+0x113/0x450 [ 1689.483273][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1689.485847][T16218] gs_usb 4-1:0.0: Configuring for 2 interfaces [ 1689.489615][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1689.501022][T28242] do_fast_syscall_32+0x33/0x70 [ 1689.506079][T28242] do_SYSENTER_32+0x1b/0x20 [ 1689.510709][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1689.517336][T28242] [ 1689.519823][T28242] Uninit was stored to memory at: [ 1689.525285][T28242] __get_compat_msghdr+0x514/0x750 [ 1689.530565][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1689.535687][T28242] ___sys_recvmsg+0x19d/0x890 [ 1689.540494][T28242] do_recvmmsg+0x63a/0x10a0 [ 1689.545214][T28242] __sys_recvmmsg+0x113/0x450 [ 1689.550048][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1689.556530][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1689.561694][T28242] do_fast_syscall_32+0x33/0x70 [ 1689.566810][T28242] do_SYSENTER_32+0x1b/0x20 [ 1689.571603][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1689.578209][T28242] [ 1689.580599][T28242] Uninit was stored to memory at: [ 1689.585895][T28242] __get_compat_msghdr+0x514/0x750 [ 1689.591168][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1689.596326][T28242] ___sys_recvmsg+0x19d/0x890 [ 1689.601132][T28242] do_recvmmsg+0x63a/0x10a0 [ 1689.605952][T28242] __sys_recvmmsg+0x113/0x450 [ 1689.610755][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1689.617280][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1689.622515][T28242] do_fast_syscall_32+0x33/0x70 [ 1689.627519][T28242] do_SYSENTER_32+0x1b/0x20 [ 1689.632294][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1689.638834][T28242] [ 1689.641236][T28242] Uninit was stored to memory at: [ 1689.646577][T28242] __get_compat_msghdr+0x514/0x750 [ 1689.651931][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1689.656961][T28242] ___sys_recvmsg+0x19d/0x890 [ 1689.661901][T28242] do_recvmmsg+0x63a/0x10a0 [ 1689.666529][T28242] __sys_recvmmsg+0x113/0x450 [ 1689.671331][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1689.677861][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1689.683107][T28242] do_fast_syscall_32+0x33/0x70 [ 1689.688094][T28242] do_SYSENTER_32+0x1b/0x20 [ 1689.692847][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1689.699365][T28242] [ 1689.701878][T28242] Uninit was stored to memory at: [ 1689.707080][T28242] __get_compat_msghdr+0x514/0x750 [ 1689.712483][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1689.717536][T28242] ___sys_recvmsg+0x19d/0x890 [ 1689.722480][T28242] do_recvmmsg+0x63a/0x10a0 [ 1689.727104][T28242] __sys_recvmmsg+0x113/0x450 [ 1689.731988][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1689.738371][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1689.743649][T28242] do_fast_syscall_32+0x33/0x70 [ 1689.748659][T28242] do_SYSENTER_32+0x1b/0x20 [ 1689.753416][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1689.759936][T28242] [ 1689.762454][T28242] Uninit was stored to memory at: [ 1689.762662][T16218] gs_usb 4-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 1689.767622][T28242] __get_compat_msghdr+0x514/0x750 [ 1689.781145][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1689.786320][T28242] ___sys_recvmsg+0x19d/0x890 [ 1689.791133][T28242] do_recvmmsg+0x63a/0x10a0 [ 1689.795875][T28242] __sys_recvmmsg+0x113/0x450 [ 1689.800697][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1689.807185][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1689.812424][T28242] do_fast_syscall_32+0x33/0x70 [ 1689.817394][T28242] do_SYSENTER_32+0x1b/0x20 [ 1689.822116][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1689.828650][T28242] [ 1689.831054][T28242] Local variable msg_sys created at: [ 1689.836546][T28242] do_recvmmsg+0x5f/0x10a0 [ 1689.841097][T28242] __sys_recvmmsg+0x113/0x450 [ 1689.924548][T16218] gs_usb: probe of 4-1:0.0 failed with error -71 [ 1689.953231][T16218] usb 4-1: USB disconnect, device number 38 [ 1689.969838][T24707] udevd[24707]: setting mode of /dev/bus/usb/004/038 to 020664 failed: No such file or directory [ 1690.001344][T24707] udevd[24707]: setting owner of /dev/bus/usb/004/038 to uid=0, gid=0 failed: No such file or directory [ 1690.215236][T28242] not chained 810000 origins [ 1690.219933][T28242] CPU: 1 PID: 28242 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1690.230514][T28242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1690.240630][T28242] Call Trace: [ 1690.243971][T28242] [ 1690.246975][T28242] dump_stack_lvl+0x1c8/0x256 [ 1690.251830][T28242] dump_stack+0x1a/0x1c [ 1690.256143][T28242] kmsan_internal_chain_origin+0x78/0x120 [ 1690.261977][T28242] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1690.268205][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1690.274588][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1690.280522][T28242] ? __get_compat_msghdr+0x5b/0x750 [ 1690.285841][T28242] ? get_compat_msghdr+0x8c/0x1c0 [ 1690.291033][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1690.296974][T28242] ? __get_compat_msghdr+0x5b/0x750 [ 1690.302336][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1690.308305][T28242] ? should_fail+0x3f/0x810 [ 1690.312960][T28242] ? __stack_depot_save+0x21/0x4b0 [ 1690.318203][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1690.324558][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1690.330503][T28242] __msan_chain_origin+0xbd/0x140 [ 1690.335629][T28242] __get_compat_msghdr+0x514/0x750 [ 1690.340917][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1690.345888][T28242] ? ___sys_recvmsg+0xa9/0x890 [ 1690.350783][T28242] ? do_recvmmsg+0x63a/0x10a0 [ 1690.355591][T28242] ___sys_recvmsg+0x19d/0x890 [ 1690.360396][T28242] ? __schedule+0x1609/0x21d0 [ 1690.365292][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1690.371262][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1690.377197][T28242] do_recvmmsg+0x63a/0x10a0 [ 1690.381824][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1690.388209][T28242] ? __sys_recvmmsg+0x52/0x450 [ 1690.393061][T28242] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1690.399613][T28242] __sys_recvmmsg+0x113/0x450 [ 1690.404396][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1690.410805][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1690.415958][T28242] ? exit_to_user_mode_prepare+0x119/0x220 [ 1690.421912][T28242] do_fast_syscall_32+0x33/0x70 [ 1690.426881][T28242] do_SYSENTER_32+0x1b/0x20 [ 1690.431472][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1690.437959][T28242] RIP: 0023:0xf7f6e549 [ 1690.442095][T28242] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1690.461863][T28242] RSP: 002b:00000000f7f485cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1690.470396][T28242] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1690.478463][T28242] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1690.486519][T28242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1690.494582][T28242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1690.502683][T28242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1690.510792][T28242] [ 1690.522674][T28242] Uninit was stored to memory at: [ 1690.527907][T28242] __get_compat_msghdr+0x514/0x750 [ 1690.533244][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1690.538278][T28242] ___sys_recvmsg+0x19d/0x890 [ 1690.543138][T28242] do_recvmmsg+0x63a/0x10a0 [ 1690.547848][T28242] __sys_recvmmsg+0x113/0x450 [ 1690.552714][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1690.559099][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1690.564308][T28242] do_fast_syscall_32+0x33/0x70 [ 1690.569282][T28242] do_SYSENTER_32+0x1b/0x20 [ 1690.573963][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1690.580463][T28242] [ 1690.582938][T28242] Uninit was stored to memory at: [ 1690.588147][T28242] __get_compat_msghdr+0x514/0x750 [ 1690.593672][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1690.598681][T28242] ___sys_recvmsg+0x19d/0x890 [ 1690.603562][T28242] do_recvmmsg+0x63a/0x10a0 [ 1690.608214][T28242] __sys_recvmmsg+0x113/0x450 [ 1690.613999][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1690.620386][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1690.625631][T28242] do_fast_syscall_32+0x33/0x70 [ 1690.630617][T28242] do_SYSENTER_32+0x1b/0x20 [ 1690.635351][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1690.641919][T28242] [ 1690.644305][T28242] Uninit was stored to memory at: [ 1690.649506][T28242] __get_compat_msghdr+0x514/0x750 [ 1690.654876][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1690.659896][T28242] ___sys_recvmsg+0x19d/0x890 [ 1690.664897][T28242] do_recvmmsg+0x63a/0x10a0 00:38:09 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x15}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, r1+10000000}, 0x0) 00:38:09 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:09 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001440)={0x1, &(0x7f0000001400)=[{0x3, 0x0, 0x0, 0x406}]}) [ 1690.669551][T28242] __sys_recvmmsg+0x113/0x450 [ 1690.674462][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1690.680853][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1690.686123][T28242] do_fast_syscall_32+0x33/0x70 [ 1690.691125][T28242] do_SYSENTER_32+0x1b/0x20 [ 1690.695865][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1690.702488][T28242] [ 1690.704967][T28242] Uninit was stored to memory at: [ 1690.710175][T28242] __get_compat_msghdr+0x514/0x750 [ 1690.715560][T28242] get_compat_msghdr+0x8c/0x1c0 00:38:09 executing program 0: syz_emit_ethernet(0x1f2, &(0x7f0000001540)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd620ee3e901bc060100000000000000000000ffffe0000001fe"], 0x0) 00:38:09 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @dev, 0x3}, 0x1c, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="b9", 0x1}], 0x4, &(0x7f0000000540)=[@dstopts={{0x18}}, @dstopts={{0x18}}, @hopopts={{0x18}}, @dstopts_2292={{0x18}}], 0x60}}], 0x1, 0x0) [ 1690.720581][T28242] ___sys_recvmsg+0x19d/0x890 [ 1690.725448][T28242] do_recvmmsg+0x63a/0x10a0 [ 1690.730071][T28242] __sys_recvmmsg+0x113/0x450 [ 1690.734925][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1690.741307][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1690.746560][T28242] do_fast_syscall_32+0x33/0x70 [ 1690.751539][T28242] do_SYSENTER_32+0x1b/0x20 [ 1690.756268][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1690.762849][T28242] [ 1690.765238][T28242] Uninit was stored to memory at: [ 1690.770439][T28242] __get_compat_msghdr+0x514/0x750 [ 1690.775829][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1690.780846][T28242] ___sys_recvmsg+0x19d/0x890 [ 1690.785779][T28242] do_recvmmsg+0x63a/0x10a0 [ 1690.790410][T28242] __sys_recvmmsg+0x113/0x450 [ 1690.795315][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1690.801767][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1690.806925][T28242] do_fast_syscall_32+0x33/0x70 [ 1690.812017][T28242] do_SYSENTER_32+0x1b/0x20 [ 1690.816643][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1690.823234][T28242] [ 1690.825622][T28242] Uninit was stored to memory at: [ 1690.830840][T28242] __get_compat_msghdr+0x514/0x750 [ 1690.836221][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1690.841260][T28242] ___sys_recvmsg+0x19d/0x890 [ 1690.846177][T28242] do_recvmmsg+0x63a/0x10a0 [ 1690.850807][T28242] __sys_recvmmsg+0x113/0x450 [ 1690.855665][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1690.862165][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1690.867321][T28242] do_fast_syscall_32+0x33/0x70 [ 1690.872407][T28242] do_SYSENTER_32+0x1b/0x20 [ 1690.877042][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1690.883707][T28242] [ 1690.886100][T28242] Uninit was stored to memory at: [ 1690.891307][T28242] __get_compat_msghdr+0x514/0x750 [ 1690.896646][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1690.901674][T28242] ___sys_recvmsg+0x19d/0x890 [ 1690.906610][T28242] do_recvmmsg+0x63a/0x10a0 [ 1690.911236][T28242] __sys_recvmmsg+0x113/0x450 [ 1690.916144][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1690.922590][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1690.927746][T28242] do_fast_syscall_32+0x33/0x70 [ 1690.932851][T28242] do_SYSENTER_32+0x1b/0x20 [ 1690.937486][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1690.944130][T28242] [ 1690.946525][T28242] Local variable msg_sys created at: [ 1690.951991][T28242] do_recvmmsg+0x5f/0x10a0 [ 1690.956527][T28242] __sys_recvmmsg+0x113/0x450 00:38:10 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100), 0xff59) 00:38:10 executing program 1: r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) 00:38:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@RTM_NEWNSID={0x14, 0x58, 0x1}, 0x14}}, 0x0) [ 1691.162123][T12604] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1691.352467][T12604] usb 6-1: device descriptor read/64, error 18 [ 1691.634185][T12604] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1691.775860][T28242] not chained 820000 origins [ 1691.780579][T28242] CPU: 1 PID: 28242 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1691.791219][T28242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1691.801373][T28242] Call Trace: [ 1691.804721][T28242] [ 1691.807723][T28242] dump_stack_lvl+0x1c8/0x256 [ 1691.812573][T28242] dump_stack+0x1a/0x1c [ 1691.816868][T28242] kmsan_internal_chain_origin+0x78/0x120 [ 1691.822721][T28242] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1691.828937][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1691.835327][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1691.841279][T28242] ? __get_compat_msghdr+0x5b/0x750 [ 1691.846634][T28242] ? get_compat_msghdr+0x8c/0x1c0 [ 1691.851823][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1691.857773][T28242] ? __get_compat_msghdr+0x5b/0x750 [ 1691.863126][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1691.869080][T28242] ? should_fail+0x3f/0x810 [ 1691.873715][T28242] ? __stack_depot_save+0x21/0x4b0 [ 1691.878964][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1691.885372][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1691.891320][T28242] __msan_chain_origin+0xbd/0x140 [ 1691.896488][T28242] __get_compat_msghdr+0x514/0x750 [ 1691.901787][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1691.906807][T28242] ? ___sys_recvmsg+0xa9/0x890 [ 1691.911699][T28242] ? do_recvmmsg+0x63a/0x10a0 [ 1691.916523][T28242] ___sys_recvmsg+0x19d/0x890 [ 1691.921335][T28242] ? __schedule+0x1609/0x21d0 [ 1691.926139][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1691.932087][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1691.938039][T28242] do_recvmmsg+0x63a/0x10a0 [ 1691.942675][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1691.949083][T28242] ? __sys_recvmmsg+0x52/0x450 [ 1691.953956][T28242] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1691.960511][T28242] __sys_recvmmsg+0x113/0x450 [ 1691.965344][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1691.971731][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1691.976882][T28242] ? exit_to_user_mode_prepare+0x119/0x220 [ 1691.982823][T28242] do_fast_syscall_32+0x33/0x70 [ 1691.987789][T28242] do_SYSENTER_32+0x1b/0x20 [ 1691.992400][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1691.998985][T28242] RIP: 0023:0xf7f6e549 [ 1692.003140][T28242] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1692.022886][T28242] RSP: 002b:00000000f7f485cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1692.031419][T28242] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1692.039579][T28242] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1692.047643][T28242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1692.055705][T28242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1692.063776][T28242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1692.071866][T28242] [ 1692.079578][T12604] usb 6-1: device descriptor read/64, error 18 [ 1692.079948][T28242] Uninit was stored to memory at: [ 1692.091567][T28242] __get_compat_msghdr+0x514/0x750 [ 1692.096912][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1692.101977][T28242] ___sys_recvmsg+0x19d/0x890 [ 1692.106782][T28242] do_recvmmsg+0x63a/0x10a0 [ 1692.111408][T28242] __sys_recvmmsg+0x113/0x450 [ 1692.116259][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1692.122786][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1692.127938][T28242] do_fast_syscall_32+0x33/0x70 [ 1692.133130][T28242] do_SYSENTER_32+0x1b/0x20 [ 1692.137748][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1692.144332][T28242] [ 1692.146714][T28242] Uninit was stored to memory at: [ 1692.151968][T28242] __get_compat_msghdr+0x514/0x750 [ 1692.157237][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1692.162294][T28242] ___sys_recvmsg+0x19d/0x890 [ 1692.167088][T28242] do_recvmmsg+0x63a/0x10a0 [ 1692.171703][T28242] __sys_recvmmsg+0x113/0x450 [ 1692.176558][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1692.182988][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1692.188134][T28242] do_fast_syscall_32+0x33/0x70 [ 1692.193159][T28242] do_SYSENTER_32+0x1b/0x20 [ 1692.197784][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1692.204339][T28242] [ 1692.206724][T28242] Uninit was stored to memory at: [ 1692.211986][T28242] __get_compat_msghdr+0x514/0x750 [ 1692.217275][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1692.222339][T28242] ___sys_recvmsg+0x19d/0x890 [ 1692.227135][T28242] do_recvmmsg+0x63a/0x10a0 [ 1692.231828][T28242] __sys_recvmmsg+0x113/0x450 [ 1692.236639][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1692.243073][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1692.248238][T28242] do_fast_syscall_32+0x33/0x70 [ 1692.253260][T28242] do_SYSENTER_32+0x1b/0x20 [ 1692.257877][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1692.264441][T28242] [ 1692.266828][T28242] Uninit was stored to memory at: [ 1692.272135][T28242] __get_compat_msghdr+0x514/0x750 [ 1692.277405][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1692.282459][T28242] ___sys_recvmsg+0x19d/0x890 [ 1692.287256][T28242] do_recvmmsg+0x63a/0x10a0 [ 1692.291924][T28242] __sys_recvmmsg+0x113/0x450 [ 1692.296721][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1692.303159][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1692.308306][T28242] do_fast_syscall_32+0x33/0x70 [ 1692.313328][T28242] do_SYSENTER_32+0x1b/0x20 [ 1692.317948][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1692.324586][T28242] [ 1692.326969][T28242] Uninit was stored to memory at: [ 1692.332216][T28242] __get_compat_msghdr+0x514/0x750 [ 1692.337482][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1692.342571][T28242] ___sys_recvmsg+0x19d/0x890 [ 1692.347367][T28242] do_recvmmsg+0x63a/0x10a0 [ 1692.352034][T28242] __sys_recvmmsg+0x113/0x450 [ 1692.356834][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1692.363263][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1692.368410][T28242] do_fast_syscall_32+0x33/0x70 [ 1692.373428][T28242] do_SYSENTER_32+0x1b/0x20 [ 1692.378046][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1692.384601][T28242] [ 1692.386986][T28242] Uninit was stored to memory at: [ 1692.392235][T28242] __get_compat_msghdr+0x514/0x750 [ 1692.397503][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1692.402574][T28242] ___sys_recvmsg+0x19d/0x890 [ 1692.407369][T28242] do_recvmmsg+0x63a/0x10a0 [ 1692.412151][T28242] __sys_recvmmsg+0x113/0x450 [ 1692.416948][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1692.423375][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1692.428521][T28242] do_fast_syscall_32+0x33/0x70 [ 1692.433538][T28242] do_SYSENTER_32+0x1b/0x20 [ 1692.438176][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1692.444734][T28242] [ 1692.447120][T28242] Uninit was stored to memory at: [ 1692.452371][T28242] __get_compat_msghdr+0x514/0x750 [ 1692.457670][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1692.462733][T28242] ___sys_recvmsg+0x19d/0x890 [ 1692.467533][T28242] do_recvmmsg+0x63a/0x10a0 [ 1692.472290][T28242] __sys_recvmmsg+0x113/0x450 [ 1692.477112][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1692.483538][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1692.488683][T28242] do_fast_syscall_32+0x33/0x70 [ 1692.493711][T28242] do_SYSENTER_32+0x1b/0x20 [ 1692.498336][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1692.504894][T28242] [ 1692.507276][T28242] Local variable msg_sys created at: [ 1692.512681][T28242] do_recvmmsg+0x5f/0x10a0 [ 1692.517217][T28242] __sys_recvmmsg+0x113/0x450 [ 1692.593022][T12604] usb usb6-port1: attempt power cycle [ 1692.918692][T28242] not chained 830000 origins [ 1692.923541][T28242] CPU: 1 PID: 28242 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1692.934188][T28242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1692.944351][T28242] Call Trace: [ 1692.947716][T28242] [ 1692.950729][T28242] dump_stack_lvl+0x1c8/0x256 [ 1692.955581][T28242] dump_stack+0x1a/0x1c [ 1692.959891][T28242] kmsan_internal_chain_origin+0x78/0x120 [ 1692.965777][T28242] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1692.971999][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1692.978401][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1692.984359][T28242] ? __get_compat_msghdr+0x5b/0x750 [ 1692.989746][T28242] ? get_compat_msghdr+0x8c/0x1c0 [ 1692.994939][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1693.001077][T28242] ? __get_compat_msghdr+0x5b/0x750 [ 1693.006448][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1693.011973][T12604] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1693.012367][T28242] ? should_fail+0x3f/0x810 [ 1693.024547][T28242] ? __stack_depot_save+0x21/0x4b0 [ 1693.029821][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1693.036225][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1693.042186][T28242] __msan_chain_origin+0xbd/0x140 [ 1693.047353][T28242] __get_compat_msghdr+0x514/0x750 [ 1693.052654][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1693.057689][T28242] ? ___sys_recvmsg+0xa9/0x890 [ 1693.062583][T28242] ? do_recvmmsg+0x63a/0x10a0 [ 1693.067420][T28242] ___sys_recvmsg+0x19d/0x890 [ 1693.072234][T28242] ? __schedule+0x1609/0x21d0 [ 1693.077053][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1693.083044][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1693.089008][T28242] do_recvmmsg+0x63a/0x10a0 [ 1693.093658][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1693.100065][T28242] ? __sys_recvmmsg+0x52/0x450 [ 1693.104953][T28242] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1693.111519][T28242] __sys_recvmmsg+0x113/0x450 [ 1693.116338][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1693.122742][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1693.127895][T28242] ? exit_to_user_mode_prepare+0x119/0x220 [ 1693.133846][T28242] do_fast_syscall_32+0x33/0x70 [ 1693.138828][T28242] do_SYSENTER_32+0x1b/0x20 [ 1693.143477][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1693.150074][T28242] RIP: 0023:0xf7f6e549 [ 1693.154238][T28242] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1693.174003][T28242] RSP: 002b:00000000f7f485cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1693.182351][T12604] usb 6-1: device descriptor read/8, error -61 [ 1693.182506][T28242] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1693.196795][T28242] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1693.204875][T28242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1693.212951][T28242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1693.221024][T28242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1693.229119][T28242] [ 1693.237663][T28242] Uninit was stored to memory at: [ 1693.243355][T28242] __get_compat_msghdr+0x514/0x750 [ 1693.248632][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1693.253709][T28242] ___sys_recvmsg+0x19d/0x890 [ 1693.258509][T28242] do_recvmmsg+0x63a/0x10a0 [ 1693.263238][T28242] __sys_recvmmsg+0x113/0x450 [ 1693.268036][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1693.274492][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1693.279669][T28242] do_fast_syscall_32+0x33/0x70 [ 1693.284705][T28242] do_SYSENTER_32+0x1b/0x20 [ 1693.289331][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1693.295898][T28242] [ 1693.298285][T28242] Uninit was stored to memory at: [ 1693.303551][T28242] __get_compat_msghdr+0x514/0x750 [ 1693.308828][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1693.313904][T28242] ___sys_recvmsg+0x19d/0x890 [ 1693.318707][T28242] do_recvmmsg+0x63a/0x10a0 [ 1693.323394][T28242] __sys_recvmmsg+0x113/0x450 [ 1693.328196][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1693.334635][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1693.339795][T28242] do_fast_syscall_32+0x33/0x70 [ 1693.344831][T28242] do_SYSENTER_32+0x1b/0x20 [ 1693.349481][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1693.356053][T28242] [ 1693.358440][T28242] Uninit was stored to memory at: [ 1693.363705][T28242] __get_compat_msghdr+0x514/0x750 [ 1693.368979][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1693.374103][T28242] ___sys_recvmsg+0x19d/0x890 [ 1693.378903][T28242] do_recvmmsg+0x63a/0x10a0 [ 1693.383582][T28242] __sys_recvmmsg+0x113/0x450 [ 1693.388386][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1693.394828][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1693.399982][T28242] do_fast_syscall_32+0x33/0x70 [ 1693.405008][T28242] do_SYSENTER_32+0x1b/0x20 [ 1693.409632][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1693.416202][T28242] [ 1693.418589][T28242] Uninit was stored to memory at: [ 1693.423854][T28242] __get_compat_msghdr+0x514/0x750 [ 1693.429124][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1693.434189][T28242] ___sys_recvmsg+0x19d/0x890 [ 1693.438986][T28242] do_recvmmsg+0x63a/0x10a0 [ 1693.443658][T28242] __sys_recvmmsg+0x113/0x450 [ 1693.449766][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1693.453115][T12604] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1693.456170][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1693.468968][T28242] do_fast_syscall_32+0x33/0x70 [ 1693.474009][T28242] do_SYSENTER_32+0x1b/0x20 [ 1693.478635][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1693.485255][T28242] [ 1693.487641][T28242] Uninit was stored to memory at: [ 1693.492971][T28242] __get_compat_msghdr+0x514/0x750 [ 1693.498245][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1693.503330][T28242] ___sys_recvmsg+0x19d/0x890 [ 1693.508131][T28242] do_recvmmsg+0x63a/0x10a0 [ 1693.512812][T28242] __sys_recvmmsg+0x113/0x450 [ 1693.517609][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1693.524067][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1693.529214][T28242] do_fast_syscall_32+0x33/0x70 [ 1693.534238][T28242] do_SYSENTER_32+0x1b/0x20 [ 1693.538858][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1693.545428][T28242] [ 1693.547813][T28242] Uninit was stored to memory at: [ 1693.553152][T28242] __get_compat_msghdr+0x514/0x750 [ 1693.558433][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1693.563517][T28242] ___sys_recvmsg+0x19d/0x890 [ 1693.568348][T28242] do_recvmmsg+0x63a/0x10a0 [ 1693.573032][T28242] __sys_recvmmsg+0x113/0x450 [ 1693.577835][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1693.584335][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1693.589520][T28242] do_fast_syscall_32+0x33/0x70 [ 1693.594615][T28242] do_SYSENTER_32+0x1b/0x20 [ 1693.599243][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1693.605890][T28242] [ 1693.608280][T28242] Uninit was stored to memory at: [ 1693.613596][T28242] __get_compat_msghdr+0x514/0x750 [ 1693.618884][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1693.623972][T28242] ___sys_recvmsg+0x19d/0x890 [ 1693.628773][T28242] do_recvmmsg+0x63a/0x10a0 [ 1693.633461][T28242] __sys_recvmmsg+0x113/0x450 [ 1693.638271][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1693.643908][T12604] usb 6-1: device descriptor read/8, error -61 [ 1693.644672][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1693.655991][T28242] do_fast_syscall_32+0x33/0x70 [ 1693.660960][T28242] do_SYSENTER_32+0x1b/0x20 [ 1693.665638][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1693.672205][T28242] [ 1693.674592][T28242] Local variable msg_sys created at: [ 1693.679951][T28242] do_recvmmsg+0x5f/0x10a0 [ 1693.684554][T28242] __sys_recvmmsg+0x113/0x450 [ 1693.762462][T12604] usb usb6-port1: unable to enumerate USB device [ 1694.019637][T28242] not chained 840000 origins [ 1694.024818][T28242] CPU: 1 PID: 28242 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1694.035456][T28242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1694.045619][T28242] Call Trace: [ 1694.048973][T28242] [ 1694.051975][T28242] dump_stack_lvl+0x1c8/0x256 [ 1694.056826][T28242] dump_stack+0x1a/0x1c [ 1694.061131][T28242] kmsan_internal_chain_origin+0x78/0x120 [ 1694.066998][T28242] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1694.073237][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1694.079641][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1694.085595][T28242] ? __get_compat_msghdr+0x5b/0x750 [ 1694.090958][T28242] ? get_compat_msghdr+0x8c/0x1c0 [ 1694.096151][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1694.102105][T28242] ? __get_compat_msghdr+0x5b/0x750 [ 1694.107472][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1694.113431][T28242] ? should_fail+0x3f/0x810 [ 1694.118074][T28242] ? __stack_depot_save+0x21/0x4b0 [ 1694.123330][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1694.129726][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1694.135679][T28242] __msan_chain_origin+0xbd/0x140 [ 1694.140843][T28242] __get_compat_msghdr+0x514/0x750 [ 1694.146144][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1694.151158][T28242] ? ___sys_recvmsg+0xa9/0x890 [ 1694.156039][T28242] ? do_recvmmsg+0x63a/0x10a0 [ 1694.160845][T28242] ___sys_recvmsg+0x19d/0x890 [ 1694.165658][T28242] ? __schedule+0x1609/0x21d0 [ 1694.170473][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1694.176442][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1694.182401][T28242] do_recvmmsg+0x63a/0x10a0 [ 1694.187052][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1694.193451][T28242] ? __sys_recvmmsg+0x52/0x450 [ 1694.198343][T28242] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1694.204907][T28242] __sys_recvmmsg+0x113/0x450 [ 1694.209721][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1694.216117][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1694.221265][T28242] ? exit_to_user_mode_prepare+0x119/0x220 [ 1694.227217][T28242] do_fast_syscall_32+0x33/0x70 [ 1694.232216][T28242] do_SYSENTER_32+0x1b/0x20 [ 1694.236842][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1694.243360][T28242] RIP: 0023:0xf7f6e549 [ 1694.247519][T28242] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1694.267456][T28242] RSP: 002b:00000000f7f485cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1694.276003][T28242] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1694.284089][T28242] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1694.292164][T28242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1694.300231][T28242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1694.308318][T28242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1694.316418][T28242] [ 1694.324122][T28242] Uninit was stored to memory at: [ 1694.329841][T28242] __get_compat_msghdr+0x514/0x750 [ 1694.335178][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1694.340192][T28242] ___sys_recvmsg+0x19d/0x890 [ 1694.345047][T28242] do_recvmmsg+0x63a/0x10a0 [ 1694.349672][T28242] __sys_recvmmsg+0x113/0x450 [ 1694.354527][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1694.360906][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1694.366117][T28242] do_fast_syscall_32+0x33/0x70 [ 1694.371091][T28242] do_SYSENTER_32+0x1b/0x20 [ 1694.375770][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1694.382341][T28242] [ 1694.384726][T28242] Uninit was stored to memory at: [ 1694.389929][T28242] __get_compat_msghdr+0x514/0x750 [ 1694.395261][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1694.400276][T28242] ___sys_recvmsg+0x19d/0x890 [ 1694.405186][T28242] do_recvmmsg+0x63a/0x10a0 [ 1694.409818][T28242] __sys_recvmmsg+0x113/0x450 [ 1694.414672][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1694.421057][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1694.426327][T28242] do_fast_syscall_32+0x33/0x70 [ 1694.431304][T28242] do_SYSENTER_32+0x1b/0x20 [ 1694.436042][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1694.442607][T28242] [ 1694.444998][T28242] Uninit was stored to memory at: [ 1694.450202][T28242] __get_compat_msghdr+0x514/0x750 [ 1694.455589][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1694.460600][T28242] ___sys_recvmsg+0x19d/0x890 [ 1694.465510][T28242] do_recvmmsg+0x63a/0x10a0 [ 1694.470152][T28242] __sys_recvmmsg+0x113/0x450 [ 1694.474995][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1694.481357][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1694.486575][T28242] do_fast_syscall_32+0x33/0x70 [ 1694.491532][T28242] do_SYSENTER_32+0x1b/0x20 [ 1694.496230][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1694.502841][T28242] [ 1694.505229][T28242] Uninit was stored to memory at: [ 1694.510641][T28242] __get_compat_msghdr+0x514/0x750 [ 1694.515951][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1694.520967][T28242] ___sys_recvmsg+0x19d/0x890 [ 1694.525904][T28242] do_recvmmsg+0x63a/0x10a0 [ 1694.530529][T28242] __sys_recvmmsg+0x113/0x450 [ 1694.535369][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1694.541837][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1694.546974][T28242] do_fast_syscall_32+0x33/0x70 [ 1694.552020][T28242] do_SYSENTER_32+0x1b/0x20 [ 1694.556643][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1694.563253][T28242] [ 1694.565664][T28242] Uninit was stored to memory at: [ 1694.570892][T28242] __get_compat_msghdr+0x514/0x750 [ 1694.576250][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1694.581244][T28242] ___sys_recvmsg+0x19d/0x890 [ 1694.586113][T28242] do_recvmmsg+0x63a/0x10a0 [ 1694.590753][T28242] __sys_recvmmsg+0x113/0x450 [ 1694.595656][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1694.602093][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1694.607249][T28242] do_fast_syscall_32+0x33/0x70 [ 1694.612338][T28242] do_SYSENTER_32+0x1b/0x20 [ 1694.616948][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1694.623503][T28242] [ 1694.625891][T28242] Uninit was stored to memory at: [ 1694.631043][T28242] __get_compat_msghdr+0x514/0x750 [ 1694.636344][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1694.641338][T28242] ___sys_recvmsg+0x19d/0x890 [ 1694.646199][T28242] do_recvmmsg+0x63a/0x10a0 [ 1694.650812][T28242] __sys_recvmmsg+0x113/0x450 [ 1694.655659][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1694.662097][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1694.667248][T28242] do_fast_syscall_32+0x33/0x70 [ 1694.672323][T28242] do_SYSENTER_32+0x1b/0x20 [ 1694.676947][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1694.683564][T28242] [ 1694.685950][T28242] Uninit was stored to memory at: [ 1694.691100][T28242] __get_compat_msghdr+0x514/0x750 [ 1694.696399][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1694.701394][T28242] ___sys_recvmsg+0x19d/0x890 [ 1694.706256][T28242] do_recvmmsg+0x63a/0x10a0 [ 1694.710883][T28242] __sys_recvmmsg+0x113/0x450 [ 1694.715795][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1694.722239][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1694.727373][T28242] do_fast_syscall_32+0x33/0x70 [ 1694.732393][T28242] do_SYSENTER_32+0x1b/0x20 [ 1694.737015][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1694.743638][T28242] [ 1694.746037][T28242] Local variable msg_sys created at: [ 1694.751465][T28242] do_recvmmsg+0x5f/0x10a0 [ 1694.756075][T28242] __sys_recvmmsg+0x113/0x450 [ 1694.969880][T28242] not chained 850000 origins [ 1694.974635][T28242] CPU: 1 PID: 28242 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1694.985243][T28242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1694.995381][T28242] Call Trace: [ 1694.998711][T28242] [ 1695.001682][T28242] dump_stack_lvl+0x1c8/0x256 [ 1695.006526][T28242] dump_stack+0x1a/0x1c [ 1695.010838][T28242] kmsan_internal_chain_origin+0x78/0x120 [ 1695.016696][T28242] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1695.022877][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1695.029258][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1695.035251][T28242] ? __get_compat_msghdr+0x5b/0x750 [ 1695.040604][T28242] ? get_compat_msghdr+0x8c/0x1c0 [ 1695.045768][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1695.051731][T28242] ? __get_compat_msghdr+0x5b/0x750 [ 1695.057092][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1695.063004][T28242] ? should_fail+0x3f/0x810 [ 1695.067656][T28242] ? __stack_depot_save+0x21/0x4b0 [ 1695.072915][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1695.079290][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1695.085179][T28242] __msan_chain_origin+0xbd/0x140 [ 1695.090309][T28242] __get_compat_msghdr+0x514/0x750 [ 1695.095531][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1695.100507][T28242] ? ___sys_recvmsg+0xa9/0x890 [ 1695.105336][T28242] ? do_recvmmsg+0x63a/0x10a0 [ 1695.110081][T28242] ___sys_recvmsg+0x19d/0x890 [ 1695.114856][T28242] ? __schedule+0x1609/0x21d0 [ 1695.119679][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1695.125644][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1695.131603][T28242] do_recvmmsg+0x63a/0x10a0 [ 1695.136216][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1695.142566][T28242] ? __sys_recvmmsg+0x52/0x450 [ 1695.147480][T28242] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1695.154039][T28242] __sys_recvmmsg+0x113/0x450 [ 1695.158832][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1695.165182][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1695.170320][T28242] ? exit_to_user_mode_prepare+0x119/0x220 [ 1695.176205][T28242] do_fast_syscall_32+0x33/0x70 [ 1695.181125][T28242] do_SYSENTER_32+0x1b/0x20 [ 1695.185707][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1695.192221][T28242] RIP: 0023:0xf7f6e549 [ 1695.196366][T28242] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1695.216085][T28242] RSP: 002b:00000000f7f485cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1695.224635][T28242] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1695.232727][T28242] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1695.240797][T28242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1695.248823][T28242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1695.256851][T28242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1695.264913][T28242] [ 1695.272514][T28242] Uninit was stored to memory at: [ 1695.277759][T28242] __get_compat_msghdr+0x514/0x750 [ 1695.283509][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1695.288528][T28242] ___sys_recvmsg+0x19d/0x890 [ 1695.293390][T28242] do_recvmmsg+0x63a/0x10a0 [ 1695.298009][T28242] __sys_recvmmsg+0x113/0x450 [ 1695.302867][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1695.309231][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1695.314418][T28242] do_fast_syscall_32+0x33/0x70 [ 1695.319415][T28242] do_SYSENTER_32+0x1b/0x20 [ 1695.324156][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1695.330750][T28242] [ 1695.333223][T28242] Uninit was stored to memory at: [ 1695.338381][T28242] __get_compat_msghdr+0x514/0x750 [ 1695.343714][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1695.348709][T28242] ___sys_recvmsg+0x19d/0x890 [ 1695.353546][T28242] do_recvmmsg+0x63a/0x10a0 [ 1695.358159][T28242] __sys_recvmmsg+0x113/0x450 [ 1695.363015][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1695.369396][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1695.374658][T28242] do_fast_syscall_32+0x33/0x70 [ 1695.379617][T28242] do_SYSENTER_32+0x1b/0x20 [ 1695.384306][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1695.390795][T28242] [ 1695.393251][T28242] Uninit was stored to memory at: [ 1695.398406][T28242] __get_compat_msghdr+0x514/0x750 [ 1695.403740][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1695.408742][T28242] ___sys_recvmsg+0x19d/0x890 [ 1695.413590][T28242] do_recvmmsg+0x63a/0x10a0 [ 1695.418207][T28242] __sys_recvmmsg+0x113/0x450 [ 1695.423078][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1695.429464][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1695.434691][T28242] do_fast_syscall_32+0x33/0x70 [ 1695.439651][T28242] do_SYSENTER_32+0x1b/0x20 [ 1695.444340][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1695.450835][T28242] [ 1695.453319][T28242] Uninit was stored to memory at: [ 1695.458481][T28242] __get_compat_msghdr+0x514/0x750 [ 1695.463822][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1695.468817][T28242] ___sys_recvmsg+0x19d/0x890 [ 1695.473693][T28242] do_recvmmsg+0x63a/0x10a0 [ 1695.478303][T28242] __sys_recvmmsg+0x113/0x450 [ 1695.483614][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1695.490008][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1695.495246][T28242] do_fast_syscall_32+0x33/0x70 [ 1695.500207][T28242] do_SYSENTER_32+0x1b/0x20 [ 1695.504897][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1695.511391][T28242] [ 1695.513839][T28242] Uninit was stored to memory at: [ 1695.519004][T28242] __get_compat_msghdr+0x514/0x750 [ 1695.524322][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1695.529342][T28242] ___sys_recvmsg+0x19d/0x890 [ 1695.534225][T28242] do_recvmmsg+0x63a/0x10a0 [ 1695.538834][T28242] __sys_recvmmsg+0x113/0x450 [ 1695.543710][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1695.550102][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1695.555338][T28242] do_fast_syscall_32+0x33/0x70 [ 1695.560298][T28242] do_SYSENTER_32+0x1b/0x20 [ 1695.564999][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1695.571598][T28242] [ 1695.574050][T28242] Uninit was stored to memory at: [ 1695.579212][T28242] __get_compat_msghdr+0x514/0x750 [ 1695.584561][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1695.589590][T28242] ___sys_recvmsg+0x19d/0x890 [ 1695.594528][T28242] do_recvmmsg+0x63a/0x10a0 [ 1695.599152][T28242] __sys_recvmmsg+0x113/0x450 [ 1695.604028][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1695.610399][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1695.615645][T28242] do_fast_syscall_32+0x33/0x70 [ 1695.620627][T28242] do_SYSENTER_32+0x1b/0x20 [ 1695.625358][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1695.631940][T28242] [ 1695.634329][T28242] Uninit was stored to memory at: [ 1695.639510][T28242] __get_compat_msghdr+0x514/0x750 [ 1695.644868][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1695.649879][T28242] ___sys_recvmsg+0x19d/0x890 [ 1695.654821][T28242] do_recvmmsg+0x63a/0x10a0 [ 1695.659442][T28242] __sys_recvmmsg+0x113/0x450 [ 1695.664312][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1695.670742][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1695.675966][T28242] do_fast_syscall_32+0x33/0x70 [ 1695.680925][T28242] do_SYSENTER_32+0x1b/0x20 [ 1695.685596][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1695.692173][T28242] [ 1695.694563][T28242] Local variable msg_sys created at: [ 1695.699901][T28242] do_recvmmsg+0x5f/0x10a0 [ 1695.704515][T28242] __sys_recvmmsg+0x113/0x450 [ 1695.883357][T28242] not chained 860000 origins [ 1695.888066][T28242] CPU: 1 PID: 28242 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1695.898695][T28242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1695.908834][T28242] Call Trace: [ 1695.912172][T28242] [ 1695.915185][T28242] dump_stack_lvl+0x1c8/0x256 [ 1695.920038][T28242] dump_stack+0x1a/0x1c [ 1695.924322][T28242] kmsan_internal_chain_origin+0x78/0x120 [ 1695.930176][T28242] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1695.936446][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1695.942880][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1695.948843][T28242] ? __get_compat_msghdr+0x5b/0x750 [ 1695.954145][T28242] ? get_compat_msghdr+0x8c/0x1c0 [ 1695.959271][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1695.965164][T28242] ? __get_compat_msghdr+0x5b/0x750 [ 1695.970458][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1695.976377][T28242] ? should_fail+0x3f/0x810 [ 1695.980962][T28242] ? __stack_depot_save+0x21/0x4b0 [ 1695.986152][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1695.992508][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1695.998455][T28242] __msan_chain_origin+0xbd/0x140 [ 1696.003576][T28242] __get_compat_msghdr+0x514/0x750 [ 1696.008876][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1696.013862][T28242] ? ___sys_recvmsg+0xa9/0x890 [ 1696.018823][T28242] ? do_recvmmsg+0x63a/0x10a0 [ 1696.023596][T28242] ___sys_recvmsg+0x19d/0x890 [ 1696.028437][T28242] ? __schedule+0x1609/0x21d0 [ 1696.033256][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1696.039233][T28242] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1696.045229][T28242] do_recvmmsg+0x63a/0x10a0 [ 1696.049872][T28242] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1696.056224][T28242] ? __sys_recvmmsg+0x52/0x450 [ 1696.061085][T28242] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1696.067599][T28242] __sys_recvmmsg+0x113/0x450 [ 1696.072400][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1696.078801][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1696.083925][T28242] ? exit_to_user_mode_prepare+0x119/0x220 [ 1696.089870][T28242] do_fast_syscall_32+0x33/0x70 [ 1696.094799][T28242] do_SYSENTER_32+0x1b/0x20 [ 1696.099372][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1696.105850][T28242] RIP: 0023:0xf7f6e549 [ 1696.109999][T28242] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1696.129699][T28242] RSP: 002b:00000000f7f485cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1696.138215][T28242] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1696.146305][T28242] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1696.154369][T28242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1696.162416][T28242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1696.170476][T28242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1696.178522][T28242] [ 1696.186097][T28242] Uninit was stored to memory at: [ 1696.191342][T28242] __get_compat_msghdr+0x514/0x750 [ 1696.197120][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1696.202219][T28242] ___sys_recvmsg+0x19d/0x890 [ 1696.207144][T28242] do_recvmmsg+0x63a/0x10a0 [ 1696.211839][T28242] __sys_recvmmsg+0x113/0x450 [ 1696.216726][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1696.223220][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1696.228364][T28242] do_fast_syscall_32+0x33/0x70 [ 1696.233429][T28242] do_SYSENTER_32+0x1b/0x20 [ 1696.238077][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1696.244699][T28242] [ 1696.247123][T28242] Uninit was stored to memory at: [ 1696.252392][T28242] __get_compat_msghdr+0x514/0x750 [ 1696.257664][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1696.262736][T28242] ___sys_recvmsg+0x19d/0x890 [ 1696.267524][T28242] do_recvmmsg+0x63a/0x10a0 [ 1696.272199][T28242] __sys_recvmmsg+0x113/0x450 [ 1696.276995][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1696.283506][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1696.288644][T28242] do_fast_syscall_32+0x33/0x70 [ 1696.293688][T28242] do_SYSENTER_32+0x1b/0x20 [ 1696.298303][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1696.304871][T28242] [ 1696.307244][T28242] Uninit was stored to memory at: [ 1696.312525][T28242] __get_compat_msghdr+0x514/0x750 [ 1696.317783][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1696.322852][T28242] ___sys_recvmsg+0x19d/0x890 [ 1696.327652][T28242] do_recvmmsg+0x63a/0x10a0 [ 1696.332380][T28242] __sys_recvmmsg+0x113/0x450 [ 1696.337161][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1696.343616][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1696.348780][T28242] do_fast_syscall_32+0x33/0x70 [ 1696.353885][T28242] do_SYSENTER_32+0x1b/0x20 [ 1696.358511][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1696.365111][T28242] [ 1696.367499][T28242] Uninit was stored to memory at: [ 1696.372810][T28242] __get_compat_msghdr+0x514/0x750 [ 1696.378067][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1696.383116][T28242] ___sys_recvmsg+0x19d/0x890 [ 1696.387918][T28242] do_recvmmsg+0x63a/0x10a0 [ 1696.392642][T28242] __sys_recvmmsg+0x113/0x450 [ 1696.397427][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1696.403883][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1696.409019][T28242] do_fast_syscall_32+0x33/0x70 [ 1696.414057][T28242] do_SYSENTER_32+0x1b/0x20 [ 1696.418665][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1696.425199][T28242] [ 1696.427570][T28242] Uninit was stored to memory at: [ 1696.432968][T28242] __get_compat_msghdr+0x514/0x750 [ 1696.438242][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1696.443359][T28242] ___sys_recvmsg+0x19d/0x890 [ 1696.448159][T28242] do_recvmmsg+0x63a/0x10a0 [ 1696.452918][T28242] __sys_recvmmsg+0x113/0x450 [ 1696.457706][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1696.464160][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1696.469301][T28242] do_fast_syscall_32+0x33/0x70 [ 1696.474338][T28242] do_SYSENTER_32+0x1b/0x20 [ 1696.478967][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1696.485561][T28242] [ 1696.487939][T28242] Uninit was stored to memory at: [ 1696.493395][T28242] __get_compat_msghdr+0x514/0x750 [ 1696.498691][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1696.503824][T28242] ___sys_recvmsg+0x19d/0x890 [ 1696.508610][T28242] do_recvmmsg+0x63a/0x10a0 [ 1696.513300][T28242] __sys_recvmmsg+0x113/0x450 [ 1696.518080][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1696.524494][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1696.529634][T28242] do_fast_syscall_32+0x33/0x70 [ 1696.534671][T28242] do_SYSENTER_32+0x1b/0x20 [ 1696.539288][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1696.545850][T28242] [ 1696.548233][T28242] Uninit was stored to memory at: [ 1696.553494][T28242] __get_compat_msghdr+0x514/0x750 [ 1696.558752][T28242] get_compat_msghdr+0x8c/0x1c0 [ 1696.563794][T28242] ___sys_recvmsg+0x19d/0x890 [ 1696.568582][T28242] do_recvmmsg+0x63a/0x10a0 [ 1696.573265][T28242] __sys_recvmmsg+0x113/0x450 [ 1696.578068][T28242] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1696.584559][T28242] __do_fast_syscall_32+0x87/0xe0 [ 1696.589695][T28242] do_fast_syscall_32+0x33/0x70 [ 1696.594744][T28242] do_SYSENTER_32+0x1b/0x20 [ 1696.599349][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1696.605906][T28242] [ 1696.608280][T28242] Local variable msg_sys created at: [ 1696.613743][T28242] do_recvmmsg+0x5f/0x10a0 [ 1696.618261][T28242] __sys_recvmmsg+0x113/0x450 00:38:15 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c0000bb6c5a00", @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf2531000000080001001700000008000300", @ANYRES16=r3, @ANYBLOB="0c009900000000001f0000000c009900ffffffff640000000800db00", @ANYRES32=r1, @ANYBLOB="83571105", @ANYRES32=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x8800) r4 = syz_clone(0x40018000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x4, r4, &(0x7f0000000000), 0x0) getpriority(0x0, r4) prctl$PR_SET_PTRACER(0x59616d61, r4) syz_clone(0xd9ae373e52eea46f, &(0x7f0000000380)="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", 0x16f, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="b87c73f451d8b7bd3ed15ba7e7554e45e18e46dfc91f37c5cba6ecf4ab7cf34b215e337baebd16d5ee6bf4255eb7870009383a5c3d1a955887b219cddc4e") syz_open_procfs$namespace(r4, &(0x7f0000000180)='ns/pid\x00') ptrace$setregset(0x4205, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$userns(r4, &(0x7f0000000040)) 00:38:15 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x15}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, r1+10000000}, 0x0) 00:38:15 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x1, &(0x7f0000000040)=@raw=[@jmp], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:38:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000059c0)=[{{&(0x7f00000002c0)={0xa, 0x4e24, 0x0, @mcast2, 0x2}, 0x1c, 0x0}}], 0x1, 0x0) 00:38:15 executing program 4: memfd_create(&(0x7f0000000000)='.\x00', 0x2) 00:38:15 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x10}, 0x14}}, 0x0) 00:38:16 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000026c0)=[{{&(0x7f00000005c0)={0xa, 0x4e24, 0x0, @local}, 0x1c, &(0x7f0000002680)=[{&(0x7f0000000600)="db85f43610fed9f4", 0x8}, {0x0}, {&(0x7f0000002600)="bb590e0810f2e2555fefcb5313b24bbccbc00dd4f973", 0x16}], 0x3}}], 0x1, 0x0) 00:38:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) [ 1697.152186][T16218] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1697.352449][T16218] usb 6-1: device descriptor read/64, error 18 00:38:16 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @dev}, 0x1c, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000001c0)='~', 0x1}, {0x0}, {&(0x7f00000003c0)="b9", 0x1}], 0x4, &(0x7f0000000540)=[@dstopts={{0x18}}, @dstopts={{0x18}}, @hopopts={{0x18}}, @dstopts_2292={{0x18}}], 0x60}}], 0x1, 0x0) 00:38:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x15, &(0x7f0000000040), 0x4) [ 1697.622320][T16218] usb 6-1: new high-speed USB device number 38 using dummy_hcd 00:38:16 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x15}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, r1+10000000}, 0x0) [ 1697.812765][T16218] usb 6-1: device descriptor read/64, error 18 [ 1697.933950][T16218] usb usb6-port1: attempt power cycle 00:38:17 executing program 2: bpf$BPF_GET_MAP_INFO(0x12, 0x0, 0x0) 00:38:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x301}, 0x14}}, 0x0) 00:38:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000040)) 00:38:17 executing program 4: bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x38) 00:38:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000080000000400000000450000140000000000009078e00000010040"]}) [ 1698.382814][T16218] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1698.573723][T16218] usb 6-1: device descriptor read/8, error -61 [ 1698.862298][T16218] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1699.036795][T16218] usb 6-1: device descriptor read/8, error -61 [ 1699.453556][T16218] usb usb6-port1: unable to enumerate USB device 00:38:18 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:18 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x20000054, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:38:18 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f80)={0x6, 0x3, &(0x7f0000001d00)=@framed, &(0x7f0000001d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xc0) 00:38:18 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x15}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, r1+10000000}, 0x0) 00:38:18 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) 00:38:18 executing program 0: bpf$BPF_GET_MAP_INFO(0xd, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:38:19 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$AUDIT_USER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x5) 00:38:19 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind(r0, &(0x7f0000000100)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) 00:38:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x2, 0x6, 0xfff}, 0x48) 00:38:19 executing program 4: pipe(&(0x7f00000006c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) 00:38:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x24}}, 0x0) 00:38:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) [ 1700.533066][T21577] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1700.722299][T21577] usb 6-1: device descriptor read/64, error 18 [ 1700.992172][T21577] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1701.181986][T21577] usb 6-1: device descriptor read/64, error 18 [ 1701.302515][T21577] usb usb6-port1: attempt power cycle [ 1701.731993][T21577] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1701.902625][T21577] usb 6-1: device descriptor read/8, error -61 [ 1702.172123][T21577] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1702.352303][T21577] usb 6-1: device descriptor read/8, error -61 [ 1702.472268][T21577] usb usb6-port1: unable to enumerate USB device 00:38:22 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:38:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r1, 0x107, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x34}}, 0x0) 00:38:22 executing program 3: bpf$BPF_GET_MAP_INFO(0x19, 0x0, 0x0) 00:38:22 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x40}}], 0x1, 0x0) 00:38:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xd, &(0x7f0000000040), 0x4) 00:38:22 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003940)=ANY=[], 0xf}}], 0x1, 0x0) 00:38:22 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000240, &(0x7f0000000080)=@framed={{}, [@ldst, @call]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:38:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1c, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7}, 0x80) 00:38:22 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x410202, 0x0) [ 1703.762737][T21577] usb 6-1: new high-speed USB device number 45 using dummy_hcd 00:38:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0xa}) 00:38:22 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) [ 1703.957740][T21577] usb 6-1: device descriptor read/64, error 18 [ 1704.242804][T21577] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1704.433404][T21577] usb 6-1: device descriptor read/64, error 18 [ 1704.552559][T21577] usb usb6-port1: attempt power cycle [ 1704.975625][T21577] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1705.158683][T21577] usb 6-1: device descriptor read/8, error -61 [ 1705.432098][T21577] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1705.602762][T21577] usb 6-1: device descriptor read/8, error -61 [ 1705.722351][T21577] usb usb6-port1: unable to enumerate USB device 00:38:25 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000810700"/20, @ANYRES32=0x0, @ANYBLOB="ffffa88800000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB='H\x00\n\x00', @ANYRES32], 0x44}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0xe0, r7, 0x220, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xc0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x15e9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x11}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x54}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4002015}, 0x44814) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="50000000e0a910e3a3580098c4c726bd81e979bdb4954aa0c00b1eee99d400d9a1220b1a01cca40b50f3157f7e3dfd638e4615fabcde80424ef14d91", @ANYRES16=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8c1) sendmsg$nl_route_sched(r6, &(0x7f00000008c0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000ffff0000d80000fb587f9010236fb6f8a7baa8", @ANYRES32=r5, @ANYBLOB="0b00010000020000000000822945fb143dfba7ee9ad1b946afbd852e26e6d1000a0004002a00"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x8c4}, 0x24004801) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = getpgrp(0xffffffffffffffff) r9 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, 0xffffffffffffffff, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r2, {0x9bf3}}, './file0\x00'}) syz_clone3(&(0x7f0000000c00)={0x14d000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000900), {0x32}, &(0x7f0000000940)=""/186, 0xba, &(0x7f0000000a00)=""/19, &(0x7f0000000b80), 0x0, {r10}}, 0x58) 00:38:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000100)) 00:38:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf253100000008", @ANYRES32=0x0, @ANYBLOB="0c0099003f0000007000000008"], 0x48}}, 0x880) 00:38:25 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0xa}) 00:38:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}]}}}]}, 0x44}}, 0x0) [ 1706.593873][T28360] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 00:38:25 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0xa}) 00:38:25 executing program 0: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0xc2}, 0x18) 00:38:25 executing program 4: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/pid_for_children\x00') [ 1706.677415][T28364] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1706.769018][ T24] audit: type=1326 audit(1659832705.819:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28358 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6e549 code=0x7ffc0000 [ 1706.795070][ T24] audit: type=1326 audit(1659832705.819:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28358 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf7f6e549 code=0x7ffc0000 [ 1706.818388][ T24] audit: type=1326 audit(1659832705.849:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28358 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6e549 code=0x7ffc0000 00:38:26 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x16, &(0x7f0000000200)={0x0}, 0x10) [ 1706.941154][T28364] device macvtap1 entered promiscuous mode [ 1706.947875][T28364] device bond8 entered promiscuous mode [ 1706.955871][T28364] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1707.061006][ T24] audit: type=1326 audit(1659832705.899:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28358 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf7f6e549 code=0x7ffc0000 [ 1707.088110][ T24] audit: type=1326 audit(1659832705.899:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28358 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6e549 code=0x7ffc0000 [ 1707.111047][ T24] audit: type=1326 audit(1659832705.899:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28366 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=407 compat=1 ip=0xf7f6e549 code=0x7ffc0000 [ 1707.134117][ T24] audit: type=1326 audit(1659832705.909:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28358 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf7f6e549 code=0x7ffc0000 [ 1707.156983][ T24] audit: type=1326 audit(1659832705.909:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28358 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6e549 code=0x7ffc0000 [ 1707.179968][ T24] audit: type=1326 audit(1659832705.929:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28358 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=349 compat=1 ip=0xf7f6e549 code=0x7ffc0000 00:38:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0xa}) 00:38:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x7, 0x4) [ 1707.202951][ T24] audit: type=1326 audit(1659832705.929:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28358 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6e549 code=0x7ffc0000 [ 1707.322555][T21577] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1707.512180][T21577] usb 6-1: device descriptor read/64, error 18 [ 1707.781992][T21577] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1707.972167][T21577] usb 6-1: device descriptor read/64, error 18 [ 1708.092325][T21577] usb usb6-port1: attempt power cycle [ 1708.502202][T21577] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1708.672541][T21577] usb 6-1: device descriptor read/8, error -61 [ 1708.944230][T21577] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1709.122322][T21577] usb 6-1: device descriptor read/8, error -61 [ 1709.246031][T21577] usb usb6-port1: unable to enumerate USB device 00:38:28 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000810700"/20, @ANYRES32=0x0, @ANYBLOB="ffffa88800000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB='H\x00\n\x00', @ANYRES32], 0x44}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0xe0, r7, 0x220, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xc0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x15e9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x11}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x54}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4002015}, 0x44814) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="50000000e0a910e3a3580098c4c726bd81e979bdb4954aa0c00b1eee99d400d9a1220b1a01cca40b50f3157f7e3dfd638e4615fabcde80424ef14d91", @ANYRES16=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8c1) sendmsg$nl_route_sched(r6, &(0x7f00000008c0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000ffff0000d80000fb587f9010236fb6f8a7baa8", @ANYRES32=r5, @ANYBLOB="0b00010000020000000000822945fb143dfba7ee9ad1b946afbd852e26e6d1000a0004002a00"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x8c4}, 0x24004801) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = getpgrp(0xffffffffffffffff) r9 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, 0xffffffffffffffff, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r2, {0x9bf3}}, './file0\x00'}) syz_clone3(&(0x7f0000000c00)={0x14d000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000900), {0x32}, &(0x7f0000000940)=""/186, 0xba, &(0x7f0000000a00)=""/19, &(0x7f0000000b80), 0x0, {r10}}, 0x58) 00:38:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000400)) 00:38:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x1f0, 0xc0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'veth1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) 00:38:28 executing program 3: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') setxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 00:38:28 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000240)={0xa}) 00:38:29 executing program 4: syz_emit_ethernet(0x16, &(0x7f0000000040)={@random="e871177200", @broadcast, @val, {@mpls_mc}}, 0x0) [ 1710.041278][T28389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:38:29 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000240)={0xa}) 00:38:29 executing program 0: mknod$loop(&(0x7f0000001bc0)='./file0\x00', 0x0, 0x1) [ 1710.099950][T28389] device macvtap2 entered promiscuous mode [ 1710.107814][T28389] 8021q: adding VLAN 0 to HW filter on device macvtap2 00:38:29 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, 0x0) 00:38:29 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000240)={0xa}) 00:38:29 executing program 0: io_setup(0x2, &(0x7f0000000380)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1710.522589][T21577] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1710.712082][T21577] usb 6-1: device descriptor read/64, error 18 [ 1710.982072][T21577] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1711.182008][T21577] usb 6-1: device descriptor read/64, error 18 [ 1711.302663][T21577] usb usb6-port1: attempt power cycle [ 1711.712056][T21577] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1711.882457][T21577] usb 6-1: device descriptor read/8, error -61 [ 1712.151990][T21577] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1712.322300][T21577] usb 6-1: device descriptor read/8, error -61 [ 1712.442480][T21577] usb usb6-port1: unable to enumerate USB device 00:38:32 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:32 executing program 2: r0 = socket(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a0, 0x0) 00:38:32 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0xa}) 00:38:32 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='net/rt_acct\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) migrate_pages(0x0, 0x7, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0x6) 00:38:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f0000000040)={0xe0c, 0x0, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "f7a1d4c38e0bd1c18de922e57fafba69568df414b265923f026c5c14fe86bdd2", "dcf02de92c8900832f12c8448ab0a72dfe33f2371abc312899c643c8106c0b1a"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "fa959efa1a54c65df34dc87de19883abc7062adf6f7c5a6947c302846d7b8796", "9cc4b4d0fce5760bdf6412173d49afcfbaf80ed6105444eca4c717dbfb9bae3b"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "fa2cb5efe38c037629c469b8f57dfdf5d0d9812a09d81a2a87447e59f7fa897b", "79550d8653ef2c55c84ff715fa4e35b797f20b1db624047c1d4f6c0ed00b85ec"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "e589a9ba1055a93fb81c7701527776421d6cafe5d902fac901774bc10882c6a9", "f4dca4ed3c610fbddeaa5b4ede4f7e015d51572d6563df8b9f188e3ac7b57d64"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "2c7b27b397b322d60bc131bee23fdd7d0ecb3d7f7fb8eb043429f341e79d8df7", "51afb5934e8653d74fff8fdc89d46322edfbc665b98a7ffca338d7709f527cb1"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "1808401437d4f655890e50da9018223dc703fb994396c16f2a0c07eabdab56b2", "b3253a8bcfd617d6bc0c875383aa7866ff1ce31450b1ee0909d375fb8f072373"}}}]}, 0xe0c}}, 0x0) 00:38:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x101, 0x6c, 0xf0ffff, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 00:38:32 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000080)=""/162, 0x2a, 0xa2, 0x1}, 0x20) 00:38:32 executing program 2: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) io_setup(0x80, &(0x7f00000001c0)=0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$bsg(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) 00:38:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="ae090000002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f0000000040)="53000000fe32d8b5b10498011a000000fa00999f551e64a3672000000000ed000000c772", 0x24}], 0x2) 00:38:32 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0xa}) 00:38:32 executing program 3: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000001300)=""/4096, 0x1000) 00:38:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x88, 0x0, 0x0, 0x0) [ 1714.473469][T16218] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1714.712025][T16218] usb 6-1: Using ep0 maxpacket: 8 [ 1714.832170][T16218] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.842717][T16218] usb 6-1: config 0 has no interfaces? [ 1714.848366][T16218] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1714.857722][T16218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.881116][T16218] usb 6-1: config 0 descriptor?? 00:38:35 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7f) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x7) 00:38:35 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0xa}) 00:38:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x28}}, 0x0) 00:38:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @local}, 0x1c, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000080)="8c", 0x1}, {0x0}, {&(0x7f0000000240)='*', 0x1}], 0x4}}], 0x1, 0x20048844) 00:38:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x10000, 0x0, 0x1, 0x3}, 0x20) [ 1716.583461][T12604] usb 6-1: USB disconnect, device number 57 00:38:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x1, 0x3}, 0x14}}, 0x0) 00:38:35 executing program 4: syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) 00:38:35 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0xa}) 00:38:35 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000000)=""/153, 0x2c, 0x99, 0x1}, 0x20) 00:38:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x88, 0x67, &(0x7f0000000340), 0x4) 00:38:36 executing program 0: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xaadc7c1a76d74ef2) [ 1717.214478][T16218] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1717.462287][T16218] usb 6-1: Using ep0 maxpacket: 8 [ 1717.582887][T16218] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.593360][T16218] usb 6-1: config 0 has no interfaces? [ 1717.599057][T16218] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1717.608462][T16218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.623370][T16218] usb 6-1: config 0 descriptor?? 00:38:38 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x150, 0x150, 0x0, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x7, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'wg0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 00:38:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891b, &(0x7f0000000180)={'tunl0\x00', 0x0}) 00:38:38 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0xa}) 00:38:38 executing program 3: r0 = socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x1, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0xe}, 0x40, 0x8000, 0x5, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000340)={0xa0, 0x0, 0x2, 0x0, 0x0, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8044}, 0x4800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28}, 0x4000000) read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x2020) r5 = syz_open_dev$vcsu(&(0x7f0000000500), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r5) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x88401, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000001c0)={0x4, 0xffffffffffffffff, 0x1}) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000040)={@rand_addr=0x64010102, @multicast2, 0x0, "50fc40db02ac65d06610d6f895b64dac38c946e22525dc583c84bd05143aa208", 0x41fa, 0x101, 0x5, 0x1000}, 0x3c) 00:38:38 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) [ 1719.897864][T16218] usb 6-1: USB disconnect, device number 58 [ 1720.038697][T28469] 9pnet_virtio: no channels available for device ./file0 00:38:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:38:39 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000240)=@framed={{}, [@call, @call, @btf_id]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:38:39 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0xa}) 00:38:39 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000016c0), 0xffffffffffffffff) 00:38:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, 0x0) 00:38:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', 0x0}) [ 1720.632772][T16218] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1720.872276][T16218] usb 6-1: Using ep0 maxpacket: 8 [ 1720.998049][T16218] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.009019][T16218] usb 6-1: config 0 has no interfaces? [ 1721.014827][T16218] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1721.024138][T16218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.043150][T16218] usb 6-1: config 0 descriptor?? 00:38:42 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b00010000000109040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:42 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000240)={0xa}) 00:38:42 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 00:38:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x9, 0x0, 0x0, [0x0, 0x0]}]}}}], 0x20}, 0x0) 00:38:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:38:42 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x3aa13) [ 1723.305252][T16218] usb 6-1: USB disconnect, device number 59 00:38:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:38:42 executing program 3: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/48) 00:38:42 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000240)={0xa}) 00:38:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x6e8, 0x400, 0x1d0, 0x4f8, 0x4f8, 0x400, 0x618, 0x618, 0x618, 0x618, 0x618, 0x6, 0x0, {[{{@uncond, 0x11e, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}, {{@ipv6={@private1, @remote, [0xec03], [0x0, 0x2e4], '\x00', 'bond_slave_0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @empty}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x748) syz_open_procfs(0x0, &(0x7f0000000780)='sched\x00') 00:38:42 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000340)) 00:38:42 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x14, r0, 0xf03, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) [ 1723.972986][T16218] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1724.222181][T16218] usb 6-1: Using ep0 maxpacket: 8 [ 1724.343900][T16218] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.354517][T16218] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1724.364664][T16218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.382644][T16218] usb 6-1: config 0 descriptor?? [ 1724.438006][T16218] iowarrior 6-1:0.0: no interrupt-in endpoint found 00:38:45 executing program 3: syz_mount_image$xfs(&(0x7f0000001d00), &(0x7f0000001d40)='./file0\x00', 0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)={[{@noalign}]}) 00:38:45 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:38:45 executing program 0: syz_mount_image$xfs(&(0x7f0000001d00), &(0x7f0000001d40)='./file0\x00', 0x0, 0x0, &(0x7f0000001d80), 0x10010, &(0x7f0000001dc0)) 00:38:45 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b00010000000109040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:45 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000240)={0xa}) 00:38:45 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@dev, @local, @dev, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x80000200}) [ 1726.615889][T12604] usb 6-1: USB disconnect, device number 60 00:38:45 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) r1 = open(&(0x7f0000000240)='./bus\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 00:38:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, 0x0) 00:38:45 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/91, 0x5b}], 0x1, 0x0, 0x0) 00:38:45 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', 0x0}) [ 1726.905713][T28515] XFS (loop3): Invalid superblock magic number 00:38:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000e00)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) 00:38:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, 0x0) [ 1727.393482][T12604] usb 6-1: new high-speed USB device number 61 using dummy_hcd 00:38:46 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:38:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, 0x0) [ 1727.732367][T12604] usb 6-1: Using ep0 maxpacket: 8 [ 1727.866834][T12604] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.877437][T12604] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1727.886828][T12604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.926351][T12604] usb 6-1: config 0 descriptor?? [ 1728.007906][T12604] iowarrior 6-1:0.0: no interrupt-in endpoint found 00:38:49 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b00010000000109040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:49 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(r0, &(0x7f000000b3c0)=[{{&(0x7f0000000d80)=@ax25={{0x3, @bcast}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x80, 0x0}}], 0x1, 0x0) 00:38:49 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000240)) 00:38:49 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:38:49 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/23, 0x17}], 0x1, 0x7, 0x0) 00:38:49 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) r1 = open(&(0x7f0000000240)='./bus\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) [ 1730.057529][T16218] usb 6-1: USB disconnect, device number 61 00:38:49 executing program 3: mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x0, 0x30, 0xffffffffffffffff, 0x0) 00:38:49 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:38:49 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000240)) 00:38:49 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/23, 0x17}], 0x1, 0x7, 0x0) 00:38:49 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000240)) [ 1730.762996][T21577] usb 6-1: new high-speed USB device number 62 using dummy_hcd 00:38:49 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', 0x0}) [ 1731.002207][T21577] usb 6-1: Using ep0 maxpacket: 8 [ 1731.124315][T21577] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1731.135535][T21577] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1731.144967][T21577] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.207532][T21577] usb 6-1: config 0 descriptor?? [ 1731.257585][T21577] iowarrior 6-1:0.0: no interrupt-in endpoint found 00:38:52 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:52 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x1, {0x3, @vbi}}) 00:38:52 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/23, 0x17}], 0x1, 0x7, 0x0) 00:38:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)) 00:38:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) 00:38:52 executing program 2: mlock(&(0x7f0000ff5000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ff3000/0x4000)=nil, 0x4000) [ 1733.464180][T16218] usb 6-1: USB disconnect, device number 62 00:38:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) 00:38:52 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 00:38:52 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4ffe0}}, 0x0) 00:38:52 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000040)=""/242, 0x1000000, 0xf2, 0x1}, 0x20) 00:38:52 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/23, 0x17}], 0x1, 0x7, 0x0) 00:38:53 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r1, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f00000020c0)={0x78, 0x0, r2, {0x7, 0x0, 0x0, {0x0, 0x8, 0xffffffff}}}, 0x78) [ 1734.207323][T21577] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1734.452788][T21577] usb 6-1: Using ep0 maxpacket: 8 [ 1734.573225][T21577] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.583966][T21577] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1734.597452][T21577] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1734.606807][T21577] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.680686][T21577] usb 6-1: config 0 descriptor?? [ 1734.728810][T21577] iowarrior 6-1:0.0: no interrupt-in endpoint found 00:38:55 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) 00:38:55 executing program 0: r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200)) 00:38:55 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "85845ccd836f2b9228add04d8dbe506a55ab7c1b813511a9a1e338c66d36c52900d37b2f9d1253632c01c76de9db1563fef766d5dc73a09b93128d53cb26eb20"}, 0x48, r0) keyctl$invalidate(0x15, r1) 00:38:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9}]}, 0x38}}, 0x0) 00:38:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x93e8}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x24}}, 0x0) [ 1736.864190][T12604] usb 6-1: USB disconnect, device number 63 00:38:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2, 0x7, 0x301}, 0x14}}, 0x0) 00:38:56 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "85845ccd836f2b9228add04d8dbe506a55ab7c1b813511a9a1e338c66d36c52900d37b2f9d1253632c01c76de9db1563fef766d5dc73a09b93128d53cb26eb20"}, 0x48, r0) keyctl$invalidate(0x15, r1) 00:38:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "85845ccd836f2b9228add04d8dbe506a55ab7c1b813511a9a1e338c66d36c52900d37b2f9d1253632c01c76de9db1563fef766d5dc73a09b93128d53cb26eb20"}, 0x48, r0) keyctl$invalidate(0x15, r1) 00:38:56 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "85845ccd836f2b9228add04d8dbe506a55ab7c1b813511a9a1e338c66d36c52900d37b2f9d1253632c01c76de9db1563fef766d5dc73a09b93128d53cb26eb20"}, 0x48, r0) keyctl$invalidate(0x15, r1) 00:38:56 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040), &(0x7f0000000080)) 00:38:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "85845ccd836f2b9228add04d8dbe506a55ab7c1b813511a9a1e338c66d36c52900d37b2f9d1253632c01c76de9db1563fef766d5dc73a09b93128d53cb26eb20"}, 0x48, r0) keyctl$invalidate(0x15, r1) [ 1737.562078][T16218] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1737.812063][T16218] usb 6-1: Using ep0 maxpacket: 8 [ 1737.952213][T16218] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1737.962673][T16218] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1737.975938][T16218] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1737.985299][T16218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.999364][T16218] usb 6-1: config 0 descriptor?? [ 1738.058301][T16218] iowarrior 6-1:0.0: no interrupt-in endpoint found 00:38:59 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:38:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x480, 0x258, 0x178, 0xffffffff, 0x0, 0x178, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@private1, @private0, [], [], '\x00', 'veth1_to_batadv\x00', {}, {}, 0x0, 0x0, 0x0, 0x8a}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv6=@local, @port, @icmp_id}}}, {{@ipv6={@mcast1, @empty, [], [], 'veth0_vlan\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv4=@multicast2, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private1, @ipv6=@private2, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) 00:38:59 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1b) read$FUSE(r0, 0x0, 0x0) 00:38:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "85845ccd836f2b9228add04d8dbe506a55ab7c1b813511a9a1e338c66d36c52900d37b2f9d1253632c01c76de9db1563fef766d5dc73a09b93128d53cb26eb20"}, 0x48, r0) keyctl$invalidate(0x15, r1) 00:38:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "85845ccd836f2b9228add04d8dbe506a55ab7c1b813511a9a1e338c66d36c52900d37b2f9d1253632c01c76de9db1563fef766d5dc73a09b93128d53cb26eb20"}, 0x48, r0) keyctl$invalidate(0x15, r1) 00:38:59 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "85845ccd836f2b9228add04d8dbe506a55ab7c1b813511a9a1e338c66d36c52900d37b2f9d1253632c01c76de9db1563fef766d5dc73a09b93128d53cb26eb20"}, 0x48, r0) keyctl$invalidate(0x15, r1) [ 1740.235365][T12604] usb 6-1: USB disconnect, device number 64 00:38:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "85845ccd836f2b9228add04d8dbe506a55ab7c1b813511a9a1e338c66d36c52900d37b2f9d1253632c01c76de9db1563fef766d5dc73a09b93128d53cb26eb20"}, 0x48, r0) keyctl$invalidate(0x15, r1) 00:38:59 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000001800)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xdc0e}, 0x1c, 0x0, 0x0, &(0x7f0000001840)=[@dstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@generic={0x0, 0x7, "5373af68ef4fe5"}]}}}], 0x28}, 0x0) 00:38:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x801, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 00:38:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "85845ccd836f2b9228add04d8dbe506a55ab7c1b813511a9a1e338c66d36c52900d37b2f9d1253632c01c76de9db1563fef766d5dc73a09b93128d53cb26eb20"}, 0x48, r0) keyctl$invalidate(0x15, r1) 00:38:59 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000001800)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000001840)=[@dstopts={{0x18}}], 0x18}, 0x0) [ 1740.912504][T16218] usb 6-1: new high-speed USB device number 65 using dummy_hcd 00:39:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x40, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}]}]}, 0x40}}, 0x0) [ 1741.152885][T16218] usb 6-1: Using ep0 maxpacket: 8 [ 1741.286251][T16218] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1741.301445][T16218] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1741.315599][T16218] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1741.324928][T16218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.340081][T16218] usb 6-1: config 0 descriptor?? [ 1741.403020][T16218] iowarrior 6-1:0.0: no interrupt-in endpoint found 00:39:02 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d00090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:39:02 executing program 3: syz_usbip_server_init(0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 00:39:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001400)=@filter={'filter\x00', 0xe, 0x4, 0x1390, 0xffffffff, 0x0, 0x0, 0x1150, 0xffffffff, 0xffffffff, 0x12f8, 0x12f8, 0x12f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x10f0, 0x1150, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'pimreg\x00', 'team_slave_0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@ecn={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6483eb6f0e8e"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13f0) 00:39:02 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 00:39:02 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 00:39:02 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000840), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000008c0)={0x0}) [ 1743.588879][T16218] usb 6-1: USB disconnect, device number 65 00:39:02 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) [ 1743.743569][T28654] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1743.750331][T28654] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1743.766251][T28654] vhci_hcd vhci_hcd.0: Device attached 00:39:02 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0x13, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) 00:39:02 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001540)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x30}}, 0x0) 00:39:02 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) [ 1743.890340][T28655] vhci_hcd: connection closed [ 1743.915580][ T8] vhci_hcd: stop threads [ 1743.925241][ T8] vhci_hcd: release socket [ 1743.929932][ T8] vhci_hcd: disconnect device [ 1743.982439][T12604] vhci_hcd: vhci_device speed not set 00:39:03 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) 00:39:03 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1744.292138][T16218] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1744.532781][T16218] usb 6-1: Using ep0 maxpacket: 8 [ 1744.677782][T16218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1744.687901][T16218] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1744.697346][T16218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.754656][T16218] usb 6-1: config 0 descriptor?? [ 1744.797456][T16218] iowarrior 6-1:0.0: no interrupt-in endpoint found 00:39:06 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d00090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:39:06 executing program 2: syz_clone(0x3000d100, 0x0, 0x0, 0x0, 0x0, 0x0) 00:39:06 executing program 4: mount$9p_fd(0x0, &(0x7f0000000880)='.\x00', &(0x7f00000008c0), 0x0, &(0x7f0000000000)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fff}}]}}) 00:39:06 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x4}]}}, &(0x7f0000000080)=""/173, 0x26, 0xad, 0x1}, 0x20) 00:39:06 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) 00:39:06 executing program 1: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x1, &(0x7f0000009940)=[{0x0}], 0x0, 0x0) [ 1746.968501][T16218] usb 6-1: USB disconnect, device number 66 [ 1747.143515][T28681] 9pnet_fd: Insufficient options for proto=fd 00:39:06 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x2, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x5}, [@initr0]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf5, &(0x7f0000000080)=""/245, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xae4}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 00:39:06 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) 00:39:06 executing program 4: syz_mount_image$ext4(&(0x7f0000001980)='ext4\x00', 0x0, 0x0, 0x2, &(0x7f0000001e00)=[{&(0x7f0000001a00)="5d5c62ef9933dd9fbb6b5eda90730a", 0xf}, {0x0}], 0x0, &(0x7f0000001ec0)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@nouid32}], [{@seclabel}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}) 00:39:06 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x2}, [@alu={0x4}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0xf5, &(0x7f0000000240)=""/245, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:39:06 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025cdcf0"], 0x0) 00:39:06 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) [ 1747.672370][T16218] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1747.912684][T16218] usb 6-1: Using ep0 maxpacket: 8 [ 1747.922946][ T9946] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1748.063673][T16218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1748.074429][T16218] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1748.083857][T16218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.109668][T16218] usb 6-1: config 0 descriptor?? [ 1748.168282][T16218] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 1748.216082][ T9946] usb 3-1: Using ep0 maxpacket: 8 [ 1748.342224][ T9946] usb 3-1: config index 0 descriptor too short (expected 56412, got 92) [ 1748.350893][ T9946] usb 3-1: config 0 has too many interfaces: 240, using maximum allowed: 32 [ 1748.364224][ T9946] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.375001][ T9946] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 240 [ 1748.592373][ T9946] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1748.601635][ T9946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.609935][ T9946] usb 3-1: Product: syz [ 1748.614424][ T9946] usb 3-1: Manufacturer: syz [ 1748.619198][ T9946] usb 3-1: SerialNumber: syz [ 1748.630078][ T9946] usb 3-1: config 0 descriptor?? [ 1748.882416][ T9946] usb 3-1: USB disconnect, device number 87 [ 1748.915369][ T1192] ieee802154 phy0 wpan0: encryption failed: -22 00:39:09 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d00090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:39:09 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0xf5, &(0x7f0000000240)=""/245, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:39:09 executing program 3: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x4}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x8, 0x0, 0xdf, 0x0, 0x6}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}]}) 00:39:09 executing program 1: add_key(&(0x7f0000001000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:39:09 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) 00:39:09 executing program 2: syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) [ 1750.350457][T16218] usb 6-1: USB disconnect, device number 67 00:39:09 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) 00:39:09 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000001180)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, &(0x7f00000025c0)=[{&(0x7f00000011c0)=""/250, 0xfa}, {0x0}], 0x2, 0x0) 00:39:09 executing program 1: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="f1", 0x1, 0xfffffffffffffffc) [ 1750.752122][T12604] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1750.765461][T21577] usb 3-1: new high-speed USB device number 88 using dummy_hcd 00:39:10 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x6, &(0x7f0000001e00)=[{&(0x7f0000001a00)=']\\', 0x2, 0xffffffffffffffff}, {&(0x7f0000001a80)='f', 0x1}, {&(0x7f0000001b00)='O', 0x1}, {&(0x7f0000001bc0)="1a", 0x1, 0x3a6356a7}, {&(0x7f0000001cc0)='W', 0x1}, {&(0x7f0000001dc0)="84", 0x1}], 0x0, 0x0) 00:39:10 executing program 0: add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) 00:39:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) [ 1751.012271][T16218] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1751.038276][T21577] usb 3-1: Using ep0 maxpacket: 32 [ 1751.142957][T12604] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1751.154475][T12604] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1751.164593][T12604] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1751.174639][T12604] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1751.192755][T21577] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1751.233289][T28721] loop4: detected capacity change from 0 to 264192 [ 1751.252317][T16218] usb 6-1: Using ep0 maxpacket: 8 [ 1751.372937][T16218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1751.383570][T16218] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1751.384446][T21577] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1751.392881][T16218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.410590][T21577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.418916][T21577] usb 3-1: Product: syz [ 1751.423436][T21577] usb 3-1: Manufacturer: syz [ 1751.428212][T21577] usb 3-1: SerialNumber: syz [ 1751.446910][T16218] usb 6-1: config 0 descriptor?? [ 1751.553198][T16218] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 1751.702828][T12604] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1751.712609][T12604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.720806][T12604] usb 4-1: SerialNumber: syz [ 1751.782134][T28713] usb 3-1: USB disconnect, device number 88 [ 1752.113174][T12604] cdc_ncm 4-1:1.0: bind() failure [ 1752.127870][T12604] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1752.135878][T12604] cdc_ncm 4-1:1.1: bind() failure [ 1752.174332][T12604] usb 4-1: USB disconnect, device number 39 00:39:12 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:39:12 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0xf5, &(0x7f0000000240)=""/245, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:39:12 executing program 1: syslog(0x3, &(0x7f0000000300)=""/209, 0xd1) 00:39:12 executing program 0: add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) 00:39:12 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000f00), 0x40140, 0x0) 00:39:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@can={0x2}, 0x80) [ 1753.608687][ T9946] usb 6-1: USB disconnect, device number 68 00:39:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0xf5, &(0x7f0000000240)=""/245, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:39:12 executing program 0: add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) 00:39:12 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='attr/current\x00') 00:39:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x2, 0x5, &(0x7f0000000040)=@framed={{}, [@initr0={0x18, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf5, &(0x7f0000000080)=""/245, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:39:13 executing program 0: r0 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) 00:39:13 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)=ANY=[@ANYBLOB="ef1eba37761092"]) [ 1754.792186][ T9946] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1755.032835][ T9946] usb 6-1: Using ep0 maxpacket: 8 [ 1755.152758][ T9946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1755.164582][ T9946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1755.174778][ T9946] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1755.184161][ T9946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.196917][ T9946] usb 6-1: config 0 descriptor?? [ 1755.471338][ T9946] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1755.683981][T28743] iowarrior 6-1:0.0: Error -90 while submitting URB [ 1755.707961][T12604] usb 6-1: USB disconnect, device number 69 [ 1755.728157][T12604] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:39:15 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:39:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x2, 0x5, &(0x7f0000000040)=@framed={{}, [@initr0]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf5, &(0x7f0000000080)=""/245, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:39:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 00:39:15 executing program 0: r0 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) 00:39:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020) fcntl$getown(r2, 0x9) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f6275732c78696e6f3d6f6e2c00f06b16d7e1773e10f7e823ac597c7134a58d8240b5bb827c334c5f10832046e936e5eccf9d0a7f169cdd671dbc68db1813f905902cab55901b0665c5d2700349a784c917f4ceb63b946187dfcebee2fcbf01fdc9e8e018f3e8ca3e90061556420cd0cd34c3259364b895b17f868af9efdd4f9e7d9d616157af3947"]) 00:39:15 executing program 3: sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000281df9bc7b10e79c84b02032ea5319b5000000cb795f", @ANYRES32=0x0, @ANYBLOB="04000019000080f8a2e263e2002c453c3ecb973d00000000f0ff"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4800) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 00:39:15 executing program 0: r0 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) 00:39:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x15, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:39:15 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)="530c1ab095b32fd690d4f8c87e7aea9dae177cfccb53c98cfbb2c028331bf9bb23df21b53b491720b94d37c4fb7d175f9a7a45bde54bb72fe585df76443fc3e51af03427f398216ac5701b6f718eb1d58699390781470c3cabd03d01999930d61033d42b33706d246620c11cc0ef851b6a3d5ec37776dfa6cf978eaa2e363851", 0x80}}, 0x0) 00:39:15 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) 00:39:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) stat(0x0, &(0x7f00000002c0)) fcntl$getown(r1, 0x9) syz_clone3(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f6275732c78696e6f3d6f6e2c00f06b16d7e1773e10f7e823ac597c7134a58d8240b5bb827c334c5f10832046e936e5eccf9d0a7f"]) [ 1756.812410][T16218] usb 6-1: new high-speed USB device number 70 using dummy_hcd 00:39:16 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8912, &(0x7f00000000c0)={'lo\x00', 0x0}) [ 1757.338365][T16218] usb 6-1: Using ep0 maxpacket: 8 [ 1757.707579][T28759] overlayfs: failed to resolve './file0': -2 [ 1757.898802][T16218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1757.910034][T16218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1757.920170][T16218] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1757.929512][T16218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.949186][T16218] usb 6-1: config 0 descriptor?? [ 1758.040393][T28763] not chained 870000 origins [ 1758.045277][T28763] CPU: 1 PID: 28763 Comm: syz-executor.1 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1758.055912][T28763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1758.066064][T28763] Call Trace: [ 1758.069415][T28763] [ 1758.072413][T28763] dump_stack_lvl+0x1c8/0x256 [ 1758.077262][T28763] dump_stack+0x1a/0x1c [ 1758.081564][T28763] kmsan_internal_chain_origin+0x78/0x120 [ 1758.087436][T28763] ? up_read+0x36/0x1c0 [ 1758.091737][T28763] ? do_user_addr_fault+0xfef/0x1710 [ 1758.097194][T28763] ? exc_page_fault+0x6d/0x140 [ 1758.102094][T28763] ? asm_exc_page_fault+0x27/0x30 [ 1758.107283][T28763] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1758.113680][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1758.119637][T28763] __msan_chain_origin+0xbd/0x140 [ 1758.124802][T28763] __get_compat_msghdr+0x514/0x750 [ 1758.130109][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1758.135123][T28763] ? ___sys_recvmsg+0xa9/0x890 [ 1758.140006][T28763] ? do_recvmmsg+0x63a/0x10a0 [ 1758.144808][T28763] ___sys_recvmsg+0x19d/0x890 [ 1758.149617][T28763] ? __schedule+0x1609/0x21d0 [ 1758.154435][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1758.160394][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1758.166350][T28763] do_recvmmsg+0x63a/0x10a0 [ 1758.170995][T28763] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1758.177400][T28763] ? __sys_recvmmsg+0x52/0x450 [ 1758.182293][T28763] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1758.188865][T28763] __sys_recvmmsg+0x113/0x450 [ 1758.193685][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1758.200093][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1758.205249][T28763] ? exit_to_user_mode_prepare+0x119/0x220 [ 1758.211203][T28763] do_fast_syscall_32+0x33/0x70 [ 1758.216188][T28763] do_SYSENTER_32+0x1b/0x20 [ 1758.220815][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1758.227331][T28763] RIP: 0023:0xf7ff7549 [ 1758.231495][T28763] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1758.251263][T28763] RSP: 002b:00000000f7fb05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1758.259824][T28763] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1758.267916][T28763] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1758.275993][T28763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1758.284069][T28763] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1758.292139][T28763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1758.300235][T28763] [ 1758.308493][T28763] Uninit was stored to memory at: [ 1758.314190][T28763] __get_compat_msghdr+0x514/0x750 [ 1758.319465][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1758.324570][T28763] ___sys_recvmsg+0x19d/0x890 [ 1758.329368][T28763] do_recvmmsg+0x63a/0x10a0 [ 1758.334077][T28763] __sys_recvmmsg+0x113/0x450 [ 1758.338871][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1758.345344][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1758.350493][T28763] do_fast_syscall_32+0x33/0x70 [ 1758.355564][T28763] do_SYSENTER_32+0x1b/0x20 [ 1758.360187][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1758.366791][T28763] [ 1758.369173][T28763] Uninit was stored to memory at: [ 1758.374488][T28763] __get_compat_msghdr+0x514/0x750 [ 1758.379762][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1758.384859][T28763] ___sys_recvmsg+0x19d/0x890 [ 1758.389653][T28763] do_recvmmsg+0x63a/0x10a0 [ 1758.394367][T28763] __sys_recvmmsg+0x113/0x450 [ 1758.399180][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1758.405649][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1758.410822][T28763] do_fast_syscall_32+0x33/0x70 [ 1758.415885][T28763] do_SYSENTER_32+0x1b/0x20 [ 1758.420508][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1758.427187][T28763] [ 1758.429571][T28763] Uninit was stored to memory at: [ 1758.434862][T28763] __get_compat_msghdr+0x514/0x750 [ 1758.440132][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1758.445227][T28763] ___sys_recvmsg+0x19d/0x890 [ 1758.450022][T28763] do_recvmmsg+0x63a/0x10a0 [ 1758.454763][T28763] __sys_recvmmsg+0x113/0x450 [ 1758.459558][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1758.466031][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1758.471183][T28763] do_fast_syscall_32+0x33/0x70 [ 1758.476263][T28763] do_SYSENTER_32+0x1b/0x20 [ 1758.480883][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1758.487476][T28763] [ 1758.489856][T28763] Uninit was stored to memory at: [ 1758.495145][T28763] __get_compat_msghdr+0x514/0x750 [ 1758.500416][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1758.505509][T28763] ___sys_recvmsg+0x19d/0x890 [ 1758.510305][T28763] do_recvmmsg+0x63a/0x10a0 [ 1758.515010][T28763] __sys_recvmmsg+0x113/0x450 [ 1758.519802][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1758.526289][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1758.531439][T28763] do_fast_syscall_32+0x33/0x70 [ 1758.536513][T28763] do_SYSENTER_32+0x1b/0x20 [ 1758.541149][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1758.547767][T28763] [ 1758.550158][T28763] Uninit was stored to memory at: [ 1758.555457][T28763] __get_compat_msghdr+0x514/0x750 [ 1758.560746][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1758.565867][T28763] ___sys_recvmsg+0x19d/0x890 [ 1758.570669][T28763] do_recvmmsg+0x63a/0x10a0 [ 1758.575397][T28763] __sys_recvmmsg+0x113/0x450 [ 1758.580198][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1758.586734][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1758.592084][T28763] do_fast_syscall_32+0x33/0x70 [ 1758.597075][T28763] do_SYSENTER_32+0x1b/0x20 [ 1758.601699][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1758.608315][T28763] [ 1758.610706][T28763] Uninit was stored to memory at: [ 1758.616028][T28763] __get_compat_msghdr+0x514/0x750 [ 1758.621315][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1758.626447][T28763] ___sys_recvmsg+0x19d/0x890 [ 1758.631256][T28763] do_recvmmsg+0x63a/0x10a0 [ 1758.635996][T28763] __sys_recvmmsg+0x113/0x450 [ 1758.640800][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1758.647302][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1758.652558][T28763] do_fast_syscall_32+0x33/0x70 [ 1758.657548][T28763] do_SYSENTER_32+0x1b/0x20 [ 1758.662298][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1758.668824][T28763] [ 1758.671242][T28763] Uninit was stored to memory at: [ 1758.676554][T28763] __get_compat_msghdr+0x514/0x750 [ 1758.681930][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1758.686974][T28763] ___sys_recvmsg+0x19d/0x890 [ 1758.691877][T28763] do_recvmmsg+0x63a/0x10a0 [ 1758.696498][T28763] __sys_recvmmsg+0x113/0x450 [ 1758.701302][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1758.707865][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1758.713154][T28763] do_fast_syscall_32+0x33/0x70 [ 1758.718140][T28763] do_SYSENTER_32+0x1b/0x20 [ 1758.722920][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1758.729437][T28763] [ 1758.731970][T28763] Local variable msg_sys created at: [ 1758.737330][T28763] do_recvmmsg+0x5f/0x10a0 [ 1758.742033][T28763] __sys_recvmmsg+0x113/0x450 [ 1758.762640][T16218] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1759.027798][T28766] iowarrior 6-1:0.0: Error -90 while submitting URB [ 1759.061926][T12604] usb 6-1: USB disconnect, device number 70 [ 1759.133669][T12604] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 1759.276773][T28763] not chained 880000 origins [ 1759.281471][T28763] CPU: 1 PID: 28763 Comm: syz-executor.1 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1759.292081][T28763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1759.302220][T28763] Call Trace: [ 1759.305570][T28763] [ 1759.308566][T28763] dump_stack_lvl+0x1c8/0x256 [ 1759.313381][T28763] dump_stack+0x1a/0x1c [ 1759.317684][T28763] kmsan_internal_chain_origin+0x78/0x120 [ 1759.323560][T28763] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1759.329777][T28763] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1759.336140][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1759.342107][T28763] ? __get_compat_msghdr+0x5b/0x750 [ 1759.347427][T28763] ? get_compat_msghdr+0x8c/0x1c0 [ 1759.352579][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1759.358549][T28763] ? __get_compat_msghdr+0x5b/0x750 [ 1759.363871][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1759.369771][T28763] ? should_fail+0x3f/0x810 [ 1759.374374][T28763] ? __stack_depot_save+0x21/0x4b0 [ 1759.379631][T28763] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1759.386034][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1759.391987][T28763] __msan_chain_origin+0xbd/0x140 [ 1759.397129][T28763] __get_compat_msghdr+0x514/0x750 [ 1759.402408][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1759.407454][T28763] ? ___sys_recvmsg+0xa9/0x890 [ 1759.412344][T28763] ? do_recvmmsg+0x63a/0x10a0 [ 1759.417104][T28763] ___sys_recvmsg+0x19d/0x890 [ 1759.421884][T28763] ? __schedule+0x1609/0x21d0 [ 1759.426716][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1759.432667][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1759.438600][T28763] do_recvmmsg+0x63a/0x10a0 [ 1759.443237][T28763] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1759.449577][T28763] ? __sys_recvmmsg+0x52/0x450 [ 1759.454411][T28763] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1759.460915][T28763] __sys_recvmmsg+0x113/0x450 [ 1759.465672][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1759.472049][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1759.477212][T28763] ? exit_to_user_mode_prepare+0x119/0x220 [ 1759.483146][T28763] do_fast_syscall_32+0x33/0x70 [ 1759.488124][T28763] do_SYSENTER_32+0x1b/0x20 [ 1759.492705][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1759.499146][T28763] RIP: 0023:0xf7ff7549 [ 1759.503292][T28763] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1759.523015][T28763] RSP: 002b:00000000f7fb05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1759.531571][T28763] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1759.539660][T28763] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1759.547738][T28763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1759.555798][T28763] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1759.563850][T28763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1759.571915][T28763] [ 1759.580107][T28763] Uninit was stored to memory at: [ 1759.585852][T28763] __get_compat_msghdr+0x514/0x750 [ 1759.591133][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1759.596267][T28763] ___sys_recvmsg+0x19d/0x890 [ 1759.601076][T28763] do_recvmmsg+0x63a/0x10a0 [ 1759.605807][T28763] __sys_recvmmsg+0x113/0x450 [ 1759.610637][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1759.617138][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1759.622399][T28763] do_fast_syscall_32+0x33/0x70 [ 1759.627394][T28763] do_SYSENTER_32+0x1b/0x20 [ 1759.632153][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1759.638667][T28763] [ 1759.641050][T28763] Uninit was stored to memory at: [ 1759.646359][T28763] __get_compat_msghdr+0x514/0x750 [ 1759.651645][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1759.656762][T28763] ___sys_recvmsg+0x19d/0x890 [ 1759.661552][T28763] do_recvmmsg+0x63a/0x10a0 [ 1759.666249][T28763] __sys_recvmmsg+0x113/0x450 [ 1759.671277][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1759.677789][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1759.683037][T28763] do_fast_syscall_32+0x33/0x70 [ 1759.687994][T28763] do_SYSENTER_32+0x1b/0x20 [ 1759.692728][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1759.699243][T28763] [ 1759.701629][T28763] Uninit was stored to memory at: [ 1759.706954][T28763] __get_compat_msghdr+0x514/0x750 [ 1759.712327][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1759.717340][T28763] ___sys_recvmsg+0x19d/0x890 [ 1759.722290][T28763] do_recvmmsg+0x63a/0x10a0 [ 1759.726917][T28763] __sys_recvmmsg+0x113/0x450 [ 1759.731702][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1759.738237][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1759.743475][T28763] do_fast_syscall_32+0x33/0x70 [ 1759.748517][T28763] do_SYSENTER_32+0x1b/0x20 [ 1759.753255][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1759.759772][T28763] [ 1759.762257][T28763] Uninit was stored to memory at: [ 1759.767473][T28763] __get_compat_msghdr+0x514/0x750 [ 1759.772891][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1759.777891][T28763] ___sys_recvmsg+0x19d/0x890 [ 1759.782773][T28763] do_recvmmsg+0x63a/0x10a0 [ 1759.787398][T28763] __sys_recvmmsg+0x113/0x450 [ 1759.792351][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1759.798742][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1759.804028][T28763] do_fast_syscall_32+0x33/0x70 [ 1759.808991][T28763] do_SYSENTER_32+0x1b/0x20 [ 1759.813708][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1759.820314][T28763] [ 1759.822797][T28763] Uninit was stored to memory at: 00:39:18 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:39:18 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x12) 00:39:18 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1c, 0x1, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:39:18 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) [ 1759.828025][T28763] __get_compat_msghdr+0x514/0x750 [ 1759.833441][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1759.838459][T28763] ___sys_recvmsg+0x19d/0x890 [ 1759.843403][T28763] do_recvmmsg+0x63a/0x10a0 [ 1759.848029][T28763] __sys_recvmmsg+0x113/0x450 [ 1759.852979][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1759.859379][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1759.864685][T28763] do_fast_syscall_32+0x33/0x70 [ 1759.869661][T28763] do_SYSENTER_32+0x1b/0x20 [ 1759.874436][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1759.880946][T28763] [ 1759.883420][T28763] Uninit was stored to memory at: [ 1759.888627][T28763] __get_compat_msghdr+0x514/0x750 [ 1759.894027][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1759.899048][T28763] ___sys_recvmsg+0x19d/0x890 [ 1759.904010][T28763] do_recvmmsg+0x63a/0x10a0 [ 1759.908638][T28763] __sys_recvmmsg+0x113/0x450 [ 1759.913573][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1759.919957][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1759.925207][T28763] do_fast_syscall_32+0x33/0x70 [ 1759.930251][T28763] do_SYSENTER_32+0x1b/0x20 [ 1759.935018][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1759.941527][T28763] [ 1759.944082][T28763] Uninit was stored to memory at: [ 1759.949258][T28763] __get_compat_msghdr+0x514/0x750 [ 1759.954625][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1759.959630][T28763] ___sys_recvmsg+0x19d/0x890 [ 1759.965005][T28763] do_recvmmsg+0x63a/0x10a0 [ 1759.969661][T28763] __sys_recvmmsg+0x113/0x450 [ 1759.974596][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1759.980985][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1759.986279][T28763] do_fast_syscall_32+0x33/0x70 [ 1759.991266][T28763] do_SYSENTER_32+0x1b/0x20 [ 1759.996042][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1760.002664][T28763] [ 1760.005054][T28763] Local variable msg_sys created at: [ 1760.010407][T28763] do_recvmmsg+0x5f/0x10a0 [ 1760.015099][T28763] __sys_recvmmsg+0x113/0x450 [ 1760.530089][T28763] not chained 890000 origins [ 1760.535876][T28763] CPU: 1 PID: 28763 Comm: syz-executor.1 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1760.546525][T28763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1760.556693][T28763] Call Trace: [ 1760.560054][T28763] [ 1760.563061][T28763] dump_stack_lvl+0x1c8/0x256 [ 1760.567921][T28763] dump_stack+0x1a/0x1c [ 1760.572227][T28763] kmsan_internal_chain_origin+0x78/0x120 [ 1760.578090][T28763] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1760.584324][T28763] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1760.590728][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1760.596683][T28763] ? __get_compat_msghdr+0x5b/0x750 [ 1760.602104][T28763] ? get_compat_msghdr+0x8c/0x1c0 [ 1760.607327][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1760.613295][T28763] ? __get_compat_msghdr+0x5b/0x750 [ 1760.618671][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1760.624635][T28763] ? should_fail+0x3f/0x810 [ 1760.629282][T28763] ? __stack_depot_save+0x21/0x4b0 [ 1760.634533][T28763] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1760.640929][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1760.646882][T28763] __msan_chain_origin+0xbd/0x140 [ 1760.652044][T28763] __get_compat_msghdr+0x514/0x750 [ 1760.657339][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1760.662343][T28763] ? ___sys_recvmsg+0xa9/0x890 [ 1760.667217][T28763] ? do_recvmmsg+0x63a/0x10a0 [ 1760.672012][T28763] ___sys_recvmsg+0x19d/0x890 [ 1760.676811][T28763] ? __schedule+0x1609/0x21d0 [ 1760.681616][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1760.687572][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1760.693540][T28763] do_recvmmsg+0x63a/0x10a0 [ 1760.698216][T28763] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1760.704620][T28763] ? __sys_recvmmsg+0x52/0x450 [ 1760.709514][T28763] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1760.717487][T28763] __sys_recvmmsg+0x113/0x450 [ 1760.722296][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1760.728705][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1760.733847][T28763] ? exit_to_user_mode_prepare+0x119/0x220 [ 1760.739787][T28763] do_fast_syscall_32+0x33/0x70 [ 1760.744760][T28763] do_SYSENTER_32+0x1b/0x20 [ 1760.749376][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1760.755876][T28763] RIP: 0023:0xf7ff7549 [ 1760.760049][T28763] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1760.779819][T28763] RSP: 002b:00000000f7fb05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1760.788359][T28763] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1760.796433][T28763] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1760.804501][T28763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1760.812564][T28763] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1760.820629][T28763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1760.828733][T28763] [ 1760.836544][T28763] Uninit was stored to memory at: [ 1760.842243][T28763] __get_compat_msghdr+0x514/0x750 [ 1760.847522][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1760.852636][T28763] ___sys_recvmsg+0x19d/0x890 [ 1760.857434][T28763] do_recvmmsg+0x63a/0x10a0 [ 1760.862148][T28763] __sys_recvmmsg+0x113/0x450 [ 1760.866945][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1760.873411][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1760.878558][T28763] do_fast_syscall_32+0x33/0x70 [ 1760.883613][T28763] do_SYSENTER_32+0x1b/0x20 [ 1760.888236][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1760.894832][T28763] [ 1760.897221][T28763] Uninit was stored to memory at: [ 1760.902504][T28763] __get_compat_msghdr+0x514/0x750 [ 1760.907775][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1760.912864][T28763] ___sys_recvmsg+0x19d/0x890 [ 1760.917661][T28763] do_recvmmsg+0x63a/0x10a0 [ 1760.922378][T28763] __sys_recvmmsg+0x113/0x450 [ 1760.927168][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1760.933633][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1760.938781][T28763] do_fast_syscall_32+0x33/0x70 [ 1760.943833][T28763] do_SYSENTER_32+0x1b/0x20 [ 1760.948452][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1760.955049][T28763] [ 1760.957436][T28763] Uninit was stored to memory at: [ 1760.962717][T28763] __get_compat_msghdr+0x514/0x750 [ 1760.967984][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1760.973071][T28763] ___sys_recvmsg+0x19d/0x890 [ 1760.977867][T28763] do_recvmmsg+0x63a/0x10a0 [ 1760.982568][T28763] __sys_recvmmsg+0x113/0x450 [ 1760.987362][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1760.993827][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1760.998973][T28763] do_fast_syscall_32+0x33/0x70 [ 1761.004021][T28763] do_SYSENTER_32+0x1b/0x20 [ 1761.008637][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1761.015240][T28763] [ 1761.017624][T28763] Uninit was stored to memory at: [ 1761.022921][T28763] __get_compat_msghdr+0x514/0x750 [ 1761.028192][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1761.033290][T28763] ___sys_recvmsg+0x19d/0x890 [ 1761.038089][T28763] do_recvmmsg+0x63a/0x10a0 [ 1761.042792][T28763] __sys_recvmmsg+0x113/0x450 [ 1761.047585][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1761.054049][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1761.059203][T28763] do_fast_syscall_32+0x33/0x70 [ 1761.064267][T28763] do_SYSENTER_32+0x1b/0x20 [ 1761.068885][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1761.075476][T28763] [ 1761.077877][T28763] Uninit was stored to memory at: [ 1761.083163][T28763] __get_compat_msghdr+0x514/0x750 [ 1761.088436][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1761.093524][T28763] ___sys_recvmsg+0x19d/0x890 [ 1761.098321][T28763] do_recvmmsg+0x63a/0x10a0 [ 1761.103022][T28763] __sys_recvmmsg+0x113/0x450 [ 1761.107813][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1761.114287][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1761.119430][T28763] do_fast_syscall_32+0x33/0x70 [ 1761.124481][T28763] do_SYSENTER_32+0x1b/0x20 [ 1761.129100][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1761.135694][T28763] [ 1761.138077][T28763] Uninit was stored to memory at: [ 1761.143364][T28763] __get_compat_msghdr+0x514/0x750 [ 1761.148635][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1761.153735][T28763] ___sys_recvmsg+0x19d/0x890 [ 1761.158534][T28763] do_recvmmsg+0x63a/0x10a0 [ 1761.163241][T28763] __sys_recvmmsg+0x113/0x450 [ 1761.168035][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1761.174494][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1761.179638][T28763] do_fast_syscall_32+0x33/0x70 [ 1761.184690][T28763] do_SYSENTER_32+0x1b/0x20 [ 1761.189306][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1761.195892][T28763] [ 1761.198279][T28763] Uninit was stored to memory at: [ 1761.203561][T28763] __get_compat_msghdr+0x514/0x750 [ 1761.208852][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1761.213948][T28763] ___sys_recvmsg+0x19d/0x890 [ 1761.218744][T28763] do_recvmmsg+0x63a/0x10a0 [ 1761.223450][T28763] __sys_recvmmsg+0x113/0x450 [ 1761.228248][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1761.234706][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1761.239855][T28763] do_fast_syscall_32+0x33/0x70 [ 1761.244908][T28763] do_SYSENTER_32+0x1b/0x20 [ 1761.249526][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1761.256114][T28763] [ 1761.258499][T28763] Local variable msg_sys created at: [ 1761.263935][T28763] do_recvmmsg+0x5f/0x10a0 [ 1761.268462][T28763] __sys_recvmmsg+0x113/0x450 [ 1761.451903][ T9946] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1761.706602][ T9946] usb 6-1: Using ep0 maxpacket: 8 [ 1761.751575][T28763] not chained 900000 origins [ 1761.756696][T28763] CPU: 1 PID: 28763 Comm: syz-executor.1 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1761.767329][T28763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1761.777482][T28763] Call Trace: [ 1761.780831][T28763] [ 1761.783857][T28763] dump_stack_lvl+0x1c8/0x256 [ 1761.788713][T28763] dump_stack+0x1a/0x1c [ 1761.793021][T28763] kmsan_internal_chain_origin+0x78/0x120 [ 1761.798892][T28763] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1761.805129][T28763] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1761.811557][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1761.817527][T28763] ? __get_compat_msghdr+0x5b/0x750 [ 1761.822915][T28763] ? get_compat_msghdr+0x8c/0x1c0 [ 1761.828133][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1761.834100][T28763] ? __get_compat_msghdr+0x5b/0x750 [ 1761.839477][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1761.845441][T28763] ? should_fail+0x3f/0x810 [ 1761.850087][T28763] ? __stack_depot_save+0x21/0x4b0 [ 1761.855347][T28763] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1761.861744][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1761.867705][T28763] __msan_chain_origin+0xbd/0x140 [ 1761.872871][T28763] __get_compat_msghdr+0x514/0x750 [ 1761.878259][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1761.883273][T28763] ? ___sys_recvmsg+0xa9/0x890 [ 1761.888158][T28763] ? do_recvmmsg+0x63a/0x10a0 [ 1761.892964][T28763] ___sys_recvmsg+0x19d/0x890 [ 1761.897773][T28763] ? __schedule+0x1609/0x21d0 [ 1761.902587][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1761.908550][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1761.914599][T28763] do_recvmmsg+0x63a/0x10a0 [ 1761.919247][T28763] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1761.925657][T28763] ? __sys_recvmmsg+0x52/0x450 [ 1761.930579][T28763] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1761.937164][T28763] __sys_recvmmsg+0x113/0x450 [ 1761.941983][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1761.948388][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1761.953541][T28763] ? exit_to_user_mode_prepare+0x119/0x220 [ 1761.959498][T28763] do_fast_syscall_32+0x33/0x70 [ 1761.964486][T28763] do_SYSENTER_32+0x1b/0x20 [ 1761.969116][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1761.975629][T28763] RIP: 0023:0xf7ff7549 [ 1761.979799][T28763] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1761.999558][T28763] RSP: 002b:00000000f7fb05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1762.008107][T28763] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1762.016188][T28763] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1762.024263][T28763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1762.032335][T28763] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1762.040408][T28763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1762.048505][T28763] [ 1762.057172][T28763] Uninit was stored to memory at: [ 1762.062886][T28763] __get_compat_msghdr+0x514/0x750 [ 1762.068160][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1762.073270][T28763] ___sys_recvmsg+0x19d/0x890 [ 1762.078067][T28763] do_recvmmsg+0x63a/0x10a0 [ 1762.082794][T28763] __sys_recvmmsg+0x113/0x450 [ 1762.087587][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1762.094056][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1762.099202][T28763] do_fast_syscall_32+0x33/0x70 [ 1762.104254][T28763] do_SYSENTER_32+0x1b/0x20 [ 1762.108879][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1762.115491][T28763] [ 1762.117874][T28763] Uninit was stored to memory at: [ 1762.123166][T28763] __get_compat_msghdr+0x514/0x750 [ 1762.128456][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1762.133570][T28763] ___sys_recvmsg+0x19d/0x890 [ 1762.138370][T28763] do_recvmmsg+0x63a/0x10a0 [ 1762.143083][T28763] __sys_recvmmsg+0x113/0x450 [ 1762.147879][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1762.154344][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1762.159491][T28763] do_fast_syscall_32+0x33/0x70 [ 1762.164544][T28763] do_SYSENTER_32+0x1b/0x20 [ 1762.169167][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1762.175777][T28763] [ 1762.178160][T28763] Uninit was stored to memory at: [ 1762.183455][T28763] __get_compat_msghdr+0x514/0x750 [ 1762.188750][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1762.193854][T28763] ___sys_recvmsg+0x19d/0x890 [ 1762.198655][T28763] do_recvmmsg+0x63a/0x10a0 [ 1762.203381][T28763] __sys_recvmmsg+0x113/0x450 [ 1762.208187][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1762.214681][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1762.219848][T28763] do_fast_syscall_32+0x33/0x70 [ 1762.224937][T28763] do_SYSENTER_32+0x1b/0x20 [ 1762.229569][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1762.236199][T28763] [ 1762.238611][T28763] Uninit was stored to memory at: [ 1762.243918][T28763] __get_compat_msghdr+0x514/0x750 [ 1762.249195][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1762.254310][T28763] ___sys_recvmsg+0x19d/0x890 [ 1762.259117][T28763] do_recvmmsg+0x63a/0x10a0 [ 1762.264028][T28763] __sys_recvmmsg+0x113/0x450 [ 1762.268818][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1762.275298][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1762.280436][T28763] do_fast_syscall_32+0x33/0x70 [ 1762.285480][T28763] do_SYSENTER_32+0x1b/0x20 [ 1762.290112][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1762.296781][T28763] [ 1762.299168][T28763] Uninit was stored to memory at: [ 1762.304467][T28763] __get_compat_msghdr+0x514/0x750 [ 1762.309782][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1762.314937][T28763] ___sys_recvmsg+0x19d/0x890 [ 1762.319729][T28763] do_recvmmsg+0x63a/0x10a0 [ 1762.324448][T28763] __sys_recvmmsg+0x113/0x450 [ 1762.329237][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1762.335687][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1762.340834][T28763] do_fast_syscall_32+0x33/0x70 [ 1762.345876][T28763] do_SYSENTER_32+0x1b/0x20 [ 1762.350487][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1762.357091][T28763] [ 1762.359484][T28763] Uninit was stored to memory at: [ 1762.364838][T28763] __get_compat_msghdr+0x514/0x750 [ 1762.370121][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1762.375288][T28763] ___sys_recvmsg+0x19d/0x890 [ 1762.380095][T28763] do_recvmmsg+0x63a/0x10a0 [ 1762.384866][T28763] __sys_recvmmsg+0x113/0x450 [ 1762.389669][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1762.396175][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1762.401321][T28763] do_fast_syscall_32+0x33/0x70 [ 1762.406399][T28763] do_SYSENTER_32+0x1b/0x20 [ 1762.411007][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1762.417612][T28763] [ 1762.420016][T28763] Uninit was stored to memory at: [ 1762.425365][T28763] __get_compat_msghdr+0x514/0x750 [ 1762.430645][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1762.435836][T28763] ___sys_recvmsg+0x19d/0x890 [ 1762.440629][T28763] do_recvmmsg+0x63a/0x10a0 [ 1762.445339][T28763] __sys_recvmmsg+0x113/0x450 [ 1762.450128][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1762.456622][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1762.461875][T28763] do_fast_syscall_32+0x33/0x70 [ 1762.466856][T28763] do_SYSENTER_32+0x1b/0x20 [ 1762.471484][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1762.478146][T28763] [ 1762.480530][T28763] Local variable msg_sys created at: [ 1762.485998][T28763] do_recvmmsg+0x5f/0x10a0 [ 1762.490561][T28763] __sys_recvmmsg+0x113/0x450 [ 1762.592666][ T9946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1762.607954][ T9946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1762.618553][ T9946] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1762.627946][ T9946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.709330][ T9946] usb 6-1: config 0 descriptor?? [ 1762.789095][T28763] not chained 910000 origins [ 1762.793982][T28763] CPU: 0 PID: 28763 Comm: syz-executor.1 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1762.804623][T28763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1762.814805][T28763] Call Trace: [ 1762.818161][T28763] [ 1762.821168][T28763] dump_stack_lvl+0x1c8/0x256 [ 1762.826022][T28763] dump_stack+0x1a/0x1c [ 1762.830329][T28763] kmsan_internal_chain_origin+0x78/0x120 [ 1762.836197][T28763] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1762.842438][T28763] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1762.848840][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1762.854798][T28763] ? __get_compat_msghdr+0x5b/0x750 [ 1762.860164][T28763] ? get_compat_msghdr+0x8c/0x1c0 [ 1762.865358][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1762.871351][T28763] ? __get_compat_msghdr+0x5b/0x750 [ 1762.876728][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1762.882725][T28763] ? should_fail+0x3f/0x810 [ 1762.887375][T28763] ? __stack_depot_save+0x21/0x4b0 [ 1762.892628][T28763] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1762.899117][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1762.905081][T28763] __msan_chain_origin+0xbd/0x140 [ 1762.910252][T28763] __get_compat_msghdr+0x514/0x750 [ 1762.915555][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1762.920570][T28763] ? ___sys_recvmsg+0xa9/0x890 [ 1762.925458][T28763] ? do_recvmmsg+0x63a/0x10a0 [ 1762.930260][T28763] ___sys_recvmsg+0x19d/0x890 [ 1762.935072][T28763] ? __schedule+0x1609/0x21d0 [ 1762.939896][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1762.945861][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1762.951840][T28763] do_recvmmsg+0x63a/0x10a0 [ 1762.956503][T28763] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1762.962919][T28763] ? __sys_recvmmsg+0x52/0x450 [ 1762.967811][T28763] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1762.974380][T28763] __sys_recvmmsg+0x113/0x450 [ 1762.978520][ T9946] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1762.979159][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1762.995808][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1763.000974][T28763] ? exit_to_user_mode_prepare+0x119/0x220 [ 1763.006930][T28763] do_fast_syscall_32+0x33/0x70 [ 1763.011926][T28763] do_SYSENTER_32+0x1b/0x20 [ 1763.016560][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1763.023085][T28763] RIP: 0023:0xf7ff7549 [ 1763.027265][T28763] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1763.047119][T28763] RSP: 002b:00000000f7fb05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1763.055671][T28763] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1763.063766][T28763] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1763.071846][T28763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1763.079920][T28763] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1763.087999][T28763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1763.096092][T28763] [ 1763.102708][T28763] Uninit was stored to memory at: [ 1763.111416][T28763] __get_compat_msghdr+0x514/0x750 [ 1763.117061][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1763.122159][T28763] ___sys_recvmsg+0x19d/0x890 [ 1763.126959][T28763] do_recvmmsg+0x63a/0x10a0 [ 1763.131584][T28763] __sys_recvmmsg+0x113/0x450 [ 1763.136452][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1763.142914][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1763.148075][T28763] do_fast_syscall_32+0x33/0x70 [ 1763.153130][T28763] do_SYSENTER_32+0x1b/0x20 [ 1763.157768][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1763.164366][T28763] [ 1763.166763][T28763] Uninit was stored to memory at: [ 1763.172046][T28763] __get_compat_msghdr+0x514/0x750 [ 1763.177327][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1763.180102][ T9946] usb 6-1: USB disconnect, device number 71 [ 1763.182377][T28763] ___sys_recvmsg+0x19d/0x890 [ 1763.182458][T28763] do_recvmmsg+0x63a/0x10a0 [ 1763.182533][T28763] __sys_recvmmsg+0x113/0x450 [ 1763.202776][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1763.209179][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1763.214411][T28763] do_fast_syscall_32+0x33/0x70 [ 1763.219386][T28763] do_SYSENTER_32+0x1b/0x20 [ 1763.224083][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1763.230592][T28763] [ 1763.233051][T28763] Uninit was stored to memory at: [ 1763.238254][T28763] __get_compat_msghdr+0x514/0x750 [ 1763.243604][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1763.248621][T28763] ___sys_recvmsg+0x19d/0x890 [ 1763.253498][T28763] do_recvmmsg+0x63a/0x10a0 [ 1763.258120][T28763] __sys_recvmmsg+0x113/0x450 [ 1763.259750][ T9946] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 1763.262947][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1763.263043][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1763.281125][T28763] do_fast_syscall_32+0x33/0x70 [ 1763.286173][T28763] do_SYSENTER_32+0x1b/0x20 [ 1763.290799][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1763.297385][T28763] [ 1763.299800][T28763] Uninit was stored to memory at: [ 1763.305078][T28763] __get_compat_msghdr+0x514/0x750 [ 1763.310348][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1763.315437][T28763] ___sys_recvmsg+0x19d/0x890 [ 1763.320240][T28763] do_recvmmsg+0x63a/0x10a0 [ 1763.324931][T28763] __sys_recvmmsg+0x113/0x450 [ 1763.329738][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1763.336197][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1763.341359][T28763] do_fast_syscall_32+0x33/0x70 [ 1763.346410][T28763] do_SYSENTER_32+0x1b/0x20 [ 1763.351037][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1763.357622][T28763] [ 1763.360026][T28763] Uninit was stored to memory at: [ 1763.365302][T28763] __get_compat_msghdr+0x514/0x750 [ 1763.370570][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1763.375659][T28763] ___sys_recvmsg+0x19d/0x890 [ 1763.380467][T28763] do_recvmmsg+0x63a/0x10a0 [ 1763.385156][T28763] __sys_recvmmsg+0x113/0x450 [ 1763.389955][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1763.396413][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1763.401569][T28763] do_fast_syscall_32+0x33/0x70 [ 1763.406620][T28763] do_SYSENTER_32+0x1b/0x20 [ 1763.411254][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1763.417847][T28763] [ 1763.420232][T28763] Uninit was stored to memory at: [ 1763.425505][T28763] __get_compat_msghdr+0x514/0x750 [ 1763.430785][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1763.435895][T28763] ___sys_recvmsg+0x19d/0x890 [ 1763.440695][T28763] do_recvmmsg+0x63a/0x10a0 [ 1763.445400][T28763] __sys_recvmmsg+0x113/0x450 [ 1763.450198][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1763.456655][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1763.461882][T28763] do_fast_syscall_32+0x33/0x70 [ 1763.466864][T28763] do_SYSENTER_32+0x1b/0x20 [ 1763.471486][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1763.478073][T28763] [ 1763.480461][T28763] Uninit was stored to memory at: [ 1763.485738][T28763] __get_compat_msghdr+0x514/0x750 [ 1763.491010][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1763.496151][T28763] ___sys_recvmsg+0x19d/0x890 [ 1763.500958][T28763] do_recvmmsg+0x63a/0x10a0 [ 1763.505706][T28763] __sys_recvmmsg+0x113/0x450 [ 1763.510518][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1763.517029][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1763.522260][T28763] do_fast_syscall_32+0x33/0x70 [ 1763.527238][T28763] do_SYSENTER_32+0x1b/0x20 [ 1763.532001][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1763.538516][T28763] [ 1763.540906][T28763] Local variable msg_sys created at: [ 1763.546388][T28763] do_recvmmsg+0x5f/0x10a0 [ 1763.550930][T28763] __sys_recvmmsg+0x113/0x450 [ 1763.950629][T28763] not chained 920000 origins [ 1763.955531][T28763] CPU: 0 PID: 28763 Comm: syz-executor.1 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1763.966175][T28763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1763.976331][T28763] Call Trace: [ 1763.979682][T28763] [ 1763.982692][T28763] dump_stack_lvl+0x1c8/0x256 [ 1763.987546][T28763] dump_stack+0x1a/0x1c [ 1763.991841][T28763] kmsan_internal_chain_origin+0x78/0x120 [ 1763.997713][T28763] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1764.003934][T28763] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1764.010334][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1764.016285][T28763] ? __get_compat_msghdr+0x5b/0x750 [ 1764.021648][T28763] ? get_compat_msghdr+0x8c/0x1c0 [ 1764.026842][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1764.032809][T28763] ? __get_compat_msghdr+0x5b/0x750 [ 1764.038267][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1764.044229][T28763] ? should_fail+0x3f/0x810 [ 1764.048869][T28763] ? __stack_depot_save+0x21/0x4b0 [ 1764.054119][T28763] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1764.060515][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1764.066465][T28763] __msan_chain_origin+0xbd/0x140 [ 1764.071629][T28763] __get_compat_msghdr+0x514/0x750 [ 1764.076934][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1764.081947][T28763] ? ___sys_recvmsg+0xa9/0x890 [ 1764.086836][T28763] ? do_recvmmsg+0x63a/0x10a0 [ 1764.091636][T28763] ___sys_recvmsg+0x19d/0x890 [ 1764.096453][T28763] ? __schedule+0x1609/0x21d0 [ 1764.101267][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1764.107227][T28763] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1764.113191][T28763] do_recvmmsg+0x63a/0x10a0 [ 1764.117841][T28763] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1764.124240][T28763] ? __sys_recvmmsg+0x52/0x450 [ 1764.129120][T28763] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1764.135686][T28763] __sys_recvmmsg+0x113/0x450 [ 1764.140510][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1764.146998][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1764.152152][T28763] ? exit_to_user_mode_prepare+0x119/0x220 [ 1764.158102][T28763] do_fast_syscall_32+0x33/0x70 [ 1764.163075][T28763] do_SYSENTER_32+0x1b/0x20 [ 1764.167694][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1764.174205][T28763] RIP: 0023:0xf7ff7549 [ 1764.178367][T28763] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1764.198129][T28763] RSP: 002b:00000000f7fb05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1764.206671][T28763] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1764.214762][T28763] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1764.222834][T28763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1764.230904][T28763] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1764.238983][T28763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1764.247077][T28763] [ 1764.254138][T28763] Uninit was stored to memory at: [ 1764.259364][T28763] __get_compat_msghdr+0x514/0x750 [ 1764.265080][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1764.270090][T28763] ___sys_recvmsg+0x19d/0x890 [ 1764.274970][T28763] do_recvmmsg+0x63a/0x10a0 [ 1764.279591][T28763] __sys_recvmmsg+0x113/0x450 [ 1764.284462][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1764.290849][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1764.296078][T28763] do_fast_syscall_32+0x33/0x70 [ 1764.301049][T28763] do_SYSENTER_32+0x1b/0x20 [ 1764.305795][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1764.312374][T28763] [ 1764.314766][T28763] Uninit was stored to memory at: [ 1764.319960][T28763] __get_compat_msghdr+0x514/0x750 [ 1764.325298][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1764.330300][T28763] ___sys_recvmsg+0x19d/0x890 [ 1764.335167][T28763] do_recvmmsg+0x63a/0x10a0 [ 1764.339804][T28763] __sys_recvmmsg+0x113/0x450 [ 1764.344674][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1764.351055][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1764.356275][T28763] do_fast_syscall_32+0x33/0x70 [ 1764.361242][T28763] do_SYSENTER_32+0x1b/0x20 [ 1764.365928][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1764.372502][T28763] [ 1764.374881][T28763] Uninit was stored to memory at: [ 1764.380085][T28763] __get_compat_msghdr+0x514/0x750 [ 1764.385426][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1764.390436][T28763] ___sys_recvmsg+0x19d/0x890 [ 1764.395315][T28763] do_recvmmsg+0x63a/0x10a0 [ 1764.399944][T28763] __sys_recvmmsg+0x113/0x450 [ 1764.404871][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1764.411237][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1764.416445][T28763] do_fast_syscall_32+0x33/0x70 [ 1764.421403][T28763] do_SYSENTER_32+0x1b/0x20 [ 1764.426114][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1764.432661][T28763] [ 1764.435009][T28763] Uninit was stored to memory at: [ 1764.440188][T28763] __get_compat_msghdr+0x514/0x750 [ 1764.445583][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1764.450629][T28763] ___sys_recvmsg+0x19d/0x890 [ 1764.455473][T28763] do_recvmmsg+0x63a/0x10a0 [ 1764.460043][T28763] __sys_recvmmsg+0x113/0x450 [ 1764.465026][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1764.471424][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1764.476679][T28763] do_fast_syscall_32+0x33/0x70 [ 1764.481643][T28763] do_SYSENTER_32+0x1b/0x20 [ 1764.486428][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1764.493019][T28763] [ 1764.495411][T28763] Uninit was stored to memory at: [ 1764.500617][T28763] __get_compat_msghdr+0x514/0x750 [ 1764.506015][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1764.511036][T28763] ___sys_recvmsg+0x19d/0x890 [ 1764.515924][T28763] do_recvmmsg+0x63a/0x10a0 [ 1764.520544][T28763] __sys_recvmmsg+0x113/0x450 [ 1764.525463][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1764.531947][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1764.537099][T28763] do_fast_syscall_32+0x33/0x70 [ 1764.542207][T28763] do_SYSENTER_32+0x1b/0x20 [ 1764.546841][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1764.553483][T28763] [ 1764.555868][T28763] Uninit was stored to memory at: [ 1764.561071][T28763] __get_compat_msghdr+0x514/0x750 [ 1764.566471][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1764.571482][T28763] ___sys_recvmsg+0x19d/0x890 [ 1764.576406][T28763] do_recvmmsg+0x63a/0x10a0 [ 1764.581044][T28763] __sys_recvmmsg+0x113/0x450 [ 1764.585961][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1764.592418][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1764.597578][T28763] do_fast_syscall_32+0x33/0x70 [ 1764.602960][T28763] do_SYSENTER_32+0x1b/0x20 [ 1764.607594][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1764.614225][T28763] [ 1764.616610][T28763] Uninit was stored to memory at: [ 1764.621944][T28763] __get_compat_msghdr+0x514/0x750 [ 1764.627223][T28763] get_compat_msghdr+0x8c/0x1c0 [ 1764.632354][T28763] ___sys_recvmsg+0x19d/0x890 [ 1764.637150][T28763] do_recvmmsg+0x63a/0x10a0 [ 1764.641854][T28763] __sys_recvmmsg+0x113/0x450 [ 1764.646649][T28763] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1764.653111][T28763] __do_fast_syscall_32+0x87/0xe0 [ 1764.658249][T28763] do_fast_syscall_32+0x33/0x70 [ 1764.663290][T28763] do_SYSENTER_32+0x1b/0x20 [ 1764.667923][T28763] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1764.674558][T28763] [ 1764.676946][T28763] Local variable msg_sys created at: [ 1764.682413][T28763] do_recvmmsg+0x5f/0x10a0 [ 1764.687037][T28763] __sys_recvmmsg+0x113/0x450 00:39:23 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) 00:39:23 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') preadv(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000080)=""/237, 0xed}], 0x2, 0x0, 0x0) 00:39:23 executing program 1: process_madvise(0xffffffffffffffff, &(0x7f00000006c0), 0x24c, 0x0, 0x0) 00:39:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) recvmmsg(r2, &(0x7f0000001540)=[{{&(0x7f0000000d40)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)=""/172, 0xac}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f00000004c0)=""/96, 0x60}, {&(0x7f0000001780)=""/167, 0xa7}, {&(0x7f0000000600)}, {&(0x7f0000000640)}], 0x6, &(0x7f0000000700)=""/118, 0x76}, 0x3}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000800)=""/45, 0x2d}, {&(0x7f0000000280)=""/83, 0x53}, {&(0x7f00000008c0)=""/96, 0x60}, {&(0x7f0000000940)=""/97, 0x61}, {&(0x7f00000009c0)=""/136, 0x88}, {&(0x7f0000000a80)=""/233, 0xe9}, {&(0x7f0000000b80)=""/209, 0xd1}, {&(0x7f0000000c80)=""/132, 0x84}, {0x0}], 0x9, &(0x7f0000000e80)=""/191, 0xbf}, 0xc41}, {{&(0x7f0000000f40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000fc0)=""/94, 0x5e}, {&(0x7f0000001040)=""/167, 0xa7}, {&(0x7f0000000840)=""/93, 0x5d}], 0x3, &(0x7f00000011c0)=""/47, 0x2f}, 0x41aa}, {{0x0, 0x0, &(0x7f0000001500)}, 0x4}], 0x4, 0x12061, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 00:39:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001280)={0x0, @l2tp={0x2, 0x2, @broadcast}, @l2tp={0x2, 0x0, @local, 0x1}, @hci={0x1f, 0x0, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0xffd7, &(0x7f0000001240)='syz_tun\x00'}) 00:39:23 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) [ 1765.116385][T28804] not chained 930000 origins [ 1765.121222][T28804] CPU: 0 PID: 28804 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1765.131864][T28804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1765.142016][T28804] Call Trace: [ 1765.145363][T28804] [ 1765.148365][T28804] dump_stack_lvl+0x1c8/0x256 [ 1765.153206][T28804] dump_stack+0x1a/0x1c [ 1765.157513][T28804] kmsan_internal_chain_origin+0x78/0x120 [ 1765.163380][T28804] ? propagate_entity_load_avg+0x32/0x1450 [ 1765.169363][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1765.175316][T28804] ? __get_compat_msghdr+0x5b/0x750 [ 1765.180668][T28804] ? get_compat_msghdr+0x8c/0x1c0 [ 1765.185849][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1765.191806][T28804] ? __get_compat_msghdr+0x5b/0x750 [ 1765.197163][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1765.203112][T28804] ? should_fail+0x3f/0x810 [ 1765.207753][T28804] ? __stack_depot_save+0x21/0x4b0 [ 1765.212996][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1765.219382][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1765.225344][T28804] __msan_chain_origin+0xbd/0x140 [ 1765.230499][T28804] __get_compat_msghdr+0x514/0x750 [ 1765.235793][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1765.240798][T28804] ? ___sys_recvmsg+0xa9/0x890 [ 1765.245672][T28804] ? do_recvmmsg+0x63a/0x10a0 [ 1765.250474][T28804] ___sys_recvmsg+0x19d/0x890 [ 1765.255534][T28804] ? __schedule+0x1609/0x21d0 [ 1765.260340][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1765.266288][T28804] ? __cond_resched+0x1f/0x40 [ 1765.271090][T28804] do_recvmmsg+0x63a/0x10a0 [ 1765.275723][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1765.282379][T28804] ? __sys_recvmmsg+0x52/0x450 [ 1765.287253][T28804] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1765.293847][T28804] __sys_recvmmsg+0x113/0x450 [ 1765.298661][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1765.305071][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1765.310210][T28804] ? exit_to_user_mode_prepare+0x119/0x220 [ 1765.316147][T28804] do_fast_syscall_32+0x33/0x70 [ 1765.321114][T28804] do_SYSENTER_32+0x1b/0x20 [ 1765.325728][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1765.332227][T28804] RIP: 0023:0xf7f6e549 [ 1765.336383][T28804] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1765.356129][T28804] RSP: 002b:00000000f7f485cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1765.364665][T28804] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1765.372930][T28804] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1765.380991][T28804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1765.389053][T28804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1765.397114][T28804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1765.405197][T28804] [ 1765.412195][T28804] Uninit was stored to memory at: [ 1765.417428][T28804] __get_compat_msghdr+0x514/0x750 [ 1765.423302][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1765.428323][T28804] ___sys_recvmsg+0x19d/0x890 [ 1765.433209][T28804] do_recvmmsg+0x63a/0x10a0 [ 1765.437842][T28804] __sys_recvmmsg+0x113/0x450 [ 1765.442791][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1765.449191][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1765.454434][T28804] do_fast_syscall_32+0x33/0x70 [ 1765.459422][T28804] do_SYSENTER_32+0x1b/0x20 [ 1765.464134][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1765.470652][T28804] [ 1765.473117][T28804] Uninit was stored to memory at: [ 1765.478328][T28804] __get_compat_msghdr+0x514/0x750 [ 1765.483686][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1765.488883][T28804] ___sys_recvmsg+0x19d/0x890 [ 1765.492262][ T9946] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1765.493718][T28804] do_recvmmsg+0x63a/0x10a0 [ 1765.493806][T28804] __sys_recvmmsg+0x113/0x450 [ 1765.510798][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1765.517262][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1765.522583][T28804] do_fast_syscall_32+0x33/0x70 [ 1765.527562][T28804] do_SYSENTER_32+0x1b/0x20 [ 1765.532262][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1765.538773][T28804] [ 1765.541160][T28804] Uninit was stored to memory at: [ 1765.546436][T28804] __get_compat_msghdr+0x514/0x750 [ 1765.551703][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1765.556836][T28804] ___sys_recvmsg+0x19d/0x890 [ 1765.561646][T28804] do_recvmmsg+0x63a/0x10a0 [ 1765.566364][T28804] __sys_recvmmsg+0x113/0x450 [ 1765.571184][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1765.577668][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1765.582927][T28804] do_fast_syscall_32+0x33/0x70 [ 1765.587917][T28804] do_SYSENTER_32+0x1b/0x20 [ 1765.592618][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1765.599581][T28804] [ 1765.602061][T28804] Uninit was stored to memory at: [ 1765.607344][T28804] __get_compat_msghdr+0x514/0x750 [ 1765.612698][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1765.617748][T28804] ___sys_recvmsg+0x19d/0x890 [ 1765.622684][T28804] do_recvmmsg+0x63a/0x10a0 [ 1765.627329][T28804] __sys_recvmmsg+0x113/0x450 [ 1765.632213][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1765.638593][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1765.643829][T28804] do_fast_syscall_32+0x33/0x70 [ 1765.648805][T28804] do_SYSENTER_32+0x1b/0x20 [ 1765.653510][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1765.660061][T28804] [ 1765.662524][T28804] Uninit was stored to memory at: [ 1765.667735][T28804] __get_compat_msghdr+0x514/0x750 [ 1765.673093][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1765.678103][T28804] ___sys_recvmsg+0x19d/0x890 [ 1765.682985][T28804] do_recvmmsg+0x63a/0x10a0 [ 1765.687608][T28804] __sys_recvmmsg+0x113/0x450 [ 1765.692489][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1765.698875][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1765.704105][T28804] do_fast_syscall_32+0x33/0x70 [ 1765.709105][T28804] do_SYSENTER_32+0x1b/0x20 00:39:24 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1765.713812][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1765.720322][T28804] [ 1765.722806][T28804] Uninit was stored to memory at: [ 1765.728021][T28804] __get_compat_msghdr+0x514/0x750 [ 1765.733379][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1765.738399][T28804] ___sys_recvmsg+0x19d/0x890 [ 1765.743286][T28804] do_recvmmsg+0x63a/0x10a0 [ 1765.747913][T28804] __sys_recvmmsg+0x113/0x450 [ 1765.752820][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1765.759209][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1765.764448][T28804] do_fast_syscall_32+0x33/0x70 [ 1765.769425][T28804] do_SYSENTER_32+0x1b/0x20 [ 1765.774136][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1765.780650][T28804] [ 1765.783147][T28804] Uninit was stored to memory at: [ 1765.788374][T28804] __get_compat_msghdr+0x514/0x750 [ 1765.793751][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1765.798773][T28804] ___sys_recvmsg+0x19d/0x890 [ 1765.803660][T28804] do_recvmmsg+0x63a/0x10a0 [ 1765.808300][T28804] __sys_recvmmsg+0x113/0x450 [ 1765.813185][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1765.819564][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1765.824805][T28804] do_fast_syscall_32+0x33/0x70 [ 1765.829787][T28804] do_SYSENTER_32+0x1b/0x20 [ 1765.834499][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1765.841028][T28804] [ 1765.843499][T28804] Local variable msg_sys created at: [ 1765.848890][T28804] do_recvmmsg+0x5f/0x10a0 [ 1765.853511][T28804] __sys_recvmmsg+0x113/0x450 00:39:24 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) [ 1765.953277][ T9946] usb 6-1: Using ep0 maxpacket: 8 00:39:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='net/fib_trie\x00') [ 1766.082717][ T9946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1766.094169][ T9946] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1766.103689][ T9946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:39:25 executing program 4: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/block/loop0', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={r0, 0x11, 0x0, 0x0, 0x0}, 0x20) [ 1766.224884][ T9946] usb 6-1: config 0 descriptor?? 00:39:25 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) 00:39:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='net/fib_trie\x00') socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r3, &(0x7f0000002a40)={0x2020}, 0x2020) [ 1766.656353][T28803] not chained 940000 origins [ 1766.661246][T28803] CPU: 0 PID: 28803 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1766.671893][T28803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1766.682067][T28803] Call Trace: [ 1766.685412][T28803] [ 1766.688496][T28803] dump_stack_lvl+0x1c8/0x256 [ 1766.693337][T28803] dump_stack+0x1a/0x1c [ 1766.697635][T28803] kmsan_internal_chain_origin+0x78/0x120 [ 1766.703517][T28803] ? up_read+0x36/0x1c0 [ 1766.707819][T28803] ? do_user_addr_fault+0xfef/0x1710 [ 1766.713242][T28803] ? __get_compat_msghdr+0x5b/0x750 [ 1766.718597][T28803] ? get_compat_msghdr+0x8c/0x1c0 [ 1766.723773][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1766.729718][T28803] ? __get_compat_msghdr+0x5b/0x750 [ 1766.735075][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1766.741032][T28803] ? should_fail+0x3f/0x810 [ 1766.745665][T28803] ? __stack_depot_save+0x21/0x4b0 [ 1766.750906][T28803] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1766.757290][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1766.763246][T28803] __msan_chain_origin+0xbd/0x140 [ 1766.768399][T28803] __get_compat_msghdr+0x514/0x750 [ 1766.773703][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1766.778733][T28803] ? ___sys_recvmsg+0xa9/0x890 [ 1766.783626][T28803] ? do_recvmmsg+0x63a/0x10a0 [ 1766.788447][T28803] ___sys_recvmsg+0x19d/0x890 [ 1766.793251][T28803] ? __schedule+0x1609/0x21d0 [ 1766.798071][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1766.804024][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1766.809973][T28803] do_recvmmsg+0x63a/0x10a0 [ 1766.814607][T28803] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1766.820989][T28803] ? __sys_recvmmsg+0x52/0x450 [ 1766.825864][T28803] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1766.832417][T28803] __sys_recvmmsg+0x113/0x450 [ 1766.837231][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1766.843615][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1766.848755][T28803] ? exit_to_user_mode_prepare+0x119/0x220 [ 1766.854697][T28803] do_fast_syscall_32+0x33/0x70 [ 1766.859667][T28803] do_SYSENTER_32+0x1b/0x20 [ 1766.866195][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1766.872695][T28803] RIP: 0023:0xf7fa9549 [ 1766.876854][T28803] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1766.896603][T28803] RSP: 002b:00000000f7f835cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1766.905133][T28803] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1766.913201][T28803] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1766.921263][T28803] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1766.929323][T28803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1766.937384][T28803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1766.945467][T28803] [ 1766.953000][T28803] Uninit was stored to memory at: [ 1766.958227][T28803] __get_compat_msghdr+0x514/0x750 [ 1766.963885][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1766.968912][T28803] ___sys_recvmsg+0x19d/0x890 [ 1766.973807][T28803] do_recvmmsg+0x63a/0x10a0 [ 1766.978431][T28803] __sys_recvmmsg+0x113/0x450 [ 1766.983297][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1766.989676][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1766.994917][T28803] do_fast_syscall_32+0x33/0x70 [ 1766.999919][T28803] do_SYSENTER_32+0x1b/0x20 00:39:26 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) [ 1767.004630][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1767.011154][T28803] [ 1767.013614][T28803] Uninit was stored to memory at: [ 1767.018825][T28803] __get_compat_msghdr+0x514/0x750 [ 1767.024179][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1767.029191][T28803] ___sys_recvmsg+0x19d/0x890 [ 1767.034068][T28803] do_recvmmsg+0x63a/0x10a0 [ 1767.038695][T28803] __sys_recvmmsg+0x113/0x450 [ 1767.043582][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1767.049986][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1767.055214][T28803] do_fast_syscall_32+0x33/0x70 [ 1767.060192][T28803] do_SYSENTER_32+0x1b/0x20 [ 1767.064895][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1767.071409][T28803] [ 1767.073872][T28803] Uninit was stored to memory at: [ 1767.079076][T28803] __get_compat_msghdr+0x514/0x750 [ 1767.084422][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1767.089431][T28803] ___sys_recvmsg+0x19d/0x890 [ 1767.094300][T28803] do_recvmmsg+0x63a/0x10a0 [ 1767.098920][T28803] __sys_recvmmsg+0x113/0x450 [ 1767.103787][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1767.110177][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1767.115399][T28803] do_fast_syscall_32+0x33/0x70 [ 1767.120378][T28803] do_SYSENTER_32+0x1b/0x20 [ 1767.125078][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1767.131593][T28803] [ 1767.134042][T28803] Uninit was stored to memory at: [ 1767.139251][T28803] __get_compat_msghdr+0x514/0x750 [ 1767.144602][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1767.149616][T28803] ___sys_recvmsg+0x19d/0x890 [ 1767.154489][T28803] do_recvmmsg+0x63a/0x10a0 [ 1767.159115][T28803] __sys_recvmmsg+0x113/0x450 [ 1767.164032][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1767.170420][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1767.175693][T28803] do_fast_syscall_32+0x33/0x70 [ 1767.180680][T28803] do_SYSENTER_32+0x1b/0x20 [ 1767.185429][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1767.192009][T28803] [ 1767.194394][T28803] Uninit was stored to memory at: [ 1767.199595][T28803] __get_compat_msghdr+0x514/0x750 [ 1767.204983][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1767.209988][T28803] ___sys_recvmsg+0x19d/0x890 [ 1767.214870][T28803] do_recvmmsg+0x63a/0x10a0 [ 1767.219494][T28803] __sys_recvmmsg+0x113/0x450 [ 1767.224412][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1767.230803][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1767.236107][T28803] do_fast_syscall_32+0x33/0x70 [ 1767.241084][T28803] do_SYSENTER_32+0x1b/0x20 [ 1767.245839][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1767.252420][T28803] [ 1767.254806][T28803] Uninit was stored to memory at: [ 1767.260001][T28803] __get_compat_msghdr+0x514/0x750 [ 1767.265413][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1767.270431][T28803] ___sys_recvmsg+0x19d/0x890 [ 1767.275386][T28803] do_recvmmsg+0x63a/0x10a0 [ 1767.280014][T28803] __sys_recvmmsg+0x113/0x450 [ 1767.284960][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1767.291342][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1767.296619][T28803] do_fast_syscall_32+0x33/0x70 [ 1767.301593][T28803] do_SYSENTER_32+0x1b/0x20 [ 1767.306345][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1767.312925][T28803] [ 1767.315327][T28803] Uninit was stored to memory at: [ 1767.320543][T28803] __get_compat_msghdr+0x514/0x750 [ 1767.325953][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1767.330986][T28803] ___sys_recvmsg+0x19d/0x890 [ 1767.335939][T28803] do_recvmmsg+0x63a/0x10a0 [ 1767.340577][T28803] __sys_recvmmsg+0x113/0x450 [ 1767.345507][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1767.351958][T28803] __do_fast_syscall_32+0x87/0xe0 00:39:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='net/fib_trie\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) read$FUSE(r3, &(0x7f0000002a40)={0x2020}, 0x2020) [ 1767.357127][T28803] do_fast_syscall_32+0x33/0x70 [ 1767.362233][T28803] do_SYSENTER_32+0x1b/0x20 [ 1767.366859][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1767.373500][T28803] [ 1767.375890][T28803] Local variable msg_sys created at: [ 1767.381241][T28803] do_recvmmsg+0x5f/0x10a0 [ 1767.385945][T28803] __sys_recvmmsg+0x113/0x450 [ 1767.753411][T28804] not chained 950000 origins [ 1767.758117][T28804] CPU: 0 PID: 28804 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1767.768764][T28804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1767.778933][T28804] Call Trace: [ 1767.782379][T28804] [ 1767.785385][T28804] dump_stack_lvl+0x1c8/0x256 [ 1767.790246][T28804] dump_stack+0x1a/0x1c [ 1767.794567][T28804] kmsan_internal_chain_origin+0x78/0x120 [ 1767.800451][T28804] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1767.806686][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1767.813096][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1767.819069][T28804] ? __get_compat_msghdr+0x5b/0x750 [ 1767.824451][T28804] ? get_compat_msghdr+0x8c/0x1c0 [ 1767.829658][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1767.835627][T28804] ? __get_compat_msghdr+0x5b/0x750 [ 1767.841007][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1767.846981][T28804] ? should_fail+0x3f/0x810 [ 1767.851633][T28804] ? __stack_depot_save+0x21/0x4b0 [ 1767.856896][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1767.863300][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1767.869262][T28804] __msan_chain_origin+0xbd/0x140 [ 1767.874430][T28804] __get_compat_msghdr+0x514/0x750 [ 1767.879743][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1767.884778][T28804] ? ___sys_recvmsg+0xa9/0x890 [ 1767.889670][T28804] ? do_recvmmsg+0x63a/0x10a0 [ 1767.894482][T28804] ___sys_recvmsg+0x19d/0x890 [ 1767.899301][T28804] ? __schedule+0x1609/0x21d0 [ 1767.904128][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1767.910107][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1767.916081][T28804] do_recvmmsg+0x63a/0x10a0 [ 1767.920833][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1767.927250][T28804] ? __sys_recvmmsg+0x52/0x450 [ 1767.932237][T28804] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1767.938816][T28804] __sys_recvmmsg+0x113/0x450 [ 1767.943641][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1767.950048][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1767.955216][T28804] ? exit_to_user_mode_prepare+0x119/0x220 [ 1767.961175][T28804] do_fast_syscall_32+0x33/0x70 [ 1767.966166][T28804] do_SYSENTER_32+0x1b/0x20 [ 1767.970797][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1767.977316][T28804] RIP: 0023:0xf7f6e549 [ 1767.981482][T28804] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1768.001339][T28804] RSP: 002b:00000000f7f485cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1768.009964][T28804] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1768.018038][T28804] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1768.026107][T28804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1768.034182][T28804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1768.042247][T28804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1768.050333][T28804] [ 1768.062889][T28804] Uninit was stored to memory at: [ 1768.068118][T28804] __get_compat_msghdr+0x514/0x750 [ 1768.073496][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1768.078522][T28804] ___sys_recvmsg+0x19d/0x890 [ 1768.083421][T28804] do_recvmmsg+0x63a/0x10a0 [ 1768.088054][T28804] __sys_recvmmsg+0x113/0x450 [ 1768.092937][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1768.099327][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1768.104632][T28804] do_fast_syscall_32+0x33/0x70 [ 1768.109628][T28804] do_SYSENTER_32+0x1b/0x20 [ 1768.114387][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1768.120900][T28804] [ 1768.123417][T28804] Uninit was stored to memory at: [ 1768.128630][T28804] __get_compat_msghdr+0x514/0x750 [ 1768.133993][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1768.139009][T28804] ___sys_recvmsg+0x19d/0x890 [ 1768.143893][T28804] do_recvmmsg+0x63a/0x10a0 [ 1768.148523][T28804] __sys_recvmmsg+0x113/0x450 [ 1768.152094][ T9946] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1768.153387][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1768.170012][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1768.175246][T28804] do_fast_syscall_32+0x33/0x70 [ 1768.180226][T28804] do_SYSENTER_32+0x1b/0x20 [ 1768.184928][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1768.191440][T28804] [ 1768.193899][T28804] Uninit was stored to memory at: [ 1768.199095][T28804] __get_compat_msghdr+0x514/0x750 [ 1768.204503][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1768.207850][ T9946] usb 6-1: USB disconnect, device number 72 [ 1768.209476][T28804] ___sys_recvmsg+0x19d/0x890 [ 1768.209557][T28804] do_recvmmsg+0x63a/0x10a0 [ 1768.209632][T28804] __sys_recvmmsg+0x113/0x450 [ 1768.229787][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1768.236255][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1768.241410][T28804] do_fast_syscall_32+0x33/0x70 [ 1768.246281][ T9946] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 1768.253158][T28804] do_SYSENTER_32+0x1b/0x20 [ 1768.257797][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1768.264391][T28804] [ 1768.266780][T28804] Uninit was stored to memory at: [ 1768.272064][T28804] __get_compat_msghdr+0x514/0x750 [ 1768.277357][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1768.282464][T28804] ___sys_recvmsg+0x19d/0x890 [ 1768.287266][T28804] do_recvmmsg+0x63a/0x10a0 [ 1768.291960][T28804] __sys_recvmmsg+0x113/0x450 [ 1768.296757][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1768.303217][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1768.308374][T28804] do_fast_syscall_32+0x33/0x70 [ 1768.313435][T28804] do_SYSENTER_32+0x1b/0x20 [ 1768.318240][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1768.324863][T28804] [ 1768.327265][T28804] Uninit was stored to memory at: [ 1768.332545][T28804] __get_compat_msghdr+0x514/0x750 [ 1768.337823][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1768.342920][T28804] ___sys_recvmsg+0x19d/0x890 [ 1768.347726][T28804] do_recvmmsg+0x63a/0x10a0 [ 1768.352419][T28804] __sys_recvmmsg+0x113/0x450 [ 1768.357230][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1768.363704][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1768.368872][T28804] do_fast_syscall_32+0x33/0x70 [ 1768.373926][T28804] do_SYSENTER_32+0x1b/0x20 [ 1768.378548][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1768.385184][T28804] [ 1768.387571][T28804] Uninit was stored to memory at: [ 1768.392859][T28804] __get_compat_msghdr+0x514/0x750 [ 1768.398234][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1768.403325][T28804] ___sys_recvmsg+0x19d/0x890 [ 1768.408239][T28804] do_recvmmsg+0x63a/0x10a0 [ 1768.412945][T28804] __sys_recvmmsg+0x113/0x450 [ 1768.417755][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1768.424230][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1768.429380][T28804] do_fast_syscall_32+0x33/0x70 [ 1768.434424][T28804] do_SYSENTER_32+0x1b/0x20 [ 1768.439044][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1768.445644][T28804] [ 1768.448029][T28804] Uninit was stored to memory at: [ 1768.453308][T28804] __get_compat_msghdr+0x514/0x750 [ 1768.458585][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1768.463692][T28804] ___sys_recvmsg+0x19d/0x890 [ 1768.468494][T28804] do_recvmmsg+0x63a/0x10a0 [ 1768.473194][T28804] __sys_recvmmsg+0x113/0x450 [ 1768.477994][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1768.484494][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1768.489640][T28804] do_fast_syscall_32+0x33/0x70 [ 1768.494691][T28804] do_SYSENTER_32+0x1b/0x20 [ 1768.499319][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1768.505907][T28804] [ 1768.508299][T28804] Local variable msg_sys created at: [ 1768.513729][T28804] do_recvmmsg+0x5f/0x10a0 [ 1768.518273][T28804] __sys_recvmmsg+0x113/0x450 [ 1769.042200][T28804] not chained 960000 origins [ 1769.051653][T28804] CPU: 1 PID: 28804 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1769.062312][T28804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1769.072471][T28804] Call Trace: [ 1769.075824][T28804] [ 1769.078827][T28804] dump_stack_lvl+0x1c8/0x256 [ 1769.083673][T28804] dump_stack+0x1a/0x1c [ 1769.087979][T28804] kmsan_internal_chain_origin+0x78/0x120 [ 1769.093841][T28804] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1769.100072][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1769.106489][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1769.112452][T28804] ? __get_compat_msghdr+0x5b/0x750 [ 1769.117818][T28804] ? get_compat_msghdr+0x8c/0x1c0 [ 1769.123005][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1769.128964][T28804] ? __get_compat_msghdr+0x5b/0x750 [ 1769.134332][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1769.140294][T28804] ? should_fail+0x3f/0x810 [ 1769.144935][T28804] ? __stack_depot_save+0x21/0x4b0 [ 1769.150186][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1769.156608][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1769.162572][T28804] __msan_chain_origin+0xbd/0x140 [ 1769.167733][T28804] __get_compat_msghdr+0x514/0x750 [ 1769.173040][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1769.178058][T28804] ? ___sys_recvmsg+0xa9/0x890 [ 1769.182938][T28804] ? do_recvmmsg+0x63a/0x10a0 [ 1769.187741][T28804] ___sys_recvmsg+0x19d/0x890 [ 1769.192548][T28804] ? __schedule+0x1609/0x21d0 [ 1769.197361][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1769.203322][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1769.209286][T28804] do_recvmmsg+0x63a/0x10a0 [ 1769.213932][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1769.220325][T28804] ? __sys_recvmmsg+0x52/0x450 [ 1769.225211][T28804] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1769.231773][T28804] __sys_recvmmsg+0x113/0x450 [ 1769.236585][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1769.242980][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1769.248130][T28804] ? exit_to_user_mode_prepare+0x119/0x220 [ 1769.254081][T28804] do_fast_syscall_32+0x33/0x70 [ 1769.259077][T28804] do_SYSENTER_32+0x1b/0x20 [ 1769.263721][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1769.270255][T28804] RIP: 0023:0xf7f6e549 [ 1769.274423][T28804] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1769.294184][T28804] RSP: 002b:00000000f7f485cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1769.302745][T28804] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1769.310824][T28804] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1769.318894][T28804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1769.326967][T28804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1769.335049][T28804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1769.343154][T28804] [ 1769.352319][T28804] Uninit was stored to memory at: [ 1769.357563][T28804] __get_compat_msghdr+0x514/0x750 [ 1769.366638][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1769.371669][T28804] ___sys_recvmsg+0x19d/0x890 [ 1769.376868][T28804] do_recvmmsg+0x63a/0x10a0 [ 1769.381501][T28804] __sys_recvmmsg+0x113/0x450 [ 1769.386421][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1769.392910][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1769.398062][T28804] do_fast_syscall_32+0x33/0x70 [ 1769.403141][T28804] do_SYSENTER_32+0x1b/0x20 [ 1769.407769][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1769.414390][T28804] [ 1769.416791][T28804] Uninit was stored to memory at: [ 1769.422086][T28804] __get_compat_msghdr+0x514/0x750 [ 1769.427366][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1769.432471][T28804] ___sys_recvmsg+0x19d/0x890 [ 1769.437273][T28804] do_recvmmsg+0x63a/0x10a0 [ 1769.441993][T28804] __sys_recvmmsg+0x113/0x450 [ 1769.446791][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1769.453271][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1769.458441][T28804] do_fast_syscall_32+0x33/0x70 [ 1769.463513][T28804] do_SYSENTER_32+0x1b/0x20 [ 1769.468137][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1769.474752][T28804] [ 1769.477135][T28804] Uninit was stored to memory at: [ 1769.482441][T28804] __get_compat_msghdr+0x514/0x750 [ 1769.487720][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1769.492823][T28804] ___sys_recvmsg+0x19d/0x890 [ 1769.497622][T28804] do_recvmmsg+0x63a/0x10a0 [ 1769.502356][T28804] __sys_recvmmsg+0x113/0x450 [ 1769.507154][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1769.513642][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1769.518791][T28804] do_fast_syscall_32+0x33/0x70 [ 1769.523921][T28804] do_SYSENTER_32+0x1b/0x20 [ 1769.528568][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1769.535240][T28804] [ 1769.537626][T28804] Uninit was stored to memory at: [ 1769.542997][T28804] __get_compat_msghdr+0x514/0x750 [ 1769.548281][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1769.553443][T28804] ___sys_recvmsg+0x19d/0x890 [ 1769.558246][T28804] do_recvmmsg+0x63a/0x10a0 [ 1769.562990][T28804] __sys_recvmmsg+0x113/0x450 [ 1769.567805][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1769.574279][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1769.579428][T28804] do_fast_syscall_32+0x33/0x70 [ 1769.584584][T28804] do_SYSENTER_32+0x1b/0x20 [ 1769.589212][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1769.596266][T28804] [ 1769.598676][T28804] Uninit was stored to memory at: [ 1769.604039][T28804] __get_compat_msghdr+0x514/0x750 [ 1769.609408][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1769.614597][T28804] ___sys_recvmsg+0x19d/0x890 [ 1769.619406][T28804] do_recvmmsg+0x63a/0x10a0 [ 1769.624207][T28804] __sys_recvmmsg+0x113/0x450 [ 1769.629038][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1769.635603][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1769.640770][T28804] do_fast_syscall_32+0x33/0x70 [ 1769.645937][T28804] do_SYSENTER_32+0x1b/0x20 [ 1769.650561][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1769.657245][T28804] [ 1769.659636][T28804] Uninit was stored to memory at: [ 1769.664992][T28804] __get_compat_msghdr+0x514/0x750 [ 1769.670265][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1769.675426][T28804] ___sys_recvmsg+0x19d/0x890 [ 1769.680228][T28804] do_recvmmsg+0x63a/0x10a0 [ 1769.685003][T28804] __sys_recvmmsg+0x113/0x450 [ 1769.689800][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1769.696273][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1769.701425][T28804] do_fast_syscall_32+0x33/0x70 [ 1769.706564][T28804] do_SYSENTER_32+0x1b/0x20 [ 1769.711194][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1769.717880][T28804] [ 1769.720271][T28804] Uninit was stored to memory at: [ 1769.725626][T28804] __get_compat_msghdr+0x514/0x750 [ 1769.730902][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1769.736072][T28804] ___sys_recvmsg+0x19d/0x890 [ 1769.740875][T28804] do_recvmmsg+0x63a/0x10a0 [ 1769.745654][T28804] __sys_recvmmsg+0x113/0x450 [ 1769.750493][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1769.757018][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1769.762274][T28804] do_fast_syscall_32+0x33/0x70 [ 1769.767253][T28804] do_SYSENTER_32+0x1b/0x20 [ 1769.772034][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1769.778560][T28804] [ 1769.780948][T28804] Local variable msg_sys created at: [ 1769.786484][T28804] do_recvmmsg+0x5f/0x10a0 [ 1769.791037][T28804] __sys_recvmmsg+0x113/0x450 [ 1769.937777][T28804] not chained 970000 origins [ 1769.942629][T28804] CPU: 1 PID: 28804 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1769.953279][T28804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1769.963448][T28804] Call Trace: [ 1769.966796][T28804] [ 1769.969804][T28804] dump_stack_lvl+0x1c8/0x256 [ 1769.974667][T28804] dump_stack+0x1a/0x1c [ 1769.979013][T28804] kmsan_internal_chain_origin+0x78/0x120 [ 1769.984879][T28804] ? up_read+0x36/0x1c0 [ 1769.989177][T28804] ? do_user_addr_fault+0xfef/0x1710 [ 1769.994633][T28804] ? exc_page_fault+0x6d/0x140 [ 1769.999546][T28804] ? asm_exc_page_fault+0x27/0x30 [ 1770.004740][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1770.011143][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1770.017098][T28804] __msan_chain_origin+0xbd/0x140 [ 1770.022265][T28804] __get_compat_msghdr+0x514/0x750 [ 1770.027570][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1770.032589][T28804] ? ___sys_recvmsg+0xa9/0x890 [ 1770.037477][T28804] ? do_recvmmsg+0x63a/0x10a0 [ 1770.042282][T28804] ___sys_recvmsg+0x19d/0x890 [ 1770.047092][T28804] ? __schedule+0x1609/0x21d0 [ 1770.051907][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1770.057868][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1770.063829][T28804] do_recvmmsg+0x63a/0x10a0 [ 1770.068475][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1770.074873][T28804] ? __sys_recvmmsg+0x52/0x450 [ 1770.079764][T28804] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1770.086332][T28804] __sys_recvmmsg+0x113/0x450 [ 1770.091151][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1770.097546][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1770.102712][T28804] ? exit_to_user_mode_prepare+0x119/0x220 [ 1770.108698][T28804] do_fast_syscall_32+0x33/0x70 [ 1770.113684][T28804] do_SYSENTER_32+0x1b/0x20 [ 1770.118318][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1770.124828][T28804] RIP: 0023:0xf7f6e549 [ 1770.128995][T28804] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1770.148760][T28804] RSP: 002b:00000000f7f485cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1770.157304][T28804] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1770.165385][T28804] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1770.173460][T28804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1770.181535][T28804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1770.189231][T28803] not chained 980000 origins [ 1770.189562][T28804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1770.202268][T28804] [ 1770.205353][T28803] CPU: 0 PID: 28803 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1770.210141][T28804] Uninit was stored to memory at: [ 1770.215932][T28803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1770.215981][T28803] Call Trace: [ 1770.216006][T28803] [ 1770.216032][T28803] dump_stack_lvl+0x1c8/0x256 [ 1770.216161][T28803] dump_stack+0x1a/0x1c [ 1770.216271][T28803] kmsan_internal_chain_origin+0x78/0x120 [ 1770.216372][T28803] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1770.221526][T28804] __get_compat_msghdr+0x514/0x750 [ 1770.231487][T28803] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1770.231600][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1770.234955][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1770.237809][T28803] ? __get_compat_msghdr+0x5b/0x750 [ 1770.242656][T28804] ___sys_recvmsg+0x19d/0x890 [ 1770.246721][T28803] ? get_compat_msghdr+0x8c/0x1c0 [ 1770.252523][T28804] do_recvmmsg+0x63a/0x10a0 [ 1770.258503][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1770.263692][T28804] __sys_recvmmsg+0x113/0x450 [ 1770.269844][T28803] ? __get_compat_msghdr+0x5b/0x750 [ 1770.275734][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1770.280495][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1770.285773][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1770.290362][T28803] ? should_fail+0x3f/0x810 [ 1770.295459][T28804] do_fast_syscall_32+0x33/0x70 [ 1770.299872][T28803] ? __stack_depot_save+0x21/0x4b0 [ 1770.305764][T28804] do_SYSENTER_32+0x1b/0x20 [ 1770.310354][T28803] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1770.315622][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1770.321787][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1770.321895][T28803] __msan_chain_origin+0xbd/0x140 [ 1770.327664][T28804] [ 1770.327679][T28804] Uninit was stored to memory at: [ 1770.332688][T28803] __get_compat_msghdr+0x514/0x750 [ 1770.337379][T28804] __get_compat_msghdr+0x514/0x750 [ 1770.342145][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1770.347313][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1770.351856][T28803] ? ___sys_recvmsg+0xa9/0x890 [ 1770.351936][T28803] ? do_recvmmsg+0x63a/0x10a0 [ 1770.358173][T28804] ___sys_recvmsg+0x19d/0x890 [ 1770.364511][T28803] ___sys_recvmsg+0x19d/0x890 [ 1770.364605][T28803] ? __schedule+0x1609/0x21d0 [ 1770.370397][T28804] do_recvmmsg+0x63a/0x10a0 [ 1770.375435][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1770.377826][T28804] __sys_recvmmsg+0x113/0x450 [ 1770.382853][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1770.382967][T28803] do_recvmmsg+0x63a/0x10a0 [ 1770.388037][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1770.393166][T28803] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1770.398074][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1770.402933][T28803] ? __sys_recvmmsg+0x52/0x450 [ 1770.403013][T28803] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1770.407765][T28804] do_fast_syscall_32+0x33/0x70 [ 1770.412446][T28803] __sys_recvmmsg+0x113/0x450 [ 1770.412543][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1770.417193][T28804] do_SYSENTER_32+0x1b/0x20 [ 1770.421884][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1770.421968][T28803] ? exit_to_user_mode_prepare+0x119/0x220 [ 1770.426627][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1770.431131][T28803] do_fast_syscall_32+0x33/0x70 [ 1770.437016][T28804] [ 1770.441609][T28803] do_SYSENTER_32+0x1b/0x20 [ 1770.447494][T28804] Uninit was stored to memory at: [ 1770.451914][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1770.458341][T28804] __get_compat_msghdr+0x514/0x750 [ 1770.464467][T28803] RIP: 0023:0xf7fa9549 [ 1770.464524][T28803] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1770.469572][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1770.474336][T28803] RSP: 002b:00000000f7f835cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1770.474416][T28803] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1770.480832][T28804] ___sys_recvmsg+0x19d/0x890 [ 1770.485680][T28803] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1770.485733][T28803] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1770.485782][T28803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1770.490445][T28804] do_recvmmsg+0x63a/0x10a0 [ 1770.496680][T28803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1770.496754][T28803] [ 1770.500826][T28803] Uninit was stored to memory at: [ 1770.501263][T28804] __sys_recvmmsg+0x113/0x450 [ 1770.506778][T28803] __get_compat_msghdr+0x514/0x750 [ 1770.512258][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1770.518569][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1770.523503][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1770.525827][T28803] ___sys_recvmsg+0x19d/0x890 [ 1770.530326][T28804] do_fast_syscall_32+0x33/0x70 [ 1770.535420][T28803] do_recvmmsg+0x63a/0x10a0 [ 1770.541840][T28804] do_SYSENTER_32+0x1b/0x20 [ 1770.546936][T28803] __sys_recvmmsg+0x113/0x450 [ 1770.550999][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1770.570685][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1770.575640][T28804] [ 1770.575655][T28804] Uninit was stored to memory at: [ 1770.584096][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1770.592282][T28804] __get_compat_msghdr+0x514/0x750 [ 1770.596821][T28803] do_fast_syscall_32+0x33/0x70 [ 1770.604876][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1770.612895][T28803] do_SYSENTER_32+0x1b/0x20 [ 1770.620894][T28804] ___sys_recvmsg+0x19d/0x890 [ 1770.625479][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1770.633551][T28804] do_recvmmsg+0x63a/0x10a0 [ 1770.636570][T28803] [ 1770.636587][T28803] Uninit was stored to memory at: [ 1770.641593][T28804] __sys_recvmmsg+0x113/0x450 [ 1770.646454][T28803] __get_compat_msghdr+0x514/0x750 [ 1770.651463][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1770.657772][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1770.662731][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1770.667740][T28803] ___sys_recvmsg+0x19d/0x890 [ 1770.672496][T28804] do_fast_syscall_32+0x33/0x70 [ 1770.677324][T28803] do_recvmmsg+0x63a/0x10a0 [ 1770.681904][T28804] do_SYSENTER_32+0x1b/0x20 [ 1770.686384][T28803] __sys_recvmmsg+0x113/0x450 [ 1770.691055][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1770.697440][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1770.703781][T28804] [ 1770.703796][T28804] Uninit was stored to memory at: [ 1770.706096][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1770.711231][T28804] __get_compat_msghdr+0x514/0x750 [ 1770.716201][T28803] do_fast_syscall_32+0x33/0x70 [ 1770.721332][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1770.726243][T28803] do_SYSENTER_32+0x1b/0x20 [ 1770.731116][T28804] ___sys_recvmsg+0x19d/0x890 [ 1770.735674][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1770.740367][T28804] do_recvmmsg+0x63a/0x10a0 [ 1770.746791][T28803] [ 1770.746810][T28803] Uninit was stored to memory at: [ 1770.746951][T28803] __get_compat_msghdr+0x514/0x750 [ 1770.751391][T28804] __sys_recvmmsg+0x113/0x450 [ 1770.753703][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1770.758750][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1770.763497][T28803] ___sys_recvmsg+0x19d/0x890 [ 1770.768623][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1770.774954][T28803] do_recvmmsg+0x63a/0x10a0 [ 1770.779824][T28804] do_fast_syscall_32+0x33/0x70 [ 1770.784911][T28803] __sys_recvmmsg+0x113/0x450 [ 1770.789602][T28804] do_SYSENTER_32+0x1b/0x20 [ 1770.794519][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1770.799038][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1770.803608][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1770.808295][T28804] [ 1770.808311][T28804] Uninit was stored to memory at: [ 1770.814689][T28803] do_fast_syscall_32+0x33/0x70 [ 1770.821060][T28804] __get_compat_msghdr+0x514/0x750 [ 1770.823339][T28803] do_SYSENTER_32+0x1b/0x20 [ 1770.828374][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1770.833459][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1770.838584][T28804] ___sys_recvmsg+0x19d/0x890 [ 1770.843602][T28803] [ 1770.843618][T28803] Uninit was stored to memory at: [ 1770.843751][T28803] __get_compat_msghdr+0x514/0x750 [ 1770.848468][T28804] do_recvmmsg+0x63a/0x10a0 [ 1770.853032][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1770.857753][T28804] __sys_recvmmsg+0x113/0x450 [ 1770.864158][T28803] ___sys_recvmsg+0x19d/0x890 [ 1770.868680][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1770.871015][T28803] do_recvmmsg+0x63a/0x10a0 [ 1770.876118][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1770.881207][T28803] __sys_recvmmsg+0x113/0x450 [ 1770.885966][T28804] do_fast_syscall_32+0x33/0x70 [ 1770.890795][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1770.897118][T28804] do_SYSENTER_32+0x1b/0x20 [ 1770.901833][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1770.906872][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1770.911367][T28803] do_fast_syscall_32+0x33/0x70 [ 1770.916307][T28804] [ 1770.920966][T28803] do_SYSENTER_32+0x1b/0x20 [ 1770.925563][T28804] Uninit was stored to memory at: [ 1770.931842][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1770.938306][T28804] __get_compat_msghdr+0x514/0x750 [ 1770.943283][T28803] [ 1770.943299][T28803] Uninit was stored to memory at: [ 1770.943427][T28803] __get_compat_msghdr+0x514/0x750 [ 1770.945628][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1770.950647][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1770.955579][T28804] ___sys_recvmsg+0x19d/0x890 [ 1770.955657][T28804] do_recvmmsg+0x63a/0x10a0 [ 1770.960772][T28803] ___sys_recvmsg+0x19d/0x890 [ 1770.965371][T28804] __sys_recvmmsg+0x113/0x450 [ 1770.970218][T28803] do_recvmmsg+0x63a/0x10a0 [ 1770.976627][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1770.981281][T28803] __sys_recvmmsg+0x113/0x450 [ 1770.983690][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1770.988715][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1770.993907][T28804] do_fast_syscall_32+0x33/0x70 [ 1770.998384][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1771.003317][T28804] do_SYSENTER_32+0x1b/0x20 [ 1771.007975][T28803] do_fast_syscall_32+0x33/0x70 [ 1771.012732][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1771.018953][T28803] do_SYSENTER_32+0x1b/0x20 [ 1771.023536][T28804] [ 1771.028535][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1771.033297][T28804] Local variable msg_sys created at: [ 1771.038120][T28803] [ 1771.038136][T28803] Uninit was stored to memory at: [ 1771.044462][T28804] do_recvmmsg+0x5f/0x10a0 [ 1771.049059][T28803] __get_compat_msghdr+0x514/0x750 [ 1771.054129][T28804] __sys_recvmmsg+0x113/0x450 [ 1771.060431][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1771.234647][T28803] ___sys_recvmsg+0x19d/0x890 [ 1771.239472][T28803] do_recvmmsg+0x63a/0x10a0 [ 1771.244161][T28803] __sys_recvmmsg+0x113/0x450 [ 1771.248963][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1771.255428][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1771.260588][T28803] do_fast_syscall_32+0x33/0x70 [ 1771.265635][T28803] do_SYSENTER_32+0x1b/0x20 [ 1771.270260][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1771.276862][T28803] [ 1771.279254][T28803] Uninit was stored to memory at: [ 1771.284538][T28803] __get_compat_msghdr+0x514/0x750 [ 1771.289827][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1771.294923][T28803] ___sys_recvmsg+0x19d/0x890 [ 1771.299732][T28803] do_recvmmsg+0x63a/0x10a0 [ 1771.304437][T28803] __sys_recvmmsg+0x113/0x450 [ 1771.309242][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1771.315735][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1771.320885][T28803] do_fast_syscall_32+0x33/0x70 [ 1771.325459][T28804] not chained 990000 origins [ 1771.325908][T28803] do_SYSENTER_32+0x1b/0x20 [ 1771.330428][T28804] CPU: 1 PID: 28804 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1771.334999][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1771.345424][T28804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1771.345474][T28804] Call Trace: [ 1771.345501][T28804] [ 1771.345530][T28804] dump_stack_lvl+0x1c8/0x256 [ 1771.351888][T28803] [ 1771.361890][T28804] dump_stack+0x1a/0x1c [ 1771.365233][T28803] Local variable msg_sys created at: [ 1771.365261][T28803] do_recvmmsg+0x5f/0x10a0 [ 1771.368169][T28804] kmsan_internal_chain_origin+0x78/0x120 [ 1771.372940][T28803] __sys_recvmmsg+0x113/0x450 [ 1771.375161][T28804] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1771.406046][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1771.412463][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1771.418430][T28804] ? __get_compat_msghdr+0x5b/0x750 [ 1771.423806][T28804] ? get_compat_msghdr+0x8c/0x1c0 [ 1771.428998][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1771.434956][T28804] ? __get_compat_msghdr+0x5b/0x750 [ 1771.440335][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1771.446311][T28804] ? should_fail+0x3f/0x810 [ 1771.450963][T28804] ? __stack_depot_save+0x21/0x4b0 [ 1771.456218][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1771.462625][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1771.468581][T28804] __msan_chain_origin+0xbd/0x140 [ 1771.473751][T28804] __get_compat_msghdr+0x514/0x750 [ 1771.479062][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1771.484083][T28804] ? ___sys_recvmsg+0xa9/0x890 [ 1771.488971][T28804] ? do_recvmmsg+0x63a/0x10a0 [ 1771.493782][T28804] ___sys_recvmsg+0x19d/0x890 [ 1771.498592][T28804] ? __schedule+0x1609/0x21d0 [ 1771.503412][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1771.509372][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1771.515341][T28804] do_recvmmsg+0x63a/0x10a0 [ 1771.519994][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1771.526396][T28804] ? __sys_recvmmsg+0x52/0x450 [ 1771.531285][T28804] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1771.537851][T28804] __sys_recvmmsg+0x113/0x450 [ 1771.542669][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1771.549074][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1771.554224][T28804] ? exit_to_user_mode_prepare+0x119/0x220 [ 1771.560185][T28804] do_fast_syscall_32+0x33/0x70 [ 1771.565164][T28804] do_SYSENTER_32+0x1b/0x20 [ 1771.569794][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1771.576306][T28804] RIP: 0023:0xf7f6e549 [ 1771.580466][T28804] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1771.600227][T28804] RSP: 002b:00000000f7f485cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1771.608779][T28804] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1771.616861][T28804] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1771.624936][T28804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1771.633008][T28804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1771.641080][T28804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1771.649176][T28804] [ 1771.657837][T28804] Uninit was stored to memory at: [ 1771.664010][T28804] __get_compat_msghdr+0x514/0x750 [ 1771.669289][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1771.674497][T28804] ___sys_recvmsg+0x19d/0x890 [ 1771.679305][T28804] do_recvmmsg+0x63a/0x10a0 [ 1771.684084][T28804] __sys_recvmmsg+0x113/0x450 [ 1771.688905][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1771.695450][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1771.700604][T28804] do_fast_syscall_32+0x33/0x70 [ 1771.705734][T28804] do_SYSENTER_32+0x1b/0x20 [ 1771.710398][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1771.717065][T28804] [ 1771.719456][T28804] Uninit was stored to memory at: [ 1771.724819][T28804] __get_compat_msghdr+0x514/0x750 [ 1771.730096][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1771.735268][T28804] ___sys_recvmsg+0x19d/0x890 [ 1771.740067][T28804] do_recvmmsg+0x63a/0x10a0 [ 1771.744841][T28804] __sys_recvmmsg+0x113/0x450 [ 1771.749671][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1771.756200][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1771.761357][T28804] do_fast_syscall_32+0x33/0x70 [ 1771.766515][T28804] do_SYSENTER_32+0x1b/0x20 [ 1771.771150][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1771.777856][T28804] [ 1771.780253][T28804] Uninit was stored to memory at: [ 1771.785622][T28804] __get_compat_msghdr+0x514/0x750 [ 1771.790896][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1771.796071][T28804] ___sys_recvmsg+0x19d/0x890 [ 1771.800874][T28804] do_recvmmsg+0x63a/0x10a0 [ 1771.805657][T28804] __sys_recvmmsg+0x113/0x450 [ 1771.810460][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1771.817007][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1771.822272][T28804] do_fast_syscall_32+0x33/0x70 [ 1771.827250][T28804] do_SYSENTER_32+0x1b/0x20 [ 1771.832026][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1771.838553][T28804] [ 1771.840935][T28804] Uninit was stored to memory at: [ 1771.846292][T28804] __get_compat_msghdr+0x514/0x750 [ 1771.851278][T28803] not chained 1000000 origins [ 1771.851519][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1771.856475][T28803] CPU: 0 PID: 28803 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1771.861188][T28804] ___sys_recvmsg+0x19d/0x890 [ 1771.871685][T28803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1771.871732][T28803] Call Trace: [ 1771.871763][T28803] [ 1771.871790][T28803] dump_stack_lvl+0x1c8/0x256 [ 1771.876504][T28804] do_recvmmsg+0x63a/0x10a0 [ 1771.886578][T28803] dump_stack+0x1a/0x1c [ 1771.886688][T28803] kmsan_internal_chain_origin+0x78/0x120 [ 1771.889958][T28804] __sys_recvmmsg+0x113/0x450 [ 1771.892895][T28803] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1771.893005][T28803] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1771.897660][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1771.902183][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1771.902290][T28803] ? __get_compat_msghdr+0x5b/0x750 [ 1771.906416][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1771.912130][T28803] ? get_compat_msghdr+0x8c/0x1c0 [ 1771.912253][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1771.917346][T28804] do_fast_syscall_32+0x33/0x70 [ 1771.923416][T28803] ? __get_compat_msghdr+0x5b/0x750 [ 1771.929739][T28804] do_SYSENTER_32+0x1b/0x20 [ 1771.935984][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1771.936099][T28803] ? should_fail+0x3f/0x810 [ 1771.941958][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1771.947064][T28803] ? __stack_depot_save+0x21/0x4b0 [ 1771.952279][T28804] [ 1771.957116][T28803] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1771.963007][T28804] Uninit was stored to memory at: [ 1771.967777][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1771.973162][T28804] __get_compat_msghdr+0x514/0x750 [ 1771.977468][T28803] __msan_chain_origin+0xbd/0x140 [ 1771.983353][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1771.987780][T28803] __get_compat_msghdr+0x514/0x750 [ 1771.994181][T28804] ___sys_recvmsg+0x19d/0x890 [ 1771.999227][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1772.001532][T28804] do_recvmmsg+0x63a/0x10a0 [ 1772.007772][T28803] ? ___sys_recvmsg+0xa9/0x890 [ 1772.007851][T28803] ? do_recvmmsg+0x63a/0x10a0 [ 1772.012967][T28804] __sys_recvmmsg+0x113/0x450 [ 1772.018698][T28803] ___sys_recvmsg+0x19d/0x890 [ 1772.023885][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1772.028828][T28803] ? __schedule+0x1609/0x21d0 [ 1772.033747][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1772.038785][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1772.043526][T28804] do_fast_syscall_32+0x33/0x70 [ 1772.048295][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1772.052876][T28804] do_SYSENTER_32+0x1b/0x20 [ 1772.057557][T28803] do_recvmmsg+0x63a/0x10a0 [ 1772.062325][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1772.067018][T28803] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1772.071667][T28804] [ 1772.071683][T28804] Uninit was stored to memory at: [ 1772.077915][T28803] ? __sys_recvmmsg+0x52/0x450 [ 1772.077995][T28803] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1772.082857][T28804] __get_compat_msghdr+0x514/0x750 [ 1772.087693][T28803] __sys_recvmmsg+0x113/0x450 [ 1772.093582][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1772.098356][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1772.104225][T28804] ___sys_recvmsg+0x19d/0x890 [ 1772.108656][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1772.113222][T28804] do_recvmmsg+0x63a/0x10a0 [ 1772.119459][T28803] ? exit_to_user_mode_prepare+0x119/0x220 [ 1772.125779][T28804] __sys_recvmmsg+0x113/0x450 [ 1772.128028][T28803] do_fast_syscall_32+0x33/0x70 [ 1772.133124][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1772.137804][T28803] do_SYSENTER_32+0x1b/0x20 [ 1772.144297][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1772.149320][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1772.154161][T28804] do_fast_syscall_32+0x33/0x70 [ 1772.158922][T28803] RIP: 0023:0xf7fa9549 [ 1772.165252][T28804] do_SYSENTER_32+0x1b/0x20 [ 1772.169851][T28803] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1772.174955][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1772.179364][T28803] RSP: 002b:00000000f7f835cc EFLAGS: 00000296 [ 1772.185262][T28804] [ 1772.189844][T28803] ORIG_RAX: 0000000000000151 [ 1772.189875][T28803] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1772.194774][T28804] Uninit was stored to memory at: [ 1772.200930][T28803] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1772.205628][T28804] __get_compat_msghdr+0x514/0x750 [ 1772.210453][T28803] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1772.216864][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1772.221622][T28803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1772.225772][T28804] ___sys_recvmsg+0x19d/0x890 [ 1772.230184][T28803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1772.249890][T28804] do_recvmmsg+0x63a/0x10a0 [ 1772.256155][T28803] [ 1772.264310][T28803] Uninit was stored to memory at: [ 1772.264739][T28804] __sys_recvmmsg+0x113/0x450 [ 1772.269535][T28803] __get_compat_msghdr+0x514/0x750 [ 1772.277506][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1772.277598][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1772.277679][T28804] do_fast_syscall_32+0x33/0x70 [ 1772.277765][T28804] do_SYSENTER_32+0x1b/0x20 [ 1772.277838][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1772.277972][T28804] [ 1772.277989][T28804] Local variable msg_sys created at: [ 1772.278016][T28804] do_recvmmsg+0x5f/0x10a0 [ 1772.278085][T28804] __sys_recvmmsg+0x113/0x450 [ 1772.400610][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1772.405722][T28803] ___sys_recvmsg+0x19d/0x890 [ 1772.410533][T28803] do_recvmmsg+0x63a/0x10a0 [ 1772.415224][T28803] __sys_recvmmsg+0x113/0x450 [ 1772.420018][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1772.426472][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1772.431620][T28803] do_fast_syscall_32+0x33/0x70 [ 1772.436668][T28803] do_SYSENTER_32+0x1b/0x20 [ 1772.441298][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1772.447884][T28803] [ 1772.450267][T28803] Uninit was stored to memory at: [ 1772.455538][T28803] __get_compat_msghdr+0x514/0x750 [ 1772.460811][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1772.465931][T28803] ___sys_recvmsg+0x19d/0x890 [ 1772.470735][T28803] do_recvmmsg+0x63a/0x10a0 [ 1772.475438][T28803] __sys_recvmmsg+0x113/0x450 [ 1772.480234][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1772.486786][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1772.492003][T28803] do_fast_syscall_32+0x33/0x70 [ 1772.496973][T28803] do_SYSENTER_32+0x1b/0x20 [ 1772.501587][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1772.508230][T28803] [ 1772.510617][T28803] Uninit was stored to memory at: [ 1772.515945][T28803] __get_compat_msghdr+0x514/0x750 [ 1772.521214][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1772.526349][T28803] ___sys_recvmsg+0x19d/0x890 [ 1772.531153][T28803] do_recvmmsg+0x63a/0x10a0 [ 1772.535868][T28803] __sys_recvmmsg+0x113/0x450 [ 1772.540666][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1772.547222][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1772.552454][T28803] do_fast_syscall_32+0x33/0x70 [ 1772.557430][T28803] do_SYSENTER_32+0x1b/0x20 [ 1772.562131][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1772.568662][T28803] [ 1772.571068][T28803] Uninit was stored to memory at: [ 1772.576358][T28803] __get_compat_msghdr+0x514/0x750 [ 1772.581976][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1772.586986][T28803] ___sys_recvmsg+0x19d/0x890 [ 1772.591864][T28803] do_recvmmsg+0x63a/0x10a0 [ 1772.596488][T28803] __sys_recvmmsg+0x113/0x450 [ 1772.601296][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1772.607838][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1772.613071][T28803] do_fast_syscall_32+0x33/0x70 [ 1772.618066][T28803] do_SYSENTER_32+0x1b/0x20 [ 1772.622787][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1772.629333][T28803] [ 1772.631855][T28803] Uninit was stored to memory at: [ 1772.637074][T28803] __get_compat_msghdr+0x514/0x750 [ 1772.642487][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1772.647507][T28803] ___sys_recvmsg+0x19d/0x890 [ 1772.652393][T28803] do_recvmmsg+0x63a/0x10a0 [ 1772.657016][T28803] __sys_recvmmsg+0x113/0x450 [ 1772.661938][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1772.668329][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1772.673624][T28803] do_fast_syscall_32+0x33/0x70 [ 1772.678619][T28803] do_SYSENTER_32+0x1b/0x20 [ 1772.683380][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1772.689894][T28803] [ 1772.692397][T28803] Uninit was stored to memory at: [ 1772.697605][T28803] __get_compat_msghdr+0x514/0x750 [ 1772.703066][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1772.708103][T28803] ___sys_recvmsg+0x19d/0x890 [ 1772.713062][T28803] do_recvmmsg+0x63a/0x10a0 [ 1772.717703][T28803] __sys_recvmmsg+0x113/0x450 [ 1772.722646][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1772.729057][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1772.734359][T28803] do_fast_syscall_32+0x33/0x70 [ 1772.739338][T28803] do_SYSENTER_32+0x1b/0x20 [ 1772.744101][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1772.750612][T28803] [ 1772.753129][T28803] Uninit was stored to memory at: [ 1772.758343][T28803] __get_compat_msghdr+0x514/0x750 [ 1772.763748][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1772.768765][T28803] ___sys_recvmsg+0x19d/0x890 [ 1772.773691][T28803] do_recvmmsg+0x63a/0x10a0 [ 1772.778326][T28803] __sys_recvmmsg+0x113/0x450 [ 1772.783240][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1772.789732][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1772.795013][T28803] do_fast_syscall_32+0x33/0x70 [ 1772.799991][T28803] do_SYSENTER_32+0x1b/0x20 [ 1772.804703][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1772.811218][T28803] [ 1772.813734][T28803] Local variable msg_sys created at: [ 1772.819095][T28803] do_recvmmsg+0x5f/0x10a0 [ 1772.823744][T28803] __sys_recvmmsg+0x113/0x450 [ 1772.920479][T28803] not chained 1010000 origins [ 1772.925442][T28803] CPU: 0 PID: 28803 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1772.936090][T28803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1772.946303][T28803] Call Trace: [ 1772.949670][T28803] [ 1772.952679][T28803] dump_stack_lvl+0x1c8/0x256 [ 1772.957550][T28803] dump_stack+0x1a/0x1c [ 1772.961875][T28803] kmsan_internal_chain_origin+0x78/0x120 [ 1772.967760][T28803] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1772.973976][T28803] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1772.980366][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1772.986334][T28803] ? __get_compat_msghdr+0x5b/0x750 [ 1772.991712][T28803] ? get_compat_msghdr+0x8c/0x1c0 [ 1772.996909][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1773.002882][T28803] ? __get_compat_msghdr+0x5b/0x750 [ 1773.008263][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1773.014221][T28803] ? should_fail+0x3f/0x810 [ 1773.018862][T28803] ? __stack_depot_save+0x21/0x4b0 [ 1773.024109][T28803] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1773.030499][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1773.036461][T28803] __msan_chain_origin+0xbd/0x140 [ 1773.041630][T28803] __get_compat_msghdr+0x514/0x750 [ 1773.046955][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1773.051957][T28803] ? ___sys_recvmsg+0xa9/0x890 [ 1773.056851][T28803] ? do_recvmmsg+0x63a/0x10a0 [ 1773.061659][T28803] ___sys_recvmsg+0x19d/0x890 [ 1773.066488][T28803] ? __schedule+0x1609/0x21d0 [ 1773.071323][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1773.077290][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1773.083258][T28803] do_recvmmsg+0x63a/0x10a0 [ 1773.087913][T28803] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1773.094334][T28803] ? __sys_recvmmsg+0x52/0x450 [ 1773.099226][T28803] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1773.105792][T28803] __sys_recvmmsg+0x113/0x450 [ 1773.110616][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1773.117019][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1773.122165][T28803] ? exit_to_user_mode_prepare+0x119/0x220 [ 1773.128119][T28803] do_fast_syscall_32+0x33/0x70 [ 1773.133105][T28803] do_SYSENTER_32+0x1b/0x20 [ 1773.137819][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1773.144319][T28803] RIP: 0023:0xf7fa9549 [ 1773.148475][T28803] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1773.168310][T28803] RSP: 002b:00000000f7f835cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1773.176860][T28803] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1773.184934][T28803] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1773.193000][T28803] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1773.201060][T28803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1773.209124][T28803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1773.217215][T28803] [ 1773.224019][T28803] Uninit was stored to memory at: [ 1773.229272][T28803] __get_compat_msghdr+0x514/0x750 [ 1773.234946][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1773.239979][T28803] ___sys_recvmsg+0x19d/0x890 [ 1773.244890][T28803] do_recvmmsg+0x63a/0x10a0 [ 1773.249516][T28803] __sys_recvmmsg+0x113/0x450 [ 1773.254396][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1773.260780][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1773.266018][T28803] do_fast_syscall_32+0x33/0x70 [ 1773.270992][T28803] do_SYSENTER_32+0x1b/0x20 [ 1773.275752][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1773.282356][T28803] [ 1773.284750][T28803] Uninit was stored to memory at: [ 1773.289972][T28803] __get_compat_msghdr+0x514/0x750 [ 1773.295408][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1773.300430][T28803] ___sys_recvmsg+0x19d/0x890 [ 1773.305334][T28803] do_recvmmsg+0x63a/0x10a0 [ 1773.309965][T28803] __sys_recvmmsg+0x113/0x450 [ 1773.314840][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1773.321234][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1773.326532][T28803] do_fast_syscall_32+0x33/0x70 [ 1773.331512][T28803] do_SYSENTER_32+0x1b/0x20 [ 1773.336281][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1773.342875][T28803] [ 1773.345263][T28803] Uninit was stored to memory at: [ 1773.350464][T28803] __get_compat_msghdr+0x514/0x750 [ 1773.355879][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1773.360901][T28803] ___sys_recvmsg+0x19d/0x890 [ 1773.365837][T28803] do_recvmmsg+0x63a/0x10a0 [ 1773.370460][T28803] __sys_recvmmsg+0x113/0x450 [ 1773.375394][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1773.381860][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1773.387010][T28803] do_fast_syscall_32+0x33/0x70 [ 1773.392177][T28803] do_SYSENTER_32+0x1b/0x20 [ 1773.396807][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1773.403445][T28803] [ 1773.405838][T28803] Uninit was stored to memory at: [ 1773.411044][T28803] __get_compat_msghdr+0x514/0x750 [ 1773.416460][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1773.421476][T28803] ___sys_recvmsg+0x19d/0x890 [ 1773.426405][T28803] do_recvmmsg+0x63a/0x10a0 [ 1773.431043][T28803] __sys_recvmmsg+0x113/0x450 [ 1773.435977][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1773.442438][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1773.447617][T28803] do_fast_syscall_32+0x33/0x70 [ 1773.452795][T28803] do_SYSENTER_32+0x1b/0x20 [ 1773.457512][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1773.464173][T28803] [ 1773.466572][T28803] Uninit was stored to memory at: [ 1773.471961][T28803] __get_compat_msghdr+0x514/0x750 [ 1773.477269][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1773.482409][T28803] ___sys_recvmsg+0x19d/0x890 [ 1773.487222][T28803] do_recvmmsg+0x63a/0x10a0 [ 1773.491981][T28803] __sys_recvmmsg+0x113/0x450 [ 1773.496883][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1773.503384][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1773.508540][T28803] do_fast_syscall_32+0x33/0x70 [ 1773.513637][T28803] do_SYSENTER_32+0x1b/0x20 [ 1773.518272][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1773.524936][T28803] [ 1773.527243][T28804] not chained 1020000 origins [ 1773.527299][T28803] Uninit was stored to memory at: [ 1773.527438][T28803] __get_compat_msghdr+0x514/0x750 [ 1773.532169][T28804] CPU: 1 PID: 28804 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1773.537124][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1773.542233][T28804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1773.542279][T28804] Call Trace: [ 1773.542306][T28804] [ 1773.542334][T28804] dump_stack_lvl+0x1c8/0x256 [ 1773.552881][T28803] ___sys_recvmsg+0x19d/0x890 [ 1773.557674][T28804] dump_stack+0x1a/0x1c [ 1773.567808][T28803] do_recvmmsg+0x63a/0x10a0 [ 1773.571030][T28804] kmsan_internal_chain_origin+0x78/0x120 [ 1773.574031][T28803] __sys_recvmmsg+0x113/0x450 [ 1773.578639][T28804] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1773.583380][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1773.587477][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1773.592155][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1773.597793][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1773.602535][T28803] do_fast_syscall_32+0x33/0x70 [ 1773.608553][T28804] ? __get_compat_msghdr+0x5b/0x750 [ 1773.614857][T28803] do_SYSENTER_32+0x1b/0x20 [ 1773.621041][T28804] ? get_compat_msghdr+0x8c/0x1c0 [ 1773.626130][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1773.631873][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1773.636789][T28803] [ 1773.636804][T28803] Uninit was stored to memory at: [ 1773.641986][T28804] ? __get_compat_msghdr+0x5b/0x750 [ 1773.642114][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1773.646685][T28803] __get_compat_msghdr+0x514/0x750 [ 1773.651610][T28804] ? should_fail+0x3f/0x810 [ 1773.657993][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1773.663730][T28804] ? __stack_depot_save+0x21/0x4b0 [ 1773.666126][T28803] ___sys_recvmsg+0x19d/0x890 [ 1773.671157][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1773.676410][T28803] do_recvmmsg+0x63a/0x10a0 [ 1773.682160][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1773.687329][T28803] __sys_recvmmsg+0x113/0x450 [ 1773.691835][T28804] __msan_chain_origin+0xbd/0x140 [ 1773.691933][T28804] __get_compat_msghdr+0x514/0x750 [ 1773.696791][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1773.702017][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1773.706738][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1773.712984][T28804] ? ___sys_recvmsg+0xa9/0x890 [ 1773.713062][T28804] ? do_recvmmsg+0x63a/0x10a0 [ 1773.717562][T28803] do_fast_syscall_32+0x33/0x70 [ 1773.723376][T28804] ___sys_recvmsg+0x19d/0x890 [ 1773.723469][T28804] ? __schedule+0x1609/0x21d0 [ 1773.728111][T28803] do_SYSENTER_32+0x1b/0x20 [ 1773.733155][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1773.738321][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1773.744568][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1773.744681][T28804] do_recvmmsg+0x63a/0x10a0 [ 1773.749515][T28803] [ 1773.749538][T28803] Local variable msg_sys created at: [ 1773.754573][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1773.759424][T28803] do_recvmmsg+0x5f/0x10a0 [ 1773.764121][T28804] ? __sys_recvmmsg+0x52/0x450 [ 1773.764209][T28804] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1773.769135][T28803] __sys_recvmmsg+0x113/0x450 [ 1773.773821][T28804] __sys_recvmmsg+0x113/0x450 [ 1773.773922][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1773.852816][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1773.857982][T28804] ? exit_to_user_mode_prepare+0x119/0x220 [ 1773.863941][T28804] do_fast_syscall_32+0x33/0x70 [ 1773.868930][T28804] do_SYSENTER_32+0x1b/0x20 [ 1773.873557][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1773.880074][T28804] RIP: 0023:0xf7f6e549 [ 1773.884243][T28804] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1773.904025][T28804] RSP: 002b:00000000f7f485cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1773.912575][T28804] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1773.920659][T28804] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1773.928736][T28804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1773.936809][T28804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1773.944889][T28804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1773.952983][T28804] [ 1773.963140][T28804] Uninit was stored to memory at: [ 1773.968394][T28804] __get_compat_msghdr+0x514/0x750 [ 1773.976343][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1773.981368][T28804] ___sys_recvmsg+0x19d/0x890 [ 1773.986600][T28804] do_recvmmsg+0x63a/0x10a0 [ 1773.991235][T28804] __sys_recvmmsg+0x113/0x450 [ 1773.996146][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1774.002648][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1774.007843][T28804] do_fast_syscall_32+0x33/0x70 [ 1774.012919][T28804] do_SYSENTER_32+0x1b/0x20 [ 1774.017543][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1774.024161][T28804] [ 1774.026552][T28804] Uninit was stored to memory at: [ 1774.031910][T28804] __get_compat_msghdr+0x514/0x750 [ 1774.037183][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1774.042310][T28804] ___sys_recvmsg+0x19d/0x890 [ 1774.047121][T28804] do_recvmmsg+0x63a/0x10a0 [ 1774.051885][T28804] __sys_recvmmsg+0x113/0x450 [ 1774.056685][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1774.063212][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1774.068367][T28804] do_fast_syscall_32+0x33/0x70 [ 1774.073498][T28804] do_SYSENTER_32+0x1b/0x20 [ 1774.078125][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1774.084778][T28804] [ 1774.087172][T28804] Uninit was stored to memory at: [ 1774.092512][T28804] __get_compat_msghdr+0x514/0x750 [ 1774.097789][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1774.102941][T28804] ___sys_recvmsg+0x19d/0x890 [ 1774.107746][T28804] do_recvmmsg+0x63a/0x10a0 [ 1774.112518][T28804] __sys_recvmmsg+0x113/0x450 [ 1774.117316][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1774.123842][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1774.128993][T28804] do_fast_syscall_32+0x33/0x70 [ 1774.129261][T28803] not chained 1030000 origins [ 1774.134063][T28804] do_SYSENTER_32+0x1b/0x20 [ 1774.134139][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1774.134275][T28804] [ 1774.134290][T28804] Uninit was stored to memory at: [ 1774.134424][T28804] __get_compat_msghdr+0x514/0x750 [ 1774.138966][T28803] CPU: 0 PID: 28803 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1774.143561][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1774.149810][T28803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1774.152230][T28804] ___sys_recvmsg+0x19d/0x890 [ 1774.157163][T28803] Call Trace: [ 1774.157191][T28803] [ 1774.162365][T28804] do_recvmmsg+0x63a/0x10a0 [ 1774.172796][T28803] dump_stack_lvl+0x1c8/0x256 [ 1774.177729][T28804] __sys_recvmmsg+0x113/0x450 [ 1774.187820][T28803] dump_stack+0x1a/0x1c [ 1774.192657][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1774.195876][T28803] kmsan_internal_chain_origin+0x78/0x120 [ 1774.198812][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1774.203328][T28803] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1774.203440][T28803] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1774.208089][T28804] do_fast_syscall_32+0x33/0x70 [ 1774.212776][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1774.212883][T28803] ? __get_compat_msghdr+0x5b/0x750 [ 1774.217018][T28804] do_SYSENTER_32+0x1b/0x20 [ 1774.223258][T28803] ? get_compat_msghdr+0x8c/0x1c0 [ 1774.229058][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1774.234087][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1774.234195][T28803] ? __get_compat_msghdr+0x5b/0x750 [ 1774.240258][T28804] [ 1774.240273][T28804] Uninit was stored to memory at: [ 1774.246505][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1774.246619][T28803] ? should_fail+0x3f/0x810 [ 1774.251590][T28804] __get_compat_msghdr+0x514/0x750 [ 1774.257285][T28803] ? __stack_depot_save+0x21/0x4b0 [ 1774.257387][T28803] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1774.262651][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1774.267165][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1774.272268][T28804] ___sys_recvmsg+0x19d/0x890 [ 1774.278508][T28803] __msan_chain_origin+0xbd/0x140 [ 1774.284483][T28804] do_recvmmsg+0x63a/0x10a0 [ 1774.289597][T28803] __get_compat_msghdr+0x514/0x750 [ 1774.292004][T28804] __sys_recvmmsg+0x113/0x450 [ 1774.296966][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1774.302834][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1774.307271][T28803] ? ___sys_recvmsg+0xa9/0x890 [ 1774.312459][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1774.317482][T28803] ? do_recvmmsg+0x63a/0x10a0 [ 1774.323809][T28804] do_fast_syscall_32+0x33/0x70 [ 1774.328579][T28803] ___sys_recvmsg+0x19d/0x890 [ 1774.334460][T28804] do_SYSENTER_32+0x1b/0x20 [ 1774.339061][T28803] ? __schedule+0x1609/0x21d0 [ 1774.344152][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1774.348584][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1774.353765][T28804] [ 1774.358368][T28803] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1774.363295][T28804] Uninit was stored to memory at: [ 1774.369457][T28803] do_recvmmsg+0x63a/0x10a0 [ 1774.374411][T28804] __get_compat_msghdr+0x514/0x750 [ 1774.379261][T28803] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1774.383993][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1774.388769][T28803] ? __sys_recvmmsg+0x52/0x450 [ 1774.393512][T28804] ___sys_recvmsg+0x19d/0x890 [ 1774.397929][T28803] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1774.402689][T28804] do_recvmmsg+0x63a/0x10a0 [ 1774.408937][T28803] __sys_recvmmsg+0x113/0x450 [ 1774.414820][T28804] __sys_recvmmsg+0x113/0x450 [ 1774.417078][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1774.422948][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1774.427908][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1774.432478][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1774.437504][T28803] ? exit_to_user_mode_prepare+0x119/0x220 [ 1774.443826][T28804] do_fast_syscall_32+0x33/0x70 [ 1774.448605][T28803] do_fast_syscall_32+0x33/0x70 [ 1774.453448][T28804] do_SYSENTER_32+0x1b/0x20 [ 1774.458043][T28803] do_SYSENTER_32+0x1b/0x20 [ 1774.464533][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1774.468961][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1774.473754][T28804] [ 1774.478321][T28803] RIP: 0023:0xf7fa9549 [ 1774.484649][T28804] Uninit was stored to memory at: [ 1774.490809][T28803] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1774.496052][T28804] __get_compat_msghdr+0x514/0x750 [ 1774.500875][T28803] RSP: 002b:00000000f7f835cc EFLAGS: 00000296 [ 1774.506799][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1774.511559][T28803] ORIG_RAX: 0000000000000151 [ 1774.511589][T28803] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1774.516504][T28804] ___sys_recvmsg+0x19d/0x890 [ 1774.520996][T28803] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1774.525593][T28804] do_recvmmsg+0x63a/0x10a0 [ 1774.531833][T28803] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1774.531883][T28803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1774.531934][T28803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1774.538255][T28804] __sys_recvmmsg+0x113/0x450 [ 1774.540610][T28803] [ 1774.544741][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1774.557817][T28803] Uninit was stored to memory at: [ 1774.569379][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1774.569471][T28804] do_fast_syscall_32+0x33/0x70 [ 1774.569546][T28804] do_SYSENTER_32+0x1b/0x20 [ 1774.569620][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1774.569755][T28804] [ 1774.569771][T28804] Local variable msg_sys created at: [ 1774.569798][T28804] do_recvmmsg+0x5f/0x10a0 [ 1774.569869][T28804] __sys_recvmmsg+0x113/0x450 [ 1774.701863][T28803] __get_compat_msghdr+0x514/0x750 [ 1774.707146][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1774.712228][T28803] ___sys_recvmsg+0x19d/0x890 [ 1774.717027][T28803] do_recvmmsg+0x63a/0x10a0 [ 1774.721645][T28803] __sys_recvmmsg+0x113/0x450 [ 1774.726522][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1774.732972][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1774.738144][T28803] do_fast_syscall_32+0x33/0x70 [ 1774.743188][T28803] do_SYSENTER_32+0x1b/0x20 [ 1774.747814][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1774.754386][T28803] [ 1774.756784][T28803] Uninit was stored to memory at: [ 1774.762060][T28803] __get_compat_msghdr+0x514/0x750 [ 1774.767339][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1774.772421][T28803] ___sys_recvmsg+0x19d/0x890 [ 1774.777231][T28803] do_recvmmsg+0x63a/0x10a0 [ 1774.781945][T28803] __sys_recvmmsg+0x113/0x450 [ 1774.786759][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1774.793238][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1774.798394][T28803] do_fast_syscall_32+0x33/0x70 [ 1774.803443][T28803] do_SYSENTER_32+0x1b/0x20 [ 1774.808070][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1774.814654][T28803] [ 1774.817037][T28803] Uninit was stored to memory at: [ 1774.822318][T28803] __get_compat_msghdr+0x514/0x750 [ 1774.822386][T28804] not chained 1040000 origins [ 1774.822426][T28804] CPU: 1 PID: 28804 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1774.827550][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1774.832235][T28804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1774.832286][T28804] Call Trace: [ 1774.832313][T28804] [ 1774.832341][T28804] dump_stack_lvl+0x1c8/0x256 [ 1774.842875][T28803] ___sys_recvmsg+0x19d/0x890 [ 1774.847665][T28804] dump_stack+0x1a/0x1c [ 1774.857789][T28803] do_recvmmsg+0x63a/0x10a0 [ 1774.860999][T28804] kmsan_internal_chain_origin+0x78/0x120 [ 1774.863995][T28803] __sys_recvmmsg+0x113/0x450 [ 1774.868604][T28804] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1774.873372][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1774.877440][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1774.881998][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1774.887662][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1774.892388][T28803] do_fast_syscall_32+0x33/0x70 [ 1774.898390][T28804] ? __get_compat_msghdr+0x5b/0x750 [ 1774.904693][T28803] do_SYSENTER_32+0x1b/0x20 [ 1774.910868][T28804] ? get_compat_msghdr+0x8c/0x1c0 [ 1774.915953][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1774.921694][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1774.921803][T28804] ? __get_compat_msghdr+0x5b/0x750 [ 1774.926640][T28803] [ 1774.926655][T28803] Uninit was stored to memory at: [ 1774.931843][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1774.936515][T28803] __get_compat_msghdr+0x514/0x750 [ 1774.941440][T28804] ? should_fail+0x3f/0x810 [ 1774.947837][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1774.953566][T28804] ? __stack_depot_save+0x21/0x4b0 [ 1774.953665][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1774.958934][T28803] ___sys_recvmsg+0x19d/0x890 [ 1774.961275][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1774.966352][T28803] do_recvmmsg+0x63a/0x10a0 [ 1774.972104][T28804] __msan_chain_origin+0xbd/0x140 [ 1774.972203][T28804] __get_compat_msghdr+0x514/0x750 [ 1774.977307][T28803] __sys_recvmmsg+0x113/0x450 [ 1774.981856][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1774.986750][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1774.991866][T28804] ? ___sys_recvmsg+0xa9/0x890 [ 1774.991945][T28804] ? do_recvmmsg+0x63a/0x10a0 [ 1774.998165][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1775.002848][T28804] ___sys_recvmsg+0x19d/0x890 [ 1775.002941][T28804] ? __schedule+0x1609/0x21d0 [ 1775.008713][T28803] do_fast_syscall_32+0x33/0x70 [ 1775.013235][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1775.018306][T28803] do_SYSENTER_32+0x1b/0x20 [ 1775.023511][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1775.023625][T28804] do_recvmmsg+0x63a/0x10a0 [ 1775.028292][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1775.033173][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1775.039458][T28803] [ 1775.039473][T28803] Uninit was stored to memory at: [ 1775.044230][T28804] ? __sys_recvmmsg+0x52/0x450 [ 1775.044317][T28804] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1775.049072][T28803] __get_compat_msghdr+0x514/0x750 [ 1775.053994][T28804] __sys_recvmmsg+0x113/0x450 [ 1775.054092][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1775.058732][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1775.063423][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1775.068320][T28803] ___sys_recvmsg+0x19d/0x890 [ 1775.074145][T28804] ? exit_to_user_mode_prepare+0x119/0x220 [ 1775.074244][T28804] do_fast_syscall_32+0x33/0x70 [ 1775.078751][T28803] do_recvmmsg+0x63a/0x10a0 [ 1775.084649][T28804] do_SYSENTER_32+0x1b/0x20 [ 1775.084733][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1775.089217][T28803] __sys_recvmmsg+0x113/0x450 [ 1775.095562][T28804] RIP: 0023:0xf7f6e549 [ 1775.095616][T28804] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1775.102030][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1775.104296][T28804] RSP: 002b:00000000f7f485cc EFLAGS: 00000296 [ 1775.109445][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1775.114208][T28804] ORIG_RAX: 0000000000000151 [ 1775.114238][T28804] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1775.114308][T28804] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1775.120688][T28803] do_fast_syscall_32+0x33/0x70 [ 1775.125796][T28804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1775.125846][T28804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1775.125895][T28804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1775.130566][T28803] do_SYSENTER_32+0x1b/0x20 [ 1775.136845][T28804] [ 1775.142732][T28804] Uninit was stored to memory at: [ 1775.146930][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1775.152221][T28804] __get_compat_msghdr+0x514/0x750 [ 1775.157495][T28803] [ 1775.162367][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1775.166834][T28803] Uninit was stored to memory at: [ 1775.166966][T28803] __get_compat_msghdr+0x514/0x750 [ 1775.171335][T28804] ___sys_recvmsg+0x19d/0x890 [ 1775.177736][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1775.182517][T28804] do_recvmmsg+0x63a/0x10a0 [ 1775.186568][T28803] ___sys_recvmsg+0x19d/0x890 [ 1775.206275][T28804] __sys_recvmmsg+0x113/0x450 [ 1775.212565][T28803] do_recvmmsg+0x63a/0x10a0 [ 1775.218650][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1775.223740][T28803] __sys_recvmmsg+0x113/0x450 [ 1775.228455][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1775.236500][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1775.244576][T28804] do_fast_syscall_32+0x33/0x70 [ 1775.249407][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1775.257468][T28804] do_SYSENTER_32+0x1b/0x20 [ 1775.265490][T28803] do_fast_syscall_32+0x33/0x70 [ 1775.273588][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1775.278071][T28803] do_SYSENTER_32+0x1b/0x20 [ 1775.281097][T28804] [ 1775.281112][T28804] Uninit was stored to memory at: [ 1775.286185][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1775.292725][T28804] __get_compat_msghdr+0x514/0x750 [ 1775.297706][T28803] [ 1775.297721][T28803] Uninit was stored to memory at: [ 1775.300033][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1775.305063][T28803] __get_compat_msghdr+0x514/0x750 [ 1775.309998][T28804] ___sys_recvmsg+0x19d/0x890 [ 1775.315175][T28803] get_compat_msghdr+0x8c/0x1c0 [ 1775.319870][T28804] do_recvmmsg+0x63a/0x10a0 [ 1775.324790][T28803] ___sys_recvmsg+0x19d/0x890 [ 1775.329303][T28804] __sys_recvmmsg+0x113/0x450 [ 1775.334047][T28803] do_recvmmsg+0x63a/0x10a0 [ 1775.338739][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1775.343307][T28803] __sys_recvmmsg+0x113/0x450 [ 1775.349569][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1775.354307][T28803] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1775.359354][T28804] do_fast_syscall_32+0x33/0x70 [ 1775.365838][T28803] __do_fast_syscall_32+0x87/0xe0 [ 1775.370697][T28804] do_SYSENTER_32+0x1b/0x20 [ 1775.375810][T28803] do_fast_syscall_32+0x33/0x70 [ 1775.380326][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1775.385241][T28803] do_SYSENTER_32+0x1b/0x20 [ 1775.391609][T28804] [ 1775.391625][T28804] Uninit was stored to memory at: [ 1775.396173][T28803] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1775.398630][T28804] __get_compat_msghdr+0x514/0x750 [ 1775.403603][T28803] [ 1775.403620][T28803] Local variable msg_sys created at: [ 1775.403646][T28803] do_recvmmsg+0x5f/0x10a0 [ 1775.409944][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1775.415122][T28803] __sys_recvmmsg+0x113/0x450 [ 1775.417473][T28804] ___sys_recvmsg+0x19d/0x890 [ 1775.564146][T28804] do_recvmmsg+0x63a/0x10a0 [ 1775.568801][T28804] __sys_recvmmsg+0x113/0x450 [ 1775.573736][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1775.580134][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1775.585415][T28804] do_fast_syscall_32+0x33/0x70 [ 1775.590410][T28804] do_SYSENTER_32+0x1b/0x20 [ 1775.595133][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1775.601649][T28804] [ 1775.604145][T28804] Uninit was stored to memory at: [ 1775.609362][T28804] __get_compat_msghdr+0x514/0x750 [ 1775.614750][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1775.619764][T28804] ___sys_recvmsg+0x19d/0x890 [ 1775.624706][T28804] do_recvmmsg+0x63a/0x10a0 [ 1775.629340][T28804] __sys_recvmmsg+0x113/0x450 [ 1775.634248][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1775.640635][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1775.645892][T28804] do_fast_syscall_32+0x33/0x70 [ 1775.650868][T28804] do_SYSENTER_32+0x1b/0x20 [ 1775.655594][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1775.662202][T28804] [ 1775.664588][T28804] Uninit was stored to memory at: [ 1775.669797][T28804] __get_compat_msghdr+0x514/0x750 [ 1775.675175][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1775.680197][T28804] ___sys_recvmsg+0x19d/0x890 [ 1775.685101][T28804] do_recvmmsg+0x63a/0x10a0 [ 1775.689725][T28804] __sys_recvmmsg+0x113/0x450 [ 1775.694675][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1775.701062][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1775.706319][T28804] do_fast_syscall_32+0x33/0x70 [ 1775.711302][T28804] do_SYSENTER_32+0x1b/0x20 [ 1775.716040][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1775.722635][T28804] [ 1775.725023][T28804] Uninit was stored to memory at: [ 1775.730222][T28804] __get_compat_msghdr+0x514/0x750 [ 1775.735642][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1775.740676][T28804] ___sys_recvmsg+0x19d/0x890 [ 1775.745590][T28804] do_recvmmsg+0x63a/0x10a0 [ 1775.750257][T28804] __sys_recvmmsg+0x113/0x450 [ 1775.755155][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1775.761555][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1775.766817][T28804] do_fast_syscall_32+0x33/0x70 [ 1775.771900][T28804] do_SYSENTER_32+0x1b/0x20 [ 1775.776539][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1775.783159][T28804] [ 1775.785548][T28804] Uninit was stored to memory at: [ 1775.790884][T28804] __get_compat_msghdr+0x514/0x750 [ 1775.796252][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1775.801267][T28804] ___sys_recvmsg+0x19d/0x890 [ 1775.806171][T28804] do_recvmmsg+0x63a/0x10a0 [ 1775.810798][T28804] __sys_recvmmsg+0x113/0x450 [ 1775.815697][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1775.822183][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1775.827342][T28804] do_fast_syscall_32+0x33/0x70 [ 1775.832419][T28804] do_SYSENTER_32+0x1b/0x20 [ 1775.837045][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1775.843649][T28804] [ 1775.846045][T28804] Local variable msg_sys created at: [ 1775.851403][T28804] do_recvmmsg+0x5f/0x10a0 [ 1775.856032][T28804] __sys_recvmmsg+0x113/0x450 [ 1775.948111][T28804] not chained 1050000 origins [ 1775.953066][T28804] CPU: 1 PID: 28804 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1775.963718][T28804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1775.973888][T28804] Call Trace: [ 1775.977248][T28804] [ 1775.980254][T28804] dump_stack_lvl+0x1c8/0x256 [ 1775.985113][T28804] dump_stack+0x1a/0x1c [ 1775.989419][T28804] kmsan_internal_chain_origin+0x78/0x120 [ 1775.995294][T28804] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1776.001515][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1776.007917][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1776.013884][T28804] ? __get_compat_msghdr+0x5b/0x750 [ 1776.019253][T28804] ? get_compat_msghdr+0x8c/0x1c0 [ 1776.024448][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1776.030417][T28804] ? __get_compat_msghdr+0x5b/0x750 [ 1776.035787][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1776.041785][T28804] ? should_fail+0x3f/0x810 [ 1776.046432][T28804] ? __stack_depot_save+0x21/0x4b0 [ 1776.051686][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1776.058109][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1776.064070][T28804] __msan_chain_origin+0xbd/0x140 [ 1776.069235][T28804] __get_compat_msghdr+0x514/0x750 [ 1776.074541][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1776.079560][T28804] ? ___sys_recvmsg+0xa9/0x890 [ 1776.084444][T28804] ? do_recvmmsg+0x63a/0x10a0 [ 1776.089246][T28804] ___sys_recvmsg+0x19d/0x890 [ 1776.094060][T28804] ? __schedule+0x1609/0x21d0 00:39:35 executing program 3: socket(0xa, 0x0, 0x1000) 00:39:35 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) [ 1776.098877][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1776.104839][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1776.110797][T28804] do_recvmmsg+0x63a/0x10a0 [ 1776.115459][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1776.121868][T28804] ? __sys_recvmmsg+0x52/0x450 [ 1776.126760][T28804] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1776.133331][T28804] __sys_recvmmsg+0x113/0x450 [ 1776.138244][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1776.144644][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1776.149800][T28804] ? exit_to_user_mode_prepare+0x119/0x220 [ 1776.155763][T28804] do_fast_syscall_32+0x33/0x70 [ 1776.160750][T28804] do_SYSENTER_32+0x1b/0x20 [ 1776.165374][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1776.171877][T28804] RIP: 0023:0xf7f6e549 [ 1776.176031][T28804] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1776.195786][T28804] RSP: 002b:00000000f7f485cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1776.204326][T28804] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1776.212406][T28804] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1776.220480][T28804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1776.228546][T28804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1776.236614][T28804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1776.244709][T28804] [ 1776.253061][T28804] Uninit was stored to memory at: [ 1776.258294][T28804] __get_compat_msghdr+0x514/0x750 [ 1776.264070][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1776.269123][T28804] ___sys_recvmsg+0x19d/0x890 [ 1776.274039][T28804] do_recvmmsg+0x63a/0x10a0 [ 1776.278673][T28804] __sys_recvmmsg+0x113/0x450 [ 1776.283580][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1776.289960][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1776.295224][T28804] do_fast_syscall_32+0x33/0x70 [ 1776.300212][T28804] do_SYSENTER_32+0x1b/0x20 [ 1776.305134][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1776.311676][T28804] [ 1776.314157][T28804] Uninit was stored to memory at: [ 1776.319389][T28804] __get_compat_msghdr+0x514/0x750 [ 1776.324770][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1776.329795][T28804] ___sys_recvmsg+0x19d/0x890 [ 1776.334688][T28804] do_recvmmsg+0x63a/0x10a0 [ 1776.339313][T28804] __sys_recvmmsg+0x113/0x450 [ 1776.344225][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1776.350606][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1776.355873][T28804] do_fast_syscall_32+0x33/0x70 [ 1776.360854][T28804] do_SYSENTER_32+0x1b/0x20 [ 1776.365583][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1776.372186][T28804] [ 1776.374575][T28804] Uninit was stored to memory at: [ 1776.379779][T28804] __get_compat_msghdr+0x514/0x750 [ 1776.385155][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1776.390179][T28804] ___sys_recvmsg+0x19d/0x890 [ 1776.395092][T28804] do_recvmmsg+0x63a/0x10a0 [ 1776.399721][T28804] __sys_recvmmsg+0x113/0x450 [ 1776.404619][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1776.411019][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1776.416278][T28804] do_fast_syscall_32+0x33/0x70 [ 1776.422125][T28804] do_SYSENTER_32+0x1b/0x20 [ 1776.426758][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1776.433551][T28804] [ 1776.435952][T28804] Uninit was stored to memory at: [ 1776.441190][T28804] __get_compat_msghdr+0x514/0x750 [ 1776.446680][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1776.452004][T28804] ___sys_recvmsg+0x19d/0x890 [ 1776.456815][T28804] do_recvmmsg+0x63a/0x10a0 [ 1776.461446][T28804] __sys_recvmmsg+0x113/0x450 [ 1776.466359][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1776.472918][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1776.478085][T28804] do_fast_syscall_32+0x33/0x70 [ 1776.483174][T28804] do_SYSENTER_32+0x1b/0x20 [ 1776.487804][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1776.494415][T28804] [ 1776.496809][T28804] Uninit was stored to memory at: [ 1776.502117][T28804] __get_compat_msghdr+0x514/0x750 [ 1776.507408][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1776.512524][T28804] ___sys_recvmsg+0x19d/0x890 [ 1776.517325][T28804] do_recvmmsg+0x63a/0x10a0 [ 1776.522043][T28804] __sys_recvmmsg+0x113/0x450 [ 1776.526838][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1776.533337][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1776.538501][T28804] do_fast_syscall_32+0x33/0x70 [ 1776.543593][T28804] do_SYSENTER_32+0x1b/0x20 [ 1776.548216][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1776.554836][T28804] [ 1776.557236][T28804] Uninit was stored to memory at: [ 1776.562534][T28804] __get_compat_msghdr+0x514/0x750 [ 1776.567832][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1776.572976][T28804] ___sys_recvmsg+0x19d/0x890 [ 1776.577776][T28804] do_recvmmsg+0x63a/0x10a0 [ 1776.582510][T28804] __sys_recvmmsg+0x113/0x450 [ 1776.587335][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1776.593835][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1776.598996][T28804] do_fast_syscall_32+0x33/0x70 [ 1776.604069][T28804] do_SYSENTER_32+0x1b/0x20 [ 1776.608692][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1776.615311][T28804] [ 1776.617732][T28804] Uninit was stored to memory at: [ 1776.623045][T28804] __get_compat_msghdr+0x514/0x750 [ 1776.628324][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1776.633430][T28804] ___sys_recvmsg+0x19d/0x890 [ 1776.638232][T28804] do_recvmmsg+0x63a/0x10a0 [ 1776.642945][T28804] __sys_recvmmsg+0x113/0x450 [ 1776.647760][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1776.654266][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1776.659426][T28804] do_fast_syscall_32+0x33/0x70 [ 1776.664503][T28804] do_SYSENTER_32+0x1b/0x20 [ 1776.669126][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1776.675746][T28804] [ 1776.678141][T28804] Local variable msg_sys created at: [ 1776.683596][T28804] do_recvmmsg+0x5f/0x10a0 [ 1776.688146][T28804] __sys_recvmmsg+0x113/0x450 [ 1777.001985][T28804] not chained 1060000 origins [ 1777.006783][T28804] CPU: 1 PID: 28804 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1777.017360][T28804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1777.027470][T28804] Call Trace: [ 1777.030810][T28804] [ 1777.033803][T28804] dump_stack_lvl+0x1c8/0x256 [ 1777.038643][T28804] dump_stack+0x1a/0x1c [ 1777.042896][T28804] kmsan_internal_chain_origin+0x78/0x120 [ 1777.048715][T28804] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1777.054895][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1777.061281][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1777.067172][T28804] ? __get_compat_msghdr+0x5b/0x750 [ 1777.072508][T28804] ? get_compat_msghdr+0x8c/0x1c0 [ 1777.077622][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1777.083535][T28804] ? __get_compat_msghdr+0x5b/0x750 [ 1777.088837][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1777.094726][T28804] ? should_fail+0x3f/0x810 [ 1777.099321][T28804] ? __stack_depot_save+0x21/0x4b0 [ 1777.104545][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1777.110953][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1777.116891][T28804] __msan_chain_origin+0xbd/0x140 [ 1777.121997][T28804] __get_compat_msghdr+0x514/0x750 [ 1777.127235][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1777.132179][T28804] ? ___sys_recvmsg+0xa9/0x890 [ 1777.137027][T28804] ? do_recvmmsg+0x63a/0x10a0 [ 1777.141832][T28804] ___sys_recvmsg+0x19d/0x890 [ 1777.146586][T28804] ? _raw_spin_unlock+0x25/0x40 [ 1777.151521][T28804] ? __schedule+0x1035/0x21d0 [ 1777.156296][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1777.162239][T28804] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1777.168130][T28804] do_recvmmsg+0x63a/0x10a0 [ 1777.172713][T28804] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1777.179051][T28804] ? __sys_recvmmsg+0x52/0x450 [ 1777.183874][T28804] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1777.190379][T28804] __sys_recvmmsg+0x113/0x450 [ 1777.195139][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1777.201466][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1777.206575][T28804] ? exit_to_user_mode_prepare+0x119/0x220 [ 1777.212505][T28804] do_fast_syscall_32+0x33/0x70 [ 1777.217423][T28804] do_SYSENTER_32+0x1b/0x20 [ 1777.222002][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1777.228433][T28804] RIP: 0023:0xf7f6e549 [ 1777.232545][T28804] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1777.252353][T28804] RSP: 002b:00000000f7f485cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1777.260909][T28804] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1777.268986][T28804] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1777.277026][T28804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1777.285055][T28804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1777.293082][T28804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1777.301123][T28804] [ 1777.309159][T28804] Uninit was stored to memory at: [ 1777.314947][T28804] __get_compat_msghdr+0x514/0x750 [ 1777.320223][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1777.325349][T28804] ___sys_recvmsg+0x19d/0x890 [ 1777.330157][T28804] do_recvmmsg+0x63a/0x10a0 [ 1777.334906][T28804] __sys_recvmmsg+0x113/0x450 [ 1777.339724][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1777.346218][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1777.351373][T28804] do_fast_syscall_32+0x33/0x70 [ 1777.356437][T28804] do_SYSENTER_32+0x1b/0x20 [ 1777.361056][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1777.367658][T28804] [ 1777.370057][T28804] Uninit was stored to memory at: [ 1777.375351][T28804] __get_compat_msghdr+0x514/0x750 [ 1777.380617][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1777.385719][T28804] ___sys_recvmsg+0x19d/0x890 [ 1777.390516][T28804] do_recvmmsg+0x63a/0x10a0 [ 1777.395215][T28804] __sys_recvmmsg+0x113/0x450 [ 1777.400011][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1777.406484][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1777.411627][T28804] do_fast_syscall_32+0x33/0x70 [ 1777.416687][T28804] do_SYSENTER_32+0x1b/0x20 [ 1777.421328][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1777.427938][T28804] [ 1777.430324][T28804] Uninit was stored to memory at: [ 1777.435613][T28804] __get_compat_msghdr+0x514/0x750 [ 1777.440886][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1777.445981][T28804] ___sys_recvmsg+0x19d/0x890 [ 1777.450780][T28804] do_recvmmsg+0x63a/0x10a0 [ 1777.455495][T28804] __sys_recvmmsg+0x113/0x450 [ 1777.460294][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1777.466778][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1777.472013][T28804] do_fast_syscall_32+0x33/0x70 [ 1777.476980][T28804] do_SYSENTER_32+0x1b/0x20 [ 1777.481597][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1777.488194][T28804] [ 1777.490575][T28804] Uninit was stored to memory at: [ 1777.495895][T28804] __get_compat_msghdr+0x514/0x750 [ 1777.501184][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1777.506282][T28804] ___sys_recvmsg+0x19d/0x890 [ 1777.511075][T28804] do_recvmmsg+0x63a/0x10a0 [ 1777.515790][T28804] __sys_recvmmsg+0x113/0x450 [ 1777.520581][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1777.527069][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1777.532300][T28804] do_fast_syscall_32+0x33/0x70 [ 1777.537265][T28804] do_SYSENTER_32+0x1b/0x20 [ 1777.541970][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1777.548471][T28804] [ 1777.550851][T28804] Uninit was stored to memory at: [ 1777.556143][T28804] __get_compat_msghdr+0x514/0x750 [ 1777.561412][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1777.566507][T28804] ___sys_recvmsg+0x19d/0x890 [ 1777.571301][T28804] do_recvmmsg+0x63a/0x10a0 [ 1777.576009][T28804] __sys_recvmmsg+0x113/0x450 [ 1777.580820][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1777.587284][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1777.592546][T28804] do_fast_syscall_32+0x33/0x70 [ 1777.597532][T28804] do_SYSENTER_32+0x1b/0x20 [ 1777.602251][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1777.608792][T28804] [ 1777.611180][T28804] Uninit was stored to memory at: [ 1777.616555][T28804] __get_compat_msghdr+0x514/0x750 [ 1777.621931][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1777.626940][T28804] ___sys_recvmsg+0x19d/0x890 [ 1777.631854][T28804] do_recvmmsg+0x63a/0x10a0 [ 1777.636490][T28804] __sys_recvmmsg+0x113/0x450 [ 1777.641294][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1777.647886][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1777.653130][T28804] do_fast_syscall_32+0x33/0x70 [ 1777.658103][T28804] do_SYSENTER_32+0x1b/0x20 [ 1777.662826][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1777.669341][T28804] [ 1777.671846][T28804] Uninit was stored to memory at: [ 1777.677070][T28804] __get_compat_msghdr+0x514/0x750 [ 1777.682444][T28804] get_compat_msghdr+0x8c/0x1c0 [ 1777.687454][T28804] ___sys_recvmsg+0x19d/0x890 [ 1777.692344][T28804] do_recvmmsg+0x63a/0x10a0 [ 1777.696961][T28804] __sys_recvmmsg+0x113/0x450 [ 1777.701856][T28804] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1777.708268][T28804] __do_fast_syscall_32+0x87/0xe0 [ 1777.713502][T28804] do_fast_syscall_32+0x33/0x70 [ 1777.718477][T28804] do_SYSENTER_32+0x1b/0x20 [ 1777.723196][T28804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1777.729702][T28804] [ 1777.732182][T28804] Local variable msg_sys created at: [ 1777.737534][T28804] do_recvmmsg+0x5f/0x10a0 [ 1777.742150][T28804] __sys_recvmmsg+0x113/0x450 00:39:36 executing program 2: r0 = socket(0x28, 0x1, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 00:39:36 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:39:36 executing program 4: prctl$PR_MCE_KILL(0x4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:39:36 executing program 1: r0 = socket(0x11, 0x2, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 00:39:36 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) 00:39:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000f83dc"], &(0x7f0000000040)=""/242, 0x2a, 0xf2, 0x1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x890c, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 00:39:37 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) 00:39:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev}]}, 0x1c}}, 0x0) 00:39:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), 0x4) 00:39:37 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x0, 0x7}}) [ 1778.352283][T12604] usb 6-1: new high-speed USB device number 73 using dummy_hcd 00:39:37 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "803df1ac51f3431c3044edc52ccc9487f750db7759002ff48e31b684af4f51d96c046d6f6815ab833144753a5d7f45b2f83a01a4142a2b3ceb46cf4bc7840280"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x15, r0, 0xffffffffffffffff, 0x0) [ 1778.593036][T12604] usb 6-1: Using ep0 maxpacket: 8 00:39:37 executing program 0: add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) 00:39:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0xdb3ac489f89d73ab, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) [ 1778.712621][T12604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1778.723968][T12604] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1778.733386][T12604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.837178][T12604] usb 6-1: config 0 descriptor?? 00:39:40 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:39:40 executing program 3: socketpair(0x10, 0x3, 0xd, &(0x7f0000000000)) 00:39:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = dup2(r0, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x88) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2284, &(0x7f0000000000)) 00:39:40 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 00:39:40 executing program 0: add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) 00:39:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0xdb3ac489f89d73ab, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) [ 1781.036111][T12604] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1781.089544][T12604] usb 6-1: USB disconnect, device number 73 [ 1781.189295][T12604] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:39:40 executing program 0: add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) 00:39:40 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 00:39:40 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000100)='logon\x00', &(0x7f00000000c0)='][\x00') 00:39:40 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$chown(0x3, r0, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, r1, 0x0, 0x0) 00:39:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8943, &(0x7f0000000280)={'gre0\x00', 0x0}) 00:39:40 executing program 1: mbind(&(0x7f0000fff000/0x1000)=nil, 0x5300, 0x3, &(0x7f0000000000)=0xb43, 0x14e2, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 1781.873257][T12604] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1782.112304][T12604] usb 6-1: Using ep0 maxpacket: 8 [ 1782.241259][T12604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1782.252870][T12604] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1782.265713][T12604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.387095][T12604] usb 6-1: config 0 descriptor?? 00:39:43 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:39:43 executing program 2: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='&!!%!&\x00') mlock2(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0) 00:39:43 executing program 4: clock_adjtime(0x0, &(0x7f0000000000)={0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) 00:39:43 executing program 0: syz_open_dev$vcsa(&(0x7f0000000080), 0x5, 0x107540) 00:39:43 executing program 3: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6000002) 00:39:43 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$unlink(0x9, r2, r1) [ 1784.443867][T12604] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1784.585233][T12604] usb 6-1: USB disconnect, device number 74 00:39:43 executing program 0: setresuid(0xee01, 0xee01, 0xee00) r0 = semget(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, 0x0) [ 1784.635447][T12604] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:39:43 executing program 3: setresuid(0xee01, 0xee01, 0xee00) r0 = semget(0x0, 0x2, 0x80) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000000)={{0x2, 0xee01, 0x0, 0xee01, 0x0, 0xa8, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 00:39:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080), 0xfffffffffffffed0) 00:39:43 executing program 4: setresuid(0xee01, 0xee01, 0xee00) r0 = semget(0x1, 0x0, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, 0x0) 00:39:43 executing program 1: setresuid(0xee01, 0xee01, 0xee00) syz_clone(0x88002400, 0x0, 0x0, 0x0, 0x0, 0x0) 00:39:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = dup2(r0, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x88) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2271, &(0x7f0000000000)) [ 1785.262609][T12604] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1785.502391][T12604] usb 6-1: Using ep0 maxpacket: 8 [ 1785.642828][T12604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1785.654077][T12604] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1785.663402][T12604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.679936][T12604] usb 6-1: config 0 descriptor?? [ 1785.951256][T12604] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 00:39:46 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:39:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xfffffffffffffffe, 0x4) 00:39:46 executing program 2: syz_emit_ethernet(0x2b, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0xfffe, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @echo={0x8, 0x0, 0x0, 0x0, 0x0, '.'}}}}}, 0x0) 00:39:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 00:39:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6cb, &(0x7f0000000040), 0x4) 00:39:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x2c}}, 0x0) [ 1787.827268][ T9946] usb 6-1: USB disconnect, device number 75 [ 1787.919288][ T9946] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:39:47 executing program 1: syz_emit_ethernet(0x67, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local, {[@rr={0x7, 0x8}]}}, @echo={0x8, 0x0, 0x0, 0x0, 0x0, "2ecd78615a590d4922308ea3f1e6213113781f9945f3cce3a151ccf1f7084a96d6e04bad9c97edced1cea04bd181cb6dbf308db3f84d21ec3c"}}}}}, 0x0) 00:39:47 executing program 4: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @random="c3caa2c4d548", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "d0b7ca", 0x8, 0x0, 0x0, @dev, @remote, {[@fragment={0x3c, 0x0, 0xbd}]}}}}}, 0x0) 00:39:47 executing program 0: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x19, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x158, 0x370, 0x370, 0x0, 0x2b0, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'veth0_to_team\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'wg1\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 00:39:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, r1, 0x301}, 0x14}}, 0x0) 00:39:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0xfffff635, 0x4) 00:39:47 executing program 4: syz_emit_ethernet(0xfc0, &(0x7f0000000540)={@broadcast, @empty, @val={@void}, {@mpls_uc={0x8847, {[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xfae, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @loopback}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}}}, 0x0) [ 1788.527631][ T9946] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1788.773197][ T9946] usb 6-1: Using ep0 maxpacket: 8 [ 1788.923274][ T9946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1788.935039][ T9946] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1788.944405][ T9946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.968612][ T9946] usb 6-1: config 0 descriptor?? [ 1789.246703][ T9946] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 00:39:50 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:39:50 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000140)={@broadcast, @random="c3caa2c4d548", @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "d51f9b", 0x10, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "50d8b2", 0x0, "4957bd"}}}}}}}, 0x0) 00:39:50 executing program 3: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1600bd80, 0x0, 0x0) 00:39:50 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0}}], 0x2, 0x0) 00:39:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), r0) 00:39:50 executing program 4: syz_emit_ethernet(0x67, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local, {[@rr={0x7, 0x3, 0x2c}]}}, @echo={0x8, 0x0, 0x0, 0x0, 0x0, "2ecd78615a590d4922308ea3f1e6213113781f9945f3cce3a151ccf1f7084a96d6e04bad9c97edced1cea04bd181cb6dbf308db3f84d21ec3c"}}}}}, 0x0) [ 1791.187134][ T9946] usb 6-1: USB disconnect, device number 76 [ 1791.252838][ T9946] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:39:50 executing program 2: syz_emit_ethernet(0x2e, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local, {[@rr={0x8, 0x3}]}}, @echo}}}}, 0x0) 00:39:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x301}, 0x14}}, 0x0) 00:39:50 executing program 3: mq_open(&(0x7f0000000080)='sit0\x00', 0x0, 0x88, &(0x7f0000000100)) 00:39:50 executing program 4: mq_open(&(0x7f00000000c0)='sit0\x00', 0x0, 0x185, 0x0) 00:39:50 executing program 0: pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r0, 0x0, 0x20) 00:39:50 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x82]}, 0x8) write$cgroup_type(r0, &(0x7f00000001c0), 0x9) r1 = mq_open(&(0x7f0000000080)='\x00\x00\x02\x00\x00', 0x2, 0x179, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000200)={0x7, 0xffffffffffffff2d, 0x20}) mq_open(&(0x7f0000000000)='\x8e\x00', 0x43, 0x8, &(0x7f0000000040)={0x10000000000004, 0x3, 0x80000000, 0x41}) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x3, 0x0, 0x1, "2285a92c955ea5b1cbc42cafec68c4bc1b0c67a6b9d3aacefaca6aa6fce8d412196fad1719fcd33eff7bf44fba088c077aada87f5d615e92ff409818a6fb13989fc734a19347d4c16a18dc16bd5f293685ad53e17a9425d7faabc416878a1e98f38af7c050fe680a5b4e951f7f9aa13807c81ed4c96095e165d0b83637e88dbedf6dc3fc51156cd25ed78abbfe4fa7230723aa4d"}, 0xa4) [ 1791.922403][ T9946] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1792.162673][ T9946] usb 6-1: Using ep0 maxpacket: 8 [ 1792.295342][ T9946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1792.306654][ T9946] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1792.316049][ T9946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.329679][ T9946] usb 6-1: config 0 descriptor?? [ 1792.616529][ T9946] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 00:39:53 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:39:53 executing program 1: pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_type(r0, 0xffffffffffffffff, 0x0) 00:39:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0x1}, @exp_fastopen={0xfe, 0x20, 0xf989, "5ab971d14f73e13277c892c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f0a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @remote}]}}}}}}}}, 0x0) 00:39:53 executing program 0: mq_open(&(0x7f0000000200)='sit0\x00\x1f\xc1 \xf2\x97\xbbb\xebz8\xf6\xa2\xf5\xfb\xf8 \x87C\xf8\"2n\xa8\xee\x91\xda62\xf0\"\xf1THI\x92\x99\xc33\x18q\x9d\xc9\r\xef\x1d\xac\xcb\xb7\x99\xb8\x94\xc5\xb9\xabd\xff\xe9\xd5\x9b\x1d\x981\xdd7_\xde8\xd3\xaeW[$\xea\xb0B\x1f\x9c\xba\\*\xd2\x02\x00\x00\x00?\x03\x00 \x00\x00\x00\x00\x00\xfaLEu\xa6\x14\x89\xdc0.\xdf0r\xf1\xed\xd5\xdaB\x90\x9a\xfc\xb2\x92\xba\x0f\xe4\x8ew%\xa6\x88\x8e\xd5\xaaM\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\xa3U1\xfb\xf6\xe0\xb4\xd8E\xf4&\x8f\xef\xac\xfe\xef({kPQ$y{\x93\ahp\t\xe4Z7\xcbY\xdey\xa8d\x14\xc4\x96\xbe\xac\xf9E\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\x12-\x1dj\x9d\xc3\x89X\xdei9\xb0\xb9\xb8\xdfv\'c\xaf\x02\x1e%\x8bv{\x19{\xf9\xf0\xb5\xaf&\xc0\xea\xea\x0f\x12\xd2.\xdcE\xe7\xa9D\xa4(FA\xd4\xfe\n\xec\x1dh\xa2E\xff\xc6!\xb2Z\xdc\xc5\xee,\xca\xa2\x01\x8f\x89\xa7\xd4\xa37\xe7\x06q|\xddJ1\xcc\r\xa0\xc0\n\xa4Q\x03\xeb\x9e@r\"MU@^\x87y\xa1H`\xd8\xed\'\xf18\x0e\x91@l\xd5\x87\xee,\x179\xcd9\xb4x\xd8\xa8\x16R$\v\xfb\x89\xdel!K\x1fN&\x06\xd7\x90\xb7\x80\xfbG\x89\x88\x89x\xfb\x03\xe1\xcc_\x98~lZ\xb5k\xb2\xee8R\xa6I\xd8\x13\x8cU:HE\xcf\x895\x9b#\xac-\x19\x8b\x03\xddmV\x13\xa7\'%\xb2\x12;g\x90\x85\xf28E\x04\xd0\x8e,*\t\xc5\x04`\x02*go\xb0\xad\x8d\xb4\xfbr;\xda\x812\x18Ct\xf8\xf6\x99\xbce\x1e+ \xe2\xf1\xd2\xb3C\xf2\x894k\xa5k\xec*e&\xb7\xb14Vg\xe3\xde\xd0/\xed]\x03L\x98\xea$Rh\x06v\x99o\x14\xe58\xb7\xc4\xfcJeUz\xbd\xb9\x0f\x97y\xd3Y\x98\xbd\x00', 0x800, 0x0, 0x0) 00:39:53 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000000080)=""/183, 0xb7) 00:39:53 executing program 4: r0 = mq_open(&(0x7f0000000000)='\'\x00', 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) [ 1794.499198][T12604] usb 6-1: USB disconnect, device number 77 [ 1794.575311][T12604] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:39:53 executing program 1: r0 = mq_open(&(0x7f0000000000)='\'\x00', 0x0, 0x0, 0x0) flock(r0, 0x8) 00:39:53 executing program 0: r0 = mq_open(&(0x7f00000000c0)='sit0\x00', 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000002780)) 00:39:53 executing program 4: mq_open(&(0x7f0000000200)='sit0\x00\x1f\xc1 \xf2\x97\xbb?\xebz8\xf6\xa2\xf5\xfb\xf8 \x87C\xf8\"2n\xa8\xee\x91\xda62\xf0L\xe8THI\x92\x99\xc33\x18q\x9d\xc9\r\xef\x1d\xac\xcb\xb7\x99\xb8\x94\xc5\xb9\xabd\xff\xe9\xd5\x9b\x1d\x8f1\xdd7_\xde8\xd3\xae\x9eBR\xbbU\x99\x11]N\xe2-\xfd\xb0\xd3W[$\xea\xb0B\x1f\x9c\xba\\*\xd2\x02\x00\x00\x00?\x03\x00 \x00\x00\x00\x00\x00\xfaLEu\xa6\x14\x89\xdc0.\xdf0r\xf1\xed\xd5\xdaB\x90\x9a\xfc\xb2\x92\xba\x0f\xe4\x8ew%\xa6\x88\x8e\xd5\xaaM\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\xa3U1\xfb\xf6\xe0\xb4\xd8E\xf4\x06\x00\x00\x00\xfe\xef({kPQ$y{\x93\ahp\t\xe4Z7\xcbY\xdey\xa8d\x14\xc4\x96\xbe\xac\xf9E\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\x12-\x1dj\x9d\xc3\x89X\xdei9\xb0\xb9\xb8\xdfv\'c\xaf\x02\x1e%\x8bv{\x19{\xf9\xf0\xb5\xaf&\xc0\xea\xea\x0f\x12\xd2.\xdcE\xe7\xa9D\xa4(FA\xd4\xfe\n\xec\x1dh\xa2E\xff\xc6!\xb2Z\xdc\xc5\xee,\xca\xa2\x01\x8f\x89\xa7\xd4\xa37\xe7\x06q|\xddJ1\xcc\r^\xf5\xc9z\x89\xb8\xf6\xa0\xc0\n\xa4Q\x03\xeb\x9e@r\"MU@^\x87y\xa1H`\xd8\xed\'\xf18\x0e\x91@l\xd5\x87\xee,\x179\xcd9\xb4x\xd8\xa8\x16R$\v\xfb\x89\xdel!K\x1fN&\x06\xd7\x90\xb7\x80\xfbG\x89\x88\x89x\xfb\x03\xe1\xcc_\x98~lZ\xb5k\xb2\xee8R\xa6I\xd8\x13\x8cU:HE\xcf\x895\x9b#\xac-\x19\x8b\x03\xddmV\x13\xa7\'%\xb2\x12;g\x90\x85\xf28E\x04\xd0\x8e,*\t\xc5\x04`\x02*go\xb0\xad\x8d\xb4\xfbr;\xda\x812\x18Ct\xf8\xf6\x99\xbce\x1e+ \xe2\xf1\xd2\xb3C\xf2\x894k\xa5k\xec*e&\xb7\xb14Vg\xe3\xde\xd0/\xed]\x03L\x98\xea$Rh\x06v\x99o\x14\xe58\xb7\xc4\xfcJeUz\xbd\xb9\x0f\x97y\xd3Y\x98\xbd\x00', 0x2, 0x4d, 0x0) 00:39:53 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f00000003c0)=@framed={{}, [@alu={0x7, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:39:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f00000003c0)=@framed={{}, [@alu={0x5, 0x0, 0x2}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:39:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x894c, 0x0) [ 1795.231998][T16220] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1795.482476][T16220] usb 6-1: Using ep0 maxpacket: 8 [ 1795.643927][T16220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1795.655265][T16220] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1795.664804][T16220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.714064][T16220] usb 6-1: config 0 descriptor?? [ 1795.981915][T16220] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 00:39:57 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:39:57 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000400)="eb", 0x1}], 0x1}, 0x0) 00:39:57 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0}}, 0x10) 00:39:57 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) write$cgroup_type(r0, 0x0, 0x0) 00:39:57 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa8840, 0x0) 00:39:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4020940d, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 1797.906922][T12604] usb 6-1: USB disconnect, device number 78 [ 1797.931418][T12604] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:39:57 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)={&(0x7f0000000380)='./file0/file0\x00', r0}, 0x10) 00:39:57 executing program 4: socketpair(0x1, 0x801, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x4}, 0x0) 00:39:57 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={0xffffffffffffffff, 0x10, 0x1, 0x0, 0x0}, 0x20) 00:39:57 executing program 0: socketpair(0x1, 0x801, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000540)=r0, 0x4) 00:39:57 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x11, 0x3, &(0x7f0000000d40)=@framed, &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0}, 0x38) 00:39:57 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018190000", @ANYRES32=0x1, @ANYBLOB="000007000000001095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1798.656765][T12604] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1798.902233][T12604] usb 6-1: Using ep0 maxpacket: 8 [ 1799.025322][T12604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1799.036843][T12604] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1799.046264][T12604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.082798][T12604] usb 6-1: config 0 descriptor?? [ 1799.348750][T12604] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 00:40:00 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 00:40:00 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x0, 0x38}, 0xc) 00:40:00 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x1a, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x3000000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:40:00 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80) 00:40:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) close(r0) 00:40:00 executing program 2: bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r0, 0x4) [ 1801.378909][T12604] usb 6-1: USB disconnect, device number 79 [ 1801.420534][T12604] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:40:00 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018190000", @ANYRES32=0x1, @ANYBLOB="d20300000000001095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:40:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x0, 0x0, 0x0, 0x2}, 0x48) 00:40:00 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a000000000704eb3014cd3ec8a755c1e1380081ffad000000e8d5000000010000001400000500242909880bd320d98a61a90021c9bf", 0x0, 0x401}, 0x28) 00:40:00 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x2, 0x7}, 0x10) 00:40:00 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xe5, &(0x7f0000000100)=""/229, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:40:01 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000000540)="b9", 0x1, 0x0, &(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c) [ 1802.172754][T12604] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1802.412349][T12604] usb 6-1: Using ep0 maxpacket: 8 [ 1802.565692][T12604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1802.577287][T12604] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1802.586653][T12604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.598486][T12604] usb 6-1: config 0 descriptor?? [ 1802.879960][T12604] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 00:40:03 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/74, 0x4a) 00:40:03 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x25, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r2}, 0x10) 00:40:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0xf1, 0x8, 0x101, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 00:40:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}, 0x0) 00:40:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:40:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x3, 0x800, 0x312}, 0x48) [ 1804.716790][T16220] usb 6-1: USB disconnect, device number 80 [ 1804.733518][T16220] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:40:04 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000400)={@bcast, @bcast}) 00:40:04 executing program 4: syz_emit_ethernet(0x7bf, &(0x7f0000000380)={@broadcast, @empty, @val, {@ipv6}}, 0x0) 00:40:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001440)=[{{&(0x7f0000000000)={0xa, 0x4c24, 0x0, @mcast2={0xff, 0x4}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="366522bc58ccd535828e14038180b6c9223b3180b1f1e245c6dff1c7d7", 0x1d}, {&(0x7f00000000c0)="6c329699565de3602fc7bace6d1b4d", 0xf}, {&(0x7f0000000100)="89d036851ea2808c36c7bb7072d4390fe46a8e56e2fcf53cd055584dee95aabb251b13368af5245814e73e97ddac5d26029d88b218e05dc61f659b422d0631395121920925", 0x45}, {&(0x7f00000001c0)="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", 0x53c}], 0x4}}], 0x2, 0x2000c003) 00:40:04 executing program 2: socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 00:40:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_newnexthop={0x1c, 0x68, 0x205, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 00:40:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000280)={0x0, 0x220}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x0) [ 1805.508113][ T9946] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1805.765995][ T9946] usb 6-1: Using ep0 maxpacket: 8 [ 1805.885865][ T9946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1805.897121][ T9946] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1805.906503][ T9946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.929770][ T9946] usb 6-1: config 0 descriptor?? [ 1806.196786][ T9946] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 00:40:07 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/74, 0x4a) 00:40:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000004340), 0x4) 00:40:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, 0x0, 0x0) 00:40:07 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r0, &(0x7f0000000100)="96", 0x1, 0x0, 0x0, 0x0) 00:40:07 executing program 2: utimensat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) 00:40:07 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @random="1714ea22f6b1", @val, {@ipv4}}, 0x0) [ 1808.247758][T12604] usb 6-1: USB disconnect, device number 81 [ 1808.305398][T12604] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:40:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) 00:40:07 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:40:07 executing program 0: clock_getres(0x3, &(0x7f0000000240)) 00:40:07 executing program 3: add_key$keyring(&(0x7f0000000a00), 0x0, 0x0, 0x0, 0xfffffffffffffffa) 00:40:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000480)=""/4096, 0x31, 0x1000, 0x1}, 0x20) 00:40:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x89a1, &(0x7f0000000280)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}) [ 1808.924154][T12604] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1809.172262][T12604] usb 6-1: Using ep0 maxpacket: 8 [ 1809.297407][T12604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1809.308759][T12604] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1809.318241][T12604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.332976][T12604] usb 6-1: config 0 descriptor?? [ 1809.611393][T12604] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1810.352934][ T1192] ieee802154 phy0 wpan0: encryption failed: -22 [ 1811.496073][ T9946] usb 6-1: USB disconnect, device number 82 [ 1811.509927][ T9946] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:40:11 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/74, 0x4a) 00:40:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@private1, 0x0, r1}) 00:40:11 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@private0, @empty, @private1}) 00:40:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000280)={0xa, 0x4e21, 0x0, @private0}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="b8000000000000002900000039000000111402ec00000000fe8000000000000000000000000000abfe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000ffffe0000002fe880000000000000000000000000001fc020000000000000000000000000000fc000000000000000000000000000001fe8000000000000000000000000000bbfe80000000000000000000000000000efe880000000000000000000000000001180000000000000029000000360000002c000000000000002800000000000000290000003700000016010000000000000101000103000000c2040000000200002400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="000000001400000000000000290000003e000000940b00000000000014000000000000002900000034000000910000000000000014"], 0x168}}], 0x2, 0x0) 00:40:11 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, 0x0) pipe2$watch_queue(0x0, 0x80) 00:40:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000140)="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", 0x108) 00:40:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000240)) 00:40:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000004c0)={@empty}, 0x14) 00:40:11 executing program 1: sendto(0xffffffffffffffff, &(0x7f0000000400)="b7d9915e0c76d1256532e6742e3690f45fb57a2b2a7683bd2de950262689ce86d1e77cd57ff38141c78305c6f4d80051c741550eba7395d5299f7963c3f98ab32604c1f66ca04eff1872e8c8252be574892d5dd9809ec5cd4b9141880634f262c81ada1d386b292faab6ef34", 0x6c, 0x4000004, &(0x7f0000000480)=@can, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000200)=0xf2, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x3, @loopback}}, 0x0, 0x6, 0x2d, 0x0, "000000000000000000000000000000000000014d1700000000009a000000000000000000000000010400000000000000000000000000000000000000fbe16f66fac112bf00f803bb3e5e0b088a00"}, 0xd8) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) r2 = socket(0xa, 0x802, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c746572000016000000000200f900000010000000000000003f0e0000e1b88e46aec723a2777fb36bf596156f6f19ed7cf559ec02d2530a7c8d4ad118a6685b751bd1652cf25f5be44024f96183dbbd822294c175006bead3844c999200caebf05d0cf70e00006caf07bf801884da00002040000000000000002554eda1a96c551e8ab7a4ce9096831a00c5f6d4f10b365aa92ba5658a44ca2d5d688d96e338afa0169af057e0233efbbbdf81321c1c3d3ac439248460f0e4b6a115525dc825997f9f3c9d8f1787ab559b4e161200ba160bb4624886c3cf42b49e4de56f8a8c92998e7281abe247fc3060852a9df4349e31947a295b22981c9afeb62db8cbfc02b2c613f4bc87"], &(0x7f0000000040)=0x63) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000680)=[@timestamp, @timestamp, @mss={0x2, 0x9}, @window={0x3, 0xffff, 0xf801}, @timestamp, @sack_perm, @mss={0x2, 0x75e5}, @mss, @window={0x3, 0x9, 0x7}, @sack_perm, @mss={0x2, 0xa6}, @sack_perm, @timestamp], 0xd) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x3, 0x7fffffdd}, 0x14) shutdown(r1, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000500)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 00:40:11 executing program 4: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0x16, 0x0, 0x400000, 0x2}, 0x48) 00:40:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000280)={0xa, 0x4e21, 0x0, @private0}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x168}}], 0x2, 0x0) 00:40:11 executing program 0: bpf$BPF_BTF_LOAD(0x10, &(0x7f0000001500)={0x0, &(0x7f0000001400)=""/213, 0x0, 0xd5}, 0x20) [ 1812.632007][T12604] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1812.882270][T12604] usb 6-1: Using ep0 maxpacket: 8 [ 1813.002948][T12604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1813.014285][T12604] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1813.024788][T12604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.070674][T12604] usb 6-1: config 0 descriptor?? [ 1813.330800][T12604] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1815.217451][ T9946] usb 6-1: USB disconnect, device number 83 [ 1815.248935][ T9946] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:40:14 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 00:40:14 executing program 1: r0 = getpgid(0x0) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x5, 0xffffffffffffffff, 0x0) 00:40:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005980)=[{{&(0x7f0000000280)={0xa, 0x4e21, 0x0, @private0}, 0x1c, 0x0}}], 0x1, 0x80fe) 00:40:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000004800006000000060"], &(0x7f0000000280)=""/151, 0x7e, 0x97, 0x1}, 0x20) 00:40:14 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) r1 = socket$nl_route(0x10, 0x3, 0x0) getpgrp(0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000e00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x16300000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000800)=@bridge_getneigh={0x20, 0x1e, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x12}}, 0x20}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000f40), 0x800c0, 0x0) 00:40:14 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/loop', 0x324200, 0x0) 00:40:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close(r0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x6, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x6, 0x7e, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r4}) 00:40:15 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) 00:40:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:40:15 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x541b, 0x0) 00:40:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4f0, 0x260, 0x260, 0xffffffff, 0x260, 0x148, 0x448, 0x448, 0xffffffff, 0x448, 0x448, 0x5, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@unspec=@mark={{0x30}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@empty, @port, @icmp_id}}}, {{@ipv6={@mcast1, @loopback, [], [], 'veth0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv4, @gre_key, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) [ 1816.372546][ T9946] usb 6-1: new high-speed USB device number 84 using dummy_hcd 00:40:15 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1816.632969][ T9946] usb 6-1: Using ep0 maxpacket: 8 [ 1816.754248][ T9946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1816.769935][ T9946] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1816.779718][ T9946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.810804][ T9946] usb 6-1: config 0 descriptor?? [ 1817.067062][ T9946] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 00:40:18 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000001800)=[{&(0x7f00000005c0)=""/120, 0x78}], 0x1, 0x0, 0x0) 00:40:18 executing program 2: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000240)) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x107400, 0x0) 00:40:18 executing program 4: syz_emit_ethernet(0x7e, &(0x7f00000047c0)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @dev}}}}}, 0x0) 00:40:18 executing program 3: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x3011, 0xffffffffffffffff, 0x0) 00:40:18 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, 0x0) 00:40:18 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) [ 1819.057021][ T9946] usb 6-1: USB disconnect, device number 84 [ 1819.114152][ T9946] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:40:18 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x10) 00:40:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x2400, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) 00:40:18 executing program 2: unshare(0x400) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8980, 0x0) 00:40:18 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000001800)=[{&(0x7f00000005c0)=""/120, 0x78}], 0x1, 0x0, 0x0) 00:40:18 executing program 4: r0 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000000)='cgroup\x00', &(0x7f0000000140)='\xb3\x83b\xe9\xe7\xfb\x85\xa3\xfc\xbbN&>H\xc1\xea\xa8a\r\xc7\xf6BP\x87\x94\'\"\x01\xdc\xb1\x90\xc7\xae\xb9.\xa2ftZ)\x12\xa2\xd9c\x84\x8ep\xd86.\x11\xca\xad\b\xb3\xc6\xde#q\xfaK\xbf-\x02\x84\x1e\xc1\xd1\xc6\x8do\x80F\xfc3\xa8z4\xd4_[s\x99\xf0\x7f\xc3F5\xcb\xab5\xc8\x02\f\xf9R7\xdb\x81\x16\xdc,\xec\xd8\xc0\x8el\x97\xda\xb5\xc2\x91\xb2\xd9d\xad\x02\xa1\x0eY\x1bY\x03+\xa5\xedJ\xbb\xa0\"\xad:@\xd7\xd2\x1e\x9c\xdd\xab\xa0fD\x9a\xdfn\xfd\xd4?\x86\xa6\r=\xba\x86\xa4%\xf4\x87sXO\xd4n\x1c\x83\x03\xfe\x11@\xe6<\xcd\xec\xaeE\xcd):\xb6Oo\x8c\x0far\x191\x9eu\\D\xab\x19\xe9\x1e\x8bMM;\xfa\xda\x107\xf3\xcfBIK\x8d\"\xd8+\xdclW\xea\xab\xbe\x14\xb1\xff3#\xb6\x96\xc0\x98E{\x96\x13\x8c\xbej\xde\x98%\x13m\xc5\xe9\xf5\xb1H\xcdr9\xec\x04`\xb7\x06\xc7\xd1\x14\xdc\xed<\xb3\v\x00'/275, 0x0) 00:40:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x2ffc, &(0x7f0000000000)=0x0) ftruncate(r1, 0x48280) io_submit(r2, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="d71c4aee53f8dbe76d2bc0b4bed69d34955776d5b37a48f9ea1425198acccae842b2b7721453faa3cbcaa8f54378cd0d5bbed8356d44e1596216eec96df557e54ab936fcd2cc34477c", 0x49}, {&(0x7f0000000640)="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", 0xfb8}, {0x0}], 0x3) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r3, r1, 0x0) 00:40:18 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000001800)=[{&(0x7f00000005c0)=""/120, 0x78}], 0x1, 0x0, 0x0) [ 1819.792949][ T9946] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1820.046771][ T9946] usb 6-1: Using ep0 maxpacket: 8 [ 1820.188166][ T9946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1820.199672][ T9946] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1820.209840][ T9946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.272711][ T9946] usb 6-1: config 0 descriptor?? [ 1820.538815][ T9946] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 00:40:21 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) 00:40:21 executing program 1: syz_emit_ethernet(0x38, &(0x7f0000000280)={@random="8bb60cf2e7ed", @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "742e14", 0x2, 0x0, 0x0, @mcast1, @local, {[], "048a"}}}}}, 0x0) 00:40:21 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffbb, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 00:40:21 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x245, 0x0) 00:40:21 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000001800)=[{&(0x7f00000005c0)=""/120, 0x78}], 0x1, 0x0, 0x0) 00:40:21 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xf1, 0x99, 0x99, 0x10, 0x7b8, 0x200c, 0x2100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbb, 0x9, 0x61}}]}}]}}, 0x0) [ 1822.526317][T12604] usb 6-1: USB disconnect, device number 85 [ 1822.586245][T12604] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:40:21 executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x82001, 0x0) 00:40:21 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f00000005c0)=""/120, 0x78}], 0x1, 0x0, 0x0) 00:40:21 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000080)=""/112, 0x200000f0) 00:40:21 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x80001, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f00000009c0)) [ 1822.843942][T21577] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1823.092128][T21577] usb 4-1: Using ep0 maxpacket: 16 00:40:22 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f00000005c0)=""/120, 0x78}], 0x1, 0x0, 0x0) 00:40:22 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000080)=""/112, 0x200000f0) [ 1823.213186][T12604] usb 6-1: new high-speed USB device number 86 using dummy_hcd 00:40:22 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0xc0045878, 0x0) 00:40:22 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0xebff}, 0x80) [ 1823.382591][T21577] usb 4-1: New USB device found, idVendor=07b8, idProduct=200c, bcdDevice=21.00 [ 1823.392747][T21577] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.400959][T21577] usb 4-1: Product: syz [ 1823.405481][T21577] usb 4-1: Manufacturer: syz [ 1823.410242][T21577] usb 4-1: SerialNumber: syz [ 1823.462939][T12604] usb 6-1: Using ep0 maxpacket: 8 [ 1823.542403][T21577] usb 4-1: config 0 descriptor?? [ 1823.594022][T12604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1823.605798][T12604] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1823.615485][T12604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.739315][T12604] usb 6-1: config 0 descriptor?? [ 1823.869822][T21577] pegasus: probe of 4-1:0.0 failed with error -71 [ 1823.911024][T21577] usb 4-1: USB disconnect, device number 40 [ 1824.002125][T12604] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 00:40:24 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000080)=""/112, 0x200000f0) 00:40:24 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f00000005c0)=""/120, 0x78}], 0x1, 0x0, 0x0) 00:40:24 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 00:40:24 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, 0x0) 00:40:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0xb01, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 00:40:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8914, 0x0) [ 1825.807345][T21577] usb 6-1: USB disconnect, device number 86 [ 1825.882841][T21577] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected 00:40:25 executing program 4: fsopen(&(0x7f0000000040)='openpromfs\x00', 0x0) 00:40:25 executing program 3: vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)}, {&(0x7f00000001c0)}, {0x0}, {&(0x7f0000000400)='\a', 0x1}, {0x0}, {&(0x7f0000000240)="c6", 0x1}, {&(0x7f0000000840)="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", 0xff2}, {&(0x7f00000001c0)="66cf707a48586e3d26bf08c764a6aadc90b7fcd320c52952254a38cb28d382c8ec75691dceb338c126bb5dda95d3f8070a83509dd320ca41ed23ffa365bd9876e2e54e4df5f1bfcd4f6332854005", 0x4e}], 0x8, 0x4) unshare(0x40000200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="6d60ad6aa0a8ed6900ebb3eaab764739b66a102a80b5b6c4fc689e4e11b3b50cade22a764d75cb88e3f9e215051bccbf93b14a100e0be83c23046a0f5a6741793498b045eb62c057317e05690a4954fe4c1835695abbda6e47e07e4695a7def7c1ed101d655174b319b6be49dc53568ff77c7b7cdd06ca3af7723bced1950ff2aabcd6ffe57a083b61b7458690c272b068fed8cd46d8a68907ea", 0x9a, 0x4040, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) fchdir(0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100)=0xd6c, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00645a50e9c53a8b2449740000000000000017ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x200002, &(0x7f0000002440)=ANY=[@ANYBLOB="667d01", @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYBLOB="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", @ANYRESDEC, @ANYRES32]) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)=@RTM_GETNSID={0x4c, 0x5a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40885}, 0x40) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, 0x0, 0x0) shutdown(r4, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x7c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0xae) 00:40:25 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001800)=[{&(0x7f00000005c0)=""/120, 0x78}], 0x1, 0x0, 0x0) 00:40:25 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000080)=""/112, 0x200000f0) 00:40:25 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 00:40:25 executing program 5: fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) 00:40:25 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001800)=[{&(0x7f00000005c0)=""/120, 0x78}], 0x1, 0x0, 0x0) 00:40:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8924, &(0x7f0000000000)={'batadv_slave_0\x00'}) 00:40:25 executing program 2: read$watch_queue(0xffffffffffffffff, &(0x7f0000000080)=""/112, 0x200000f0) 00:40:25 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:40:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IE={0x21, 0x2a, [@link_id={0x65, 0x12, {@random="7edddf1e8400", @broadcast, @broadcast}}, @measure_req={0x26, 0x3}, @ibss={0x6, 0x2}]}]}, 0x4c}}, 0x0) 00:40:26 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001800)=[{&(0x7f00000005c0)=""/120, 0x78}], 0x1, 0x0, 0x0) 00:40:26 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f00000005c0)=""/120, 0x78}], 0x1, 0x0, 0x0) 00:40:26 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8936, 0x0) 00:40:26 executing program 2: read$watch_queue(0xffffffffffffffff, &(0x7f0000000080)=""/112, 0x200000f0) 00:40:26 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000001c0)={{0x1a}}) 00:40:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8927, &(0x7f0000000000)={'batadv_slave_0\x00'}) 00:40:26 executing program 3: vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)}, {&(0x7f00000001c0)}, {0x0}, {&(0x7f0000000400)='\a', 0x1}, {0x0}, {&(0x7f0000000240)="c6", 0x1}, {&(0x7f0000000840)="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", 0xff2}, {&(0x7f00000001c0)="66cf707a48586e3d26bf08c764a6aadc90b7fcd320c52952254a38cb28d382c8ec75691dceb338c126bb5dda95d3f8070a83509dd320ca41ed23ffa365bd9876e2e54e4df5f1bfcd4f6332854005", 0x4e}], 0x8, 0x4) unshare(0x40000200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="6d60ad6aa0a8ed6900ebb3eaab764739b66a102a80b5b6c4fc689e4e11b3b50cade22a764d75cb88e3f9e215051bccbf93b14a100e0be83c23046a0f5a6741793498b045eb62c057317e05690a4954fe4c1835695abbda6e47e07e4695a7def7c1ed101d655174b319b6be49dc53568ff77c7b7cdd06ca3af7723bced1950ff2aabcd6ffe57a083b61b7458690c272b068fed8cd46d8a68907ea", 0x9a, 0x4040, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) fchdir(0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100)=0xd6c, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00645a50e9c53a8b2449740000000000000017ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x200002, &(0x7f0000002440)=ANY=[@ANYBLOB="667d01", @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYBLOB="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", @ANYRESDEC, @ANYRES32]) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)=@RTM_GETNSID={0x4c, 0x5a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40885}, 0x40) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, 0x0, 0x0) shutdown(r4, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x7c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0xae) 00:40:26 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f00000005c0)=""/120, 0x78}], 0x1, 0x0, 0x0) 00:40:27 executing program 2: read$watch_queue(0xffffffffffffffff, &(0x7f0000000080)=""/112, 0x200000f0) 00:40:27 executing program 1: r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='2', 0x1, 0xfffffffffffffffe) keyctl$clear(0x16, r0) 00:40:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) 00:40:27 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000002140), 0x101000, 0x0) 00:40:27 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f00000005c0)=""/120, 0x78}], 0x1, 0x0, 0x0) 00:40:27 executing program 4: syz_io_uring_setup(0x2311, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1bea, &(0x7f0000000380), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:40:27 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000080)=""/112, 0x200000f0) 00:40:27 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:40:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 00:40:28 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5452, &(0x7f0000000000)={'batadv_slave_0\x00'}) 00:40:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, 0x0) 00:40:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8953, &(0x7f0000000000)={'batadv_slave_0\x00'}) 00:40:28 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000080)=""/112, 0x200000f0) 00:40:28 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:40:28 executing program 1: keyctl$clear(0x2f, 0x0) 00:40:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0xb01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 00:40:28 executing program 4: syz_emit_ethernet(0x91, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote, {[@timestamp={0x44, 0x10, 0x80, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}, {"f3e95df9ffac4eadfd5b613fab973ea36a2c9b044645863abadf685246876e979ba630a1f76585af20cdc6356bb23862f49e5a0077886bed4f967da572e576bbefec0c91ced5a0b3d803ee"}}}}}}, 0x0) 00:40:28 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000080)=""/112, 0x200000f0) 00:40:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008aec1, &(0x7f0000000280)={0x15, 0x0, [{}]}) 00:40:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 00:40:29 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:40:29 executing program 4: r0 = fsopen(&(0x7f00000002c0)='proc\x00', 0x0) read$msr(r0, 0x0, 0x0) 00:40:29 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xe518c84f9457707f, 0xffffffffffffffff, 0x10000000) 00:40:29 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000000080)=""/112, 0x200000f0) 00:40:29 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000000080)=""/112, 0x200000f0) 00:40:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4018aee3, &(0x7f0000000280)) 00:40:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:40:29 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000001800), 0x0, 0x0, 0x0) 00:40:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:40:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) 00:40:30 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000000080)=""/112, 0x200000f0) 00:40:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x28}}, 0x0) 00:40:30 executing program 4: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffb000/0x2000)=nil) 00:40:30 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000001800), 0x0, 0x0, 0x0) 00:40:30 executing program 5: r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='2', 0x1, 0xfffffffffffffffe) keyctl$clear(0x7, r0) 00:40:30 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @remote}}) 00:40:30 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$watch_queue(r0, 0x0, 0x0) 00:40:30 executing program 3: r0 = fsopen(&(0x7f0000000040)='ext4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x3) 00:40:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000002140)=@bloom_filter={0x1e, 0x0, 0xff, 0x3, 0x20, 0x1}, 0x48) 00:40:30 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000001800), 0x0, 0x0, 0x0) 00:40:30 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x48000000}]}]}}, &(0x7f00000000c0)=""/164, 0x32, 0xa4, 0x1}, 0x20) 00:40:30 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000001680)=""/200, 0x26, 0xc8, 0x1}, 0x20) 00:40:30 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xc, 0x0, 0x0, [{}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f00000000c0)=""/164, 0x35, 0xa4, 0x1}, 0x20) 00:40:30 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$watch_queue(r0, 0x0, 0x0) 00:40:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 00:40:31 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x21}, 0x10) 00:40:31 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000001800)=[{0x0}], 0x1, 0x0, 0x0) 00:40:31 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0x1d, &(0x7f00000020c0)={0x0, 0x0, 0x18}, 0xc) 00:40:31 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$watch_queue(r0, 0x0, 0x0) 00:40:31 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7}, {0x0, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000640)=""/4096, 0x3c, 0x1000, 0x1}, 0x20) 00:40:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x1, 0xdb, &(0x7f0000000180)=""/219, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:40:31 executing program 1: syz_clone(0x78046180, 0x0, 0x0, 0x0, 0x0, 0x0) 00:40:31 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000001800)=[{0x0}], 0x1, 0x0, 0x0) 00:40:31 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0xd, &(0x7f0000000840)=@framed={{}, [@btf_id, @cb_func, @map_fd, @generic={0x9}, @generic, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x18}, @func]}, &(0x7f00000008c0)='syzkaller\x00', 0x4, 0x81, &(0x7f0000000900)=""/129, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:40:32 executing program 2: syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)="1e039d") 00:40:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'wlan1\x00', 0x1}) 00:40:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'wlan1\x00', 0x1}) ioctl$TUNATTACHFILTER(r0, 0x400454d1, 0x0) 00:40:32 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000001800)=[{0x0}], 0x1, 0x0, 0x0) 00:40:32 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/87, 0x57}], 0x1}, 0x2040) 00:40:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x10}, 0x48) 00:40:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}]}}, &(0x7f0000000640)=""/4096, 0x3e, 0x1000, 0x1}, 0x20) 00:40:33 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}, {0x0, 0xfffffdef}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 00:40:33 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x6}]}}, &(0x7f00000001c0)=""/241, 0x26, 0xf1, 0x1}, 0x20) 00:40:33 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000002f40)={&(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000002ec0)=[{0x0}, {&(0x7f0000000380)="c1", 0x1}, {&(0x7f0000000500)='C', 0x1}, {&(0x7f0000000840)="db", 0x1}], 0x4}, 0x0) 00:40:33 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0, 0xf0ff7f00000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 00:40:33 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000200000d00001f00000000000200000000000000041e0000000000000000007f"], &(0x7f0000000640)=""/4096, 0x42, 0x1000, 0x1}, 0x20) 00:40:33 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') 00:40:33 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000500)='ns/mnt\x00') 00:40:33 executing program 1: syz_clone(0x80106100, &(0x7f0000000040), 0x0, &(0x7f0000000280), 0x0, 0x0) 00:40:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) 00:40:34 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x1600, 0x80}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 00:40:34 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x7200a000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:40:34 executing program 5: mkdir(&(0x7f0000001740)='./file0\x00', 0x0) 00:40:34 executing program 2: syz_clone(0x7200a000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:40:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x16, 0x0, 0x0, 0xffff0001}, 0x48) 00:40:34 executing program 1: socketpair(0x1d, 0x0, 0xfffffffd, &(0x7f0000000040)) 00:40:34 executing program 5: syz_clone(0x28002200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:40:35 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) 00:40:35 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002780)={0x0, 0x1, &(0x7f0000002540)=@raw=[@ldst], &(0x7f00000025c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:40:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'wlan1\x00', 0x1}) ioctl$TUNATTACHFILTER(r0, 0x400454d0, 0x0) 00:40:35 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) setns(r0, 0x0) 00:40:35 executing program 0: mknodat$null(0xffffffffffffffff, 0x0, 0xe204, 0x103) 00:40:35 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={0x72, 0x70}, 0x20) 00:40:36 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x7200a000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:40:36 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0xe, &(0x7f0000000840)=@framed={{}, [@btf_id, @cb_func, @map_fd, @generic={0x9}, @generic, @cb_func, @func]}, &(0x7f00000008c0)='syzkaller\x00', 0x4, 0x81, &(0x7f0000000900)=""/129, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:40:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 00:40:42 executing program 0: syz_clone(0xa1000, 0x0, 0x31, 0x0, 0x0, 0x0) 00:40:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'wlan1\x00', 0x1}) ioctl$TUNATTACHFILTER(r0, 0x400454cc, 0x0) 00:40:42 executing program 5: mq_open(&(0x7f0000000180)='gtp\x00', 0x0, 0x0, &(0x7f00000001c0)) 00:40:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x13d}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x44}}, 0x0) 00:40:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000003) 00:40:42 executing program 1: syz_io_uring_setup(0xd8, &(0x7f0000000380), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:40:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001300)={&(0x7f0000001200), 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, r1, 0x7aa30d9c710e7451, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x24}}, 0x0) 00:40:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) 00:40:43 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x7200a000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:40:43 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000040)) 00:40:43 executing program 3: r0 = socket(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 00:40:43 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x94051, r0, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 00:40:44 executing program 0: msgctl$IPC_SET(0x0, 0x1, 0x0) syz_clone(0x5422c000, &(0x7f0000001380), 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001440)="93c80d5a263fd3035b6ebb1a2ae4d13fce43a6a6840f2b1a9688d6cee6e8") [ 1844.903542][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 1844.903601][ T24] audit: type=1800 audit(1659832843.959:80): pid=29471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=1169 res=0 errno=0 00:40:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x9, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 00:40:44 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x2b, &(0x7f0000000000), 0x4) 00:40:44 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 00:40:44 executing program 2: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001500)={{0x1, 0x0, 0xffffffffffffffff}}) 00:40:44 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x7b5}]) 00:40:44 executing program 3: syz_clone(0x48840300, 0x0, 0x0, 0x0, 0x0, 0x0) 00:40:44 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f0000000180)=""/100, 0x64) 00:40:45 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x7200a000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:40:45 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x4, 0x0, 0x3}]}, &(0x7f00000002c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:40:45 executing program 2: inotify_add_watch(0xffffffffffffffff, 0x0, 0x80) 00:40:45 executing program 3: msgget$private(0x0, 0x4) socket(0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) syz_clone(0xa000, &(0x7f0000000100)="9738200acbd36495b7c394afda096280d2c925b7f16dc1f1c0c21b209d10934968d6365b1f906b4549d58c379cc60601a8fd1329fae57dc8252f295f9f223760b576b07524ce795574bc", 0x4a, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={0x0}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) msgget(0x2, 0x0) syz_clone(0x5422c000, &(0x7f0000001380)="8d347a7f", 0x4, &(0x7f00000013c0), &(0x7f0000001400), &(0x7f0000001440)="93c80d5a263fd3035b6ebb1a2ae4d13fce43a6a6840f2b1a9688d6cee6e85a8044fc87706e905d6a6f3ecfb9eac3ea8403bf7aa49377e42e441eff37f28fc63efb9e1eccc4f6338ac237e2c7084e571ce67184f17a2777e4f05b77ead8ce7447c9159de558b208dace9d8c9b0cfddce86552f1fff0f253660eaf0c33c421ff681dae") msgctl$IPC_SET(0x0, 0x1, 0x0) 00:40:45 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x14041, 0x0, 0x0) 00:40:45 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x4, 0x0, 0x2}]}, &(0x7f00000002c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:40:46 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8946, &(0x7f0000000000)={'wg0\x00'}) 00:40:46 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000001a00)={0x19980330, r0}, &(0x7f0000001a40)) 00:40:46 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x40}}, 0x10) 00:40:46 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r0, 0x0, &(0x7f00000001c0)) 00:40:46 executing program 5: syz_clone(0x5422c000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:40:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}}}}) 00:40:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) 00:40:48 executing program 1: socketpair(0x28, 0x0, 0x2e, &(0x7f0000000280)) 00:40:48 executing program 2: syz_io_uring_setup(0x9a6, &(0x7f0000000380), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:40:48 executing program 3: socket(0x0, 0x83636ffe66a06d32, 0x0) 00:40:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) 00:40:49 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 00:40:49 executing program 1: socket$tipc(0x1e, 0x5, 0x0) 00:40:49 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000040)) 00:40:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x0, 0xb973}, 0x48) 00:40:49 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x0, 0x0, 0x7f29ff05, 0x1}}) r0 = syz_io_uring_complete(0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getnexthop={0x2c, 0x6a, 0x0, 0x70bd29, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}]}, 0x2c}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) socketpair(0x27, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) syz_io_uring_setup(0x2106, &(0x7f0000000580)={0x0, 0xde5, 0x10, 0x0, 0x2b1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000600), 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r2) sendmsg$GTP_CMD_DELPDP(r1, 0x0, 0x400000d) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:40:49 executing program 2: ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000340)) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x10000000, 0x0, 0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740)) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) syz_clone(0x4800000, &(0x7f0000000900), 0x0, 0x0, &(0x7f0000001940), &(0x7f0000001980)="ee7a7a7d98fda6f41a4d32ce6be6dbff299da63535869e053dc308321d5d4064fb") 00:40:49 executing program 5: syz_io_uring_setup(0x4eb1, &(0x7f0000000480)={0x0, 0x74b7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2106, &(0x7f0000000580), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 00:40:49 executing program 1: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4800000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:40:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x48) 00:40:49 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x43, &(0x7f0000000000), 0x4) 00:40:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="6081a7e833c25c7724ad28f0eed356569e375efa3d587b9d13e6a7bd1cf5110abc1f0541d9400141", 0x28, 0x0, &(0x7f0000000100)={0x11, 0x1c, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 00:40:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter, 0x48) 00:40:50 executing program 5: syz_io_uring_setup(0x5b0c, &(0x7f00000001c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x3) 00:40:50 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x34, &(0x7f0000000000), 0x4) 00:40:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000006d00010026bd7000fcdbdf250000", @ANYRES32, @ANYBLOB="c804020000000200040024003c"], 0x58}}, 0x0) 00:40:50 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x48, &(0x7f0000000000), 0x4) 00:40:50 executing program 5: unshare(0x8060600) unshare(0x40020000) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) 00:40:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:40:50 executing program 1: mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000040)=0x7, 0x4, 0x0) 00:40:50 executing program 0: unshare(0x8060600) unshare(0x40020000) 00:40:51 executing program 4: syz_io_uring_setup(0x3663, &(0x7f0000000280)={0x0, 0x80bd, 0x8}, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x9a6, &(0x7f0000000380), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:40:51 executing program 3: r0 = syz_clone(0x41000100, &(0x7f0000000080)="960870fc198d9647f603706a87159ebc20c4ff22284edcaa07c21bce1c6619", 0x1f, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="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") r1 = syz_clone(0x2804000, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000001a00)={0x19980330, r1}, &(0x7f0000001a40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)) capget(&(0x7f0000000240)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000280)={0x5, 0x9, 0x9, 0x80000000, 0x82e}) tgkill(r0, r1, 0x14) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0x3, 0x4) 00:40:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:40:51 executing program 1: socketpair(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000100)=@id, 0x10) 00:40:51 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000001800)={&(0x7f0000000440)=@id, 0x10, &(0x7f0000001740)=[{&(0x7f0000000480)='(', 0x1}, {&(0x7f0000000540)='Y', 0x1}], 0x2, &(0x7f00000017c0)="ca4c7051542b26f4765875bf043d486e5088278403ba67384328ed931b0f1aa42ef0bced0e", 0x25}, 0x0) 00:40:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:40:51 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8916, 0x0) 00:40:52 executing program 4: socketpair$tipc(0xa, 0x5, 0x0, &(0x7f0000000140)) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) 00:40:52 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000380)={0xb, 0x0, 0x8}, 0x0) 00:40:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:40:52 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80) 00:40:55 executing program 0: unshare(0x8060600) unshare(0x40020000) 00:40:55 executing program 1: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) getresuid(0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) syz_clone(0x5422c000, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001500)={{0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1c, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe1}) 00:40:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:40:55 executing program 4: mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000080)=""/249) 00:40:55 executing program 5: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000340)) 00:40:55 executing program 3: r0 = syz_clone(0x41000100, &(0x7f0000000080)="960870fc198d9647f603706a87159ebc20c4ff22284edcaa07c21bce1c6619", 0x1f, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="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") r1 = syz_clone(0x2804000, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000001a00)={0x19980330, r1}, &(0x7f0000001a40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)) capget(&(0x7f0000000240)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000280)={0x5, 0x9, 0x9, 0x80000000, 0x82e}) tgkill(r0, r1, 0x14) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0x3, 0x4) 00:40:55 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 00:40:55 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000200), 0x8) 00:40:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:40:56 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 00:40:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:40:56 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f00000002c0)={0x1c, 0x1c}, 0x1c) 00:40:59 executing program 0: unshare(0x8060600) unshare(0x40020000) 00:40:59 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:40:59 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:40:59 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000240), &(0x7f0000000180)=0x97) 00:40:59 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)=0x8) 00:40:59 executing program 3: r0 = syz_clone(0x41000100, &(0x7f0000000080)="960870fc198d9647f603706a87159ebc20c4ff22284edcaa07c21bce1c6619", 0x1f, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="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") r1 = syz_clone(0x2804000, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000001a00)={0x19980330, r1}, &(0x7f0000001a40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)) capget(&(0x7f0000000240)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000280)={0x5, 0x9, 0x9, 0x80000000, 0x82e}) tgkill(r0, r1, 0x14) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0x3, 0x4) 00:41:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000001200)={0x0, @in, 0x0, 0x0, 0x10c}, 0x98) 00:41:00 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:41:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@authinfo={0x10}], 0x10}, 0x0) 00:41:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000540)={0x0, 0x0, 0xffffffffffffff60, "9aaf7df38f1ccba67e0c5bfa35dd7632d634db9d94f8cae07262d39419d6ac3858cdf9dd82915296f25ab1d5374e635c4ca624ed85284325d44b1bcdd91a470077064bdc7e6a05a604e9462657cdbc4dcc4bdb4f81a4d8afc12169a19a6d7be7e510b2b5efc0abc460e12b25f1caea7a3792701bf5462c8b3777d48376e2e28145c7111369511f004be33aa4b3c03fb4ad140faff074594c6f8b235577be90237ed2d9b69b29e8d99412c9f870f5a09e7eb23c9e34f79bac8465555cde83b20d3b"}, 0xc9) 00:41:00 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x14}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000180)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000000)={r4}, 0x8) 00:41:01 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:41:02 executing program 0: unshare(0x8060600) unshare(0x40020000) 00:41:02 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x31, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 00:41:02 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r0, 0x1) 00:41:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000500)={0x53, 0x0, 0x21, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000580)="b929bad723dd2b5d64ca40f3e5c77b7da8b9602ba33ab96121c0da74ea7b760091", &(0x7f0000000c80)=""/4096, 0x36, 0x0, 0x0, 0x0}) 00:41:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:41:02 executing program 3: r0 = syz_clone(0x41000100, &(0x7f0000000080)="960870fc198d9647f603706a87159ebc20c4ff22284edcaa07c21bce1c6619", 0x1f, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="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") r1 = syz_clone(0x2804000, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000001a00)={0x19980330, r1}, &(0x7f0000001a40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)) capget(&(0x7f0000000240)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000280)={0x5, 0x9, 0x9, 0x80000000, 0x82e}) tgkill(r0, r1, 0x14) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0x3, 0x4) 00:41:02 executing program 4: bpf$PROG_LOAD(0xb, 0x0, 0x0) 00:41:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:41:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0xf}}, 0x0) 00:41:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:41:03 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005880)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x300, &(0x7f0000000140)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 00:41:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x410010}, 0xc) 00:41:05 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:41:05 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001380)) sendmsg$tipc(r0, &(0x7f0000001340)={&(0x7f0000001200)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4}}, 0x10, 0x0}, 0x0) 00:41:05 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x48, 0x0, 0x0) 00:41:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="185000005bafcb2547"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xf7, &(0x7f0000000240)=""/247, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:05 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1}) 00:41:05 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) 00:41:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$input_event(r0, &(0x7f0000000140)={{0x0, 0x2710}}, 0x18) 00:41:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={0x0}}, 0x0) 00:41:05 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0xf4240, &(0x7f0000000240)=@framed={{}, [@alu]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:05 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/159, 0x9f}, 0xc0) 00:41:05 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:41:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000540), 0xd, 0x0) read$usbfs(r0, 0x0, 0x0) 00:41:06 executing program 1: fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) 00:41:06 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 00:41:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc9, &(0x7f0000000200)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:06 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x76, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 00:41:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 00:41:06 executing program 0: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)=ANY=[]}) 00:41:06 executing program 4: syz_open_dev$vcsu(&(0x7f0000000500), 0x0, 0x8202) 00:41:06 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:41:08 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 00:41:08 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @empty}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:41:08 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x271, 0x7, 0x0, 0x1}, 0x48) 00:41:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x40045567, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) 00:41:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:41:08 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:09 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) 00:41:09 executing program 4: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 00:41:09 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)="814f49b10206f2ec1944b7783687488c9f065bed6f9d5627") syz_clone(0x0, &(0x7f0000000980)="816232466d959cf485e3ace51ba8bd9b4beefd32d4f048836f96fbb68ec28113cb51e5c3517e185f7c4634152089dbd006849c90dada56395f670a0d52e25c0d4115d4481c65d12d7e3cfb506bb10c8dda38d122a25d904bcc813374bef9f31405c7da861976348bd9331ecb5f58b072ede7305213828b3189113e9bf5b0e6f0dc358d90aaf6a4b11593202bb4a8c6b0566c312ac8540a7bfdea9557ce38d0d956058bfd8a286f9ce1e617af8f5f71a3f140ab355dc6504645593921640cd92c63fd41911b2cfb566d83763374487986cef33e194c28da5e177fc8c8b0af1dd40d4dfe6d93ab20ab9cee7c2f29a161", 0xef, &(0x7f0000000a80), 0x0, &(0x7f0000000b00)) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 00:41:09 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, @val, {@ipv4}}, 0x0) 00:41:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:41:10 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 00:41:10 executing program 3: r0 = socket(0x2, 0xc003, 0x0) close(r0) r1 = socket(0x2, 0xc003, 0x0) connect$unix(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="82026e7e09"], 0x10) writev(r1, &(0x7f0000000100)=[{0x0}], 0x1) 00:41:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:41:10 executing program 4: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 00:41:10 executing program 1: syz_emit_ethernet(0xffffffffffffffb7, &(0x7f0000000040)={@local, @remote, @val, {@ipv4}}, 0x0) [ 1871.312037][T12604] usb 1-1: new high-speed USB device number 25 using dummy_hcd 00:41:10 executing program 3: pipe(&(0x7f0000000b40)) 00:41:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) r1 = dup2(r0, r0) setsockopt$sock_int(r1, 0xffff, 0x1002, 0x0, 0x0) [ 1871.673801][T12604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1871.685178][T12604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1871.696191][T12604] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1871.709513][T12604] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1871.718929][T12604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.796979][ T1192] ieee802154 phy0 wpan0: encryption failed: -22 [ 1871.833917][T12604] usb 1-1: config 0 descriptor?? [ 1872.414565][T12604] usbhid 1-1:0.0: can't add hid device: -71 [ 1872.421094][T12604] usbhid: probe of 1-1:0.0 failed with error -71 [ 1872.458851][T12604] usb 1-1: USB disconnect, device number 25 00:41:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x4d0, 0x0, 0x200, 0x200, 0x3e8, 0x3e8, 0x3e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg0\x00', 'batadv_slave_1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @empty, @empty}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:var_log_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520) 00:41:11 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:41:11 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0xe, 0x3, &(0x7f0000000680)=@framed={{0x85, 0x0, 0x0, 0x0, 0x8, 0x7}}, &(0x7f00000006c0)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000700)=""/165, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:11 executing program 4: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 00:41:11 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, 0x12, 0x1}, 0x4c}}, 0x0) 00:41:11 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 00:41:12 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback}}) 00:41:12 executing program 4: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 00:41:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x44, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x44}}, 0x0) 00:41:12 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:41:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x200}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 00:41:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x10002, 0x0, 0x0) 00:41:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}]}, 0x30}}, 0x0) 00:41:13 executing program 1: r0 = socket(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', 0x0}) 00:41:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x15, 0x3, &(0x7f0000000680)=@framed={{0x85, 0x0, 0x0, 0x0, 0x8, 0xf}}, &(0x7f00000006c0)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000700)=""/165, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:13 executing program 0: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000100)) 00:41:13 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) 00:41:13 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:41:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x7, 0x9, 0x101, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 00:41:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x17, 0x3, &(0x7f0000000680)=@framed={{0x85, 0x0, 0x0, 0x0, 0xaa, 0x4}}, &(0x7f00000006c0)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000700)=""/165, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:13 executing program 1: unshare(0x4000400) 00:41:13 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) connect(r0, &(0x7f00000000c0)=@hci, 0x80) 00:41:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=@framed={{0x85, 0x0, 0x0, 0x0, 0x8, 0x7}}, &(0x7f00000006c0)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000700)=""/165, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:13 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000bc0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) 00:41:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:41:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:41:13 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'vlan1\x00'}, 0x18) 00:41:14 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0xa, 0x0, @local}}, 0x24) 00:41:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, "024353", 0x7}) 00:41:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) [ 1875.365088][T29875] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan1, syncid = 0, id = 0 00:41:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:41:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:41:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 00:41:15 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=@raw=[@btf_id, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp], &(0x7f0000000300)='GPL\x00', 0x7, 0xb4, &(0x7f0000000340)=""/180, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1876.168737][T29882] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1876.178567][T29882] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:41:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:41:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000b40)={0x6c, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x6c}}, 0x0) 00:41:15 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000bc0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e26, @empty}}, 0x24) 00:41:15 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000480)={0x2a, 0x1, 0x1}, 0xc) 00:41:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:41:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:41:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}}, 0x0) 00:41:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x10c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x82f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffd9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "60b3f49152e18ae50c577ad7d4e77e9ee62b9832961d2447e9c8c6"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}]}]}, 0x10c}}, 0x4000000) 00:41:16 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f0000006780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)=[{0x10}], 0x10}}], 0x1, 0x0) 00:41:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) 00:41:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x5}]}]}]}, 0x3c}}, 0x0) 00:41:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 1877.438589][T29906] tipc: Started in network mode [ 1877.443949][T29906] tipc: Node identity aaaaaaaaaa22, cluster identity 4711 [ 1877.451940][T29906] tipc: Enabled bearer , priority 10 00:41:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@fwd={0x9}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000240)=""/191, 0x2f, 0xbf, 0x1}, 0x20) 00:41:16 executing program 1: ppoll(&(0x7f0000002880)=[{}], 0x1, &(0x7f00000028c0), 0x0, 0x0) 00:41:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {{0x1a}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:41:16 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000300)) 00:41:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:41:17 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x10000, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, 0x48) 00:41:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x73a) 00:41:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f00000003c0)="ad802a4e5ebef18ea6d839d399eff0cc5561ea9c80489bbaf9b57772e102ba2200b70ba7c18bcd1bffefe48a67a97a45bcb146044c45b246289b075d3bf7cbc81cfad24cb850288222b587f55030dad1aeb5a08442974d5a5e24a6e54f86742698339195554003ecfb9a5b10a5d22c45066490c9b2dd429e090ee6545402409ce45836542b873dda96f179d808d5d152dd825535169a1fc6e353cbd642991ac5b635fcb23fefaa806095459b441bcb43dc5d135c4db4a8e53daa15121d49d6bce041ea99b3f5001f8b6a24674149d905c044aafb54dc2f96", 0xd8) 00:41:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x40}}]}, 0x28}}, 0x0) 00:41:17 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x1002000000000000}, 0x18) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000240)={0x1d, r6, 0x2}, 0x18) 00:41:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, 0x0, 0x0) 00:41:17 executing program 4: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@ipv4, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000079c0)={'syztnl0\x00', &(0x7f0000007940)={'ip6_vti0\x00', r0, 0x4, 0x95, 0x3, 0x1, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe8252c71e801072c, 0x7, 0x7, 0xca4}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r1, &(0x7f00000000c0), 0x0, 0x1) socketpair(0x50, 0x1, 0x2, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000280)=0x517c, 0x4) recvmsg$can_bcm(r2, &(0x7f0000001580)={&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000001440)=[{&(0x7f0000000140)=""/22, 0x16}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/90, 0x5a}, {&(0x7f0000001200)=""/56, 0x38}, {&(0x7f0000001240)=""/181, 0xb5}, {&(0x7f0000001300)=""/92, 0x5c}, {&(0x7f0000001380)=""/189, 0xbd}], 0x7, &(0x7f00000014c0)=""/180, 0xb4}, 0x40000000) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe1d) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000009e40)={'gretap0\x00', &(0x7f0000009dc0)={'syztnl2\x00', r0, 0x40, 0x40, 0x2, 0x1f, {{0x16, 0x4, 0x1, 0x4, 0x58, 0x68, 0x0, 0x4, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@rr={0x7, 0x7, 0x92, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x7, 0x9, "c90cf91d525a0f"}, {0x2, 0x6, "afea7b56"}]}, @timestamp_addr={0x44, 0xc, 0xfd, 0x1, 0x4, [{@private=0xa010102, 0x80000001}]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x6, 0x3, '0'}, {0x2, 0xe, "87d02a2612991ac8e898cf01"}]}, @timestamp={0x44, 0x4, 0x39, 0x0, 0x7}]}}}}}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000015c0)={0x2, 'veth0_virt_wifi\x00', 0x3}, 0x18) [ 1878.576779][ T9946] tipc: Node number set to 8956586 00:41:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x6, 0xf400}, 0x48) 00:41:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 00:41:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x14, r2, 0x1, 0x0, 0x0, {0x21}}, 0x14}}, 0x0) [ 1879.007068][T29940] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_virt_wifi, syncid = 3, id = 0 00:41:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, 0x0, 0x0) 00:41:18 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x6, 0x0, 0x0) 00:41:19 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x15, 0x3, &(0x7f0000000680)=@framed={{0x85, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffff80, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x2}, 0x0) 00:41:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x25, &(0x7f0000001300)="ad802b4e", 0x4) 00:41:19 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x20) 00:41:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, 0x0, 0x0) 00:41:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) [ 1880.462877][T29955] tipc: Enabling of bearer rejected, failed to enable media 00:41:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000040)) 00:41:19 executing program 1: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5411, 0x0) 00:41:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x14, r2, 0x1, 0x0, 0x0, {0x24}}, 0x14}}, 0x0) 00:41:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000bc0), 0x10) 00:41:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 00:41:19 executing program 3: socket$kcm(0x29, 0x5, 0x0) pselect6(0x40, &(0x7f0000000640)={0x9}, &(0x7f0000000680)={0x2}, 0x0, 0x0, 0x0) 00:41:20 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x85, 0x0, 0x0, 0x0, 0x8, 0x4}, [@alu={0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f00000006c0)='syzkaller\x00', 0x1, 0xa5, &(0x7f0000000700)=""/165, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100c1b60000000000002e0000000a0001"], 0x20}}, 0x0) 00:41:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0xf5ffffff, &(0x7f00000002c0)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28}}], 0x2, 0x0) 00:41:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x16, 0x3, &(0x7f0000000680)=@framed={{0x85, 0x0, 0x0, 0x0, 0x8, 0x7c}}, &(0x7f00000006c0)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000700)=""/165, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 00:41:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 00:41:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='n', 0x1}], 0x1}, 0x0) close(r0) 00:41:20 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1, &(0x7f0000000540)=@raw=[@alu], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000002040)) [ 1881.661266][T29986] tipc: Enabling of bearer rejected, failed to enable media 00:41:20 executing program 0: socketpair(0x2, 0x3, 0xb6, &(0x7f0000000000)) 00:41:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 00:41:20 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, r0, 0x0, 0x0, 0x0}, 0x30) 00:41:21 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x50, 0x13, 0x8cd508ec5d1133d1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0) 00:41:21 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 00:41:21 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000840)="17", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:41:21 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x1}]}, {0x0, [0x2e]}}, &(0x7f00000002c0)=""/202, 0x27, 0xca, 0x1}, 0x20) 00:41:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:41:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 00:41:21 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}]}, 0x30}}, 0x0) 00:41:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x14, r2, 0x1, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) [ 1882.745773][T30007] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1882.755741][T30007] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:41:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000007600000048f7edf6"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) 00:41:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 00:41:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x0) [ 1883.160369][T30015] tipc: Started in network mode [ 1883.166475][T30015] tipc: Node identity aaaaaaaaaa22, cluster identity 4711 [ 1883.174468][T30015] tipc: Enabled bearer , priority 10 00:41:22 executing program 5: pselect6(0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0) 00:41:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) [ 1883.397742][T30022] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:41:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002e40)={0x11, 0x6, &(0x7f0000002b80)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @generic={0xbd, 0x0, 0x0, 0x7}, @ldst, @cb_func], &(0x7f0000002bc0)='syzkaller\x00', 0x2, 0xdb, &(0x7f0000002c00)=""/219, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0x10, 0x4, 0x4, 0xffffffd0, 0x4, 0x1}, 0x48) 00:41:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x17, 0x3, &(0x7f0000000680)=@framed={{0x85, 0x0, 0x0, 0x0, 0xba, 0x4}}, &(0x7f00000006c0)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000700)=""/165, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:22 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000080)=""/235, 0x32, 0xeb, 0x1}, 0x20) 00:41:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:41:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x233}, 0x14}}, 0x0) 00:41:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {0x3}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:file_context_t:s0\x00'}]}, 0x3c}}, 0x0) 00:41:23 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0xe, 0x3, &(0x7f0000000680)=@framed={{0x85, 0x0, 0x0, 0x0, 0x8, 0x4}}, &(0x7f00000006c0)='syzkaller\x00', 0x4, 0xa5, &(0x7f0000000700)=""/165, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:23 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r0, 0x89b13134ee17ceb7}, 0x14}}, 0x0) [ 1884.301898][ T9946] tipc: Node number set to 8956586 00:41:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffd37) 00:41:23 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0xe, 0x3, &(0x7f0000000680)=@framed={{0x85, 0x0, 0x0, 0x0, 0x8, 0x4}}, &(0x7f00000006c0)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000700)=""/165, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:41:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind(r0, 0x0, 0x0) 00:41:23 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) 00:41:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@broute={'broute\x00', 0x20, 0x3, 0x14e, [], 0x0, 0x0, &(0x7f0000000040)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', 'dvmrp1\x00', 'bond_slave_0\x00', @empty, [], @local, [], 0x6e, 0x6e, 0xbe, [], [], @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x2}]}, 0x19a) 00:41:23 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @dev, 'batadv_slave_1\x00'}}, 0x80) 00:41:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x3, &(0x7f0000001300)='\x00\x00\x00\x00', 0x4) 00:41:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:41:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) 00:41:24 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e1) utimensat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)={{}, {0x0, 0xfffffffffffffffe}}, 0x0) 00:41:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000080), 0xc) 00:41:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000000)={r3, 0x8001}, 0x8) 00:41:24 executing program 5: linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) 00:41:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:41:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000240)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)='9', 0x1}], 0x1}, 0x100) 00:41:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) r1 = dup(r0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xe86f}, 0x8) 00:41:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f0000000080)) 00:41:25 executing program 5: r0 = socket(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 00:41:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:41:25 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="f5982c585688", @val, {@ipv4}}, 0x0) 00:41:25 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000340)={0x0, 0x2, "93eb"}, &(0x7f0000000240)=0xa) 00:41:25 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendto$inet(r0, &(0x7f0000000080)='q', 0x1, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 00:41:25 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in={0x10}, 0x10, 0x0}, 0x0) 00:41:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:41:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x13, &(0x7f00000013c0), 0x8) 00:41:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc2) 00:41:25 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000240)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000200)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@sndinfo={0x1c}, @sndrcv={0x2c}], 0x48}, 0x100) 00:41:25 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockname(r2, 0x0, &(0x7f00000000c0)) 00:41:26 executing program 5: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 00:41:26 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000300)={0x1c, 0x1c, 0x3}, 0x1c) listen(r0, 0x0) 00:41:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:41:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f00000000c0), 0x4) 00:41:26 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000240)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0xfffffe01}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20102) 00:41:26 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = fcntl$dupfd(r1, 0x0, r0) connect$unix(r2, &(0x7f0000001680)=@file={0xa}, 0xa) 00:41:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:41:26 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f00000000c0), &(0x7f0000000180)=0x90) 00:41:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x8) 00:41:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getitimer(0x1, &(0x7f0000000080)) 00:41:27 executing program 5: acct(&(0x7f0000000000)='./file0\x00') pipe2(0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) symlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0\x00') 00:41:27 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1c, 0x1c, 0x3}, 0x1c) shutdown(r0, 0x0) 00:41:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000000)="b4", 0x1, 0x0, &(0x7f00000000c0), 0x10) 00:41:27 executing program 0: chmod(0x0, 0x0) rename(0x0, 0x0) 00:41:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:41:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000280), 0x8) 00:41:28 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000258732098743d2c6fc60ba5e8f260811fc7575dcaeedc8b6e3d43e4acb27cef1ef67604313d9b9d3ac70f3cbe2a6e33a0089e3037b9357130dd3d66917f49f579e66733d2b5d541a9d60dbe6e482c678789e3d6dd1bec85f245eede617ca460071c5bacfeed674ec08b9ea5113e899295b08b42551b4bebb97615b5441662e2f8a58cc38b625b06865905a7252c3c088a1b88c4e3aab11e63b3fcc6482"], 0x48}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 00:41:28 executing program 4: syz_clone(0xa800000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) syz_clone(0x60000000, &(0x7f0000000000)="450b0284f3cba763e37ce395637e1a6ed9a0fa2536e3faeb635b98d9dcfab5f27d017f6b31f29adb70fea38749a70a68ad4dd37655bf85e31df46048bf13995dac1c8f78aa7a7d36233b4053d3efbda83950890ada04a8a14519dc4b95c7a7b3b39238cb48aba83a7a6c83c4d5e55a75ee72c3e082a2516c069fb0dfa7cc814fa4cb1bb117c7e910bf1c512d5f24fc0f", 0x90, 0x0, &(0x7f0000000240), &(0x7f0000000280)="c033f2058225f3236fcd29c8b99a6450878f2da36538821f026488fed00c2385b110ca509258ab337d338b72da6fbc6b3fb8c18f0aa3f49cec2851da198aafeb1a2b0a7b7155094149b187e347774acfa6416eba4f09b0f695b1530fc8ecddc5da58e532bf6eef5c620e57a7c99c3f3c14b015b7b304a766473ce61797f7b65a42f5815671c9b85df296cd0576cc68b3ca75daa39cdc4fd2f95b8e1379c964d5d57ed031885f5d20177f03676c758bd6257a1047") 00:41:28 executing program 0: getgroups(0x1, &(0x7f00000064c0)=[0xffffffffffffffff]) 00:41:28 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xdf, 0x87, 0x42, 0x10, 0x489, 0xe0b4, 0x8a09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x98, 0x0, 0x2, 0x19, 0x82, 0x24, 0x0, [], [{{0x9, 0x5, 0x7, 0x3}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, 0x0) 00:41:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:41:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1, 0x3e8}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28}}], 0x2, 0x0) 00:41:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x8}) 00:41:28 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private}}}}}, 0x0) [ 1889.987567][T30163] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:41:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:41:29 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x8}) 00:41:29 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) process_madvise(r0, &(0x7f0000001300)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0) 00:41:29 executing program 5: syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) 00:41:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 1890.742543][T12604] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1890.991946][T12604] usb 4-1: Using ep0 maxpacket: 16 [ 1891.145471][T12604] usb 4-1: config 0 has an invalid interface number: 152 but max is 0 [ 1891.154060][T12604] usb 4-1: config 0 has no interface number 0 [ 1891.160327][T12604] usb 4-1: config 0 interface 152 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1891.171874][T12604] usb 4-1: config 0 interface 152 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1891.182042][T12604] usb 4-1: config 0 interface 152 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1891.518394][T12604] usb 4-1: New USB device found, idVendor=0489, idProduct=e0b4, bcdDevice=8a.09 [ 1891.527833][T12604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.536186][T12604] usb 4-1: Product: syz [ 1891.540513][T12604] usb 4-1: Manufacturer: syz [ 1891.545468][T12604] usb 4-1: SerialNumber: syz [ 1891.637610][T12604] usb 4-1: config 0 descriptor?? [ 1891.697739][T12604] option 4-1:0.152: GSM modem (1-port) converter detected 00:41:30 executing program 4: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, 0x0) 00:41:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x8}) [ 1891.919185][T12604] usb 4-1: USB disconnect, device number 41 [ 1891.937233][T12604] option 4-1:0.152: device disconnected 00:41:31 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xdf, 0x87, 0x42, 0x10, 0x489, 0xe0b4, 0x8a09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x98, 0x0, 0x2, 0x19, 0x82, 0x24, 0x0, [], [{{0x9, 0x5, 0x7, 0x3}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, 0x0) 00:41:31 executing program 5: syz_clone(0x60000000, &(0x7f0000000000)="450b0284f3cba763e37ce395637e1a6ed9a0fa2536e3faeb635b98d9dcfab5f27d017f6b31f29adb70fea38749a70a68ad4dd37655bf85e31df46048bf13995dac1c8f78aa7a7d36233b4053d3efbda83950890ada04a8a14519dc4b95c7a7b3b39238cb48aba83a7a6c83c4d5e55a75ee72c3e082a2516c069fb0dfa7cc814fa4cb1bb117c7e910bf1c512d5f24fc", 0x8f, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="c033f2058225f3236fcd29c8b99a6450878f2da36538821f026488fed00c2385b110ca509258ab337d338b72da6fbc6b3fb8c18f0aa3f49cec2851da198aafeb1a2b0a7b7155094149b187e347774acfa6416eba4f09b0f695b1530fc8ecddc5da58e532bf6eef5c620e57a7c99c3f3c14b015b7b304a766473ce61797f7b65a42f5815671c9b85df296cd0576cc68b3ca75daa39cdc4fd2f95b8e1379c964d5d57ed031885f5d20177f03676c758bd6257a10475bbb4daf24a19c88c24a90061f15242be44cea1937d2bf3b3c142934") 00:41:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x7, @vbi}) 00:41:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="1a", 0x1, 0x20c49a, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000)="1f", 0x1, 0x40001, 0x0, 0x0) 00:41:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x8}) 00:41:31 executing program 4: syz_clone(0x60000000, &(0x7f0000000000)="450b0284f3cba763e37ce395637e1a6ed9a0fa2536e3faeb635b98d9dcfab5f27d017f6b31f29adb70fea38749a70a68ad4dd37655bf85e31df46048bf13995dac1c8f78aa7a7d36233b4053d3efbda83950890ada04a8a14519dc4b95c7a7b3b39238cb48aba83a7a6c83c4d5e55a75ee72c3e082a2516c069fb0dfa7cc814fa4cb1bb117c7e910bf1c512d5f24fc0f", 0x90, &(0x7f0000000200), 0x0, &(0x7f0000000280)="c033f2058225f3236fcd29c8b99a6450878f2da36538821f026488fed00c2385b110ca509258ab337d338b72da6fbc6b3fb8c18f0aa3f49cec2851da198aafeb1a2b0a7b7155094149b187e347774acfa6416eba4f09b0f695b1530fc8ecddc5da58e532bf6eef5c620e57a7c99c3f3c14b015b7b304a766473ce61797f7b65a42f5815671c9b85df296cd0576cc68b3ca75daa39cdc4fd2f95b8e1379c964d5d57ed031885f5d20177f03676c758bd6257a10475bbb4daf24a19c88c24a90061f15242be44cea1937d2bf3b3c14293497f8d3d8c13228525f01e7d6ace49b9d6b40ae787e3e395d10efac6b") 00:41:31 executing program 2: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000051298408cf1061806504010203010902250001000000000904000003922fff0009050d000000000000090503"], 0x0) 00:41:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x7}) 00:41:32 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x8}) 00:41:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x5, 0x0, 0x0) [ 1893.922195][T16220] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1893.930213][T16218] usb 4-1: new high-speed USB device number 42 using dummy_hcd 00:41:33 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x8}) 00:41:33 executing program 0: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d5f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, "f8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1894.163116][T16220] usb 3-1: Using ep0 maxpacket: 8 [ 1894.202856][T16218] usb 4-1: Using ep0 maxpacket: 16 [ 1894.293826][T16220] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 1894.301290][T16220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1894.312406][T16220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1894.322353][T16220] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1894.373538][T16218] usb 4-1: config 0 has an invalid interface number: 152 but max is 0 [ 1894.386423][T16218] usb 4-1: config 0 has no interface number 0 [ 1894.393258][T16218] usb 4-1: config 0 interface 152 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1894.404519][T16218] usb 4-1: config 0 interface 152 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1894.414620][T16218] usb 4-1: config 0 interface 152 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1894.569686][T16220] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice= 4.65 [ 1894.579087][T16220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.591455][T16220] usb 3-1: Product: syz [ 1894.596299][T16220] usb 3-1: Manufacturer: syz [ 1894.601078][T16220] usb 3-1: SerialNumber: syz [ 1894.637271][T16220] usb 3-1: config 0 descriptor?? [ 1894.644200][T16218] usb 4-1: New USB device found, idVendor=0489, idProduct=e0b4, bcdDevice=8a.09 [ 1894.653781][T16218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.662331][T16218] usb 4-1: Product: syz [ 1894.666673][T16218] usb 4-1: Manufacturer: syz [ 1894.671458][T16218] usb 4-1: SerialNumber: syz [ 1894.713671][T16218] usb 4-1: config 0 descriptor?? [ 1894.720697][T16220] vmk80xx 3-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 1894.779470][T16218] option 4-1:0.152: GSM modem (1-port) converter detected [ 1894.901478][T30210] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1894.921219][T16218] usb 3-1: USB disconnect, device number 89 [ 1895.016799][ T9946] usb 4-1: USB disconnect, device number 42 [ 1895.035891][ T9946] option 4-1:0.152: device disconnected [ 1895.152521][T30210] usb 1-1: Using ep0 maxpacket: 32 [ 1895.292726][T30210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1895.308170][T30210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1895.318630][T30210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1895.328605][T30210] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1895.338536][T30210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1895.348494][T30210] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1895.358555][T30210] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 4.6d [ 1895.367862][T30210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.387664][T30210] usb 1-1: config 0 descriptor?? [ 1895.436318][T30210] mos7840 1-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected 00:41:34 executing program 3: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000680)) 00:41:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)="1be2", 0x2) 00:41:34 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) 00:41:34 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x8}) 00:41:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, 0x0) 00:41:34 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x8}) 00:41:34 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="bf", 0x1}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 00:41:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20003, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:41:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0x2000) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0x0, 0x0, &(0x7f00000000c0)="0329f9d5dbc3f27bc8610602009a8a49f8d1cfc17fa1480d47575683b90ad7b0745746d76a7106768ed4f4f569290dae2e174d7aebbae63cc2607de18ad4ea05611956e903d21caccb6a9cc3614c504d6df42858cffaace5494f4085e08bf9d40fe0c893987ef6718158e2a44a277659f11ba50fabea0ef1604f7d10704bff3924a7e29e1d030407401be0eaf06fb6995292eecd3235559a"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 00:41:35 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x8}) [ 1896.273090][T30226] can: request_module (can-proto-0) failed. 00:41:35 executing program 3: socketpair$tipc(0x1e, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)="c404483d", 0x4}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1896.993439][T30210] mos7840: probe of ttyUSB0 failed with error -71 [ 1897.066243][T30210] usb 1-1: USB disconnect, device number 26 [ 1897.152560][T30210] mos7840 1-1:0.0: device disconnected 00:41:36 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x4}) 00:41:36 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{}, {}, {0x80}, {0x6}]}) 00:41:36 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) select(0x40, &(0x7f0000000040)={0x9}, &(0x7f0000000080)={0x4}, 0x0, 0x0) 00:41:36 executing program 5: syz_clone(0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 00:41:36 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x8}) 00:41:36 executing program 3: socketpair$tipc(0x1e, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)="c404483d", 0x4}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1897.792339][ T24] audit: type=1326 audit(1659832896.819:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30242 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f86549 code=0x0 00:41:37 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x5}, {}, {0x6}]}) 00:41:37 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x8}) 00:41:37 executing program 4: syz_clone(0xa800000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) syz_clone(0x60000000, &(0x7f0000000000)="450b0284f3cba763e37ce395637e1a6ed9a0fa2536e3faeb635b98d9dcfab5f27d017f6b31f29adb70fea38749a70a68ad4dd37655bf85e31df46048bf13995dac1c8f78aa7a7d36233b4053d3efbda83950890ada04a8a14519dc4b95c7a7b3b39238cb48aba83a7a6c83c4d5e55a75ee72c3e082a2516c069fb0dfa7cc814fa4cb1bb117c7e910bf1c512d", 0x8c, 0x0, &(0x7f0000000240), 0x0) 00:41:37 executing program 3: socketpair$tipc(0x1e, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)="c404483d", 0x4}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1898.435864][ T24] audit: type=1326 audit(1659832897.489:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30257 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6e549 code=0x0 00:41:37 executing program 0: prctl$PR_GET_NAME(0x10, &(0x7f0000001080)=""/91) 00:41:37 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x8}) 00:41:37 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x88080, 0x0) 00:41:37 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) 00:41:38 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x4200, 0x0) 00:41:38 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000480)={0x9}, &(0x7f00000004c0)={0x5}, 0x0, &(0x7f0000000540)={0x77359400}) 00:41:38 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x8}) 00:41:38 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0xc00c55ca, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:41:38 executing program 3: syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) 00:41:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc9, &(0x7f0000000200)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:39 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 00:41:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 00:41:39 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 00:41:39 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3512e6e53cdd78fd3835bf452c09", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 00:41:39 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', 0x0}) pipe2$9p(&(0x7f0000000800), 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_clone(0x20400, &(0x7f0000000980)="816232466d959cf485e3ace51ba8bd9b4beefd32d4f048836f96fbb68ec28113cb51e5c3517e185f7c4634152089dbd006849c90dada56395f670a0d52e25c0d4115d4481c65d12d7e3cfb506bb10c8dda38d122a25d904bcc813374bef9f31405c7da861976348bd9331ecb5f58b072ede7305213828b31", 0x78, &(0x7f0000000a80), 0x0, &(0x7f0000000b00)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x40) 00:41:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={0x0, 0x0}) 00:41:40 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 00:41:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x4, &(0x7f0000000200)=0x0) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 00:41:40 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) poll(&(0x7f00000000c0)=[{r0}, {r0, 0x4}], 0x2, 0x0) poll(0x0, 0x0, 0x6c7c) close(r0) 00:41:40 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x8b, &(0x7f0000000180)=@string={0x8b, 0x3, "4495d808c77da5101d3acf4ddf7c47b78fdf3938c11cf08cf7b26a8056ba6d30090d63c845ab3fa1dd83004def281f40a373be7e8216daee202ef94132ac6e23ed91e6cd19d191278ea200e78857e2c3f85b3dba55ecae05f6fbc2300349b865c98a5e60beae7ab7181e28281b63f5b163113611eac185e41136ad22e1dc1b4e2524eefd8d7a57e94f"}}, {0x3, &(0x7f0000000240)=@string={0x3, 0x3, "96"}}]}) 00:41:40 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 00:41:40 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') getresgid(0x0, &(0x7f0000000180), 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ftruncate(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 00:41:41 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x6000) 00:41:41 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0xf4240, &(0x7f0000000080)=@raw=[@alu], &(0x7f0000000100)='GPL\x00', 0x0, 0xbc, &(0x7f0000000140)=""/188, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:41:41 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)) [ 1902.143217][T16218] usb 3-1: new high-speed USB device number 90 using dummy_hcd 00:41:41 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)) [ 1902.402455][T16218] usb 3-1: Using ep0 maxpacket: 32 00:41:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast1}}}}) 00:41:41 executing program 4: mkdir(&(0x7f0000002100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x24, 0x0, 0x30008}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) [ 1902.602483][T16218] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1902.612493][T16218] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 00:41:41 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) [ 1902.812533][T16218] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1902.822046][T16218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.830250][T16218] usb 3-1: Product: syz [ 1902.834940][T16218] usb 3-1: SerialNumber: syz 00:41:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)) 00:41:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) ioctl$UI_ABS_SETUP(r0, 0x4004556d, &(0x7f0000000000)) [ 1903.186807][T16218] usb 3-1: USB disconnect, device number 90 00:41:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000006c0), 0x3, 0x0) lseek(r0, 0x0, 0x0) 00:41:42 executing program 4: syz_open_dev$loop(&(0x7f00000067c0), 0x0, 0x80780) 00:41:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x6e, &(0x7f0000000240)=""/110}, &(0x7f0000000340)="36673b7faf7d", 0x0, 0x0, 0x0, 0x0, 0x0}) 00:41:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0xc008ae91, &(0x7f0000000100)) 00:41:45 executing program 5: unshare(0x400) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x301000, 0x0) connect$bt_rfcomm(r0, 0x0, 0x0) 00:41:45 executing program 0: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x28}, [@processing_unit={0xc, 0x24, 0x7, 0x0, 0x1, 0x0, "f7fdcf77e9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xfff, 0x0, 0x0, "32f95f"}, @as_header={0x7, 0x24, 0x1, 0x80}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xa6, 0x7, 0x7, {0x7, 0x25, 0x1, 0x0, 0x81, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x2}}}}}}}]}}, 0x0) 00:41:45 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 00:41:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 00:41:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x30, 0x4008880, &(0x7f0000000180)={0x2, 0x4e21, @private}, 0x10) 00:41:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000006c0), 0x3, 0x0) lseek(r0, 0x0, 0x0) 00:41:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000006c0), 0x3, 0x0) lseek(r0, 0x0, 0x0) 00:41:45 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x1a, 0x4, 0x0) syz_clone(0x44000400, &(0x7f0000000200), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="44e7112a0b0adda2a61e498d99eb669fb42e5dc0a889ffd0131c0c3631246af249948d85776fb70f0c37687887b75ae32212ddadbfe8586d5eb6c31261b91dfcd3d725ab5053747eb360fca2460dee2cf44e3a37e9104b924ac458c920ae69ce193e14e8361cf8d3fecc0c4b13828f97880cc37a1b2e77c9968387fe0bc737e64c") syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000580)={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x624, 0x1f, 0x400, 0x0, 0x0, 0x2000000}) 00:41:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@random="7edddf1e8400", @broadcast, @broadcast}}]}]}, 0x40}}, 0x0) [ 1906.592402][T16218] usb 1-1: new high-speed USB device number 27 using dummy_hcd 00:41:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000006c0), 0x3, 0x0) lseek(r0, 0x0, 0x0) [ 1906.842244][T16218] usb 1-1: Using ep0 maxpacket: 16 [ 1907.775002][T16218] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1907.785653][T16218] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 00:41:47 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r1, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x1a, &(0x7f0000000000)={r3}, &(0x7f0000000080)=0x8) [ 1908.416204][T16218] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1908.425607][T16218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.433851][T16218] usb 1-1: Product: syz [ 1908.438151][T16218] usb 1-1: Manufacturer: syz [ 1908.442893][T16218] usb 1-1: SerialNumber: syz 00:41:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 00:41:47 executing program 2: lseek(0xffffffffffffffff, 0x0, 0x0) [ 1908.952547][T16218] usb 1-1: 0:2 : does not exist [ 1909.062843][T16218] usb 1-1: USB disconnect, device number 27 [ 1909.238581][T29466] udevd[29466]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 00:41:48 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x6a02, 0x0) 00:41:48 executing program 4: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8916, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 00:41:48 executing program 3: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12015202000001402505a8a44000010203010902"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 00:41:48 executing program 2: lseek(0xffffffffffffffff, 0x0, 0x0) 00:41:48 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) 00:41:48 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 00:41:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0xe, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x3}]}, 0x1c}}, 0x0) 00:41:48 executing program 2: lseek(0xffffffffffffffff, 0x0, 0x0) [ 1909.932515][T16218] usb 4-1: new high-speed USB device number 43 using dummy_hcd 00:41:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)={[{@journal_path={'journal_path', 0x3d, './file0/file0'}}]}) [ 1910.215819][T30403] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 00:41:49 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x7) [ 1910.382133][T16218] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1910.484379][T16218] usb 4-1: config 0 has no interfaces? 00:41:49 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) write$binfmt_misc(r0, &(0x7f0000000240)={'syz0'}, 0x4) 00:41:49 executing program 2: r0 = syz_open_dev$loop(0x0, 0x3, 0x0) lseek(r0, 0x0, 0x0) 00:41:49 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000780)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x7d00, &(0x7f0000000000)=@raw=[@alu], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 00:41:49 executing program 0: ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000100)={0x8001, 0x0, 0x79, &(0x7f0000000000)="a920636590f3d3a7ac0ad7dbc665731800d8f17e73d2ce6bbb28a0fb58d48b468f98cb2ccfca6fa78dbd340a56deb876cd7b0031fc4d1602178529851e52cb0dafc680cc1d67b7db4c333dbb53735ab29750469243831bb183ffb5de7180cc8585ebd33f6689570aca1cb114cc0f7c8f92fa875c572fdef01c"}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x1a, 0x4, 0x0) syz_clone(0x44000400, &(0x7f0000000200)="759ae0215326f671e1f4b12edb11ce07a664d5ea831d86d5433c16ba315d41c35739ef292164c678a3f5bb168d8eeba851cc1062b0404d95accfff03340db486", 0x40, &(0x7f0000000300), 0x0, &(0x7f0000000380)="44e7112a0b0adda2a61e498d99eb669fb42e5dc0a889ffd0131c0c3631246af249948d85776fb70f0c37687887b75ae32212ddadbfe8586d5eb6c31261b91dfcd3d725ab5053747eb360fca2460dee2cf44e3a37e9104b924ac458") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) [ 1910.662895][T16218] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1910.676309][T16218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.685684][T16218] usb 4-1: Product: syz [ 1910.690734][T16218] usb 4-1: Manufacturer: syz [ 1910.695576][T16218] usb 4-1: SerialNumber: syz [ 1910.823291][T16218] usb 4-1: config 0 descriptor?? [ 1911.109594][T12604] usb 4-1: USB disconnect, device number 43 00:41:50 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffff6e, 0x2}, 0x10) getsockname$inet(r0, 0x0, &(0x7f0000000180)) 00:41:50 executing program 2: r0 = syz_open_dev$loop(0x0, 0x3, 0x0) lseek(r0, 0x0, 0x0) 00:41:50 executing program 4: r0 = openat$cuse(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000380)={0x33, 0x4, 0x0, {0x0, 0x12, 0x0, '/dev/input/event#\x00'}}, 0x33) 00:41:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 00:41:50 executing program 5: syz_clone(0x43a02500, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x0, &(0x7f0000000f00), 0x0, 0x0, 0x0, 0x0) 00:41:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) r5 = dup2(r3, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x13, &(0x7f0000000280)={r6, 0x7f}, 0x8) 00:41:51 executing program 2: r0 = syz_open_dev$loop(0x0, 0x3, 0x0) lseek(r0, 0x0, 0x0) 00:41:51 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0xf888, 0x0, 0x8, 0x2}]}, 0x10) 00:41:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000001c0)='./file0\x00', 0x202, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 00:41:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x0) lseek(r0, 0x0, 0x0) 00:41:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0xaead, 0x0) 00:41:53 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="fffffffbfffffffffffff7ff86dd602a10e4000829b7eab57309809e7f18636a556ba2d60072aac939"], 0x0) 00:41:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x0) lseek(r0, 0x0, 0x0) 00:41:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x0) lseek(r0, 0x0, 0x0) 00:41:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000001c0)='./file0\x00', 0x202, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 00:41:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000001c0)='./file0\x00', 0x202, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 00:41:53 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) 00:41:53 executing program 4: mkdir(&(0x7f0000002100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e9069f55f8a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c53182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6df7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682661e1e66f71d9c4037048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f75de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c54f9d2a4fe7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47100000000ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3de24a103efb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2275, 0x0) 00:41:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000001c0)='./file0\x00', 0x202, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 00:41:55 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0xf888, 0x0, 0x8, 0x2}]}, 0x10) 00:41:55 executing program 2: syz_open_dev$loop(&(0x7f00000006c0), 0x3, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 00:41:55 executing program 4: syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@block={'block', 0x3d, 0x825c0100}}]}) 00:41:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000001c0)='./file0\x00', 0x202, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 00:41:55 executing program 5: keyctl$chown(0x8, 0x0, 0xee01, 0x0) 00:41:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000001c0)='./file0\x00', 0x202, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 00:41:55 executing program 2: syz_open_dev$loop(&(0x7f00000006c0), 0x3, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 00:41:55 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0xf888, 0x0, 0x8, 0x2}]}, 0x10) 00:41:55 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$romfs(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[]) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002400)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_auto}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 00:41:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000001c0)='./file0\x00', 0x202, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 00:41:56 executing program 3: io_setup(0x81, &(0x7f0000002080)) [ 1917.905786][T30499] overlayfs: "xino" feature enabled using 2 upper inode bits. 00:41:57 executing program 2: syz_open_dev$loop(&(0x7f00000006c0), 0x3, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 00:41:57 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0xf012) writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}], 0x1) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}]) 00:41:57 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0xf888, 0x0, 0x8, 0x2}]}, 0x10) 00:41:57 executing program 0: prctl$PR_SET_VMA(0x67, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 00:41:57 executing program 2: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0xffffffa1, &(0x7f0000000080)=')\'\x00') 00:41:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4, 0x0, &(0x7f0000000080)) 00:41:58 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x4, 0x7ff) madvise(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x65) 00:41:58 executing program 2: r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x80287010, &(0x7f0000000000)) 00:41:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x4}]}}, &(0x7f0000000200)=""/151, 0x26, 0x97, 0x1}, 0x20) 00:41:58 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$romfs(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[]) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002400)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_auto}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 00:41:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_delroute={0x30, 0x19, 0x101, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0xf, @remote}]}, 0x30}}, 0x0) 00:41:58 executing program 2: r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x80287010, &(0x7f0000000000)) 00:41:58 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=')\'\x00') mlock2(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0) [ 1919.726245][T30530] netlink: 'syz-executor.0': attribute type 15 has an invalid length. 00:41:58 executing program 3: r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) 00:41:59 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0xf888, 0x0, 0x8, 0x2}]}, 0x10) 00:41:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1600bd74, &(0x7f0000000040), 0x4) 00:41:59 executing program 2: r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x80287010, &(0x7f0000000000)) 00:41:59 executing program 3: prctl$PR_SET_VMA(0x28, 0x20000000, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 00:41:59 executing program 5: add_key(&(0x7f0000000440)='encrypted\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="f5286fa6abfaca9eb9fbf1fe1276dd662b37c46a7b860b0bedb176b720d45b3c14b88de3fe93a988e941865889a7a4fe9fd57b59eca5a72c57a3bd3c33f8b1635f820a", 0x43, 0xfffffffffffffffb) [ 1920.484421][T30540] overlayfs: "xino" feature enabled using 2 upper inode bits. 00:41:59 executing program 0: prctl$PR_SET_VMA(0x26, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 00:41:59 executing program 2: r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x80287010, &(0x7f0000000000)) [ 1920.837195][T30550] trusted_key: encrypted_key: master key parameter 'Ô[<¸ãþ“©ˆéA†X‰§¤þŸÕ{Y쥧,W£½<3ø±c_‚ [ 1920.837195][T30550] ' is invalid 00:42:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000000080)) 00:42:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000000080)) 00:42:00 executing program 2: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) 00:42:00 executing program 0: io_setup(0xd8e, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) 00:42:00 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1000, 0x0, &(0x7f00000000c0)) r3 = openat$null(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000280)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x12) 00:42:01 executing program 1: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/block/loop0', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={r0, 0x11, 0x0, 0x0, 0x0}, 0x20) 00:42:01 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x4, 0x7ff) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) 00:42:01 executing program 3: r0 = openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30, 0x6}, 0x30) 00:42:01 executing program 2: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2082) pipe2(&(0x7f00000002c0), 0x0) 00:42:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8}]}, 0x24}}, 0x0) 00:42:01 executing program 4: r0 = openat$rtc(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8004700b, &(0x7f0000000200)) 00:42:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000e00)=@srh={0x0, 0x0, 0x4, 0x0, 0xd8}, 0x8) 00:42:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='net/rt_acct\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0xc0045878, 0x0) 00:42:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x6, 0x25, &(0x7f0000000040)=0x700, 0x4) 00:42:01 executing program 0: set_mempolicy(0x2, &(0x7f0000000000)=0x4, 0x7ff) set_mempolicy(0x0, 0x0, 0x1) 00:42:02 executing program 4: r0 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f0000002300)={0x18, 0x0, r1}, 0x18) 00:42:02 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x88800) ioctl$BLKBSZGET(r0, 0x80041270, &(0x7f0000000040)) 00:42:02 executing program 5: prctl$PR_SET_VMA(0x66, 0x20000000, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 00:42:02 executing program 2: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2082) 00:42:02 executing program 3: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x11) 00:42:02 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x4ffe0}}, 0x0) 00:42:02 executing program 0: pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x5}, &(0x7f00000001c0), 0x0) 00:42:02 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x5411, 0x0) 00:42:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1e, 0x4) 00:42:02 executing program 2: r0 = openat$fuse(0xffffff9c, &(0x7f0000008dc0), 0x2, 0x0) io_setup(0x9, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 00:42:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8943, &(0x7f0000000140)={'tunl0\x00', 0x0}) 00:42:02 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x5452, &(0x7f00000000c0)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev}) 00:42:02 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={0x0}}, 0x1) 00:42:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, &(0x7f0000000080)) 00:42:03 executing program 5: socket$inet(0x2, 0x0, 0xfffffffe) 00:42:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x13}]}, 0x24}}, 0x0) 00:42:03 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@dev, 0x0, 0x1, 0x0, 0xc}, 0x20) 00:42:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) 00:42:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000080)={0xb9, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x104) 00:42:03 executing program 5: syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x2082) [ 1924.600473][T30621] netlink: 'syz-executor.2': attribute type 19 has an invalid length. 00:42:03 executing program 1: mount$fuse(0x0, &(0x7f000000cd40)='.\x00', 0x0, 0x802000, 0x0) 00:42:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x0, 0x0, 0xfffffffffffff6a7}, {}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba40000e0ec2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f8352a200000000023f8c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000040)={0x0, {0x0, 0x6}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:42:03 executing program 4: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000001500)={0x2020}, 0x2020) 00:42:03 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 00:42:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x104) 00:42:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x18, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) 00:42:04 executing program 1: add_key(&(0x7f0000000200)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 00:42:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x6, 0x17, &(0x7f0000000040), 0x4) 00:42:04 executing program 4: r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x80247008, &(0x7f0000000000)) 00:42:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x248, 0x248, 0xffffffff, 0x248, 0x0, 0x474, 0x474, 0xffffffff, 0x474, 0x474, 0x5, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@srh={{0x2c}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@loopback, @ipv6=@mcast2, @icmp_id, @icmp_id}}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [], 'tunl0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c}}, {{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@local, @port, @icmp_id}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'ip6gretap0\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv4=@empty, @gre_key, @icmp_id}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544) 00:42:04 executing program 0: prctl$PR_SET_VMA(0x25, 0x20000000, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 00:42:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000000080)) 00:42:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0xd}]}, 0x24}}, 0x0) 00:42:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast}}}}) 00:42:04 executing program 4: request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000000)='\xcdnK}\xf3\x97{\xa3\xe0\xa7\x10\x98\x95s\xd5\xa1\x17*\xa30\xdaTm\xd68\xe3l\xed\xb0t\xf4\x99h\xfc\x8aR+\xfa<;\xe8\xf5\x96\x9b<\x1d\x15\xee\x16T`\xdeNt\xef', 0xfffffffffffffffc) 00:42:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000040)=0x9, 0x4) 00:42:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) 00:42:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x1b, 0x20, 0x0, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8}]}, 0x1b}}, 0x0) 00:42:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000040), 0x4) 00:42:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x18}]}, 0x24}}, 0x0) 00:42:05 executing program 4: request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000000)='\xcdnK}\xf3\x97{\xa3\xe0\xa7\x10\x98\x95s\xd5\xa1\x17*\xa30\xdaTm\xd68\xe3l\xed\xb0t\xf4\x99h\xfc\x8aR+\xfa<;\xe8\xf5\x96\x9b<\x1d\x15\xee\x16T`\xdeNt\xef', 0xfffffffffffffffc) 00:42:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x7bca, 0x4) 00:42:05 executing program 3: syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0xa4240) 00:42:05 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid\x00') 00:42:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 00:42:05 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 00:42:05 executing program 4: request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000000)='\xcdnK}\xf3\x97{\xa3\xe0\xa7\x10\x98\x95s\xd5\xa1\x17*\xa30\xdaTm\xd68\xe3l\xed\xb0t\xf4\x99h\xfc\x8aR+\xfa<;\xe8\xf5\x96\x9b<\x1d\x15\xee\x16T`\xdeNt\xef', 0xfffffffffffffffc) 00:42:05 executing program 0: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) 00:42:05 executing program 3: r0 = socket(0xa, 0x3, 0x3a) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 00:42:06 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2800, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80402, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1) 00:42:06 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12015202000001402505a8a44000010203010902240001"], &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) 00:42:06 executing program 4: request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000000)='\xcdnK}\xf3\x97{\xa3\xe0\xa7\x10\x98\x95s\xd5\xa1\x17*\xa30\xdaTm\xd68\xe3l\xed\xb0t\xf4\x99h\xfc\x8aR+\xfa<;\xe8\xf5\x96\x9b<\x1d\x15\xee\x16T`\xdeNt\xef', 0xfffffffffffffffc) 00:42:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0}) 00:42:06 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001700)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f00000043d8b209000b00020000b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x3}) 00:42:06 executing program 4: io_setup(0x7, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x5, 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f0000000780)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 00:42:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x5, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) [ 1927.673144][T30210] usb 2-1: new high-speed USB device number 21 using dummy_hcd 00:42:06 executing program 0: r0 = getpgrp(0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000340)) [ 1928.092411][T21577] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1928.162284][T30210] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1928.172730][T30210] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1928.453406][T21577] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1928.464765][T21577] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1928.474884][T21577] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1928.491017][T21577] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1928.492929][T30210] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1928.500579][T21577] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.509466][T30210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.526156][T30210] usb 2-1: Product: syz [ 1928.530497][T30210] usb 2-1: Manufacturer: syz [ 1928.535389][T30210] usb 2-1: SerialNumber: syz [ 1928.549319][T30210] usb 2-1: config 0 descriptor?? 00:42:07 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000640)) 00:42:07 executing program 0: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{0x0, 0xfffffffffffff000}}, 0x0) 00:42:07 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @any=0x1000000}, 0x10) [ 1928.724111][T21577] usb 4-1: config 0 descriptor?? 00:42:07 executing program 5: io_setup(0x7, &(0x7f0000000000)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 00:42:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c, 0x80000) connect$inet(r1, &(0x7f0000000140)={0x2, 0x2, @loopback}, 0x10) [ 1928.810382][T30210] usb 2-1: USB disconnect, device number 21 [ 1929.207873][T21577] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x4 [ 1929.231388][T21577] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 1929.244746][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 1929.331038][T21577] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 00:42:08 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000600)={{}, {0x9}}) 00:42:08 executing program 4: syz_usb_connect$uac1(0x0, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x20, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 00:42:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x211}, 0x14}}, 0x0) [ 1929.832842][T30210] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1930.082452][T30210] usb 5-1: Using ep0 maxpacket: 16 [ 1930.225824][T30210] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1930.235250][T30210] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1930.245642][T30210] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1930.433718][T30210] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1930.443252][T30210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.451428][T30210] usb 5-1: Product: syz [ 1930.455862][T30210] usb 5-1: Manufacturer: syz [ 1930.460632][T30210] usb 5-1: SerialNumber: syz [ 1930.782557][T30210] usb 5-1: 0:2 : does not exist [ 1930.802490][T30210] usb 5-1: USB disconnect, device number 25 [ 1930.874270][T29466] udevd[29466]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 00:42:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x6}, @val={0xc}}}}, 0x28}}, 0x0) 00:42:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c, 0x80000) connect$inet(r1, &(0x7f0000000140)={0x2, 0x2, @loopback}, 0x10) 00:42:10 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0\x00') 00:42:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000001b00)={0x334b, 0x0, 'client0\x00', 0x0, "373867e1a9cbd6c9", "5907a2881c8fc707dd3ac7281c00100097ae031a10f157722871c9e45ef30096"}) 00:42:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) 00:42:10 executing program 1: sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x80) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f00000001c0)=0x5a56eb31, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) r3 = syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f00000002c0)='./file0\x00', 0xffe, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000f80)="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"/413, 0x19d, 0x2000000000000600}, {0x0, 0x0, 0x30e00}], 0x2a104c8, &(0x7f0000000940)={[{@shortname_lower}, {@shortname_mixed}, {@uni_xlate}, {@fat=@nfs}, {@fat=@errors_continue}, {@fat=@debug}]}) mkdirat(r3, &(0x7f0000000040)='./file1\x00', 0x2300) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000480)={'veth0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x9, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000500), &(0x7f0000000600)=0x23) open(&(0x7f0000000400)='./file1/file0\x00', 0x185801, 0x0) unlink(&(0x7f0000000580)='./file0\x00') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="340000001100015050070008000000e5cb45b2bc", @ANYRES32=r2, @ANYBLOB="efb7e5f37894d6f77d259139444a66b0ca7edcc887fdba82c0466440106a5bf7808e33b0f95b824d55e3e988992aa5ff9cd83a3fadb30d72d32163c783d5831b479f77144c9282b287236454d2d5cae9ac9a07b48174c05e7eff2525570d27a7463a429b163f4d030e8cc1dde05dc5394003c797d3362a674f86e500000000000000389ff40dda07462afea47cefab000a5f326350ac3bb7568a73fb7e8a6349348ff825109db28eafb92a4abce60300000000000000ea965f24c98d0080564134ee32f21962d788f7bdaf00000000494056133d2523e5fc97deb6a81f73850f6736ffff346566a072910db939e12b08506de766a4c91167becc64aa0000000000"], 0x34}}, 0x24000004) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r3, @ANYRESOCT, @ANYRES16, @ANYBLOB="0fc430c95455194c4df3fec73f1bb647dd6ea484ab29b42614ac9485955ba02e4f7d1f49df55f648469be475c183b78b05335dc3ace679ce4a035c724766f8203a69d93473533c4ef2d7741280f5db886da92a640cb121fb8544657651299287b0f8e0f7fac15bd7b50352e1203fd605317d5cfa0dfe8aac7348f4751238543ca5fcf2291256a0b5b5c03a56b14cb5fdda13ea1ea034373b06c162351ffd00"/169], 0x150}, 0x1, 0x0, 0x0, 0x4041}, 0x4000800) pivot_root(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000540)='./file0\x00') pivot_root(&(0x7f0000000240)='./file1\x00', &(0x7f00000003c0)='./file1\x00') 00:42:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x1810000, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1931.220572][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 00:42:10 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x40}) 00:42:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000400000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)) 00:42:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c, 0x80000) connect$inet(r1, &(0x7f0000000140)={0x2, 0x2, @loopback}, 0x10) [ 1931.334747][T16218] usb 4-1: USB disconnect, device number 44 00:42:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000130000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)=ANY=[]) [ 1931.575562][T30744] loop5: detected capacity change from 0 to 16 [ 1931.627814][T30743] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1931.648035][T30744] loop5: unable to read partition table [ 1931.704959][T30744] loop5: partition table beyond EOD, truncated [ 1931.764634][T30750] loop4: detected capacity change from 0 to 4 [ 1931.895349][T30750] Dev loop4: unable to read RDB block 4 [ 1931.901259][T30750] loop4: unable to read partition table [ 1931.935899][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 1931.974373][T30755] loop3: detected capacity change from 0 to 131456 00:42:11 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) write$binfmt_misc(r1, &(0x7f0000000800)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2ffff, 0x0) [ 1931.996766][T30750] loop4: partition table beyond EOD, truncated [ 1932.078486][T30750] EXT4-fs (loop4): bad block size 16384 [ 1932.133942][T30755] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended 00:42:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c, 0x80000) connect$inet(r1, &(0x7f0000000140)={0x2, 0x2, @loopback}, 0x10) [ 1932.223576][T30755] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1932.283301][T30755] EXT4-fs (loop3): mount failed [ 1932.420789][T30743] team0: Port device team_slave_0 removed 00:42:11 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0x15, 0x0, &(0x7f0000000100)="480e003f0000007e5bc5795eca00054300ffffffba", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) 00:42:11 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind(r0, 0x0, 0x0) 00:42:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000130000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)=ANY=[]) [ 1932.758420][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 00:42:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2}, 0x1c) listen(r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c, 0x80000) [ 1932.949378][T30764] ===================================================== [ 1932.956915][T30764] BUG: KMSAN: uninit-value in batadv_get_vid+0x1b2/0x2e0 [ 1932.964267][T30764] batadv_get_vid+0x1b2/0x2e0 [ 1932.969111][T30764] batadv_interface_tx+0x2f1/0x1e00 [ 1932.974642][T30764] xmit_one+0x14e/0x5f0 [ 1932.978967][T30764] dev_hard_start_xmit+0xe5/0x370 [ 1932.984295][T30764] __dev_queue_xmit+0x1dec/0x31f0 [ 1932.989546][T30764] __bpf_redirect+0x1277/0x1430 [ 1932.994736][T30764] bpf_clone_redirect+0x324/0x470 [ 1932.999901][T30764] ___bpf_prog_run+0x7ed/0xaee0 [ 1933.005038][T30764] __bpf_prog_run512+0xc2/0x110 [ 1933.010036][T30764] bpf_test_run+0x592/0xd20 [ 1933.014829][T30764] bpf_prog_test_run_skb+0x1625/0x20b0 [ 1933.020462][T30764] bpf_prog_test_run+0x6a0/0x730 [ 1933.025709][T30764] __sys_bpf+0x9e8/0xeb0 [ 1933.030091][T30764] __ia32_sys_bpf+0x9c/0xe0 [ 1933.034890][T30764] __do_fast_syscall_32+0x87/0xe0 [ 1933.040052][T30764] do_fast_syscall_32+0x33/0x70 [ 1933.045189][T30764] do_SYSENTER_32+0x1b/0x20 [ 1933.049812][T30764] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1933.056435][T30764] [ 1933.058824][T30764] Uninit was created at: [ 1933.063452][T30764] __kmalloc_node_track_caller+0x86c/0x1230 [ 1933.069536][T30764] pskb_expand_head+0x1aa/0x1a00 [ 1933.074789][T30764] skb_ensure_writable+0x3ce/0x460 [ 1933.080040][T30764] bpf_clone_redirect+0x17b/0x470 [ 1933.085380][T30764] ___bpf_prog_run+0x7ed/0xaee0 [ 1933.090368][T30764] __bpf_prog_run512+0xc2/0x110 [ 1933.095507][T30764] bpf_test_run+0x592/0xd20 [ 1933.100150][T30764] bpf_prog_test_run_skb+0x1625/0x20b0 [ 1933.105919][T30764] bpf_prog_test_run+0x6a0/0x730 [ 1933.111006][T30764] __sys_bpf+0x9e8/0xeb0 [ 1933.115549][T30764] __ia32_sys_bpf+0x9c/0xe0 [ 1933.120202][T30764] __do_fast_syscall_32+0x87/0xe0 [ 1933.125532][T30764] do_fast_syscall_32+0x33/0x70 [ 1933.130522][T30764] do_SYSENTER_32+0x1b/0x20 [ 1933.135295][T30764] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1933.141919][T30764] [ 1933.144313][T30764] CPU: 0 PID: 30764 Comm: syz-executor.4 Not tainted 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1933.155102][T30764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1933.165368][T30764] ===================================================== [ 1933.172524][T30764] Disabling lock debugging due to kernel taint [ 1933.178753][T30764] Kernel panic - not syncing: kmsan.panic set ... [ 1933.185253][T30764] CPU: 0 PID: 30764 Comm: syz-executor.4 Tainted: G B 5.19.0-rc8-syzkaller-32535-gbba47a4b6421 #0 [ 1933.197283][T30764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1933.207435][T30764] Call Trace: [ 1933.210787][T30764] [ 1933.213781][T30764] dump_stack_lvl+0x1c8/0x256 [ 1933.218625][T30764] dump_stack+0x1a/0x1c [ 1933.222922][T30764] panic+0x4d3/0xc69 [ 1933.226969][T30764] kmsan_report+0x2cc/0x2d0 [ 1933.231606][T30764] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1933.237552][T30764] ? __msan_warning+0x92/0x110 [ 1933.242433][T30764] ? batadv_get_vid+0x1b2/0x2e0 [ 1933.247407][T30764] ? batadv_interface_tx+0x2f1/0x1e00 [ 1933.252928][T30764] ? xmit_one+0x14e/0x5f0 [ 1933.257376][T30764] ? dev_hard_start_xmit+0xe5/0x370 [ 1933.262703][T30764] ? __dev_queue_xmit+0x1dec/0x31f0 [ 1933.268024][T30764] ? __bpf_redirect+0x1277/0x1430 [ 1933.273182][T30764] ? bpf_clone_redirect+0x324/0x470 [ 1933.278499][T30764] ? ___bpf_prog_run+0x7ed/0xaee0 [ 1933.283636][T30764] ? __bpf_prog_run512+0xc2/0x110 [ 1933.288775][T30764] ? bpf_test_run+0x592/0xd20 [ 1933.293625][T30764] ? bpf_prog_test_run_skb+0x1625/0x20b0 [ 1933.299428][T30764] ? bpf_prog_test_run+0x6a0/0x730 [ 1933.304689][T30764] ? __sys_bpf+0x9e8/0xeb0 [ 1933.309233][T30764] ? __ia32_sys_bpf+0x9c/0xe0 [ 1933.314033][T30764] ? __do_fast_syscall_32+0x87/0xe0 [ 1933.319351][T30764] ? do_fast_syscall_32+0x33/0x70 [ 1933.324490][T30764] ? do_SYSENTER_32+0x1b/0x20 [ 1933.329277][T30764] ? entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1933.335965][T30764] ? kernel_text_address+0x11d/0x1a0 [ 1933.341509][T30764] ? __kernel_text_address+0x26/0x90 [ 1933.346936][T30764] ? batadv_interface_tx+0xf5/0x1e00 [ 1933.352367][T30764] ? xmit_one+0x14e/0x5f0 [ 1933.356817][T30764] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1933.362766][T30764] ? batadv_interface_tx+0xf5/0x1e00 [ 1933.368195][T30764] ? filter_irq_stacks+0x5c/0x1a0 [ 1933.373378][T30764] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1933.379330][T30764] __msan_warning+0x92/0x110 [ 1933.384044][T30764] batadv_get_vid+0x1b2/0x2e0 [ 1933.388852][T30764] batadv_interface_tx+0x2f1/0x1e00 [ 1933.394201][T30764] ? validate_xmit_xfrm+0x95/0x1ad0 [ 1933.399611][T30764] ? batadv_softif_is_valid+0x90/0x90 [ 1933.405132][T30764] ? batadv_softif_is_valid+0x90/0x90 [ 1933.410645][T30764] xmit_one+0x14e/0x5f0 [ 1933.414932][T30764] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1933.420894][T30764] dev_hard_start_xmit+0xe5/0x370 [ 1933.426051][T30764] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1933.432020][T30764] __dev_queue_xmit+0x1dec/0x31f0 [ 1933.437230][T30764] __bpf_redirect+0x1277/0x1430 [ 1933.442211][T30764] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1933.448160][T30764] bpf_clone_redirect+0x324/0x470 [ 1933.453320][T30764] ___bpf_prog_run+0x7ed/0xaee0 [ 1933.458288][T30764] ? __stack_depot_save+0x21/0x4b0 [ 1933.463554][T30764] __bpf_prog_run512+0xc2/0x110 [ 1933.468536][T30764] ? finish_task_switch+0x226/0xa20 [ 1933.473925][T30764] ? __switch_to+0x297/0x580 [ 1933.478698][T30764] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1933.484646][T30764] ? ktime_get+0x379/0x460 [ 1933.489204][T30764] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1933.495157][T30764] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1933.501101][T30764] ? __bpf_prog_run480+0x110/0x110 [ 1933.506329][T30764] bpf_test_run+0x592/0xd20 [ 1933.511006][T30764] bpf_prog_test_run_skb+0x1625/0x20b0 [ 1933.516627][T30764] ? __bpf_prog_test_run_raw_tp+0x380/0x380 [ 1933.522658][T30764] bpf_prog_test_run+0x6a0/0x730 [ 1933.527739][T30764] __sys_bpf+0x9e8/0xeb0 [ 1933.532135][T30764] __ia32_sys_bpf+0x9c/0xe0 [ 1933.536785][T30764] __do_fast_syscall_32+0x87/0xe0 [ 1933.541936][T30764] ? exit_to_user_mode_prepare+0x119/0x220 [ 1933.547870][T30764] do_fast_syscall_32+0x33/0x70 [ 1933.552833][T30764] do_SYSENTER_32+0x1b/0x20 [ 1933.557462][T30764] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1933.563980][T30764] RIP: 0023:0xf7f86549 [ 1933.568145][T30764] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1933.587897][T30764] RSP: 002b:00000000f7f815cc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1933.596501][T30764] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 1933.604596][T30764] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1933.612671][T30764] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1933.620821][T30764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1933.628904][T30764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1933.636996][T30764] [ 1933.640230][T30764] Kernel Offset: disabled [ 1933.645084][T30764] Rebooting in 86400 seconds..