4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xa9, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x40) 02:02:14 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r0, 0x29, 0x3, 0x0, &(0x7f00000000c0)) 02:02:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX], 0x48}}, 0x0) 02:02:14 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x89a0, 0x0) 02:02:14 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 02:02:14 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x16, r1, r2) 02:02:14 executing program 0: r0 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/class/spi_host', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) 02:02:14 executing program 5: add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0xfffff, 0x0) 02:02:14 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r0, 0x29, 0x50, 0x0, &(0x7f00000000c0)) 02:02:14 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)) 02:02:14 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x541b, 0x0) 02:02:15 executing program 1: r0 = inotify_init1(0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) 02:02:16 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xa9, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x40) 02:02:16 executing program 0: uselib(&(0x7f0000000040)='./file1\x00') 02:02:16 executing program 4: openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/module/ftdi_sio', 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000002740)) 02:02:16 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8982, 0x0) 02:02:16 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000007c0)=ANY=[], &(0x7f0000000100)=0xa8) 02:02:16 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) [ 2054.138667][T28181] fuse: Bad value for 'fd' 02:02:16 executing program 5: syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x1002008, &(0x7f0000000180)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}}) 02:02:16 executing program 0: r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) 02:02:16 executing program 2: bpf$BPF_BTF_LOAD(0x1a, 0x0, 0x0) 02:02:16 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "306ba499c697a41a1221d5daab7b4484c853141857f2a6aaad1d5a5f8e4a36b899bd53c3f561003014cf531f28698b6f541ec120075f37b8d1ea0d997a3bb267"}, 0x48, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x1d, r2, r1) 02:02:16 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x24) 02:02:16 executing program 2: r0 = socket(0x2, 0x2, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={0x0}}, 0x0) 02:02:18 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x40) 02:02:18 executing program 5: bpf$BPF_BTF_LOAD(0x23, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 02:02:18 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000200)) 02:02:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$MRT_PIM(r1, 0x0, 0xcf, 0x0, 0x0) 02:02:18 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 02:02:18 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x15, r1, 0x0) [ 2056.085766][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 2056.092636][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 02:02:18 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa3ddad63171b586dd601e987700442c000000000000000000000001006e000000000001"], 0x0) 02:02:18 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000040)={@random="fbd9ef034391", @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2, 0x0, 0x29, 0x0, @dev, @remote}, @timestamp_reply}}}}, 0x0) 02:02:18 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x7, 0x89, &(0x7f0000000400)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:02:18 executing program 2: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000380)=@keyring) 02:02:18 executing program 4: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) 02:02:18 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x4, &(0x7f00000001c0)="6bded955"}) 02:02:20 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x40) 02:02:20 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)="6ba5fccbb773c76f1429ee2cda5727449b9374d77dd36d2e948679f3e55beedb68a9910f72f8a6fdcfe5080dd8fe6d449c1e89dd6e2ac8bcd44a633a2709745ba4d18f0fccfef60f15e847a49ea9c165e86ae81d9276c6873fcb59a3ad4a371aec8e9cd9792a845442de7697e494c0bb937e8f5f6d9fabec5a1bcbecaac7029ae16266c191db690a", 0x88, r0) 02:02:20 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x11}]}}, &(0x7f0000000300)=""/203, 0x32, 0xcb, 0x1}, 0x20) 02:02:20 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0a9a3c", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, 0x0) 02:02:20 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000080)=0x24) 02:02:20 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) setfsuid(0xee01) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) [ 2058.024420][T28229] trusted_key: encrypted_key: master key parameter 't[яGejvƇ?YJ7쎜y*TBv~_mZbfi [ 2058.024420][T28229] ' is invalid 02:02:20 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0xc}], 0xc}, 0x0) 02:02:20 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) readlinkat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/127, 0x7f) 02:02:20 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x200}, 0x1c) 02:02:20 executing program 0: bpf$MAP_CREATE(0x15, &(0x7f00000004c0), 0x48) 02:02:20 executing program 4: openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/kernel/vmcoreinfo', 0x1839c2, 0x0) 02:02:20 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r0, 0x0, 0x0, 0x181, 0x0, 0x0) 02:02:22 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x40) 02:02:22 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8940, 0x0) 02:02:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000002680), 0xa1002, &(0x7f0000002700)) 02:02:22 executing program 4: bpf$BPF_BTF_LOAD(0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 02:02:22 executing program 2: r0 = getpgrp(0x0) kcmp(r0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 02:02:22 executing program 1: r0 = openat$rtc(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000060000000000000000700000081000000a70000a0c2bb1c000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0xe1, &(0x7f0000000180)=""/225, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0), 0x10}, 0x80) 02:02:22 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x38) 02:02:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1}, 0x48) 02:02:22 executing program 1: syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa3ddad63171b586dd601e98060000000000000014000000000000000000000000ff0200000000000000000000000000012f21"], 0x0) 02:02:22 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8906, 0x0) 02:02:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 02:02:22 executing program 5: r0 = openat$rtc(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) fchown(r0, 0x0, 0x0) 02:02:23 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000380)) 02:02:23 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, 0x1c) 02:02:23 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x1d, r1, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)={0x0, "12f278d9b55f7526f1d912b7595c67f074cad3a4517fae1303363bb97399a61cdfe87476a909f946d922923422f2be1353680c842bfb3156cde487fa16113731"}, 0x48, r1) 02:02:23 executing program 1: bpf$MAP_CREATE(0x22, &(0x7f00000004c0), 0x48) 02:02:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5df5, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)) 02:02:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x0, 0x0, 0x0, 0x46a}, 0x48) 02:02:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 02:02:24 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x7, r1, 0x0) 02:02:24 executing program 5: add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @auto=[0x32, 0x38, 0x30, 0x63, 0x34, 0x62, 0x33, 0x62, 0x62, 0x35, 0x37, 0x31, 0x5b, 0x34, 0x63, 0x35]}, &(0x7f0000000380)={0x0, "673f819cacfed20ae5c40625a621183a226f7c7b397b50aab57c2965c8a745dde1fac65a766081d3ed3086ea79e7d051480facfd98bd85369bd9e466ecc410a3"}, 0x48, 0xfffffffffffffffc) 02:02:24 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f00000016c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000001540)=[{&(0x7f0000000080)='f', 0x1}, {0x0}, {&(0x7f0000000180)="fa", 0x1}], 0x3}, 0x0) 02:02:24 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x3, r0, 0x0) 02:02:24 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x8, 0x0, 0x0) 02:02:25 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000380)) 02:02:25 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x10, r1, 0x0) 02:02:25 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x8c) 02:02:25 executing program 5: bpf$BPF_BTF_LOAD(0x11, 0x0, 0x0) 02:02:25 executing program 0: syz_emit_ethernet(0x62, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "74e93f", 0x2c, 0x2c, 0x0, @dev, @local, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}, 0x0) 02:02:25 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x38) 02:02:25 executing program 0: openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x10000, 0x0) 02:02:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa1002, &(0x7f0000002700)) 02:02:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 02:02:26 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0xc0189436, 0x0) 02:02:26 executing program 5: bpf$BPF_BTF_LOAD(0xc, 0x0, 0x0) 02:02:26 executing program 0: bpf$BPF_BTF_LOAD(0x1b, 0x0, 0x0) 02:02:27 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000380)) 02:02:27 executing program 1: bpf$BPF_BTF_LOAD(0x16, 0x0, 0x0) 02:02:27 executing program 5: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={0x0}, 0x10) 02:02:27 executing program 4: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [{0x20, '@!!#'}, {}, {}, {0x20, '}'}]}, 0x14) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x210, 0x70bd27, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x40804) r0 = openat$vsock(0xffffff9c, &(0x7f0000000280), 0x301402, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x14094}, 0x41) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8004, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/module/ftdi_sio', 0x80040, 0x100) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext3\x00', &(0x7f0000000680)='./file1\x00', 0x3e29, 0x2, &(0x7f0000000800)=[{0x0, 0x0, 0x4269}, {&(0x7f0000000780), 0x0, 0x80000000}], 0x0, &(0x7f0000000840)={[{@orlov}, {@user_xattr}, {@nogrpid}, {@dioread_nolock}, {@max_batch_time}], [{@obj_user}]}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000940)={0xa0, 0x0, 0x0, {{0x0, 0x2, 0x0, 0x8000000000000001, 0x5, 0x0, {0x6, 0x0, 0x0, 0x8, 0x3d0, 0x40, 0x0, 0x0, 0x6, 0x2000}}}}, 0xa0) 02:02:27 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa3ddad63171b586dd601e9877004433000000000000000000000001006e000000000001"], 0x0) 02:02:27 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000005c0)={[{@hide}, {@sbsector}, {@unhide}, {@nocompress}], [{@appraise}]}) 02:02:27 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f00000005c0)) 02:02:27 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8904, 0x0) [ 2065.592518][T28332] loop4: detected capacity change from 0 to 264192 [ 2065.611067][T28332] EXT4-fs: Ignoring removed orlov option [ 2065.618299][T28332] ext3: Unknown parameter 'obj_user' 02:02:27 executing program 5: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x100442, &(0x7f0000000900)) 02:02:27 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, 0x0, 0x0) 02:02:28 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000040), 0x24, 0x0) 02:02:28 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x4e, 0x0, 0x0) 02:02:29 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 02:02:29 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x402c5828, 0x0) 02:02:29 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8905, 0x0) 02:02:29 executing program 0: syz_emit_ethernet(0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6074e93f00000000000000fe8000000000000000ad159f0669ef113afd000000000000000000000100000000f3"], 0x0) 02:02:29 executing program 4: bpf$BPF_BTF_LOAD(0x22, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 02:02:29 executing program 2: syz_emit_ethernet(0x62, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "74e93f", 0x13, 0x4, 0x0, @dev, @local, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}, 0x0) 02:02:29 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) 02:02:29 executing program 0: mq_open(&(0x7f00000003c0)=':\x00\xf3\xf8\xa9\x84P2r\xb1\rQ;\x12\x82\\\x00\x89\xfb\xca2\x89\x1eIZe\x89g\x05c\xa1\x95%\x0ew\xd3N\xdd\x9d\x9b\x9c\xa3/I\x89\xa4\xe8\xde\xfeu\xca\x01~d\x86!\b\xe1s\xcal\xd8\x97-V\xc0\xc79*\"\x14z\xbf\xdbp\xc6\'S\xf64H\x82?\x0e\x1e\x19\xe6\x82\x99\xc3U=\x12\x19\xe8\x1c#g\xcd#\xe7\x90\xc2\xde\x13\xdeh\xe7\x15fb\x06\x029\xf5\xc8,R\xe9\xcc\x93\b\x93a\xce\x00\x8c\xc8\x1bQq\x80\x92B\xd2T\xf4\xb9U1J0\xbfL\xc5\x06\xe8\x87,\xc7\x9cj\"`\x11T\xe9L\xddq\x9c\xe6\xfc\xc9u\xc9\x9c\xbd)Z\xbc\xdeH\x96gY\xd5\x8dL\b\xa6\xdbp\xcd\x99\xaf9\xfa\\n\xdf\xd6)\ts\xc8\xd39\xe6\a\xbb\x96\xf2Hp+\x8c', 0x0, 0x0, 0x0) 02:02:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5df5, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, "f1b4172a4fe7a118f26763630da2f82a65e177a8329ddd6cc6f5939bd5ca4539"}) 02:02:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0x0) 02:02:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB='s\n'], 0x38) 02:02:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5}, 0x48) 02:02:31 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 02:02:31 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f00000016c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000001540)=[{&(0x7f0000000080)="66f7c0", 0x3}, {0x0}, {&(0x7f0000000180)="fa", 0x1}], 0x3}, 0x0) 02:02:31 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x6, r1, 0x0) 02:02:31 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x4004700c, 0x0) 02:02:31 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r0, 0x29, 0x18, 0x0, &(0x7f00000000c0)) 02:02:31 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x18) 02:02:31 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 02:02:31 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x2}]}}, &(0x7f0000000300)=""/203, 0x32, 0xcb, 0x1}, 0x20) 02:02:31 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) 02:02:31 executing program 0: openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x14000, 0x0) 02:02:31 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f00000014c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfa4a}, 0x1c, 0x0, 0x0, &(0x7f0000001340)=[@hopopts={{0x14}}, @hopopts_2292={{0x14}}], 0x28}, 0x0) 02:02:32 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x894c, 0x0) 02:02:34 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 02:02:34 executing program 5: openat$sysfs(0xffffff9c, &(0x7f0000000240)='/sys/kernel/uevent_seqnum', 0x80e481, 0x0) 02:02:34 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x1d, r1, 0x0) 02:02:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, 0x0, 0x0) 02:02:34 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x922, 0x0) 02:02:34 executing program 4: socket$inet6(0xa, 0x0, 0x409) 02:02:34 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000002740)) 02:02:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x80084503, 0x0) 02:02:34 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000007c0)=ANY=[@ANYBLOB="726177c33700000000002000000000000000000000000000000000000000000084"], &(0x7f0000000100)=0xa8) 02:02:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x4, 0x2, 0x101}, 0x14}}, 0x0) 02:02:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1c5, 0x0, 0x2}]}) 02:02:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0xfffffdef}}, 0x0) 02:02:36 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0003"], 0x3c}}, 0x0) 02:02:36 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x1274, 0x0) 02:02:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002500)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 02:02:36 executing program 4: openat$drirender128(0xffffffffffffff9c, 0x0, 0x4d0000, 0x0) 02:02:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0xc0}, 0x14}}, 0x0) 02:02:36 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)) [ 2074.165065][T28443] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x34}}, 0x0) [ 2074.231529][T28443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:36 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x40081271, 0x0) 02:02:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000000201"], 0x3c}}, 0x0) 02:02:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x127c, 0x0) 02:02:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0xffff}, 0x14}}, 0x0) 02:02:36 executing program 4: socketpair(0x0, 0x8080b, 0x0, &(0x7f0000000200)) 02:02:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}, 0x300}, 0x0) [ 2074.829023][T28458] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 02:02:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="400080"], 0x40}}, 0x0) 02:02:37 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x2}]}}, &(0x7f0000000300)=""/203, 0x32, 0xcb, 0x1}, 0x20) [ 2075.012001][T28462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2075.120879][T28462] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, 0x2, 0xc, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x3c}}, 0x0) 02:02:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000b0, 0x0, 0x2}]}) 02:02:37 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000380)="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", 0x2000, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000000100)={0x20, 0x0, r2}, 0x20) 02:02:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) 02:02:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x401}, 0x14}}, 0x0) 02:02:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) 02:02:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc000000000101"], 0xbc}}, 0x0) 02:02:38 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) 02:02:38 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000380)="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", 0x2000, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f0000000080)={0x90, 0x0, r2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) 02:02:38 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0) [ 2076.069977][T28489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2076.175711][T28489] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2076.416441][T28493] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. 02:02:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 02:02:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:38 executing program 3: r0 = socket(0xa, 0x3, 0x20) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 02:02:38 executing program 2: r0 = socket(0xa, 0x3, 0x20) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x24000071) 02:02:39 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 02:02:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x18, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) 02:02:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)={0x14}, 0x14}}, 0x0) 02:02:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000b7, 0x0, 0x2}]}) 02:02:39 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 2077.232709][T28514] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2077.366762][T28514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000140), 0x2, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, 0x2, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x3c}}, 0x0) 02:02:39 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f000000ad40)='ns/time\x00') 02:02:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:40 executing program 3: syz_open_dev$evdev(&(0x7f0000000040), 0x7ff, 0x200) 02:02:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0xf}, 0x14}}, 0x0) 02:02:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000b7, 0x0, 0x2}]}) 02:02:40 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x1278, 0x0) 02:02:40 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000200)="dc", 0x1}], 0x1, &(0x7f00000016c0)=[{0x28, 0x0, 0x0, "5729ff6b3aeff4b8663b05edaeef3618b7"}], 0x28}, 0x0) 02:02:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c01000002020102000000000000000600074000340002"], 0x13c}}, 0x0) 02:02:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10024}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x3c}}, 0x0) 02:02:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:02:40 executing program 4: r0 = socket(0xa, 0x3, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 02:02:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x6}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x3c}}, 0x0) 02:02:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000b7, 0x0, 0x2}]}) 02:02:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x18, 0x0, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_LABELS={0x4}]}, 0x18}}, 0x0) 02:02:41 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000380), 0x4) [ 2079.193793][T28561] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 02:02:41 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000380)="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", 0x2000, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) 02:02:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x7ffffffff000}}, 0x0) 02:02:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0xa8, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xfe4b, 0x2, 0x0, 0x1, {0x2b}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT={0x0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @mcast1}, {0x0, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @local}, {0x0, 0x2, @private}}}, @CTA_TUPLE_PROTO]}, @CTA_EXPECT_NAT_TUPLE={0x0, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @empty}, {0x0, 0x4, @empty}}}, @CTA_TUPLE_PROTO, @CTA_TUPLE_PROTO, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x88}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @empty}, {0x0, 0x4, @dev}}}, @CTA_TUPLE_ZONE]}]}, @CTA_EXPECT_MASTER={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO, @CTA_TUPLE_PROTO, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @empty}, {0x0, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @broadcast}, {0x0, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO, @CTA_TUPLE_ZONE]}]}, 0xa8}}, 0x0) 02:02:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000b7, 0x0, 0x2}]}) 02:02:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x34}}, 0x0) [ 2079.763837][T28576] __nla_validate_parse: 6 callbacks suppressed [ 2079.763905][T28576] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2079.784980][T28576] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 02:02:42 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r0, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}}, 0x14}}, 0x0) 02:02:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009104"]) 02:02:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) [ 2080.024473][T28583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0xf}}, 0x0) [ 2080.111034][T28583] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:42 executing program 2: socketpair(0x26, 0x5, 0x2, &(0x7f00000000c0)) 02:02:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[], 0x40}}, 0x0) 02:02:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000680)) 02:02:42 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x400, 0x4) 02:02:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009104"]) [ 2080.672153][T28600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:42 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000380)="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", 0x2000, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, r2}, 0x18) [ 2080.754731][T28601] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x18, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4, 0x6}]}, 0x18}}, 0x0) 02:02:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10024}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x13, 0x9, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x3c}}, 0x0) 02:02:43 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x14}, 0x14}}, 0x0) sendmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000140)="88", 0x1}], 0x1}, 0x4140) 02:02:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x2, &(0x7f0000001300)={0x0, @in={{0x2, 0x0, @loopback}}}, &(0x7f00000013c0)=0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1}, &(0x7f0000000040)=0x8) 02:02:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x23, 0x4) 02:02:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009104"]) 02:02:43 executing program 4: socketpair(0x1, 0x4, 0x0, &(0x7f0000000080)) [ 2081.613704][T28624] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 02:02:43 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000040)={0x2, @long}, 0x2) 02:02:43 executing program 1: socket(0x29, 0x5, 0xf9d) [ 2081.708786][T28628] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:43 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000800)={0x0, @in={{0x2, 0x0, @dev}}}, 0x5507684123173836) [ 2081.777582][T28631] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:44 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x76, &(0x7f0000001300)={0x0, @in={{0x2, 0x0, @loopback}}}, &(0x7f00000013c0)=0x84) 02:02:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009104"]) 02:02:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x2, &(0x7f0000001300)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000013c0)=0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r3}, &(0x7f00000001c0)=0x8) 02:02:44 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080), 0x4) 02:02:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x9c) 02:02:44 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x3713}]}, &(0x7f00000001c0)=0x10) [ 2082.429740][T28647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2082.510566][T28647] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2082.594979][T28654] sctp: [Deprecated]: syz-executor.1 (pid 28654) Use of int in maxseg socket option. [ 2082.594979][T28654] Use struct sctp_assoc_value instead 02:02:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x2, &(0x7f0000001300)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000013c0)=0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x8) 02:02:44 executing program 1: write$damon_contexts(0xffffffffffffffff, 0x0, 0x0) 02:02:45 executing program 5: r0 = syz_io_uring_setup(0x2b, &(0x7f0000000300), &(0x7f0000ffd000/0x1000)=nil, &(0x7f000014d000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000140)="ba", 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 02:02:45 executing program 3: syz_open_dev$vcsa(&(0x7f0000000100), 0x4, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x0, 0x8241) syz_open_dev$vcsa(&(0x7f00000007c0), 0x1, 0x0) 02:02:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14}, 0x14}}, 0x0) 02:02:45 executing program 1: syz_io_uring_setup(0x7fff, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 02:02:45 executing program 2: syz_io_uring_setup(0x7fff, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x303}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD, 0x0) r1 = getuid() syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x1024044, &(0x7f00000002c0)={[{@datacow}, {@discard}, {@nodatacow}, {@rescan_uuid_tree}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@euid_eq}]}) syz_mount_image$cramfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x3, &(0x7f00000016c0)=[{&(0x7f0000000480), 0x0, 0x55}, {0x0, 0x0, 0xffff}, {0x0}], 0x0, &(0x7f0000001780)={[], [{@context={'context', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'btrfs\x00'}}, {@subj_user={'subj_user', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}) getuid() syz_mount_image$zonefs(0x0, 0x0, 0x0, 0x2, &(0x7f0000002c40)=[{0x0}, {0x0}], 0x1006014, 0x0) syz_mount_image$omfs(0x0, &(0x7f0000002dc0)='./file0\x00', 0x0, 0x1, &(0x7f0000002f00)=[{&(0x7f0000002e00)="b6", 0x1}], 0x0, &(0x7f0000002f40)={[{'unconfined_u'}], [{@uid_lt}, {@dont_hash}, {@uid_lt={'uid<', r1}}]}) write$damon_contexts(0xffffffffffffffff, &(0x7f0000003000)=[{' ', './file0'}], 0x1) syz_open_dev$vcsa(&(0x7f0000003600), 0x0, 0x0) syz_mount_image$omfs(&(0x7f0000003640), 0x0, 0x0, 0x3, &(0x7f0000004840)=[{&(0x7f00000036c0)="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", 0xd12, 0xfd75}, {0x0}, {&(0x7f0000004700)="15f6b41d5a4d5f7506e63c684916983a7267cb7179548ee04e8404e1a26cbeb8bdc3d58210ac2f8d9570a663dcb563709326c3b0e872746815373bc7dbb81bd5fc5367c5f6c76b0db81ff1293343b17a4672d7659ab83013bae2e6b8795b190db19f89cde3f491f7ab7749019fdb5411d6dfa9aa62fa9baa82b05452d574d9cc892491933b53e82855d6e41af462a09222fed0a7d771b7f0ecf7042d49a2a1787f790198b4824d70e33a92fce4e8971732308bc22c4597ab73ec1e4dc0", 0xbd, 0xbb}], 0x20000, 0x0) 02:02:45 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000000)="58cd0ee1e97425a2ba906e045eed7ca91a9ba0658a3f1fa05f9ef744c8c63fe6dbc00bc476d3f25f14ac3bddfa2a225151ad5d0ded14af7e5d9511ef9842b34b9132072aa9e4b5dc35e643dc75a31c996dadea590761363b6b4873af2ebeb6b17625d6b50c548478b9aef9ac57a5081da2", 0x71) 02:02:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:45 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 02:02:45 executing program 3: syz_io_uring_setup(0x7fff, &(0x7f0000000000)={0x0, 0x54e8, 0x10, 0x2, 0x303}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$vcsa(0x0, 0x2, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) 02:02:46 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000540)={0x7}, 0x7) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 2083.886293][T28676] loop2: detected capacity change from 0 to 255 02:02:46 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x4, 0x141000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000280)={{0x1f, 0xdb}, 'port0\x00', 0x0, 0x0, 0xffffffff, 0x3, 0x1000, 0x1, 0x7}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1, @disconnect={{0x406, 0x3}, {0xc9, 0x8}}}, 0x7) [ 2083.933248][T28676] cramfs: Unknown parameter 'context' 02:02:46 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x22000, &(0x7f0000000100)=@framed={{}, [@exit]}, &(0x7f0000000280)='GPL\x00', 0x0, 0xba, &(0x7f00000002c0)=""/186, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2084.012628][T28685] blk_print_req_error: 43 callbacks suppressed [ 2084.012692][T28685] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2084.028478][T28685] buffer_io_error: 42 callbacks suppressed [ 2084.028535][T28685] Buffer I/O error on dev loop2, logical block 0, async page read [ 2084.044867][T28685] ldm_validate_partition_table(): Disk read failed. [ 2084.051758][T28685] Dev loop2: unable to read RDB block 0 [ 2084.057511][T28685] loop2: unable to read partition table 02:02:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2084.122699][T28314] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2084.165900][T28685] loop2: partition table beyond EOD, truncated 02:02:46 executing program 2: syz_io_uring_setup(0x7fff, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x303}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD, 0x0) r1 = getuid() syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x1024044, &(0x7f00000002c0)={[{@datacow}, {@discard}, {@nodatacow}, {@rescan_uuid_tree}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@euid_eq}]}) syz_mount_image$cramfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x3, &(0x7f00000016c0)=[{&(0x7f0000000480), 0x0, 0x55}, {0x0, 0x0, 0xffff}, {0x0}], 0x0, &(0x7f0000001780)={[], [{@context={'context', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'btrfs\x00'}}, {@subj_user={'subj_user', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}) getuid() syz_mount_image$zonefs(0x0, 0x0, 0x0, 0x2, &(0x7f0000002c40)=[{0x0}, {0x0}], 0x1006014, 0x0) syz_mount_image$omfs(0x0, &(0x7f0000002dc0)='./file0\x00', 0x0, 0x1, &(0x7f0000002f00)=[{&(0x7f0000002e00)="b6", 0x1}], 0x0, &(0x7f0000002f40)={[{'unconfined_u'}], [{@uid_lt}, {@dont_hash}, {@uid_lt={'uid<', r1}}]}) write$damon_contexts(0xffffffffffffffff, &(0x7f0000003000)=[{' ', './file0'}], 0x1) syz_open_dev$vcsa(&(0x7f0000003600), 0x0, 0x0) syz_mount_image$omfs(&(0x7f0000003640), 0x0, 0x0, 0x3, &(0x7f0000004840)=[{&(0x7f00000036c0)="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", 0xd12, 0xfd75}, {0x0}, {&(0x7f0000004700)="15f6b41d5a4d5f7506e63c684916983a7267cb7179548ee04e8404e1a26cbeb8bdc3d58210ac2f8d9570a663dcb563709326c3b0e872746815373bc7dbb81bd5fc5367c5f6c76b0db81ff1293343b17a4672d7659ab83013bae2e6b8795b190db19f89cde3f491f7ab7749019fdb5411d6dfa9aa62fa9baa82b05452d574d9cc892491933b53e82855d6e41af462a09222fed0a7d771b7f0ecf7042d49a2a1787f790198b4824d70e33a92fce4e8971732308bc22c4597ab73ec1e4dc0", 0xbd, 0xbb}], 0x20000, 0x0) [ 2084.457068][ T24] audit: type=1804 audit(1994724166.619:41): pid=28691 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir68127728/syzkaller.MdtBCr/1754/file0" dev="sda1" ino=1161 res=1 errno=0 [ 2084.532686][T28314] usb 6-1: config 0 has no interfaces? 02:02:46 executing program 4: syz_open_dev$vcsa(&(0x7f0000000100), 0x4, 0x141000) 02:02:46 executing program 1: syz_open_dev$vcsa(&(0x7f0000000380), 0x0, 0x8241) [ 2084.672821][T28314] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2084.682926][T28314] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2084.691142][T28314] usb 6-1: Product: syz [ 2084.695586][T28314] usb 6-1: Manufacturer: syz [ 2084.801386][T28314] usb 6-1: config 0 descriptor?? 02:02:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2084.911816][T28698] loop2: detected capacity change from 0 to 255 [ 2084.958039][T28698] cramfs: Unknown parameter 'context' [ 2085.069308][T28314] usb 6-1: USB disconnect, device number 31 [ 2085.361747][T28705] __nla_validate_parse: 6 callbacks suppressed [ 2085.361809][T28705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:47 executing program 5: syz_clone(0x29010000, 0x0, 0x0, 0x0, 0x0, 0x0) 02:02:47 executing program 4: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000049c0), 0x0, 0x0, 0x2, &(0x7f0000004c40)=[{&(0x7f0000004a40), 0x0, 0x7}, {&(0x7f0000004a80)="c6", 0x1}], 0x2000010, &(0x7f0000004cc0)={[{@fragment_metadata}, {@usebackuproot}], [{@smackfsdef={'smackfsdef', 0x3d, '-\':-(+*\\-'}}, {@obj_type={'obj_type', 0x3d, '%:{'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, 'barrier'}}]}) 02:02:47 executing program 2: syz_io_uring_setup(0x7fff, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_mount_image$pvfs2(0x0, 0x0, 0x0, 0x0, &(0x7f0000003240), 0x0, 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000004c40)=[{&(0x7f0000004a40)="81", 0x1}], 0x0, 0x0) 02:02:47 executing program 1: syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x141000) 02:02:47 executing program 3: syz_open_dev$vcsa(&(0x7f0000000100), 0x4, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000380), 0x0, 0x8241) syz_open_dev$vcsa(&(0x7f00000007c0), 0x1, 0x400) 02:02:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:02:48 executing program 3: syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:02:48 executing program 4: syz_mount_image$omfs(&(0x7f0000002d80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$pvfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f00000049c0), &(0x7f0000004a00)='./file0\x00', 0x200, 0x1, &(0x7f0000004c40)=[{0x0}], 0x0, &(0x7f0000004cc0)={[{@usebackuproot}]}) 02:02:48 executing program 2: syz_open_dev$vcsa(0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000380), 0x0, 0x8241) [ 2086.052484][T28717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x1c840, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:02:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2086.715516][T28729] loop4: detected capacity change from 0 to 1 [ 2086.728599][T28730] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 02:02:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) [ 2086.768806][T18192] Dev loop4: unable to read RDB block 1 [ 2086.775023][T18192] loop4: unable to read partition table 02:02:49 executing program 2: r0 = open(0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x101000, 0xc1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb20, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x2}, 0x80, 0x0}}], 0x1, 0x20840) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet(0x2, 0x6, 0x0) r7 = fcntl$getown(r1, 0x9) syz_open_procfs(r7, &(0x7f0000000480)='net/stat\x00') r8 = dup(r6) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r3, 0x2ff, 0x6a000000, 0x0, 0x0, 0x5a) [ 2086.843993][T18192] loop4: partition table beyond EOD, truncated [ 2086.878660][T28733] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:49 executing program 4: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000480)) r0 = gettid() syz_open_procfs$namespace(r0, 0x0) [ 2087.260056][T28731] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 02:02:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "45c8281f4a846524"}) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000480)) syz_open_procfs$namespace(0x0, &(0x7f0000000500)='ns/time_for_children\x00') ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000540)={0xd, 0x1}) 02:02:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:02:49 executing program 4: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000002f00)=[{&(0x7f0000002e00)="b663df", 0x3}], 0x0, 0x0) [ 2088.020419][T28751] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:50 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004740)={0x6, 0x3, &(0x7f0000004600)=@framed, &(0x7f0000004640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:02:50 executing program 4: syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) [ 2088.402235][T28751] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:50 executing program 2: ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000200)) 02:02:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x1c840, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:02:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:02:52 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) 02:02:52 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000001440), 0x202002, 0x0) 02:02:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80) [ 2090.027504][T28766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2090.143603][T28773] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:52 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 02:02:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x127a, 0x0) [ 2090.295951][T28776] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 02:02:52 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) [ 2090.538368][T28780] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 02:02:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:52 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x22000, &(0x7f0000000100)=@framed={{}, [@exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xba, &(0x7f00000002c0)=""/186, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:02:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) 02:02:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x1c840, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 2091.041532][T28791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) [ 2091.112740][ T3566] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2091.153260][T28791] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:53 executing program 3: syz_io_uring_setup(0x7, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x9e, 0x64, 0xda, 0x10, 0x789, 0x163, 0x7f31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x97, 0x31, 0xcf, 0x8}}]}}]}}, 0x0) keyctl$get_persistent(0x16, 0xee00, 0xfffffffffffffffd) r0 = syz_open_dev$vcsu(&(0x7f00000013c0), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 02:02:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2091.354973][T28797] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2091.483063][ T3566] usb 3-1: config 0 has no interfaces? [ 2091.513363][T28799] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2091.603063][ T3566] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2091.612697][ T3566] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2091.620983][ T3566] usb 3-1: Product: syz [ 2091.625680][ T3566] usb 3-1: Manufacturer: syz 02:02:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x1c840, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 2091.705762][ T3566] usb 3-1: config 0 descriptor?? [ 2091.950467][T28209] usb 3-1: USB disconnect, device number 17 [ 2091.988216][T28805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) [ 2092.069726][T28810] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2092.094746][T28314] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2092.173844][T28811] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 02:02:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x1c840, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 2092.360139][T28314] usb 4-1: Using ep0 maxpacket: 16 [ 2092.528149][T28816] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:54 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000500)='ns/time_for_children\x00') 02:02:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), 0xffffffffffffffff) [ 2092.673323][T28314] usb 4-1: New USB device found, idVendor=0789, idProduct=0163, bcdDevice=7f.31 [ 2092.685788][T28314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.694613][T28314] usb 4-1: Product: syz [ 2092.698955][T28314] usb 4-1: Manufacturer: syz [ 2092.703803][T28314] usb 4-1: SerialNumber: syz 02:02:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2092.803751][T28821] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 02:02:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) [ 2092.895038][T28314] usb 4-1: config 0 descriptor?? 02:02:55 executing program 4: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) 02:02:55 executing program 2: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000500), 0x2) [ 2093.198720][T28314] usb 4-1: USB disconnect, device number 10 [ 2093.211545][T28826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2093.242959][T18247] udevd[18247]: setting mode of /dev/bus/usb/004/010 to 020664 failed: No such file or directory [ 2093.305630][T18247] udevd[18247]: setting owner of /dev/bus/usb/004/010 to uid=0, gid=0 failed: No such file or directory 02:02:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 02:02:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) 02:02:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:02:56 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) [ 2093.875684][T28835] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2093.927979][T28837] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2094.080641][T28822] not chained 730000 origins [ 2094.085691][T28822] CPU: 1 PID: 28822 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2094.095987][T28822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2094.106156][T28822] Call Trace: [ 2094.109521][T28822] [ 2094.112528][T28822] dump_stack_lvl+0x1c8/0x256 [ 2094.117392][T28822] dump_stack+0x1a/0x1c [ 2094.121715][T28822] kmsan_internal_chain_origin+0x78/0x120 [ 2094.127599][T28822] ? ip_skb_dst_mtu+0xcb0/0xcb0 [ 2094.132635][T28822] ? __get_compat_msghdr+0x5b/0x750 [ 2094.137970][T28822] ? get_compat_msghdr+0x8c/0x1c0 [ 2094.143129][T28822] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2094.149087][T28822] ? __get_compat_msghdr+0x5b/0x750 [ 2094.154408][T28822] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2094.160364][T28822] ? should_fail+0x3f/0x810 [ 2094.165005][T28822] ? __stack_depot_save+0x21/0x4b0 [ 2094.170255][T28822] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2094.176643][T28822] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2094.182600][T28822] __msan_chain_origin+0xbd/0x140 [ 2094.187762][T28822] __get_compat_msghdr+0x514/0x750 [ 2094.193027][T28822] get_compat_msghdr+0x8c/0x1c0 [ 2094.197998][T28822] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2094.203949][T28822] ___sys_sendmsg+0x19b/0x350 [ 2094.208753][T28822] ? __sys_sendmmsg+0x5a9/0xa40 [ 2094.213725][T28822] ? filter_irq_stacks+0x5c/0x1a0 [ 2094.220131][T28822] ? __stack_depot_save+0x21/0x4b0 [ 2094.225377][T28822] ? kmsan_internal_check_memory+0x94/0x530 [ 2094.231419][T28822] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2094.237371][T28822] __sys_sendmmsg+0x544/0xa40 [ 2094.242200][T28822] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2094.248154][T28822] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2094.254122][T28822] __ia32_compat_sys_sendmmsg+0xc4/0x130 [ 2094.259894][T28822] __do_fast_syscall_32+0xa2/0x100 [ 2094.265129][T28822] ? exit_to_user_mode_prepare+0x119/0x220 [ 2094.271064][T28822] do_fast_syscall_32+0x33/0x70 [ 2094.276036][T28822] do_SYSENTER_32+0x1b/0x20 [ 2094.280654][T28822] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2094.287116][T28822] RIP: 0023:0xf7fe3549 [ 2094.291271][T28822] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2094.311019][T28822] RSP: 002b:00000000f7fbd5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 2094.319551][T28822] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200092c0 [ 2094.327634][T28822] RDX: 00000000000004ff RSI: 0000000000000000 RDI: 0000000000000000 [ 2094.335700][T28822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2094.343760][T28822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2094.351821][T28822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2094.359904][T28822] [ 2094.368017][T28822] Uninit was stored to memory at: [ 2094.374326][T28822] __get_compat_msghdr+0x514/0x750 [ 2094.379608][T28822] get_compat_msghdr+0x8c/0x1c0 [ 2094.384673][T28822] ___sys_sendmsg+0x19b/0x350 [ 2094.389482][T28822] __sys_sendmmsg+0x544/0xa40 [ 2094.394379][T28822] __ia32_compat_sys_sendmmsg+0xc4/0x130 [ 2094.400159][T28822] __do_fast_syscall_32+0xa2/0x100 [ 2094.405602][T28822] do_fast_syscall_32+0x33/0x70 [ 2094.410590][T28822] do_SYSENTER_32+0x1b/0x20 [ 2094.415334][T28822] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2094.421907][T28822] [ 2094.424295][T28822] Uninit was stored to memory at: [ 2094.429490][T28822] __get_compat_msghdr+0x514/0x750 [ 2094.434840][T28822] get_compat_msghdr+0x8c/0x1c0 [ 2094.439818][T28822] ___sys_sendmsg+0x19b/0x350 [ 2094.444775][T28822] __sys_sendmmsg+0x544/0xa40 [ 2094.449582][T28822] __ia32_compat_sys_sendmmsg+0xc4/0x130 [ 2094.455506][T28822] __do_fast_syscall_32+0xa2/0x100 [ 2094.460758][T28822] do_fast_syscall_32+0x33/0x70 [ 2094.465895][T28822] do_SYSENTER_32+0x1b/0x20 [ 2094.470529][T28822] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2094.477189][T28822] [ 2094.479581][T28822] Uninit was stored to memory at: [ 2094.484923][T28822] __get_compat_msghdr+0x514/0x750 [ 2094.490174][T28822] get_compat_msghdr+0x8c/0x1c0 [ 2094.495261][T28822] ___sys_sendmsg+0x19b/0x350 [ 2094.500078][T28822] __sys_sendmmsg+0x544/0xa40 [ 2094.505039][T28822] __ia32_compat_sys_sendmmsg+0xc4/0x130 [ 2094.510820][T28822] __do_fast_syscall_32+0xa2/0x100 [ 2094.516233][T28822] do_fast_syscall_32+0x33/0x70 [ 2094.521224][T28822] do_SYSENTER_32+0x1b/0x20 [ 2094.526023][T28822] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2094.532595][T28822] [ 2094.534987][T28822] Uninit was stored to memory at: [ 2094.540178][T28822] __get_compat_msghdr+0x514/0x750 [ 2094.545579][T28822] get_compat_msghdr+0x8c/0x1c0 [ 2094.550580][T28822] ___sys_sendmsg+0x19b/0x350 [ 2094.555531][T28822] __sys_sendmmsg+0x544/0xa40 [ 2094.560365][T28822] __ia32_compat_sys_sendmmsg+0xc4/0x130 [ 2094.566297][T28822] __do_fast_syscall_32+0xa2/0x100 [ 2094.571548][T28822] do_fast_syscall_32+0x33/0x70 [ 2094.576732][T28822] do_SYSENTER_32+0x1b/0x20 [ 2094.581376][T28822] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2094.588019][T28822] [ 2094.590410][T28822] Uninit was stored to memory at: [ 2094.595799][T28822] __get_compat_msghdr+0x514/0x750 [ 2094.601045][T28822] get_compat_msghdr+0x8c/0x1c0 [ 2094.606182][T28822] ___sys_sendmsg+0x19b/0x350 [ 2094.610990][T28822] __sys_sendmmsg+0x544/0xa40 [ 2094.615938][T28822] __ia32_compat_sys_sendmmsg+0xc4/0x130 [ 2094.621798][T28822] __do_fast_syscall_32+0xa2/0x100 [ 2094.627055][T28822] do_fast_syscall_32+0x33/0x70 [ 2094.632193][T28822] do_SYSENTER_32+0x1b/0x20 [ 2094.636850][T28822] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2094.643483][T28822] [ 2094.645890][T28822] Uninit was stored to memory at: [ 2094.651105][T28822] __get_compat_msghdr+0x514/0x750 [ 2094.656505][T28822] get_compat_msghdr+0x8c/0x1c0 [ 2094.661487][T28822] ___sys_sendmsg+0x19b/0x350 [ 2094.666442][T28822] __sys_sendmmsg+0x544/0xa40 [ 2094.671251][T28822] __ia32_compat_sys_sendmmsg+0xc4/0x130 [ 2094.677176][T28822] __do_fast_syscall_32+0xa2/0x100 [ 2094.682518][T28822] do_fast_syscall_32+0x33/0x70 [ 2094.687506][T28822] do_SYSENTER_32+0x1b/0x20 [ 2094.692289][T28822] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2094.698785][T28822] [ 2094.701186][T28822] Uninit was stored to memory at: [ 2094.706533][T28822] __get_compat_msghdr+0x514/0x750 [ 2094.711845][T28822] get_compat_msghdr+0x8c/0x1c0 [ 2094.717690][T28822] ___sys_sendmsg+0x19b/0x350 [ 2094.722646][T28822] __sys_sendmmsg+0x544/0xa40 [ 2094.727449][T28822] __ia32_compat_sys_sendmmsg+0xc4/0x130 [ 2094.733323][T28822] __do_fast_syscall_32+0xa2/0x100 [ 2094.738617][T28822] do_fast_syscall_32+0x33/0x70 [ 2094.743748][T28822] do_SYSENTER_32+0x1b/0x20 [ 2094.748379][T28822] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2094.755011][T28822] [ 2094.757400][T28822] Local variable msg_sys created at: [ 2094.762882][T28822] __sys_sendmmsg+0x58/0xa40 [ 2094.767595][T28822] __ia32_compat_sys_sendmmsg+0xc4/0x130 02:02:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x1c840, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:02:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="1ffffffff9ff0000400001"], 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 02:02:57 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4000) 02:02:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:02:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="78aaf530bd7c64d1bde4509015e8", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 2095.352253][T28853] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:57 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc4100, 0x0) 02:02:57 executing program 4: getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) [ 2095.450026][T28850] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2095.463012][T28853] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) [ 2095.569534][T28858] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 02:02:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="1ffffffff9ff0000400001"], 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 02:02:58 executing program 2: r0 = open(0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='pim6reg1\x00') r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_io_uring_setup(0xb20, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x2}, 0x80, 0x0}}], 0x1, 0x0) socket$inet(0x2, 0x6, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r5, &(0x7f0000000480)='net/stat\x00') dup(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 02:02:58 executing program 4: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0xffffffffffffffc2) [ 2096.143853][T28868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2096.227313][T28867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2096.238601][T28870] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x1c840, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:02:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:02:59 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) write$binfmt_aout(r0, 0x0, 0x0) 02:02:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:02:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="1ffffffff9ff0000400001"], 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 02:02:59 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x3000001, 0x10, r0, 0x0) [ 2097.155407][T28883] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:59 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev(r0, &(0x7f0000001440)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) [ 2097.200818][T28884] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:02:59 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x12}]}}, &(0x7f0000000600)=""/222, 0x32, 0xde, 0x1}, 0x20) 02:02:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="1ffffffff9ff0000400001"], 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 02:02:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:02:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2097.537229][T28890] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 02:02:59 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2097.906504][T28897] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2097.957700][T28899] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:03:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x1c840, 0x0, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:03:00 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x2}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:03:00 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x2, 0x0, 0x6, 0xa}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:03:00 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x6}], {0x95, 0x0, 0x0, 0xffffff9f}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:03:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) [ 2098.954719][T28915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:01 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x3, 0x0, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:03:01 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0xb}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:03:01 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x2, 0x0, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:03:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2099.221554][T28920] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 02:03:01 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x601) 02:03:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) [ 2099.779955][T28930] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:03:03 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x62000000}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:03:03 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x4}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:03:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:03 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x4, 0x0, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:03:03 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) [ 2101.519700][T28948] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:03 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x2, 0xffffffffffffffff}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:03:03 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffff85}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:03:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:03 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x200) [ 2101.871127][T28954] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 02:03:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:03:04 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0) 02:03:04 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$TIOCSPGRP(r1, 0x40047477, &(0x7f0000000000)) [ 2102.231375][T28962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:04 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:04 executing program 2: setitimer(0x0, &(0x7f0000000040), 0x0) 02:03:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:04 executing program 4: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) 02:03:04 executing program 3: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 02:03:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:03:05 executing program 2: msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/115) [ 2102.963523][T28978] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2103.033842][T28978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:05 executing program 4: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='q', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000400)={'syz', 0x3}, &(0x7f00000000c0)='q', 0x1, 0xfffffffffffffffe) 02:03:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}) 02:03:05 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:05 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x0) 02:03:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:03:05 executing program 4: setrlimit(0x0, &(0x7f00000000c0)) 02:03:05 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) [ 2103.810740][T29002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:06 executing program 3: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001700), 0x80200, 0x0) [ 2103.867678][T29004] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:03:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:06 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x10, r1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_mount_image$afs(&(0x7f0000003000), &(0x7f0000003040)='./file0\x00', 0x0, 0x0, &(0x7f0000003140), 0x0, &(0x7f0000003180)) setxattr$system_posix_acl(&(0x7f0000003240)='./file0\x00', &(0x7f0000003280)='system.posix_acl_access\x00', &(0x7f00000033c0)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0) 02:03:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 02:03:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:06 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) 02:03:06 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) [ 2104.604976][T29015] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2104.654947][T29015] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2104.738545][T29019] kAFS: unparsable volume name 02:03:06 executing program 2: bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00'}, 0x10) 02:03:07 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001b80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, 0x0) 02:03:07 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r0, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[{0x10}], 0x10}, 0x0) 02:03:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:07 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 02:03:07 executing program 2: mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x30, 0xffffffffffffffff, 0x0) 02:03:07 executing program 4: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000180), 0x0) [ 2105.417190][T29038] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:07 executing program 3: add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="1c58fb06dec82aae8cb538fd", 0xc, 0xfffffffffffffffb) [ 2105.514221][T29040] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:07 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 02:03:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:08 executing program 3: sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) 02:03:08 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) 02:03:08 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe8001) 02:03:08 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:03:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:08 executing program 3: request_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0) 02:03:08 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 02:03:08 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001240)={'ip_vti0\x00', &(0x7f00000011c0)={'ip_vti0\x00', 0x0, 0x7800, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}}) 02:03:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:09 executing program 3: madvise(&(0x7f0000ff0000/0x9000)=nil, 0x9000, 0x16) 02:03:09 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 2107.136010][T29076] __nla_validate_parse: 2 callbacks suppressed [ 2107.136077][T29076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:09 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001380), 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000080)) 02:03:09 executing program 2: syz_mount_image$afs(0x0, &(0x7f0000003040)='./file0\x00', 0x0, 0x1, &(0x7f0000003140)=[{0x0}], 0x0, 0x0) [ 2107.204851][T29078] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:09 executing program 3: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'default'}}]}) 02:03:09 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000540)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) 02:03:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 02:03:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) [ 2108.017737][T29096] Mount JFS Failure: -22 [ 2108.022632][T29096] jfs_mount failed w/return code = -22 [ 2108.042416][T29099] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2108.131985][T29099] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:10 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001ac0)={[{@usrjquota_file}]}) 02:03:10 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:03:10 executing program 2: request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0xfffffffffffffffb) 02:03:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 02:03:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2108.761742][T29110] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 02:03:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x4d}, {0x6}]}) 02:03:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x5c}, {0x6}]}) [ 2109.272808][T29124] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:11 executing program 4: add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="ad", 0x1, 0xfffffffffffffffd) r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='Y', 0x1, 0xfffffffffffffffc) add_key$user(&(0x7f00000002c0), 0x0, 0x0, 0x0, r0) [ 2109.390464][T29125] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:03:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001e000156364a375cee48869c31"], 0x20}}, 0x0) 02:03:12 executing program 4: r0 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 02:03:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) close(r0) 02:03:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) [ 2110.007301][T29139] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:03:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:03:12 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x10, 0x1, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 02:03:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x0, 0x81}, 0x48) [ 2110.500953][T29154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:03:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 02:03:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0xffffffffffffff0e, 0x0}, 0x2022) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="3100000000000000000000000700000001442474130a010101000000066401010000000004e000000100000005ac1e0101000000040000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1e0001e00000010000000011"], 0x70}, 0x0) [ 2110.815871][T29154] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x10, 0x1, 0x3, 0x8, 0x1}, 0x48) 02:03:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:03:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000680)='r', 0x1}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/121, 0x79}], 0x1}, 0x0) 02:03:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{}, {0x60}]}) 02:03:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 2111.806822][T29179] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x7c}, {0x6}]}) 02:03:14 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000580)=""/228, 0x26, 0xe4, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x20, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}}, 0x10) 02:03:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000031c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, &(0x7f0000000580)=""/228, 0x1a, 0xe4, 0x1}, 0x20) 02:03:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f9313221fa", 0x3b}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:03:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000031c0)={{0xeb9f, 0x1, 0x0, 0x26, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000580)=""/228, 0x26, 0xe4, 0x1}, 0x20) 02:03:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000031c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000580)=""/228, 0x26, 0xe4, 0x1}, 0x20) 02:03:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="3100000000000000000000000700000001442474130a010101000000066401010000000004e000000100000005ac1e0101000000040000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1e0001e00000010000000011"], 0x70}, 0x0) [ 2112.707974][T29198] __nla_validate_parse: 1 callbacks suppressed [ 2112.708039][T29198] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 2112.835245][T29201] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:15 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000031c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0xa}]}}, &(0x7f0000000580)=""/228, 0x26, 0xe4, 0x1}, 0x20) 02:03:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) close(r0) 02:03:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 02:03:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x64}, {0x6}]}) 02:03:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x48) [ 2113.690989][T29221] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2113.787424][T29221] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 02:03:16 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006261746164760000031902800a000100bbbbbbbbbbbb"], 0x40}}, 0x0) 02:03:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:16 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000003280), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x4161, 0x0) 02:03:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:16 executing program 3: socket$inet(0x2, 0x2000000000003, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 02:03:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) [ 2114.627330][T29237] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:16 executing program 3: open(0x0, 0x0, 0x0) open$dir(0x0, 0x101000, 0xc1) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x2}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x6a000000, 0x0, 0x0, 0x5a) [ 2114.685875][T29235] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 02:03:17 executing program 2: fsmount(0xffffffffffffffff, 0x1, 0x9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00') r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup(r1) rmdir(&(0x7f0000000000)='./file0\x00') pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 02:03:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 02:03:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) getpgid(r0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='gfs2\x00', 0x2221021, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="2c6f776e726469723d2e3a665d080c3049846410172d42fd4927086acd4bd83364c6b76565f99352cfea77fe06907af215f5901030c1485a9485667fe6d276491acbba78456b80fc91b8d49cef2cd143183d2dcc07dd734b47e7a536aa69adb131160705379527b3eaeaf368ee5020307f5e473a7e2db300000000000000000000000000000000000000000000000000000000000000c520788dde92f85ae809be894395e0d8edc0020c20f0558462091776e8591f9e"]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) setrlimit(0xe, &(0x7f0000000000)={0x5, 0xfa5}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d3e2f6275732c0509720000000000000600696c65312c6c6f7765726469723d2e2f66696e653038702aa9483beb0cab79e6db243dc9f207f54e92e36ea4639545f8f2"]) 02:03:17 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 2115.630649][T29262] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 02:03:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:18 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="e16497a11ee76bc9de30432fdff6c89aea84450c729ea0d06963696fd4cfe5b8b97201419194dc42e34573c82af934f474c78775102ad4f331a8e54427dd9eba669bc3e615c637e836a4bb45e14527171fc658ca679a8dc43bf0c98380aaff26f0c6316f46b2850b509c12cbb58f726ca1aec7a3713d71d0b0fd240a76d9407ab6fb895ab2ad432996c3e72e3a8edde859dcaf14c6ef1cf516cde7c19a7727f205957efd0411cbf7291b799a4b36f1dc9b72f7c918a0774e0fe7271316ba703a4e50718a06de0cdf421d9ac7b2f92085e1795959ae9040c2163bd510409be7856d", 0xe1) 02:03:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) [ 2116.588895][T29278] overlayfs: unrecognized mount option " r" or missing value 02:03:18 executing program 3: socket$inet6(0x1c, 0x2, 0x0) [ 2116.701132][T29285] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:19 executing program 2: open(0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='pim6reg1\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x2}, 0x80, 0x0}}], 0x1, 0x20840) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet(0x2, 0x6, 0x0) r5 = dup(r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 02:03:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000100)={{}, {@val, @max}}) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0, 0x3a00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) [ 2117.526094][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 2117.532812][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 [ 2117.830889][T29303] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2117.847210][ T24] audit: type=1804 audit(1994724200.009:42): pid=29296 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir727897467/syzkaller.sVagz5/1867/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 2118.095421][ T24] audit: type=1804 audit(1994724200.259:43): pid=29296 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir727897467/syzkaller.sVagz5/1867/memory.events" dev="sda1" ino=1174 res=1 errno=0 [ 2118.505052][T29266] not chained 740000 origins [ 2118.509827][T29266] CPU: 0 PID: 29266 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2118.520099][T29266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2118.530262][T29266] Call Trace: [ 2118.533623][T29266] [ 2118.536612][T29266] dump_stack_lvl+0x1c8/0x256 [ 2118.541400][T29266] dump_stack+0x1a/0x1c [ 2118.545682][T29266] kmsan_internal_chain_origin+0x78/0x120 [ 2118.551575][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2118.557991][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2118.563959][T29266] ? ____sys_recvmsg+0x5c1/0x810 [ 2118.569035][T29266] ? __get_compat_msghdr+0x5b/0x750 [ 2118.574366][T29266] ? get_compat_msghdr+0x8c/0x1c0 [ 2118.579501][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2118.585411][T29266] ? __get_compat_msghdr+0x5b/0x750 [ 2118.590721][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2118.596617][T29266] ? should_fail+0x3f/0x810 [ 2118.601219][T29266] ? __stack_depot_save+0x21/0x4b0 [ 2118.606427][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2118.612767][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2118.618727][T29266] __msan_chain_origin+0xbd/0x140 [ 2118.623915][T29266] __get_compat_msghdr+0x514/0x750 [ 2118.629115][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2118.634031][T29266] ? ___sys_recvmsg+0xa9/0x890 [ 2118.638858][T29266] ? do_recvmmsg+0x682/0x1180 [ 2118.643603][T29266] ___sys_recvmsg+0x19d/0x890 [ 2118.648361][T29266] ? do_recvmmsg+0x6e4/0x1180 [ 2118.653111][T29266] ? __stack_depot_save+0x21/0x4b0 [ 2118.658302][T29266] ? kmsan_internal_check_memory+0x94/0x530 [ 2118.664282][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2118.670177][T29266] do_recvmmsg+0x682/0x1180 [ 2118.674760][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2118.681089][T29266] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2118.687607][T29266] __sys_recvmmsg+0x113/0x450 [ 2118.692412][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2118.698741][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2118.703925][T29266] ? exit_to_user_mode_prepare+0x119/0x220 [ 2118.709832][T29266] do_fast_syscall_32+0x33/0x70 [ 2118.714751][T29266] do_SYSENTER_32+0x1b/0x20 [ 2118.719317][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2118.725724][T29266] RIP: 0023:0xf7f04549 [ 2118.729835][T29266] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2118.749526][T29266] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2118.758006][T29266] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2118.766034][T29266] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2118.774054][T29266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2118.782090][T29266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2118.790136][T29266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2118.798209][T29266] [ 2118.804584][T29266] Uninit was stored to memory at: [ 2118.809718][T29266] __get_compat_msghdr+0x514/0x750 [ 2118.815323][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2118.820286][T29266] ___sys_recvmsg+0x19d/0x890 [ 2118.825119][T29266] do_recvmmsg+0x682/0x1180 [ 2118.829720][T29266] __sys_recvmmsg+0x113/0x450 [ 2118.834536][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2118.840898][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2118.846147][T29266] do_fast_syscall_32+0x33/0x70 [ 2118.851073][T29266] do_SYSENTER_32+0x1b/0x20 [ 2118.855707][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2118.862176][T29266] [ 2118.864528][T29266] Uninit was stored to memory at: [ 2118.869642][T29266] __get_compat_msghdr+0x514/0x750 [ 2118.874868][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2118.879796][T29266] ___sys_recvmsg+0x19d/0x890 [ 2118.884757][T29266] do_recvmmsg+0x682/0x1180 [ 2118.889398][T29266] __sys_recvmmsg+0x113/0x450 [ 2118.894278][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2118.900666][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2118.906006][T29266] do_fast_syscall_32+0x33/0x70 [ 2118.910978][T29266] do_SYSENTER_32+0x1b/0x20 [ 2118.915714][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2118.922174][T29266] [ 2118.924526][T29266] Uninit was stored to memory at: [ 2118.929641][T29266] __get_compat_msghdr+0x514/0x750 [ 2118.934909][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2118.939903][T29266] ___sys_recvmsg+0x19d/0x890 [ 2118.944789][T29266] do_recvmmsg+0x682/0x1180 [ 2118.949415][T29266] __sys_recvmmsg+0x113/0x450 [ 2118.954300][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2118.960672][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2118.965905][T29266] do_fast_syscall_32+0x33/0x70 [ 2118.970819][T29266] do_SYSENTER_32+0x1b/0x20 [ 2118.975434][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2118.981943][T29266] [ 2118.984291][T29266] Uninit was stored to memory at: [ 2118.989407][T29266] __get_compat_msghdr+0x514/0x750 [ 2118.994666][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2118.999625][T29266] ___sys_recvmsg+0x19d/0x890 [ 2119.004419][T29266] do_recvmmsg+0x682/0x1180 [ 2119.008984][T29266] __sys_recvmmsg+0x113/0x450 [ 2119.013774][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2119.020086][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2119.025320][T29266] do_fast_syscall_32+0x33/0x70 [ 2119.030232][T29266] do_SYSENTER_32+0x1b/0x20 [ 2119.034846][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2119.041247][T29266] [ 2119.043642][T29266] Uninit was stored to memory at: [ 2119.048753][T29266] __get_compat_msghdr+0x514/0x750 [ 2119.053978][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2119.058886][T29266] ___sys_recvmsg+0x19d/0x890 [ 2119.063669][T29266] do_recvmmsg+0x682/0x1180 [ 2119.068231][T29266] __sys_recvmmsg+0x113/0x450 [ 2119.073012][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2119.079340][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2119.084569][T29266] do_fast_syscall_32+0x33/0x70 [ 2119.089482][T29266] do_SYSENTER_32+0x1b/0x20 [ 2119.094132][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2119.100619][T29266] [ 2119.103043][T29266] Uninit was stored to memory at: [ 2119.108164][T29266] __get_compat_msghdr+0x514/0x750 [ 2119.113417][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2119.118330][T29266] ___sys_recvmsg+0x19d/0x890 [ 2119.123118][T29266] do_recvmmsg+0x682/0x1180 [ 2119.127683][T29266] __sys_recvmmsg+0x113/0x450 [ 2119.132514][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2119.138894][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2119.144128][T29266] do_fast_syscall_32+0x33/0x70 [ 2119.149039][T29266] do_SYSENTER_32+0x1b/0x20 [ 2119.153653][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2119.160052][T29266] [ 2119.162446][T29266] Uninit was stored to memory at: [ 2119.167606][T29266] __get_compat_msghdr+0x514/0x750 [ 2119.172841][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2119.177764][T29266] ___sys_recvmsg+0x19d/0x890 [ 2119.182551][T29266] do_recvmmsg+0x682/0x1180 [ 2119.187115][T29266] __sys_recvmmsg+0x113/0x450 [ 2119.191903][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2119.198237][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2119.203554][T29266] do_fast_syscall_32+0x33/0x70 [ 2119.208524][T29266] do_SYSENTER_32+0x1b/0x20 [ 2119.213149][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2119.219565][T29266] [ 2119.221964][T29266] Local variable msg_sys created at: [ 2119.227283][T29266] do_recvmmsg+0x5c/0x1180 [ 2119.231841][T29266] __sys_recvmmsg+0x113/0x450 [ 2119.745767][T29266] not chained 750000 origins [ 2119.750479][T29266] CPU: 0 PID: 29266 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2119.760778][T29266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2119.770943][T29266] Call Trace: [ 2119.774307][T29266] [ 2119.777309][T29266] dump_stack_lvl+0x1c8/0x256 [ 2119.782173][T29266] dump_stack+0x1a/0x1c [ 2119.786496][T29266] kmsan_internal_chain_origin+0x78/0x120 [ 2119.792372][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2119.798774][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2119.804729][T29266] ? ____sys_recvmsg+0x5c1/0x810 [ 2119.809806][T29266] ? __get_compat_msghdr+0x5b/0x750 [ 2119.815132][T29266] ? get_compat_msghdr+0x8c/0x1c0 [ 2119.820285][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2119.826245][T29266] ? __get_compat_msghdr+0x5b/0x750 [ 2119.831579][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2119.837539][T29266] ? should_fail+0x3f/0x810 [ 2119.842191][T29266] ? __stack_depot_save+0x21/0x4b0 [ 2119.847452][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2119.853858][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2119.859818][T29266] __msan_chain_origin+0xbd/0x140 [ 2119.864983][T29266] __get_compat_msghdr+0x514/0x750 [ 2119.870251][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2119.875231][T29266] ? ___sys_recvmsg+0xa9/0x890 [ 2119.880120][T29266] ? do_recvmmsg+0x682/0x1180 [ 2119.884926][T29266] ___sys_recvmsg+0x19d/0x890 [ 2119.889733][T29266] ? do_recvmmsg+0x6e4/0x1180 [ 2119.894556][T29266] ? __stack_depot_save+0x21/0x4b0 [ 2119.899814][T29266] ? kmsan_internal_check_memory+0x94/0x530 [ 2119.905867][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2119.911837][T29266] do_recvmmsg+0x682/0x1180 [ 2119.916494][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2119.922900][T29266] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2119.929476][T29266] __sys_recvmmsg+0x113/0x450 [ 2119.934298][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2119.940710][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2119.945958][T29266] ? exit_to_user_mode_prepare+0x119/0x220 [ 2119.951909][T29266] do_fast_syscall_32+0x33/0x70 [ 2119.956893][T29266] do_SYSENTER_32+0x1b/0x20 [ 2119.961517][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2119.967989][T29266] RIP: 0023:0xf7f04549 [ 2119.972152][T29266] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2119.991913][T29266] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2120.000459][T29266] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2120.008544][T29266] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2120.016621][T29266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2120.024700][T29266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2120.032774][T29266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2120.040872][T29266] [ 2120.047688][T29266] Uninit was stored to memory at: [ 2120.053289][T29266] __get_compat_msghdr+0x514/0x750 [ 2120.058527][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2120.063584][T29266] ___sys_recvmsg+0x19d/0x890 [ 2120.068387][T29266] do_recvmmsg+0x682/0x1180 [ 2120.073097][T29266] __sys_recvmmsg+0x113/0x450 [ 2120.077900][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2120.084367][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2120.089617][T29266] do_fast_syscall_32+0x33/0x70 [ 2120.094666][T29266] do_SYSENTER_32+0x1b/0x20 [ 2120.099292][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2120.105893][T29266] [ 2120.108278][T29266] Uninit was stored to memory at: [ 2120.113588][T29266] __get_compat_msghdr+0x514/0x750 [ 2120.118844][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2120.123944][T29266] ___sys_recvmsg+0x19d/0x890 [ 2120.128745][T29266] do_recvmmsg+0x682/0x1180 [ 2120.133448][T29266] __sys_recvmmsg+0x113/0x450 [ 2120.138252][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2120.144763][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2120.150006][T29266] do_fast_syscall_32+0x33/0x70 [ 2120.155108][T29266] do_SYSENTER_32+0x1b/0x20 [ 2120.159739][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2120.166367][T29266] [ 2120.168798][T29266] Uninit was stored to memory at: [ 2120.174128][T29266] __get_compat_msghdr+0x514/0x750 [ 2120.179379][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2120.184497][T29266] ___sys_recvmsg+0x19d/0x890 [ 2120.189309][T29266] do_recvmmsg+0x682/0x1180 [ 2120.194068][T29266] __sys_recvmmsg+0x113/0x450 [ 2120.198873][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2120.205477][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2120.210730][T29266] do_fast_syscall_32+0x33/0x70 [ 2120.215840][T29266] do_SYSENTER_32+0x1b/0x20 [ 2120.220476][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2120.227079][T29266] [ 2120.229525][T29266] Uninit was stored to memory at: [ 2120.234786][T29266] __get_compat_msghdr+0x514/0x750 [ 2120.240026][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2120.245141][T29266] ___sys_recvmsg+0x19d/0x890 [ 2120.249951][T29266] do_recvmmsg+0x682/0x1180 [ 2120.254708][T29266] __sys_recvmmsg+0x113/0x450 [ 2120.259509][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2120.266020][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2120.271268][T29266] do_fast_syscall_32+0x33/0x70 [ 2120.276375][T29266] do_SYSENTER_32+0x1b/0x20 [ 2120.281015][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2120.287615][T29266] [ 2120.290004][T29266] Uninit was stored to memory at: [ 2120.295316][T29266] __get_compat_msghdr+0x514/0x750 [ 2120.300558][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2120.305666][T29266] ___sys_recvmsg+0x19d/0x890 [ 2120.310477][T29266] do_recvmmsg+0x682/0x1180 [ 2120.315232][T29266] __sys_recvmmsg+0x113/0x450 [ 2120.320057][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2120.326576][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2120.331899][T29266] do_fast_syscall_32+0x33/0x70 [ 2120.336886][T29266] do_SYSENTER_32+0x1b/0x20 [ 2120.341526][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2120.348135][T29266] [ 2120.350520][T29266] Uninit was stored to memory at: [ 2120.355840][T29266] __get_compat_msghdr+0x514/0x750 [ 2120.361095][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2120.366212][T29266] ___sys_recvmsg+0x19d/0x890 [ 2120.371018][T29266] do_recvmmsg+0x682/0x1180 [ 2120.375788][T29266] __sys_recvmmsg+0x113/0x450 [ 2120.380595][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2120.387116][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2120.392441][T29266] do_fast_syscall_32+0x33/0x70 [ 2120.397418][T29266] do_SYSENTER_32+0x1b/0x20 [ 2120.402173][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2120.408654][T29266] [ 2120.411038][T29266] Uninit was stored to memory at: [ 2120.416367][T29266] __get_compat_msghdr+0x514/0x750 [ 2120.421687][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2120.426657][T29266] ___sys_recvmsg+0x19d/0x890 [ 2120.431457][T29266] do_recvmmsg+0x682/0x1180 [ 2120.436230][T29266] __sys_recvmmsg+0x113/0x450 [ 2120.441039][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2120.447561][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2120.452884][T29266] do_fast_syscall_32+0x33/0x70 [ 2120.457860][T29266] do_SYSENTER_32+0x1b/0x20 [ 2120.462616][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2120.469092][T29266] [ 2120.471479][T29266] Local variable msg_sys created at: [ 2120.476971][T29266] do_recvmmsg+0x5c/0x1180 [ 2120.481516][T29266] __sys_recvmmsg+0x113/0x450 [ 2120.775379][T29266] not chained 760000 origins [ 2120.780087][T29266] CPU: 0 PID: 29266 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2120.790373][T29266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2120.800534][T29266] Call Trace: [ 2120.803885][T29266] [ 2120.806880][T29266] dump_stack_lvl+0x1c8/0x256 [ 2120.811724][T29266] dump_stack+0x1a/0x1c [ 2120.816022][T29266] kmsan_internal_chain_origin+0x78/0x120 [ 2120.821892][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2120.828282][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2120.834309][T29266] ? ____sys_recvmsg+0x5c1/0x810 [ 2120.839368][T29266] ? __get_compat_msghdr+0x5b/0x750 [ 2120.844680][T29266] ? get_compat_msghdr+0x8c/0x1c0 [ 2120.849823][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2120.855767][T29266] ? __get_compat_msghdr+0x5b/0x750 [ 2120.861090][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2120.867039][T29266] ? should_fail+0x3f/0x810 [ 2120.871680][T29266] ? __stack_depot_save+0x21/0x4b0 [ 2120.876924][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2120.883310][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2120.889254][T29266] __msan_chain_origin+0xbd/0x140 [ 2120.894405][T29266] __get_compat_msghdr+0x514/0x750 [ 2120.900094][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2120.905059][T29266] ? ___sys_recvmsg+0xa9/0x890 [ 2120.909939][T29266] ? do_recvmmsg+0x682/0x1180 [ 2120.914733][T29266] ___sys_recvmsg+0x19d/0x890 [ 2120.919528][T29266] ? do_recvmmsg+0x6e4/0x1180 [ 2120.924336][T29266] ? __stack_depot_save+0x21/0x4b0 [ 2120.929580][T29266] ? kmsan_internal_check_memory+0x94/0x530 [ 2120.935613][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2120.941580][T29266] do_recvmmsg+0x682/0x1180 [ 2120.946225][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2120.952613][T29266] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2120.959167][T29266] __sys_recvmmsg+0x113/0x450 [ 2120.963971][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2120.970360][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2120.975595][T29266] ? exit_to_user_mode_prepare+0x119/0x220 [ 2120.981533][T29266] do_fast_syscall_32+0x33/0x70 [ 2120.986510][T29266] do_SYSENTER_32+0x1b/0x20 [ 2120.991132][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2120.997595][T29266] RIP: 0023:0xf7f04549 [ 2121.001749][T29266] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2121.021500][T29266] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2121.030037][T29266] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2121.038118][T29266] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2121.046790][T29266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2121.054850][T29266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2121.062915][T29266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2121.071001][T29266] [ 2121.077859][T29266] Uninit was stored to memory at: [ 2121.083457][T29266] __get_compat_msghdr+0x514/0x750 [ 2121.088696][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2121.095320][T29266] ___sys_recvmsg+0x19d/0x890 [ 2121.100137][T29266] do_recvmmsg+0x682/0x1180 [ 2121.104847][T29266] __sys_recvmmsg+0x113/0x450 [ 2121.109656][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2121.116227][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2121.121496][T29266] do_fast_syscall_32+0x33/0x70 [ 2121.126652][T29266] do_SYSENTER_32+0x1b/0x20 [ 2121.131282][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2121.137876][T29266] [ 2121.140249][T29266] Uninit was stored to memory at: [ 2121.145587][T29266] __get_compat_msghdr+0x514/0x750 [ 2121.150838][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2121.155953][T29266] ___sys_recvmsg+0x19d/0x890 [ 2121.160748][T29266] do_recvmmsg+0x682/0x1180 [ 2121.165437][T29266] __sys_recvmmsg+0x113/0x450 [ 2121.170229][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2121.176707][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2121.182034][T29266] do_fast_syscall_32+0x33/0x70 [ 2121.186996][T29266] do_SYSENTER_32+0x1b/0x20 [ 2121.191563][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2121.198197][T29266] [ 2121.200587][T29266] Uninit was stored to memory at: [ 2121.205855][T29266] __get_compat_msghdr+0x514/0x750 [ 2121.211092][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2121.216200][T29266] ___sys_recvmsg+0x19d/0x890 [ 2121.221002][T29266] do_recvmmsg+0x682/0x1180 [ 2121.225704][T29266] __sys_recvmmsg+0x113/0x450 [ 2121.230510][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2121.237027][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2121.242345][T29266] do_fast_syscall_32+0x33/0x70 [ 2121.247331][T29266] do_SYSENTER_32+0x1b/0x20 [ 2121.252076][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2121.258550][T29266] [ 2121.260934][T29266] Uninit was stored to memory at: [ 2121.266257][T29266] __get_compat_msghdr+0x514/0x750 [ 2121.271498][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2121.278000][T29266] ___sys_recvmsg+0x19d/0x890 [ 2121.282924][T29266] do_recvmmsg+0x682/0x1180 [ 2121.287557][T29266] __sys_recvmmsg+0x113/0x450 [ 2121.292431][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2121.299692][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2121.305067][T29266] do_fast_syscall_32+0x33/0x70 [ 2121.310048][T29266] do_SYSENTER_32+0x1b/0x20 [ 2121.314802][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2121.321275][T29266] [ 2121.323792][T29266] Uninit was stored to memory at: [ 2121.328977][T29266] __get_compat_msghdr+0x514/0x750 [ 2121.334322][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2121.339360][T29266] ___sys_recvmsg+0x19d/0x890 [ 2121.344258][T29266] do_recvmmsg+0x682/0x1180 [ 2121.348887][T29266] __sys_recvmmsg+0x113/0x450 [ 2121.353815][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2121.360198][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2121.365577][T29266] do_fast_syscall_32+0x33/0x70 [ 2121.370555][T29266] do_SYSENTER_32+0x1b/0x20 [ 2121.375256][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2121.381845][T29266] [ 2121.384232][T29266] Uninit was stored to memory at: [ 2121.389381][T29266] __get_compat_msghdr+0x514/0x750 [ 2121.394713][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2121.399674][T29266] ___sys_recvmsg+0x19d/0x890 [ 2121.404538][T29266] do_recvmmsg+0x682/0x1180 [ 2121.409150][T29266] __sys_recvmmsg+0x113/0x450 [ 2121.414033][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2121.420422][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2121.425799][T29266] do_fast_syscall_32+0x33/0x70 [ 2121.430760][T29266] do_SYSENTER_32+0x1b/0x20 [ 2121.435486][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2121.442035][T29266] [ 2121.444405][T29266] Uninit was stored to memory at: [ 2121.449575][T29266] __get_compat_msghdr+0x514/0x750 [ 2121.454927][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2121.459906][T29266] ___sys_recvmsg+0x19d/0x890 [ 2121.464838][T29266] do_recvmmsg+0x682/0x1180 [ 2121.469450][T29266] __sys_recvmmsg+0x113/0x450 [ 2121.474338][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2121.480710][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2121.486008][T29266] do_fast_syscall_32+0x33/0x70 [ 2121.490971][T29266] do_SYSENTER_32+0x1b/0x20 [ 2121.495651][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2121.502197][T29266] [ 2121.504583][T29266] Local variable msg_sys created at: [ 2121.509916][T29266] do_recvmmsg+0x5c/0x1180 [ 2121.514550][T29266] __sys_recvmmsg+0x113/0x450 [ 2121.721383][T29266] not chained 770000 origins [ 2121.726191][T29266] CPU: 0 PID: 29266 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2121.736465][T29266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2121.746593][T29266] Call Trace: [ 2121.749946][T29266] [ 2121.752951][T29266] dump_stack_lvl+0x1c8/0x256 [ 2121.757809][T29266] dump_stack+0x1a/0x1c [ 2121.762120][T29266] kmsan_internal_chain_origin+0x78/0x120 [ 2121.768000][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2121.774406][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2121.780350][T29266] ? ____sys_recvmsg+0x5c1/0x810 [ 2121.785357][T29266] ? __get_compat_msghdr+0x5b/0x750 [ 2121.790619][T29266] ? get_compat_msghdr+0x8c/0x1c0 [ 2121.795729][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2121.801689][T29266] ? __get_compat_msghdr+0x5b/0x750 [ 2121.806998][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2121.812908][T29266] ? should_fail+0x3f/0x810 [ 2121.817553][T29266] ? __stack_depot_save+0x21/0x4b0 [ 2121.822787][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2121.829115][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2121.835020][T29266] __msan_chain_origin+0xbd/0x140 [ 2121.840188][T29266] __get_compat_msghdr+0x514/0x750 [ 2121.845383][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2121.850303][T29266] ? ___sys_recvmsg+0xa9/0x890 [ 2121.855150][T29266] ? do_recvmmsg+0x682/0x1180 [ 2121.859960][T29266] ___sys_recvmsg+0x19d/0x890 [ 2121.864766][T29266] ? do_recvmmsg+0x6e4/0x1180 [ 2121.869594][T29266] ? __stack_depot_save+0x21/0x4b0 [ 2121.874855][T29266] ? kmsan_internal_check_memory+0x94/0x530 [ 2121.880910][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2121.886863][T29266] do_recvmmsg+0x682/0x1180 [ 2121.891451][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2121.897787][T29266] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2121.904311][T29266] __sys_recvmmsg+0x113/0x450 [ 2121.909107][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2121.915437][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2121.920630][T29266] ? exit_to_user_mode_prepare+0x119/0x220 [ 2121.926530][T29266] do_fast_syscall_32+0x33/0x70 [ 2121.931452][T29266] do_SYSENTER_32+0x1b/0x20 [ 2121.936022][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2121.942446][T29266] RIP: 0023:0xf7f04549 [ 2121.946598][T29266] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2121.966322][T29266] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2121.974878][T29266] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2121.982969][T29266] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2121.991029][T29266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2121.999050][T29266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2122.007076][T29266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2122.015144][T29266] [ 2122.025520][T29266] Uninit was stored to memory at: [ 2122.030736][T29266] __get_compat_msghdr+0x514/0x750 [ 2122.043079][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2122.048082][T29266] ___sys_recvmsg+0x19d/0x890 [ 2122.053020][T29266] do_recvmmsg+0x682/0x1180 [ 2122.057647][T29266] __sys_recvmmsg+0x113/0x450 [ 2122.062494][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2122.068856][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2122.074226][T29266] do_fast_syscall_32+0x33/0x70 [ 2122.079206][T29266] do_SYSENTER_32+0x1b/0x20 [ 2122.083967][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2122.090447][T29266] [ 2122.092943][T29266] Uninit was stored to memory at: [ 2122.098131][T29266] __get_compat_msghdr+0x514/0x750 [ 2122.103474][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2122.108431][T29266] ___sys_recvmsg+0x19d/0x890 [ 2122.113320][T29266] do_recvmmsg+0x682/0x1180 [ 2122.117943][T29266] __sys_recvmmsg+0x113/0x450 [ 2122.122830][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2122.129203][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2122.134539][T29266] do_fast_syscall_32+0x33/0x70 [ 2122.139506][T29266] do_SYSENTER_32+0x1b/0x20 [ 2122.144188][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2122.150703][T29266] [ 2122.153223][T29266] Uninit was stored to memory at: [ 2122.158415][T29266] __get_compat_msghdr+0x514/0x750 [ 2122.163787][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2122.168768][T29266] ___sys_recvmsg+0x19d/0x890 [ 2122.173701][T29266] do_recvmmsg+0x682/0x1180 [ 2122.178334][T29266] __sys_recvmmsg+0x113/0x450 [ 2122.183224][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2122.189608][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2122.194955][T29266] do_fast_syscall_32+0x33/0x70 [ 2122.199938][T29266] do_SYSENTER_32+0x1b/0x20 [ 2122.204705][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2122.211163][T29266] [ 2122.213662][T29266] Uninit was stored to memory at: [ 2122.218806][T29266] __get_compat_msghdr+0x514/0x750 [ 2122.224113][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2122.229071][T29266] ___sys_recvmsg+0x19d/0x890 [ 2122.233964][T29266] do_recvmmsg+0x682/0x1180 [ 2122.238578][T29266] __sys_recvmmsg+0x113/0x450 [ 2122.243479][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2122.249851][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2122.255185][T29266] do_fast_syscall_32+0x33/0x70 [ 2122.260146][T29266] do_SYSENTER_32+0x1b/0x20 [ 2122.264829][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2122.271301][T29266] [ 2122.273806][T29266] Uninit was stored to memory at: [ 2122.278995][T29266] __get_compat_msghdr+0x514/0x750 [ 2122.284326][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2122.289283][T29266] ___sys_recvmsg+0x19d/0x890 [ 2122.294161][T29266] do_recvmmsg+0x682/0x1180 [ 2122.298792][T29266] __sys_recvmmsg+0x113/0x450 [ 2122.303714][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2122.310083][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2122.315411][T29266] do_fast_syscall_32+0x33/0x70 [ 2122.320378][T29266] do_SYSENTER_32+0x1b/0x20 [ 2122.325063][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2122.331520][T29266] [ 2122.334011][T29266] Uninit was stored to memory at: [ 2122.339151][T29266] __get_compat_msghdr+0x514/0x750 [ 2122.344440][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2122.349404][T29266] ___sys_recvmsg+0x19d/0x890 [ 2122.354295][T29266] do_recvmmsg+0x682/0x1180 [ 2122.358904][T29266] __sys_recvmmsg+0x113/0x450 [ 2122.363788][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2122.370156][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2122.375484][T29266] do_fast_syscall_32+0x33/0x70 [ 2122.380471][T29266] do_SYSENTER_32+0x1b/0x20 [ 2122.385233][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2122.391780][T29266] [ 2122.394148][T29266] Uninit was stored to memory at: [ 2122.399263][T29266] __get_compat_msghdr+0x514/0x750 [ 2122.404591][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2122.409567][T29266] ___sys_recvmsg+0x19d/0x890 [ 2122.414512][T29266] do_recvmmsg+0x682/0x1180 [ 2122.419127][T29266] __sys_recvmmsg+0x113/0x450 [ 2122.424020][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2122.430407][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2122.435751][T29266] do_fast_syscall_32+0x33/0x70 [ 2122.440709][T29266] do_SYSENTER_32+0x1b/0x20 [ 2122.445420][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2122.451977][T29266] [ 2122.454347][T29266] Local variable msg_sys created at: [ 2122.459654][T29266] do_recvmmsg+0x5c/0x1180 [ 2122.464272][T29266] __sys_recvmmsg+0x113/0x450 [ 2122.663548][T29266] not chained 780000 origins [ 2122.668232][T29266] CPU: 1 PID: 29266 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2122.678468][T29266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2122.688609][T29266] Call Trace: [ 2122.691924][T29266] [ 2122.694888][T29266] dump_stack_lvl+0x1c8/0x256 [ 2122.699673][T29266] dump_stack+0x1a/0x1c [ 2122.703910][T29266] kmsan_internal_chain_origin+0x78/0x120 [ 2122.709717][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2122.716068][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2122.722030][T29266] ? ____sys_recvmsg+0x5c1/0x810 [ 2122.727101][T29266] ? __get_compat_msghdr+0x5b/0x750 [ 2122.732427][T29266] ? get_compat_msghdr+0x8c/0x1c0 [ 2122.737585][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2122.743553][T29266] ? __get_compat_msghdr+0x5b/0x750 [ 2122.748890][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2122.754866][T29266] ? should_fail+0x3f/0x810 [ 2122.759532][T29266] ? __stack_depot_save+0x21/0x4b0 [ 2122.764827][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2122.771233][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2122.777191][T29266] __msan_chain_origin+0xbd/0x140 [ 2122.782357][T29266] __get_compat_msghdr+0x514/0x750 [ 2122.787626][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2122.792600][T29266] ? ___sys_recvmsg+0xa9/0x890 [ 2122.797503][T29266] ? do_recvmmsg+0x682/0x1180 [ 2122.802313][T29266] ___sys_recvmsg+0x19d/0x890 [ 2122.807117][T29266] ? do_recvmmsg+0x6e4/0x1180 [ 2122.811936][T29266] ? __stack_depot_save+0x21/0x4b0 [ 2122.817197][T29266] ? kmsan_internal_check_memory+0x94/0x530 [ 2122.823250][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2122.829217][T29266] do_recvmmsg+0x682/0x1180 [ 2122.833868][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2122.840282][T29266] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2122.846855][T29266] __sys_recvmmsg+0x113/0x450 [ 2122.851694][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2122.858096][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2122.863347][T29266] ? exit_to_user_mode_prepare+0x119/0x220 [ 2122.869300][T29266] do_fast_syscall_32+0x33/0x70 [ 2122.874293][T29266] do_SYSENTER_32+0x1b/0x20 [ 2122.878935][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2122.885761][T29266] RIP: 0023:0xf7f04549 [ 2122.889927][T29266] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2122.909696][T29266] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2122.918246][T29266] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2122.926331][T29266] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2122.934425][T29266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2122.942501][T29266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2122.950576][T29266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2122.958685][T29266] [ 2122.968224][T29266] Uninit was stored to memory at: [ 2122.974287][T29266] __get_compat_msghdr+0x514/0x750 [ 2122.979528][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2122.984606][T29266] ___sys_recvmsg+0x19d/0x890 [ 2122.989428][T29266] do_recvmmsg+0x682/0x1180 [ 2122.994126][T29266] __sys_recvmmsg+0x113/0x450 [ 2122.998930][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2123.005430][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2123.010679][T29266] do_fast_syscall_32+0x33/0x70 [ 2123.015761][T29266] do_SYSENTER_32+0x1b/0x20 [ 2123.020734][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2123.027308][T29266] [ 2123.029692][T29266] Uninit was stored to memory at: [ 2123.034978][T29266] __get_compat_msghdr+0x514/0x750 [ 2123.040213][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2123.045284][T29266] ___sys_recvmsg+0x19d/0x890 [ 2123.050083][T29266] do_recvmmsg+0x682/0x1180 [ 2123.054805][T29266] __sys_recvmmsg+0x113/0x450 [ 2123.059603][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2123.066088][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2123.071334][T29266] do_fast_syscall_32+0x33/0x70 [ 2123.076419][T29266] do_SYSENTER_32+0x1b/0x20 [ 2123.081046][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2123.087620][T29266] [ 2123.090010][T29266] Uninit was stored to memory at: [ 2123.095290][T29266] __get_compat_msghdr+0x514/0x750 [ 2123.100522][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2123.105591][T29266] ___sys_recvmsg+0x19d/0x890 [ 2123.110391][T29266] do_recvmmsg+0x682/0x1180 [ 2123.115120][T29266] __sys_recvmmsg+0x113/0x450 [ 2123.119923][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2123.126415][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2123.131730][T29266] do_fast_syscall_32+0x33/0x70 [ 2123.136710][T29266] do_SYSENTER_32+0x1b/0x20 [ 2123.141332][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2123.147916][T29266] [ 2123.150303][T29266] Uninit was stored to memory at: [ 2123.155582][T29266] __get_compat_msghdr+0x514/0x750 [ 2123.160815][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2123.165886][T29266] ___sys_recvmsg+0x19d/0x890 [ 2123.170693][T29266] do_recvmmsg+0x682/0x1180 [ 2123.175424][T29266] __sys_recvmmsg+0x113/0x450 [ 2123.180226][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2123.186714][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2123.192098][T29266] do_fast_syscall_32+0x33/0x70 [ 2123.197080][T29266] do_SYSENTER_32+0x1b/0x20 [ 2123.201935][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2123.208410][T29266] [ 2123.210802][T29266] Uninit was stored to memory at: [ 2123.216143][T29266] __get_compat_msghdr+0x514/0x750 [ 2123.221367][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2123.226461][T29266] ___sys_recvmsg+0x19d/0x890 [ 2123.231266][T29266] do_recvmmsg+0x682/0x1180 [ 2123.235991][T29266] __sys_recvmmsg+0x113/0x450 [ 2123.240751][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2123.247195][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2123.252525][T29266] do_fast_syscall_32+0x33/0x70 [ 2123.257503][T29266] do_SYSENTER_32+0x1b/0x20 [ 2123.262270][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2123.268729][T29266] [ 2123.271079][T29266] Uninit was stored to memory at: [ 2123.276375][T29266] __get_compat_msghdr+0x514/0x750 [ 2123.281857][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2123.286818][T29266] ___sys_recvmsg+0x19d/0x890 [ 2123.291556][T29266] do_recvmmsg+0x682/0x1180 [ 2123.296310][T29266] __sys_recvmmsg+0x113/0x450 [ 2123.301108][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2123.307603][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2123.312926][T29266] do_fast_syscall_32+0x33/0x70 [ 2123.317912][T29266] do_SYSENTER_32+0x1b/0x20 [ 2123.322653][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2123.329109][T29266] [ 2123.331458][T29266] Uninit was stored to memory at: [ 2123.336725][T29266] __get_compat_msghdr+0x514/0x750 [ 2123.342044][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2123.347022][T29266] ___sys_recvmsg+0x19d/0x890 [ 2123.351991][T29266] do_recvmmsg+0x682/0x1180 [ 2123.356598][T29266] __sys_recvmmsg+0x113/0x450 [ 2123.361340][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2123.367811][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2123.373154][T29266] do_fast_syscall_32+0x33/0x70 [ 2123.378134][T29266] do_SYSENTER_32+0x1b/0x20 [ 2123.382910][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2123.389377][T29266] [ 2123.391887][T29266] Local variable msg_sys created at: [ 2123.397251][T29266] do_recvmmsg+0x5c/0x1180 [ 2123.401978][T29266] __sys_recvmmsg+0x113/0x450 [ 2123.613099][T29266] not chained 790000 origins [ 2123.617785][T29266] CPU: 1 PID: 29266 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2123.628009][T29266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2123.638130][T29266] Call Trace: [ 2123.641454][T29266] [ 2123.644422][T29266] dump_stack_lvl+0x1c8/0x256 [ 2123.649206][T29266] dump_stack+0x1a/0x1c [ 2123.653447][T29266] kmsan_internal_chain_origin+0x78/0x120 [ 2123.659254][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2123.665582][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2123.671472][T29266] ? ____sys_recvmsg+0x5c1/0x810 [ 2123.676507][T29266] ? __get_compat_msghdr+0x5b/0x750 [ 2123.681837][T29266] ? get_compat_msghdr+0x8c/0x1c0 [ 2123.686974][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2123.692865][T29266] ? __get_compat_msghdr+0x5b/0x750 [ 2123.698132][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2123.704045][T29266] ? should_fail+0x3f/0x810 [ 2123.708676][T29266] ? __stack_depot_save+0x21/0x4b0 [ 2123.713869][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2123.720194][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2123.726105][T29266] __msan_chain_origin+0xbd/0x140 [ 2123.731271][T29266] __get_compat_msghdr+0x514/0x750 [ 2123.736540][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2123.741505][T29266] ? ___sys_recvmsg+0xa9/0x890 [ 2123.746344][T29266] ? do_recvmmsg+0x682/0x1180 [ 2123.751089][T29266] ___sys_recvmsg+0x19d/0x890 [ 2123.755829][T29266] ? do_recvmmsg+0x6e4/0x1180 [ 2123.760592][T29266] ? __stack_depot_save+0x21/0x4b0 [ 2123.765782][T29266] ? kmsan_internal_check_memory+0x94/0x530 [ 2123.771778][T29266] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2123.777736][T29266] do_recvmmsg+0x682/0x1180 [ 2123.782364][T29266] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2123.788697][T29266] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2123.795192][T29266] __sys_recvmmsg+0x113/0x450 [ 2123.799942][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2123.806295][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2123.811526][T29266] ? exit_to_user_mode_prepare+0x119/0x220 [ 2123.817436][T29266] do_fast_syscall_32+0x33/0x70 [ 2123.822383][T29266] do_SYSENTER_32+0x1b/0x20 [ 2123.827017][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2123.833477][T29266] RIP: 0023:0xf7f04549 [ 2123.837589][T29266] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2123.857276][T29266] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2123.865754][T29266] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2123.873799][T29266] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2123.881871][T29266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2123.889924][T29266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2123.897944][T29266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2123.905980][T29266] [ 2123.913691][T29266] Uninit was stored to memory at: [ 2123.918898][T29266] __get_compat_msghdr+0x514/0x750 [ 2123.924718][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2123.929704][T29266] ___sys_recvmsg+0x19d/0x890 [ 2123.934674][T29266] do_recvmmsg+0x682/0x1180 [ 2123.939300][T29266] __sys_recvmmsg+0x113/0x450 [ 2123.944209][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2123.950582][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2123.955901][T29266] do_fast_syscall_32+0x33/0x70 [ 2123.960859][T29266] do_SYSENTER_32+0x1b/0x20 [ 2123.965619][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2123.972176][T29266] [ 2123.974544][T29266] Uninit was stored to memory at: [ 2123.979656][T29266] __get_compat_msghdr+0x514/0x750 [ 2123.985001][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2123.989962][T29266] ___sys_recvmsg+0x19d/0x890 [ 2123.994897][T29266] do_recvmmsg+0x682/0x1180 [ 2123.999524][T29266] __sys_recvmmsg+0x113/0x450 [ 2124.004428][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2124.010838][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2124.016244][T29266] do_fast_syscall_32+0x33/0x70 [ 2124.021206][T29266] do_SYSENTER_32+0x1b/0x20 [ 2124.025926][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2124.032484][T29266] [ 2124.034867][T29266] Uninit was stored to memory at: [ 2124.040006][T29266] __get_compat_msghdr+0x514/0x750 [ 2124.045313][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2124.050272][T29266] ___sys_recvmsg+0x19d/0x890 [ 2124.055148][T29266] do_recvmmsg+0x682/0x1180 [ 2124.059757][T29266] __sys_recvmmsg+0x113/0x450 [ 2124.064674][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2124.071044][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2124.076358][T29266] do_fast_syscall_32+0x33/0x70 [ 2124.081324][T29266] do_SYSENTER_32+0x1b/0x20 [ 2124.086056][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2124.092617][T29266] [ 2124.094998][T29266] Uninit was stored to memory at: [ 2124.100182][T29266] __get_compat_msghdr+0x514/0x750 [ 2124.105588][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2124.110546][T29266] ___sys_recvmsg+0x19d/0x890 [ 2124.115465][T29266] do_recvmmsg+0x682/0x1180 [ 2124.120093][T29266] __sys_recvmmsg+0x113/0x450 [ 2124.124998][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2124.131388][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2124.136754][T29266] do_fast_syscall_32+0x33/0x70 [ 2124.141807][T29266] do_SYSENTER_32+0x1b/0x20 [ 2124.146430][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2124.153018][T29266] [ 2124.155389][T29266] Uninit was stored to memory at: [ 2124.160509][T29266] __get_compat_msghdr+0x514/0x750 [ 2124.165812][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2124.170769][T29266] ___sys_recvmsg+0x19d/0x890 [ 2124.175680][T29266] do_recvmmsg+0x682/0x1180 [ 2124.180304][T29266] __sys_recvmmsg+0x113/0x450 [ 2124.185172][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2124.191545][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2124.196903][T29266] do_fast_syscall_32+0x33/0x70 [ 2124.202005][T29266] do_SYSENTER_32+0x1b/0x20 [ 2124.206626][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2124.213207][T29266] [ 2124.215595][T29266] Uninit was stored to memory at: [ 2124.220792][T29266] __get_compat_msghdr+0x514/0x750 [ 2124.226181][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2124.231143][T29266] ___sys_recvmsg+0x19d/0x890 [ 2124.236065][T29266] do_recvmmsg+0x682/0x1180 [ 2124.240678][T29266] __sys_recvmmsg+0x113/0x450 [ 2124.245597][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2124.252066][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2124.257293][T29266] do_fast_syscall_32+0x33/0x70 [ 2124.262330][T29266] do_SYSENTER_32+0x1b/0x20 [ 2124.266941][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2124.273520][T29266] [ 2124.275904][T29266] Uninit was stored to memory at: [ 2124.281028][T29266] __get_compat_msghdr+0x514/0x750 [ 2124.286331][T29266] get_compat_msghdr+0x8c/0x1c0 [ 2124.291292][T29266] ___sys_recvmsg+0x19d/0x890 [ 2124.296167][T29266] do_recvmmsg+0x682/0x1180 [ 2124.300779][T29266] __sys_recvmmsg+0x113/0x450 [ 2124.305695][T29266] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2124.312163][T29266] __do_fast_syscall_32+0xa2/0x100 [ 2124.317404][T29266] do_fast_syscall_32+0x33/0x70 [ 2124.322526][T29266] do_SYSENTER_32+0x1b/0x20 [ 2124.327146][T29266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2124.333750][T29266] [ 2124.336128][T29266] Local variable msg_sys created at: [ 2124.341454][T29266] do_recvmmsg+0x5c/0x1180 [ 2124.346109][T29266] __sys_recvmmsg+0x113/0x450 02:03:26 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0}}) 02:03:26 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x803dc, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006261746164760000031902800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x0) 02:03:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:26 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x7, {0x7}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x1b, &(0x7f00000001c0)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa}, @ssp_cap={0xc}]}}) 02:03:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) ioctl$TIOCGDEV(r0, 0x4b4b, 0x0) [ 2124.735143][T29323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:03:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1002) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0xffffff36, 0x0}) [ 2124.852690][T29319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2125.011985][T10183] usb 3-1: new high-speed USB device number 18 using dummy_hcd 02:03:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2125.261800][T10183] usb 3-1: Using ep0 maxpacket: 16 [ 2125.289241][T29333] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.5' sets config #0 [ 2125.358712][T29335] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000040000000000004000495"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x4, 0x1}, 0x6) 02:03:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2125.462537][T10183] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2125.471460][T10183] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2125.482019][T10183] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 02:03:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:27 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x803dc, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006261746164760000031902800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x0) [ 2125.772599][T10183] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2125.782453][T10183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.790650][T10183] usb 3-1: Product: syz [ 2125.795172][T10183] usb 3-1: Manufacturer: syz [ 2125.799968][T10183] usb 3-1: SerialNumber: syz [ 2126.006996][T29340] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000140)=@raw=[@kfunc, @func, @map_val], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:03:28 executing program 5: openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) [ 2126.119350][T29344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:03:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@getqdisc={0x2c, 0x26, 0x1, 0x0, 0x0, {}, [{0x4}, {0x4}]}, 0x2c}}, 0x0) [ 2126.303054][T10183] usb 3-1: 0:2 : does not exist [ 2126.345895][T10183] usb 3-1: USB disconnect, device number 18 [ 2126.700893][T29352] udevd[29352]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 02:03:29 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:03:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:29 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 02:03:29 executing program 2: syz_emit_ethernet(0x424, &(0x7f0000000040)=ANY=[@ANYBLOB="f5afdb5a0fd8aaaaaaaaaabb8100300086dd692fdffa03ea610500000000000000000000ffffffffffffff02"], 0x0) 02:03:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8940, &(0x7f0000000000)={'wlan0\x00'}) [ 2127.048315][T29359] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:29 executing program 2: syz_mount_image$erofs(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)) 02:03:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:29 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x8, 0x301800) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x0, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}]}, 0x1c}}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x30000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1, 0x0, 0x0, 0x0, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x3ff, 0x0, 0x1, 0x8, r0, 0x0, '\x00', 0x0, r0, 0x2, 0x0, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000004c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000600)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x3, 0x1, 0x0, 0x108, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x7}, 0x48) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000700)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r3 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 02:03:29 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000240)={0x32, 0x1, '\x00', [@ra={0x5, 0x2, 0x95}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:03:29 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:29 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) 02:03:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:30 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) [ 2127.945085][T29381] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:30 executing program 3: syz_emit_ethernet(0xfff, &(0x7f0000000040)={@random="002b7674d43f", @remote, @val, {@ipv4}}, 0x0) 02:03:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:30 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:30 executing program 2: ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, 0x0) socket$inet6(0xa, 0x5, 0x0) 02:03:30 executing program 4: syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 02:03:31 executing program 3: ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, 0x0) socket$inet6(0xa, 0x5, 0x9) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000280)={0x4}) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) memfd_secret(0x0) 02:03:31 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:31 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2129.056693][T29407] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:31 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) 02:03:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:31 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) 02:03:32 executing program 4: r0 = memfd_secret(0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) [ 2129.910789][T29429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:32 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}}, 0x0) 02:03:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:32 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:32 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x0, 0x0) 02:03:32 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 02:03:32 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) 02:03:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) [ 2130.848956][T29445] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:33 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000016c0)={&(0x7f0000001580), 0xc, 0x0}, 0x0) 02:03:33 executing program 4: syz_mount_image$erofs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:03:33 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, 0x0) 02:03:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:33 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) 02:03:33 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @broadcast, @val, {@ipv4}}, 0x0) 02:03:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000e40)=ANY=[], 0x1378) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) io_setup(0x0, &(0x7f0000000000)) [ 2131.732603][T29471] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:33 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1, &(0x7f0000000140)=@raw=[@kfunc], &(0x7f0000000180)='GPL\x00', 0x0, 0x63, &(0x7f00000001c0)=""/99, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2131.775604][T29471] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:34 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) 02:03:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) 02:03:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:34 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000300)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 02:03:34 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2132.534447][T29489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:34 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2132.619257][T29489] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f00000003c0)=@abs={0x8, 0x2, 0x4}, 0x10) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 02:03:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000e40)=ANY=[], 0x1378) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) io_setup(0x0, &(0x7f0000000000)) 02:03:35 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) 02:03:35 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2133.453881][T29510] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000023c0), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) [ 2133.530312][T29510] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:35 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:36 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:03:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000340)) [ 2134.186891][T29526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) [ 2134.314274][T29526] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:36 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:36 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="06", 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000084000000000000002e06"], 0x18}, 0xfc) close(r0) 02:03:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0185502, &(0x7f00000000c0)={0x1, 0x1}) 02:03:36 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:37 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:03:37 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2135.055303][T29548] usb usb9: usbfs: process 29548 (syz-executor.3) did not claim interface 0 before use [ 2135.131161][T29549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}}, 0x0) [ 2135.263559][T29549] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:37 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="06", 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000084000000000000002e06"], 0x18}, 0xfc) close(r0) 02:03:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:37 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x74, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023030400efff0500000002000020d3"]) 02:03:37 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:37 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2135.899677][T29570] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. 02:03:38 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="06", 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000084000000000000002e06"], 0x18}, 0xfc) close(r0) [ 2136.007144][T29573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x74, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023030400efff0500000002000020d3"]) 02:03:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) [ 2136.129801][T29573] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:38 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2136.442720][T29588] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. 02:03:38 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000002500)='/sys/class/power_supply', 0x0, 0x180) 02:03:38 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="06", 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000084000000000000002e06"], 0x18}, 0xfc) close(r0) 02:03:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x74, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023030400efff0500000002000020d3"]) [ 2136.902583][T29595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:39 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) [ 2136.976564][T29601] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2136.996383][T29600] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:39 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual', 0x0, 0x1) 02:03:39 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x74, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023030400efff0500000002000020d3"]) 02:03:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:39 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002500)='/sys/class/power_supply', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 02:03:39 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2137.653499][T29613] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. 02:03:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) [ 2137.949240][T29614] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:40 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 02:03:40 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002500)='/sys/class/power_supply', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) [ 2138.002814][T29615] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x0, 0x8864}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:40 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:40 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:40 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, 0x0, 0x0}, 0x20) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 02:03:40 executing program 4: syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x3a300) 02:03:41 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={'hmac(sha1-avx2)\x00'}}) [ 2138.828769][T29633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:41 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2138.889167][T29636] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 02:03:41 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:41 executing program 4: bpf$BPF_GET_PROG_INFO(0x10, &(0x7f0000000500)={0xffffffffffffffff, 0x13, 0x0}, 0x10) 02:03:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:41 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:41 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:41 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x300}, 0x0) 02:03:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 02:03:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2140.056170][T29648] could not allocate digest TFM handle hmac(sha1-avx2) 02:03:42 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$proc_mixer(r0, 0x0, 0x0) 02:03:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:42 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:42 executing program 4: keyctl$dh_compute(0x1d, &(0x7f0000000300), 0x0, 0x0, 0x0) [ 2140.824140][T29681] __nla_validate_parse: 2 callbacks suppressed [ 2140.824202][T29681] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:43 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) [ 2140.878396][T29684] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:43 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 02:03:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 02:03:43 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:43 executing program 4: close$fd_v4l2_buffer(0xffffffffffffffff) 02:03:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}}, 0x0) 02:03:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2141.749729][T29707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:43 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:44 executing program 3: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) [ 2141.792314][T29708] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:44 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x2, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}]}, 0x18}}, 0x0) 02:03:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:44 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:44 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x6}]}, 0x20}}, 0x0) [ 2142.473991][T29728] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2142.838408][T29731] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:45 executing program 3: r0 = add_key$user(&(0x7f0000000140), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600)='q', 0x1, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) 02:03:45 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:45 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x1, &(0x7f0000000080)=@raw=[@exit], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 02:03:45 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x97f9, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}) [ 2143.855065][T29813] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2144.056077][T29813] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="2cd5e2b47080", @empty, @broadcast, @private0}}, 0x42) 02:03:47 executing program 3: bpf$BPF_GET_PROG_INFO(0x10, &(0x7f0000000500)={0xffffffffffffffff, 0xd, 0x0}, 0x10) 02:03:47 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:47 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/udmabuf', 0x0, 0x0) connect$netrom(r0, 0x0, 0x0) 02:03:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2145.307828][T29859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2145.379231][T29862] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan3\x00'}) 02:03:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:47 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:47 executing program 4: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)) 02:03:48 executing program 1: sendto$netrom(0xffffffffffffffff, &(0x7f0000000280)="c2820c2c5efc584ef1d184d9167d8e23fdc018c4fc5ff1e562d0f4c367bedc400c8bb42a0c85c5a0c69d1979227ed314c97751b49d77d60cc999067b683fb8a1dbf2211ad1bfe051f59699276904a1ec964db884f1436d3d581e85ff338ec78ae6acc0acb4e042cef48439a9bf337ae740ed457334b01156e29ded131e6e5e6553debda5400859ef3a0afd9b539ba41019b12d37600d9951b4e89021d44197e755b151983e029fbc54100b096e0d4f394e9aff9368e2ba82d754573a376864dce0cdea7eae7215aec517c4c77807a5ccde6aec4364e6efbeea5c68ad586d9046cd4b1c9af2b0923f042808bbd8fa77cb9a58c22858547ffe3556ca8f4f335869b57d27b95401500c40812c8772ccd6c840246984bc7a1f83a7e4f63a54c9016a657337714cc561a6cb91f1e431eec7b9136b5a903e395544a04a2b38e8f0dab5e12973e74c109ec4d623d1107af92d12135672d6017b0a6ff4ddab40acaea45e508f7024cf27d35574ab0548d886cfba92cea224b18d7688e716350c9e4d2ccf94728303aa80bd0454f94811578824cfd763aaff206f167a901e28fd0316f323002a8c5509ccca36fba9ef1a4b01d0ecd621d738dac7a33f95921281ddb773ab0f513d0800904f3b7d4a43b6eeb97ec7c93a6feb3a24a187c0ebaa95bad62854f582e055c5be05b894a595ffa97aa9edb44251b4f560ed66fbac6eee03b0bbc0d4e07cecb04a66d1051eaadf010522011665daadb1cf811c2d08164b7ab87810ba351d9175d321f5ca27d556cea226a4cd25984074a53ade2083351c009534989ca448eb260076f44d24a26049ee583f8e2393783bd2f17ae639b0f1b7a881f0951f82d0d359cafc4079b6c1bd3ad1a11e68536c84c00d3525686f6d07b5c7dc4647f9aea9772d3c260090588a7261f547e526207a818d879d5a74b0510f2a00c2f87d7bbe01c00c1129469101a5028a70b8af7e997709235580a922a9128bb79996cd8c181d9598c3ce3cd2b4589fb49855c572b811e631d96a5d62254c1ed2a686dfb0f49313db92be86fe305fe6410623ba40635e0fb9a024c66a414061ff9e05db8fb7951c427606b6dcfb53e9095ad374e4ce6bcc3d255c59e14866e103ce00e4891fc67d4733f1d08e531f85567aa779827765920b5133d52dc35fe8f3efe9c08af006e53e06283e0e167860cff05ecda040a5ffab4b17b3f293a1570dbdb5dde87a8cde31fc12c123bd8d71c215ffa33f4bf3dd72e137b40b8bbea5361556d9a032e567d8c6174ca15ccf6edb47a0d737e8febcce87513878496527431fbacd7230194563aa6f6befa97e213d5634cf7ef7c970b5eabd69f240a6045319e0dc7ea66ccc7dce5bc981a879cd1e863bba7f198fa57caef9dadb1fe12833261b596ff275153a2a227cb4eb491cf535508500200a0ea4fababc89142482e66c9379c40c2d950b638f3f126b112d3720763eb5565ad4b2d5898894936ffef95b98db74741da74a886913479bc62daa3d3eec1eadc14d3e32de878a657b747ad95bfd3f407d1e26b1e7327fa76c4c9d35419eb5ebde6de1eb751742bed23834b06c4a7eeaa67704c9f5f7b4f7b6a36e7298638eb7fca90b3a135e3bdb369e2cf8329019136ce8a89ab68d82adb163725cae974e466cc3885bfc344d3691670a7f8f8cfd385ef30af229b18267a1a5b667b233094522942b9d5a6023982b6fb75dd905a2d8c2c5b12ea17e262c114823bc6d4d613fb3a1f2e63ec9d136705513657fea64f747cccc7d3f52654d81d66f194d3cd3f17ffcb3959fd2cdc41549dfeeb2cc4401e01720cd404cbd2f", 0x50d, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/module/l2tp_netlink', 0x0, 0x0) 02:03:48 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2146.074561][T29877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2146.125586][T29877] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 02:03:48 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x0) 02:03:48 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:48 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:48 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000004780)='/sys/class/fc_vports', 0x48000, 0x0) 02:03:49 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f00000006c0)=ANY=[], 0xa, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000140), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600)='q', 0x1, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) [ 2146.880592][T29897] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:49 executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x0) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}], 0x2, 0x0, 0x0) 02:03:49 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) [ 2146.959975][T29897] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:49 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x3003, 0x0, 0x4}}) 02:03:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:49 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:03:49 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) [ 2147.518052][T29914] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:49 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0x0, 0x0) 02:03:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:49 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000002300)=[{&(0x7f0000001080)="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", 0x200}], 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) [ 2147.589046][T29914] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:50 executing program 1: getgroups(0x2, &(0x7f0000000000)=[0xee00, 0xee00]) setfsgid(r0) setfsgid(r0) 02:03:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:50 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2148.024978][T29923] loop3: detected capacity change from 0 to 1 02:03:50 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_delroute={0x38, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @private0}, @RTA_OIF={0x8, 0x1e}]}, 0x38}}, 0x0) [ 2148.115594][T29923] Dev loop3: unable to read RDB block 1 [ 2148.121554][T29923] loop3: unable to read partition table [ 2148.171529][T29923] loop3: partition table beyond EOD, truncated [ 2148.224635][T29928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:50 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x20) [ 2148.264913][T29928] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) 02:03:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:50 executing program 4: syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0xbd) 02:03:50 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:50 executing program 5: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x0, r0}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x0, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:50 executing program 3: socket$inet(0x2, 0x5, 0x9) 02:03:51 executing program 1: clock_getres(0x2, &(0x7f0000000080)) [ 2149.072989][T29942] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:51 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:51 executing program 5: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x0, r0}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x0, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYRES64], 0x74}}, 0x0) 02:03:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:51 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r0, 0x0, 0x0) 02:03:51 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x17) 02:03:52 executing program 2: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="78000000e71589"], 0x78}}, 0x0) [ 2149.798513][T29963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:52 executing program 5: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x0, r0}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x0, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:52 executing program 1: syz_usb_connect(0x4, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2a, 0x49, 0xa2, 0x0, 0x1b3d, 0x18c, 0x19aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0x25, 0x8f}}]}}]}}, 0x0) 02:03:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x5, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) 02:03:52 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@gettaction={0x48, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x48}}, 0x0) 02:03:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:52 executing program 2: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:53 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000200)={0x2, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x28}}, 0x0) 02:03:53 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2150.867133][T29987] ieee802154 phy0 wpan0: encryption failed: -22 02:03:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) 02:03:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000024c0)=[{0x0, 0x0, 0x7fffffff}, {&(0x7f0000000140)="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", 0x1d7, 0x9}, {&(0x7f0000001440)="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", 0x1cf, 0x5}], 0x0, &(0x7f00000025c0)) 02:03:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:53 executing program 1: socketpair(0x1d, 0x0, 0x6, &(0x7f00000000c0)) 02:03:53 executing program 2: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) [ 2151.395838][T29999] sp0: Synchronizing with TNC 02:03:53 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2151.460140][T30003] loop4: detected capacity change from 0 to 264192 [ 2151.606968][T30002] __nla_validate_parse: 5 callbacks suppressed [ 2151.607109][T30002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2151.610885][T30003] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2151.709189][T30002] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:53 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0xe, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 02:03:54 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x1410, 0x1}, 0x10}}, 0x0) 02:03:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:54 executing program 1: clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, r0+10000000}, 0x0) 02:03:54 executing program 3: bpf$MAP_CREATE(0xd, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 02:03:54 executing program 2: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) [ 2152.366505][T30019] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv6_newroute={0x20, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) [ 2152.467010][T30020] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:55 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) [ 2152.804915][T30031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2152.812549][T30031] IPv6: NLM_F_CREATE should be set when creating new route [ 2152.819914][T30031] IPv6: NLM_F_CREATE should be set when creating new route 02:03:55 executing program 2: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:55 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/ftdi_sio', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) [ 2153.135691][T30036] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:55 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2153.258305][T30038] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:55 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x2, &(0x7f00000001c0)=@raw=[@map_idx], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:03:55 executing program 2: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:55 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x9, 0x80, 0x3}, {0x0, 0x0, 0x0, 0x7f}]}) 02:03:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:55 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x2, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0xb}]}, 0x20}}, 0x0) 02:03:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:56 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) [ 2153.864860][T30051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:56 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) [ 2153.925041][T30056] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:56 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:03:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2154.438787][T30068] input: syz0 as /devices/virtual/input/input16 02:03:56 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:03:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2154.663731][T30072] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80010040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x0) [ 2154.926805][T30072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:03:57 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) 02:03:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:58 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) [ 2156.297299][T30153] input: syz0 as /devices/virtual/input/input17 02:03:58 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='/', 0x1, r0) 02:03:58 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:03:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:03:58 executing program 4: syz_usb_connect(0x5, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x50, 0x77, 0x1, 0x0, 0x403, 0xd9ae, 0xc196, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xea, 0x36, 0x73}}]}}]}}, 0x0) [ 2156.649951][T30158] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:58 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x20) 02:03:58 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) [ 2156.735161][T30158] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:59 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2157.045957][T30170] input: syz0 as /devices/virtual/input/input18 02:03:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:03:59 executing program 3: syz_usb_connect(0x1, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa5, 0xe6, 0xa3, 0x0, 0x1199, 0x6835, 0x2d24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5f, 0x74, 0x7e}}]}}]}}, 0x0) 02:03:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) [ 2157.263818][ T3572] usb 5-1: new high-speed USB device number 106 using dummy_hcd 02:03:59 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) [ 2157.472268][ T3572] usb 5-1: device descriptor read/64, error 18 02:03:59 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2157.573580][T30182] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2157.639970][T30182] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2157.643442][T30184] input: syz0 as /devices/virtual/input/input19 02:03:59 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) [ 2157.742431][ T3572] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2157.852511][T28314] usb 4-1: new low-speed USB device number 11 using dummy_hcd 02:04:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 2157.933708][ T3572] usb 5-1: device descriptor read/64, error 18 [ 2158.062863][T28314] usb 4-1: device descriptor read/64, error 18 [ 2158.079551][ T3572] usb usb5-port1: attempt power cycle 02:04:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2158.331917][T28314] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 2158.491485][T30197] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2158.515867][ T3572] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2158.532220][T28314] usb 4-1: device descriptor read/64, error 18 [ 2158.549555][T30198] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2158.635394][ T3572] usb 5-1: Invalid ep0 maxpacket: 0 [ 2158.652615][T28314] usb usb4-port1: attempt power cycle [ 2158.801899][ T3572] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2158.892189][ T3572] usb 5-1: Invalid ep0 maxpacket: 0 [ 2158.904759][ T3572] usb usb5-port1: unable to enumerate USB device [ 2159.081856][T28314] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 2159.182344][T28314] usb 4-1: Invalid ep0 maxpacket: 0 [ 2159.351902][T28314] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 2159.452054][T28314] usb 4-1: Invalid ep0 maxpacket: 0 [ 2159.458510][T28314] usb usb4-port1: unable to enumerate USB device 02:04:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000024c0)=[{0x0, 0x0, 0x7fffffff}, {&(0x7f0000000140)="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", 0x1d6, 0x9}, {&(0x7f0000001440)="a134ca375f8018eb577abaa983f6f8694457cde9e6037aa42e9457306c2717498e9bb5fca93e4d07332a979ca3064435b3fd4c9934dab72e6b1ccbed7e26ef4c933cee68d9399cf0ead91c00fd6bd4849344ae587586044894f05c6000f68e25a2d7eb5da808583f99e993f27c20bcd688adda2dddfcbcb29ad99d136e9f3b91e07c752a09e4271aa91fc4990ec5db4a1a120870833209d473660df5820e30fff9849c0bbbacf216fe071b323b87ef59e7db1c28066a83303b97d79dae2f2450adc785a5c6c0a1ea898bb416fc4d2faa6b93af315e4914792bb1e2231e6718540a0adb1e9b2f48ab28c4e94ccceceee49e7aa26ff31d8a8138107a825bf7ea398197b60173ab86bcf63cf64215a389d4e7b6a240ad60afab8c38c550ff92647446711f3b8115119cc0aa4da436d9d1fb588dd72650dd65dd27ead73aba8dd1b7ec43a237b794a22d91bef4f763641b041b2ee5e62acbeeb1c4013bbaa3a03b72e0acc2aeb82fe6f0ee183888472af9c9f9f1001d94a16629d88909dcbbde65b2cb0a6e471669f20592e03bae02d9618242655b138836f6276c2cc6a4b39b4cf08d5ea83206fd24f7a2a106229191e46e01ed61bb7fafdf99fe2e16434fd82d6ba8b32d508090a63876a560c984d113", 0x1cf, 0x5}], 0x0, &(0x7f00000025c0)) 02:04:02 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:02 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 02:04:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2160.052012][T30204] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2160.145801][T30204] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2160.307886][T30214] loop4: detected capacity change from 0 to 264192 [ 2160.491053][T30214] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 02:04:02 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 02:04:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 02:04:02 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:02 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:02 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/udmabuf', 0x0, 0x0) connect$netrom(r0, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) 02:04:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:03 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2161.004001][T30225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2161.044026][T30225] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:03 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/module/l2tp_netlink', 0x0, 0x0) read$proc_mixer(r0, 0x0, 0x0) 02:04:03 executing program 4: bpf$BPF_GET_PROG_INFO(0x10, &(0x7f0000000500)={0xffffffffffffffff, 0x1000000, 0x0}, 0x10) [ 2161.270881][T30231] input: syz0 as /devices/virtual/input/input23 02:04:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:03 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:03 executing program 3: ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000280)={&(0x7f0000000440)=[{0x0, 0x0, 0x11, &(0x7f00000002c0)="61037dcbf4e8a0211916ddc1c6558221f5"}], 0x1}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYRES64], 0x74}}, 0x0) 02:04:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:03 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2161.818709][T30244] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2161.879327][T30243] input: syz0 as /devices/virtual/input/input24 [ 2161.907749][T30244] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:04 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:04 executing program 4: bpf$MAP_CREATE(0xf, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 02:04:04 executing program 3: request_key(&(0x7f0000000880)='encrypted\x00', &(0x7f00000008c0)={'syz', 0x2}, 0x0, 0x0) 02:04:04 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2162.521143][T30260] input: syz0 as /devices/virtual/input/input25 02:04:04 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) [ 2162.808895][T30268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:05 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/block/nbd3', 0x41c001, 0x0) 02:04:05 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="f1", 0x1, r0) 02:04:05 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2162.917782][T30273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:05 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:05 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)) 02:04:05 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x1401, 0x1}, 0x10}}, 0x0) 02:04:05 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:05 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) [ 2163.687017][T30290] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) [ 2163.747731][T30293] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:06 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000000)) 02:04:06 executing program 3: io_uring_setup(0x4def, &(0x7f00000001c0)={0x0, 0x25af, 0x8}) 02:04:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:06 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:06 executing program 1: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r0 = dup(0xffffffffffffffff) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:04:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x8c00, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000108000000000000001fa1284724", @ANYRES32=0x0, @ANYBLOB="050200000000000008001b0000000000"], 0x28}}, 0x0) 02:04:06 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0) [ 2164.536695][T30311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2164.632483][T30311] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:06 executing program 1: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r0 = dup(0xffffffffffffffff) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:04:06 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:07 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 2165.114591][T30324] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2165.122714][T30324] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2165.206704][T30324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 02:04:07 executing program 1: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r0 = dup(0xffffffffffffffff) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:04:07 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:07 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2165.422660][T30335] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2165.459070][T30335] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x0, 0x1000}, 0x48) [ 2165.637700][T30323] not chained 800000 origins [ 2165.642567][T30323] CPU: 0 PID: 30323 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2165.652864][T30323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2165.663021][T30323] Call Trace: [ 2165.666367][T30323] [ 2165.669364][T30323] dump_stack_lvl+0x1c8/0x256 [ 2165.674230][T30323] dump_stack+0x1a/0x1c [ 2165.678530][T30323] kmsan_internal_chain_origin+0x78/0x120 [ 2165.684401][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2165.690794][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2165.696741][T30323] ? ____sys_recvmsg+0x5c1/0x810 [ 2165.701800][T30323] ? __get_compat_msghdr+0x5b/0x750 [ 2165.707118][T30323] ? get_compat_msghdr+0x8c/0x1c0 [ 2165.712259][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2165.718210][T30323] ? __get_compat_msghdr+0x5b/0x750 [ 2165.723530][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2165.729483][T30323] ? should_fail+0x3f/0x810 [ 2165.734121][T30323] ? __stack_depot_save+0x21/0x4b0 [ 2165.739366][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2165.745768][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2165.751716][T30323] __msan_chain_origin+0xbd/0x140 [ 2165.756872][T30323] __get_compat_msghdr+0x514/0x750 [ 2165.762127][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2165.767099][T30323] ? ___sys_recvmsg+0xa9/0x890 [ 2165.771977][T30323] ? do_recvmmsg+0x682/0x1180 [ 2165.776782][T30323] ___sys_recvmsg+0x19d/0x890 [ 2165.781575][T30323] ? do_recvmmsg+0x6e4/0x1180 [ 2165.786386][T30323] ? __stack_depot_save+0x21/0x4b0 [ 2165.791657][T30323] ? kmsan_internal_check_memory+0x94/0x530 [ 2165.797694][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2165.803668][T30323] do_recvmmsg+0x682/0x1180 [ 2165.808308][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2165.814699][T30323] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2165.821257][T30323] __sys_recvmmsg+0x113/0x450 [ 2165.826062][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2165.832470][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2165.837710][T30323] ? exit_to_user_mode_prepare+0x119/0x220 [ 2165.843685][T30323] do_fast_syscall_32+0x33/0x70 [ 2165.848684][T30323] do_SYSENTER_32+0x1b/0x20 [ 2165.853331][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2165.859818][T30323] RIP: 0023:0xf7f04549 [ 2165.863985][T30323] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2165.883747][T30323] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2165.892283][T30323] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2165.900364][T30323] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2165.908438][T30323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2165.916508][T30323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2165.924599][T30323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2165.932693][T30323] [ 2165.944140][T30323] Uninit was stored to memory at: [ 2165.949367][T30323] __get_compat_msghdr+0x514/0x750 [ 2165.955844][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2165.960833][T30323] ___sys_recvmsg+0x19d/0x890 [ 2165.965743][T30323] do_recvmmsg+0x682/0x1180 [ 2165.970377][T30323] __sys_recvmmsg+0x113/0x450 [ 2165.975270][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2165.982445][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2165.987698][T30323] do_fast_syscall_32+0x33/0x70 02:04:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2165.993119][T30323] do_SYSENTER_32+0x1b/0x20 [ 2165.997772][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2166.004538][T30323] [ 2166.006925][T30323] Uninit was stored to memory at: [ 2166.012204][T30323] __get_compat_msghdr+0x514/0x750 [ 2166.017457][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2166.022514][T30323] ___sys_recvmsg+0x19d/0x890 [ 2166.027334][T30323] do_recvmmsg+0x682/0x1180 [ 2166.032050][T30323] __sys_recvmmsg+0x113/0x450 [ 2166.036872][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2166.043350][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2166.048597][T30323] do_fast_syscall_32+0x33/0x70 [ 2166.053660][T30323] do_SYSENTER_32+0x1b/0x20 [ 2166.058301][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2166.064859][T30323] [ 2166.067244][T30323] Uninit was stored to memory at: [ 2166.072514][T30323] __get_compat_msghdr+0x514/0x750 [ 2166.077767][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2166.082831][T30323] ___sys_recvmsg+0x19d/0x890 [ 2166.087652][T30323] do_recvmmsg+0x682/0x1180 [ 2166.092364][T30323] __sys_recvmmsg+0x113/0x450 [ 2166.097167][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2166.103636][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2166.108886][T30323] do_fast_syscall_32+0x33/0x70 [ 2166.113963][T30323] do_SYSENTER_32+0x1b/0x20 [ 2166.118609][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2166.125162][T30323] [ 2166.127554][T30323] Uninit was stored to memory at: [ 2166.132834][T30323] __get_compat_msghdr+0x514/0x750 [ 2166.138088][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2166.143146][T30323] ___sys_recvmsg+0x19d/0x890 [ 2166.147946][T30323] do_recvmmsg+0x682/0x1180 [ 2166.152663][T30323] __sys_recvmmsg+0x113/0x450 [ 2166.157488][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2166.163968][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2166.169216][T30323] do_fast_syscall_32+0x33/0x70 [ 2166.174278][T30323] do_SYSENTER_32+0x1b/0x20 [ 2166.178922][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2166.185494][T30323] [ 2166.187886][T30323] Uninit was stored to memory at: [ 2166.193163][T30323] __get_compat_msghdr+0x514/0x750 [ 2166.198417][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2166.203478][T30323] ___sys_recvmsg+0x19d/0x890 [ 2166.208299][T30323] do_recvmmsg+0x682/0x1180 [ 2166.213024][T30323] __sys_recvmmsg+0x113/0x450 [ 2166.217842][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2166.224314][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2166.229572][T30323] do_fast_syscall_32+0x33/0x70 [ 2166.234640][T30323] do_SYSENTER_32+0x1b/0x20 [ 2166.239271][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2166.245836][T30323] [ 2166.248230][T30323] Uninit was stored to memory at: [ 2166.253523][T30323] __get_compat_msghdr+0x514/0x750 [ 2166.258768][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2166.263840][T30323] ___sys_recvmsg+0x19d/0x890 [ 2166.268657][T30323] do_recvmmsg+0x682/0x1180 [ 2166.273368][T30323] __sys_recvmmsg+0x113/0x450 [ 2166.278169][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2166.284646][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2166.289898][T30323] do_fast_syscall_32+0x33/0x70 [ 2166.294962][T30323] do_SYSENTER_32+0x1b/0x20 [ 2166.299594][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2166.306156][T30323] [ 2166.308553][T30323] Uninit was stored to memory at: [ 2166.313842][T30323] __get_compat_msghdr+0x514/0x750 [ 2166.319104][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2166.324162][T30323] ___sys_recvmsg+0x19d/0x890 [ 2166.328964][T30323] do_recvmmsg+0x682/0x1180 [ 2166.333691][T30323] __sys_recvmmsg+0x113/0x450 [ 2166.338512][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2166.345004][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2166.350271][T30323] do_fast_syscall_32+0x33/0x70 [ 2166.355344][T30323] do_SYSENTER_32+0x1b/0x20 [ 2166.359993][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2166.366564][T30323] [ 2166.368971][T30323] Local variable msg_sys created at: [ 2166.374511][T30323] do_recvmmsg+0x5c/0x1180 [ 2166.379062][T30323] __sys_recvmmsg+0x113/0x450 [ 2167.285743][T30323] not chained 810000 origins [ 2167.290404][T30323] CPU: 0 PID: 30323 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2167.300655][T30323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2167.310799][T30323] Call Trace: [ 2167.314139][T30323] [ 2167.317147][T30323] dump_stack_lvl+0x1c8/0x256 [ 2167.322014][T30323] dump_stack+0x1a/0x1c [ 2167.326329][T30323] kmsan_internal_chain_origin+0x78/0x120 [ 2167.332214][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2167.338602][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2167.344545][T30323] ? ____sys_recvmsg+0x5c1/0x810 [ 2167.349601][T30323] ? __get_compat_msghdr+0x5b/0x750 [ 2167.354929][T30323] ? get_compat_msghdr+0x8c/0x1c0 [ 2167.360071][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2167.365966][T30323] ? __get_compat_msghdr+0x5b/0x750 [ 2167.371262][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2167.377186][T30323] ? should_fail+0x3f/0x810 [ 2167.381841][T30323] ? __stack_depot_save+0x21/0x4b0 [ 2167.387084][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2167.393442][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2167.399384][T30323] __msan_chain_origin+0xbd/0x140 [ 2167.404508][T30323] __get_compat_msghdr+0x514/0x750 [ 2167.409751][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2167.414690][T30323] ? ___sys_recvmsg+0xa9/0x890 [ 2167.419566][T30323] ? do_recvmmsg+0x682/0x1180 [ 2167.424340][T30323] ___sys_recvmsg+0x19d/0x890 [ 2167.429147][T30323] ? do_recvmmsg+0x6e4/0x1180 [ 2167.433971][T30323] ? __stack_depot_save+0x21/0x4b0 [ 2167.439238][T30323] ? kmsan_internal_check_memory+0x94/0x530 [ 2167.445272][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2167.451170][T30323] do_recvmmsg+0x682/0x1180 [ 2167.455757][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2167.462114][T30323] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2167.468688][T30323] __sys_recvmmsg+0x113/0x450 [ 2167.473469][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2167.479879][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2167.485091][T30323] ? exit_to_user_mode_prepare+0x119/0x220 [ 2167.491030][T30323] do_fast_syscall_32+0x33/0x70 [ 2167.495955][T30323] do_SYSENTER_32+0x1b/0x20 [ 2167.500530][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2167.506944][T30323] RIP: 0023:0xf7f04549 [ 2167.511063][T30323] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2167.530778][T30323] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2167.539326][T30323] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2167.547412][T30323] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2167.555497][T30323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2167.563580][T30323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2167.571655][T30323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2167.579730][T30323] [ 2167.586588][T30323] Uninit was stored to memory at: [ 2167.592281][T30323] __get_compat_msghdr+0x514/0x750 [ 2167.597520][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2167.602581][T30323] ___sys_recvmsg+0x19d/0x890 [ 2167.607386][T30323] do_recvmmsg+0x682/0x1180 [ 2167.612096][T30323] __sys_recvmmsg+0x113/0x450 [ 2167.616899][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2167.623365][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2167.628608][T30323] do_fast_syscall_32+0x33/0x70 [ 2167.633657][T30323] do_SYSENTER_32+0x1b/0x20 [ 2167.638286][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2167.644841][T30323] [ 2167.647244][T30323] Uninit was stored to memory at: [ 2167.652510][T30323] __get_compat_msghdr+0x514/0x750 [ 2167.657748][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2167.662798][T30323] ___sys_recvmsg+0x19d/0x890 [ 2167.667599][T30323] do_recvmmsg+0x682/0x1180 [ 2167.673604][T30323] __sys_recvmmsg+0x113/0x450 [ 2167.678409][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2167.684874][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2167.690126][T30323] do_fast_syscall_32+0x33/0x70 [ 2167.695184][T30323] do_SYSENTER_32+0x1b/0x20 [ 2167.699815][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2167.706361][T30323] [ 2167.708746][T30323] Uninit was stored to memory at: [ 2167.713983][T30323] __get_compat_msghdr+0x514/0x750 [ 2167.719211][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2167.724271][T30323] ___sys_recvmsg+0x19d/0x890 [ 2167.729075][T30323] do_recvmmsg+0x682/0x1180 [ 2167.733827][T30323] __sys_recvmmsg+0x113/0x450 [ 2167.738634][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2167.745152][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2167.750383][T30323] do_fast_syscall_32+0x33/0x70 [ 2167.755431][T30323] do_SYSENTER_32+0x1b/0x20 [ 2167.760067][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2167.766673][T30323] [ 2167.769060][T30323] Uninit was stored to memory at: [ 2167.774368][T30323] __get_compat_msghdr+0x514/0x750 [ 2167.779591][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2167.784689][T30323] ___sys_recvmsg+0x19d/0x890 [ 2167.789496][T30323] do_recvmmsg+0x682/0x1180 [ 2167.794223][T30323] __sys_recvmmsg+0x113/0x450 [ 2167.799035][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2167.805533][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2167.810764][T30323] do_fast_syscall_32+0x33/0x70 [ 2167.815792][T30323] do_SYSENTER_32+0x1b/0x20 [ 2167.820425][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2167.827025][T30323] [ 2167.829411][T30323] Uninit was stored to memory at: [ 2167.834675][T30323] __get_compat_msghdr+0x514/0x750 [ 2167.839938][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2167.845030][T30323] ___sys_recvmsg+0x19d/0x890 [ 2167.849834][T30323] do_recvmmsg+0x682/0x1180 [ 2167.854538][T30323] __sys_recvmmsg+0x113/0x450 [ 2167.859290][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2167.865756][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2167.871005][T30323] do_fast_syscall_32+0x33/0x70 [ 2167.876117][T30323] do_SYSENTER_32+0x1b/0x20 [ 2167.880750][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2167.887347][T30323] [ 2167.889735][T30323] Uninit was stored to memory at: [ 2167.895029][T30323] __get_compat_msghdr+0x514/0x750 [ 2167.900253][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2167.905315][T30323] ___sys_recvmsg+0x19d/0x890 [ 2167.910125][T30323] do_recvmmsg+0x682/0x1180 [ 2167.914806][T30323] __sys_recvmmsg+0x113/0x450 [ 2167.919599][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2167.926063][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2167.931311][T30323] do_fast_syscall_32+0x33/0x70 [ 2167.936336][T30323] do_SYSENTER_32+0x1b/0x20 [ 2167.940967][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2167.947573][T30323] [ 2167.949960][T30323] Uninit was stored to memory at: [ 2167.955236][T30323] __get_compat_msghdr+0x514/0x750 [ 2167.960457][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2167.965529][T30323] ___sys_recvmsg+0x19d/0x890 [ 2167.970318][T30323] do_recvmmsg+0x682/0x1180 [ 2167.975042][T30323] __sys_recvmmsg+0x113/0x450 [ 2167.979851][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2167.986367][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2167.991686][T30323] do_fast_syscall_32+0x33/0x70 [ 2167.996665][T30323] do_SYSENTER_32+0x1b/0x20 [ 2168.001277][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2168.007793][T30323] [ 2168.010166][T30323] Local variable msg_sys created at: [ 2168.015608][T30323] do_recvmmsg+0x5c/0x1180 [ 2168.020143][T30323] __sys_recvmmsg+0x113/0x450 [ 2168.230939][T30323] not chained 820000 origins [ 2168.235864][T30323] CPU: 0 PID: 30323 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2168.246159][T30323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2168.256318][T30323] Call Trace: [ 2168.259654][T30323] [ 2168.262639][T30323] dump_stack_lvl+0x1c8/0x256 [ 2168.267482][T30323] dump_stack+0x1a/0x1c [ 2168.271763][T30323] kmsan_internal_chain_origin+0x78/0x120 [ 2168.277620][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2168.283982][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2168.289898][T30323] ? ____sys_recvmsg+0x5c1/0x810 [ 2168.294924][T30323] ? __get_compat_msghdr+0x5b/0x750 [ 2168.300238][T30323] ? get_compat_msghdr+0x8c/0x1c0 [ 2168.305351][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2168.311293][T30323] ? __get_compat_msghdr+0x5b/0x750 [ 2168.316565][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2168.322488][T30323] ? should_fail+0x3f/0x810 [ 2168.327142][T30323] ? __stack_depot_save+0x21/0x4b0 [ 2168.332403][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2168.338793][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2168.344684][T30323] __msan_chain_origin+0xbd/0x140 [ 2168.349808][T30323] __get_compat_msghdr+0x514/0x750 [ 2168.355079][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2168.360055][T30323] ? ___sys_recvmsg+0xa9/0x890 [ 2168.364918][T30323] ? do_recvmmsg+0x682/0x1180 [ 2168.369679][T30323] ___sys_recvmsg+0x19d/0x890 [ 2168.374446][T30323] ? do_recvmmsg+0x6e4/0x1180 [ 2168.379276][T30323] ? __stack_depot_save+0x21/0x4b0 [ 2168.384527][T30323] ? kmsan_internal_check_memory+0x94/0x530 [ 2168.390515][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2168.396411][T30323] do_recvmmsg+0x682/0x1180 [ 2168.401005][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2168.407339][T30323] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2168.413866][T30323] __sys_recvmmsg+0x113/0x450 [ 2168.418690][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2168.425074][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2168.430261][T30323] ? exit_to_user_mode_prepare+0x119/0x220 [ 2168.436167][T30323] do_fast_syscall_32+0x33/0x70 [ 2168.441136][T30323] do_SYSENTER_32+0x1b/0x20 [ 2168.445707][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2168.452138][T30323] RIP: 0023:0xf7f04549 [ 2168.456327][T30323] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2168.476074][T30323] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2168.484580][T30323] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2168.492670][T30323] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2168.500746][T30323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2168.508771][T30323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2168.516796][T30323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2168.524864][T30323] [ 2168.531499][T30323] Uninit was stored to memory at: [ 2168.537152][T30323] __get_compat_msghdr+0x514/0x750 [ 2168.542477][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2168.547464][T30323] ___sys_recvmsg+0x19d/0x890 [ 2168.552345][T30323] do_recvmmsg+0x682/0x1180 [ 2168.556989][T30323] __sys_recvmmsg+0x113/0x450 [ 2168.561872][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2168.568259][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2168.573589][T30323] do_fast_syscall_32+0x33/0x70 [ 2168.578569][T30323] do_SYSENTER_32+0x1b/0x20 [ 2168.583276][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2168.589729][T30323] [ 2168.592211][T30323] Uninit was stored to memory at: [ 2168.597398][T30323] __get_compat_msghdr+0x514/0x750 [ 2168.602770][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2168.607742][T30323] ___sys_recvmsg+0x19d/0x890 [ 2168.612676][T30323] do_recvmmsg+0x682/0x1180 [ 2168.617308][T30323] __sys_recvmmsg+0x113/0x450 [ 2168.622197][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2168.628586][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2168.633956][T30323] do_fast_syscall_32+0x33/0x70 [ 2168.638937][T30323] do_SYSENTER_32+0x1b/0x20 [ 2168.643694][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2168.650172][T30323] [ 2168.652677][T30323] Uninit was stored to memory at: [ 2168.657862][T30323] __get_compat_msghdr+0x514/0x750 [ 2168.663170][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2168.668143][T30323] ___sys_recvmsg+0x19d/0x890 [ 2168.673072][T30323] do_recvmmsg+0x682/0x1180 [ 2168.677684][T30323] __sys_recvmmsg+0x113/0x450 [ 2168.682572][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2168.688944][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2168.694271][T30323] do_fast_syscall_32+0x33/0x70 [ 2168.699233][T30323] do_SYSENTER_32+0x1b/0x20 [ 2168.703940][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2168.710397][T30323] [ 2168.712866][T30323] Uninit was stored to memory at: [ 2168.718055][T30323] __get_compat_msghdr+0x514/0x750 [ 2168.723419][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2168.728389][T30323] ___sys_recvmsg+0x19d/0x890 [ 2168.733243][T30323] do_recvmmsg+0x682/0x1180 [ 2168.737850][T30323] __sys_recvmmsg+0x113/0x450 [ 2168.742728][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2168.749114][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2168.754451][T30323] do_fast_syscall_32+0x33/0x70 [ 2168.759438][T30323] do_SYSENTER_32+0x1b/0x20 [ 2168.764190][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2168.770663][T30323] [ 2168.773171][T30323] Uninit was stored to memory at: [ 2168.778311][T30323] __get_compat_msghdr+0x514/0x750 [ 2168.783630][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2168.788588][T30323] ___sys_recvmsg+0x19d/0x890 [ 2168.793471][T30323] do_recvmmsg+0x682/0x1180 [ 2168.798087][T30323] __sys_recvmmsg+0x113/0x450 [ 2168.802976][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2168.809366][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2168.814684][T30323] do_fast_syscall_32+0x33/0x70 [ 2168.819661][T30323] do_SYSENTER_32+0x1b/0x20 [ 2168.824378][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2168.830840][T30323] [ 2168.833330][T30323] Uninit was stored to memory at: [ 2168.838472][T30323] __get_compat_msghdr+0x514/0x750 [ 2168.843792][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2168.848750][T30323] ___sys_recvmsg+0x19d/0x890 [ 2168.853631][T30323] do_recvmmsg+0x682/0x1180 [ 2168.858260][T30323] __sys_recvmmsg+0x113/0x450 [ 2168.863168][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2168.869563][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2168.874939][T30323] do_fast_syscall_32+0x33/0x70 [ 2168.879923][T30323] do_SYSENTER_32+0x1b/0x20 [ 2168.884647][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2168.891126][T30323] [ 2168.893619][T30323] Uninit was stored to memory at: [ 2168.898765][T30323] __get_compat_msghdr+0x514/0x750 [ 2168.904079][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2168.909038][T30323] ___sys_recvmsg+0x19d/0x890 [ 2168.913921][T30323] do_recvmmsg+0x682/0x1180 [ 2168.918534][T30323] __sys_recvmmsg+0x113/0x450 [ 2168.923412][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2168.929792][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2168.935118][T30323] do_fast_syscall_32+0x33/0x70 [ 2168.940078][T30323] do_SYSENTER_32+0x1b/0x20 [ 2168.944752][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2168.951208][T30323] [ 2168.953699][T30323] Local variable msg_sys created at: [ 2168.959039][T30323] do_recvmmsg+0x5c/0x1180 [ 2168.963659][T30323] __sys_recvmmsg+0x113/0x450 [ 2169.152045][T30323] not chained 830000 origins [ 2169.156698][T30323] CPU: 0 PID: 30323 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2169.166921][T30323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2169.177030][T30323] Call Trace: [ 2169.180341][T30323] [ 2169.183310][T30323] dump_stack_lvl+0x1c8/0x256 [ 2169.188090][T30323] dump_stack+0x1a/0x1c [ 2169.192349][T30323] kmsan_internal_chain_origin+0x78/0x120 [ 2169.198209][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2169.204568][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2169.210515][T30323] ? ____sys_recvmsg+0x5c1/0x810 [ 2169.215526][T30323] ? __get_compat_msghdr+0x5b/0x750 [ 2169.220792][T30323] ? get_compat_msghdr+0x8c/0x1c0 [ 2169.227360][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2169.233257][T30323] ? __get_compat_msghdr+0x5b/0x750 [ 2169.238529][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2169.244419][T30323] ? should_fail+0x3f/0x810 [ 2169.249003][T30323] ? __stack_depot_save+0x21/0x4b0 [ 2169.254212][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2169.260611][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2169.266518][T30323] __msan_chain_origin+0xbd/0x140 [ 2169.271637][T30323] __get_compat_msghdr+0x514/0x750 [ 2169.276905][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2169.281882][T30323] ? ___sys_recvmsg+0xa9/0x890 [ 2169.286729][T30323] ? do_recvmmsg+0x682/0x1180 [ 2169.291474][T30323] ___sys_recvmsg+0x19d/0x890 [ 2169.296216][T30323] ? do_recvmmsg+0x6e4/0x1180 [ 2169.300965][T30323] ? __stack_depot_save+0x21/0x4b0 [ 2169.306158][T30323] ? kmsan_internal_check_memory+0x94/0x530 [ 2169.312158][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2169.318118][T30323] do_recvmmsg+0x682/0x1180 [ 2169.322724][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2169.329063][T30323] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2169.335572][T30323] __sys_recvmmsg+0x113/0x450 [ 2169.340339][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2169.346677][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2169.351892][T30323] ? exit_to_user_mode_prepare+0x119/0x220 [ 2169.357798][T30323] do_fast_syscall_32+0x33/0x70 [ 2169.362740][T30323] do_SYSENTER_32+0x1b/0x20 [ 2169.367353][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2169.373782][T30323] RIP: 0023:0xf7f04549 [ 2169.377950][T30323] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2169.397707][T30323] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2169.408982][T30323] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2169.417024][T30323] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2169.425071][T30323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2169.433136][T30323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2169.441163][T30323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2169.449210][T30323] [ 2169.455926][T30323] Uninit was stored to memory at: [ 2169.461133][T30323] __get_compat_msghdr+0x514/0x750 [ 2169.466796][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2169.471863][T30323] ___sys_recvmsg+0x19d/0x890 [ 2169.476691][T30323] do_recvmmsg+0x682/0x1180 [ 2169.481324][T30323] __sys_recvmmsg+0x113/0x450 [ 2169.486234][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2169.492691][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2169.497933][T30323] do_fast_syscall_32+0x33/0x70 [ 2169.502997][T30323] do_SYSENTER_32+0x1b/0x20 [ 2169.507629][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2169.514199][T30323] [ 2169.516586][T30323] Uninit was stored to memory at: [ 2169.521928][T30323] __get_compat_msghdr+0x514/0x750 [ 2169.527236][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2169.532352][T30323] ___sys_recvmsg+0x19d/0x890 [ 2169.537178][T30323] do_recvmmsg+0x682/0x1180 [ 2169.541922][T30323] __sys_recvmmsg+0x113/0x450 [ 2169.546711][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2169.553209][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2169.558443][T30323] do_fast_syscall_32+0x33/0x70 [ 2169.563492][T30323] do_SYSENTER_32+0x1b/0x20 [ 2169.568110][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2169.574672][T30323] [ 2169.577061][T30323] Uninit was stored to memory at: [ 2169.582361][T30323] __get_compat_msghdr+0x514/0x750 [ 2169.587591][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2169.592649][T30323] ___sys_recvmsg+0x19d/0x890 [ 2169.597450][T30323] do_recvmmsg+0x682/0x1180 [ 2169.602212][T30323] __sys_recvmmsg+0x113/0x450 [ 2169.607002][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2169.613467][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2169.618706][T30323] do_fast_syscall_32+0x33/0x70 [ 2169.623781][T30323] do_SYSENTER_32+0x1b/0x20 [ 2169.628394][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2169.636077][T30323] [ 2169.638462][T30323] Uninit was stored to memory at: [ 2169.643783][T30323] __get_compat_msghdr+0x514/0x750 [ 2169.649007][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2169.654064][T30323] ___sys_recvmsg+0x19d/0x890 [ 2169.658853][T30323] do_recvmmsg+0x682/0x1180 [ 2169.663568][T30323] __sys_recvmmsg+0x113/0x450 [ 2169.668355][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2169.674820][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2169.680064][T30323] do_fast_syscall_32+0x33/0x70 [ 2169.685177][T30323] do_SYSENTER_32+0x1b/0x20 [ 2169.689805][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2169.696414][T30323] [ 2169.698887][T30323] Uninit was stored to memory at: [ 2169.704192][T30323] __get_compat_msghdr+0x514/0x750 [ 2169.709430][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2169.714498][T30323] ___sys_recvmsg+0x19d/0x890 [ 2169.719291][T30323] do_recvmmsg+0x682/0x1180 [ 2169.723999][T30323] __sys_recvmmsg+0x113/0x450 [ 2169.728790][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2169.735217][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2169.740449][T30323] do_fast_syscall_32+0x33/0x70 [ 2169.745519][T30323] do_SYSENTER_32+0x1b/0x20 [ 2169.750156][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2169.756743][T30323] [ 2169.759132][T30323] Uninit was stored to memory at: [ 2169.764450][T30323] __get_compat_msghdr+0x514/0x750 [ 2169.769698][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2169.774764][T30323] ___sys_recvmsg+0x19d/0x890 [ 2169.779563][T30323] do_recvmmsg+0x682/0x1180 [ 2169.784273][T30323] __sys_recvmmsg+0x113/0x450 [ 2169.789080][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2169.795606][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2169.800837][T30323] do_fast_syscall_32+0x33/0x70 [ 2169.805877][T30323] do_SYSENTER_32+0x1b/0x20 [ 2169.810487][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2169.817044][T30323] [ 2169.819431][T30323] Uninit was stored to memory at: [ 2169.824718][T30323] __get_compat_msghdr+0x514/0x750 [ 2169.829941][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2169.835012][T30323] ___sys_recvmsg+0x19d/0x890 [ 2169.839814][T30323] do_recvmmsg+0x682/0x1180 [ 2169.844507][T30323] __sys_recvmmsg+0x113/0x450 [ 2169.849296][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2169.855770][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2169.861019][T30323] do_fast_syscall_32+0x33/0x70 [ 2169.866132][T30323] do_SYSENTER_32+0x1b/0x20 [ 2169.870744][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2169.877272][T30323] [ 2169.879667][T30323] Local variable msg_sys created at: [ 2169.885202][T30323] do_recvmmsg+0x5c/0x1180 [ 2169.889748][T30323] __sys_recvmmsg+0x113/0x450 [ 2170.088062][T30323] not chained 840000 origins [ 2170.096366][T30323] CPU: 0 PID: 30323 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2170.106661][T30323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2170.116771][T30323] Call Trace: [ 2170.120084][T30323] [ 2170.123067][T30323] dump_stack_lvl+0x1c8/0x256 [ 2170.127924][T30323] dump_stack+0x1a/0x1c [ 2170.132184][T30323] kmsan_internal_chain_origin+0x78/0x120 [ 2170.138038][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2170.144393][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2170.150335][T30323] ? ____sys_recvmsg+0x5c1/0x810 [ 2170.155354][T30323] ? __get_compat_msghdr+0x5b/0x750 [ 2170.160631][T30323] ? get_compat_msghdr+0x8c/0x1c0 [ 2170.165740][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2170.171670][T30323] ? __get_compat_msghdr+0x5b/0x750 [ 2170.177005][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2170.182929][T30323] ? should_fail+0x3f/0x810 [ 2170.187579][T30323] ? __stack_depot_save+0x21/0x4b0 [ 2170.192836][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2170.199241][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2170.205211][T30323] __msan_chain_origin+0xbd/0x140 [ 2170.210365][T30323] __get_compat_msghdr+0x514/0x750 [ 2170.215567][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2170.220489][T30323] ? ___sys_recvmsg+0xa9/0x890 [ 2170.225342][T30323] ? do_recvmmsg+0x682/0x1180 [ 2170.230133][T30323] ___sys_recvmsg+0x19d/0x890 [ 2170.234875][T30323] ? do_recvmmsg+0x6e4/0x1180 [ 2170.239631][T30323] ? __stack_depot_save+0x21/0x4b0 [ 2170.244841][T30323] ? kmsan_internal_check_memory+0x94/0x530 [ 2170.250882][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2170.256776][T30323] do_recvmmsg+0x682/0x1180 [ 2170.261363][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2170.267704][T30323] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2170.274206][T30323] __sys_recvmmsg+0x113/0x450 [ 2170.278961][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2170.285315][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2170.290549][T30323] ? exit_to_user_mode_prepare+0x119/0x220 [ 2170.296453][T30323] do_fast_syscall_32+0x33/0x70 [ 2170.301445][T30323] do_SYSENTER_32+0x1b/0x20 [ 2170.306098][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2170.312575][T30323] RIP: 0023:0xf7f04549 [ 2170.316722][T30323] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2170.336414][T30323] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2170.344925][T30323] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2170.353025][T30323] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2170.361085][T30323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2170.369817][T30323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2170.377849][T30323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2170.385914][T30323] [ 2170.392663][T30323] Uninit was stored to memory at: [ 2170.401492][T30323] __get_compat_msghdr+0x514/0x750 [ 2170.407118][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2170.412184][T30323] ___sys_recvmsg+0x19d/0x890 [ 2170.416993][T30323] do_recvmmsg+0x682/0x1180 [ 2170.421706][T30323] __sys_recvmmsg+0x113/0x450 [ 2170.426511][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2170.432976][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2170.438232][T30323] do_fast_syscall_32+0x33/0x70 [ 2170.443340][T30323] do_SYSENTER_32+0x1b/0x20 [ 2170.447971][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2170.454531][T30323] [ 2170.456910][T30323] Uninit was stored to memory at: [ 2170.462217][T30323] __get_compat_msghdr+0x514/0x750 [ 2170.467452][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2170.472506][T30323] ___sys_recvmsg+0x19d/0x890 [ 2170.477306][T30323] do_recvmmsg+0x682/0x1180 [ 2170.482003][T30323] __sys_recvmmsg+0x113/0x450 [ 2170.486809][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2170.493271][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2170.498528][T30323] do_fast_syscall_32+0x33/0x70 [ 2170.503576][T30323] do_SYSENTER_32+0x1b/0x20 [ 2170.508201][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2170.514752][T30323] [ 2170.517143][T30323] Uninit was stored to memory at: [ 2170.522457][T30323] __get_compat_msghdr+0x514/0x750 [ 2170.527695][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2170.533414][T30323] ___sys_recvmsg+0x19d/0x890 [ 2170.538217][T30323] do_recvmmsg+0x682/0x1180 [ 2170.542970][T30323] __sys_recvmmsg+0x113/0x450 [ 2170.547777][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2170.554244][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2170.559482][T30323] do_fast_syscall_32+0x33/0x70 [ 2170.564585][T30323] do_SYSENTER_32+0x1b/0x20 [ 2170.569215][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2170.575843][T30323] [ 2170.578240][T30323] Uninit was stored to memory at: [ 2170.583562][T30323] __get_compat_msghdr+0x514/0x750 [ 2170.588798][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2170.593906][T30323] ___sys_recvmsg+0x19d/0x890 [ 2170.598704][T30323] do_recvmmsg+0x682/0x1180 [ 2170.603465][T30323] __sys_recvmmsg+0x113/0x450 [ 2170.608268][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2170.614799][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2170.620045][T30323] do_fast_syscall_32+0x33/0x70 [ 2170.625163][T30323] do_SYSENTER_32+0x1b/0x20 [ 2170.629794][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2170.636396][T30323] [ 2170.640087][T30323] Uninit was stored to memory at: [ 2170.645404][T30323] __get_compat_msghdr+0x514/0x750 [ 2170.650653][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2170.655768][T30323] ___sys_recvmsg+0x19d/0x890 [ 2170.660570][T30323] do_recvmmsg+0x682/0x1180 [ 2170.665327][T30323] __sys_recvmmsg+0x113/0x450 [ 2170.670145][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2170.676659][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2170.681986][T30323] do_fast_syscall_32+0x33/0x70 [ 2170.686965][T30323] do_SYSENTER_32+0x1b/0x20 [ 2170.691718][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2170.698192][T30323] [ 2170.700579][T30323] Uninit was stored to memory at: [ 2170.705905][T30323] __get_compat_msghdr+0x514/0x750 [ 2170.711146][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2170.716253][T30323] ___sys_recvmsg+0x19d/0x890 [ 2170.721059][T30323] do_recvmmsg+0x682/0x1180 [ 2170.725819][T30323] __sys_recvmmsg+0x113/0x450 [ 2170.730622][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2170.737144][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2170.742464][T30323] do_fast_syscall_32+0x33/0x70 [ 2170.747447][T30323] do_SYSENTER_32+0x1b/0x20 [ 2170.752195][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2170.758661][T30323] [ 2170.761045][T30323] Uninit was stored to memory at: [ 2170.766331][T30323] __get_compat_msghdr+0x514/0x750 [ 2170.771549][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2170.776639][T30323] ___sys_recvmsg+0x19d/0x890 [ 2170.781426][T30323] do_recvmmsg+0x682/0x1180 [ 2170.787332][T30323] __sys_recvmmsg+0x113/0x450 [ 2170.792211][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2170.798599][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2170.803980][T30323] do_fast_syscall_32+0x33/0x70 [ 2170.808967][T30323] do_SYSENTER_32+0x1b/0x20 [ 2170.813731][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2170.820206][T30323] [ 2170.822689][T30323] Local variable msg_sys created at: [ 2170.828029][T30323] do_recvmmsg+0x5c/0x1180 [ 2170.832651][T30323] __sys_recvmmsg+0x113/0x450 [ 2171.028810][T30323] not chained 850000 origins [ 2171.033693][T30323] CPU: 0 PID: 30323 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2171.043982][T30323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2171.054145][T30323] Call Trace: [ 2171.057479][T30323] [ 2171.060442][T30323] dump_stack_lvl+0x1c8/0x256 [ 2171.065245][T30323] dump_stack+0x1a/0x1c [ 2171.069556][T30323] kmsan_internal_chain_origin+0x78/0x120 [ 2171.075432][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2171.081878][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2171.087850][T30323] ? ____sys_recvmsg+0x5c1/0x810 [ 2171.092925][T30323] ? __get_compat_msghdr+0x5b/0x750 [ 2171.098236][T30323] ? get_compat_msghdr+0x8c/0x1c0 [ 2171.103347][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2171.109344][T30323] ? __get_compat_msghdr+0x5b/0x750 [ 2171.114638][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2171.120593][T30323] ? should_fail+0x3f/0x810 [ 2171.125209][T30323] ? __stack_depot_save+0x21/0x4b0 [ 2171.130456][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2171.136805][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2171.142722][T30323] __msan_chain_origin+0xbd/0x140 [ 2171.147882][T30323] __get_compat_msghdr+0x514/0x750 [ 2171.153116][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2171.158060][T30323] ? ___sys_recvmsg+0xa9/0x890 [ 2171.162930][T30323] ? do_recvmmsg+0x682/0x1180 [ 2171.167748][T30323] ___sys_recvmsg+0x19d/0x890 [ 2171.172563][T30323] ? do_recvmmsg+0x6e4/0x1180 [ 2171.177372][T30323] ? __stack_depot_save+0x21/0x4b0 [ 2171.182594][T30323] ? kmsan_internal_check_memory+0x94/0x530 [ 2171.188634][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2171.194559][T30323] do_recvmmsg+0x682/0x1180 [ 2171.199196][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2171.205639][T30323] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2171.212230][T30323] __sys_recvmmsg+0x113/0x450 [ 2171.217064][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2171.223470][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2171.228716][T30323] ? exit_to_user_mode_prepare+0x119/0x220 [ 2171.234610][T30323] do_fast_syscall_32+0x33/0x70 [ 2171.239563][T30323] do_SYSENTER_32+0x1b/0x20 [ 2171.244162][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2171.250624][T30323] RIP: 0023:0xf7f04549 [ 2171.254741][T30323] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2171.274462][T30323] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2171.283020][T30323] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2171.291087][T30323] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2171.299217][T30323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2171.307260][T30323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2171.315323][T30323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2171.323393][T30323] [ 2171.329959][T30323] Uninit was stored to memory at: [ 2171.335502][T30323] __get_compat_msghdr+0x514/0x750 [ 2171.340744][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2171.345798][T30323] ___sys_recvmsg+0x19d/0x890 [ 2171.350605][T30323] do_recvmmsg+0x682/0x1180 [ 2171.355312][T30323] __sys_recvmmsg+0x113/0x450 [ 2171.360117][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2171.366622][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2171.371953][T30323] do_fast_syscall_32+0x33/0x70 [ 2171.376940][T30323] do_SYSENTER_32+0x1b/0x20 [ 2171.381566][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2171.388185][T30323] [ 2171.390570][T30323] Uninit was stored to memory at: [ 2171.395841][T30323] __get_compat_msghdr+0x514/0x750 [ 2171.401065][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2171.406125][T30323] ___sys_recvmsg+0x19d/0x890 [ 2171.410908][T30323] do_recvmmsg+0x682/0x1180 [ 2171.415628][T30323] __sys_recvmmsg+0x113/0x450 [ 2171.420448][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2171.426963][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2171.432296][T30323] do_fast_syscall_32+0x33/0x70 [ 2171.437262][T30323] do_SYSENTER_32+0x1b/0x20 [ 2171.441968][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2171.448431][T30323] [ 2171.450779][T30323] Uninit was stored to memory at: [ 2171.456078][T30323] __get_compat_msghdr+0x514/0x750 [ 2171.461300][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2171.466348][T30323] ___sys_recvmsg+0x19d/0x890 [ 2171.471152][T30323] do_recvmmsg+0x682/0x1180 [ 2171.475895][T30323] __sys_recvmmsg+0x113/0x450 [ 2171.480690][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2171.487138][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2171.492460][T30323] do_fast_syscall_32+0x33/0x70 [ 2171.497470][T30323] do_SYSENTER_32+0x1b/0x20 [ 2171.502235][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2171.508715][T30323] [ 2171.511078][T30323] Uninit was stored to memory at: [ 2171.516392][T30323] __get_compat_msghdr+0x514/0x750 [ 2171.522139][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2171.527116][T30323] ___sys_recvmsg+0x19d/0x890 [ 2171.532064][T30323] do_recvmmsg+0x682/0x1180 [ 2171.536698][T30323] __sys_recvmmsg+0x113/0x450 [ 2171.541497][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2171.547962][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2171.553298][T30323] do_fast_syscall_32+0x33/0x70 [ 2171.558264][T30323] do_SYSENTER_32+0x1b/0x20 [ 2171.562990][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2171.569448][T30323] [ 2171.571923][T30323] Uninit was stored to memory at: [ 2171.577136][T30323] __get_compat_msghdr+0x514/0x750 [ 2171.582511][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2171.587473][T30323] ___sys_recvmsg+0x19d/0x890 [ 2171.592361][T30323] do_recvmmsg+0x682/0x1180 [ 2171.596988][T30323] __sys_recvmmsg+0x113/0x450 [ 2171.601903][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2171.608276][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2171.613614][T30323] do_fast_syscall_32+0x33/0x70 [ 2171.618594][T30323] do_SYSENTER_32+0x1b/0x20 [ 2171.623316][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2171.629795][T30323] [ 2171.632301][T30323] Uninit was stored to memory at: [ 2171.637488][T30323] __get_compat_msghdr+0x514/0x750 [ 2171.642803][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2171.647760][T30323] ___sys_recvmsg+0x19d/0x890 [ 2171.652661][T30323] do_recvmmsg+0x682/0x1180 [ 2171.657297][T30323] __sys_recvmmsg+0x113/0x450 [ 2171.662225][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2171.668598][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2171.673929][T30323] do_fast_syscall_32+0x33/0x70 [ 2171.678896][T30323] do_SYSENTER_32+0x1b/0x20 [ 2171.683572][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2171.690031][T30323] [ 2171.692519][T30323] Uninit was stored to memory at: [ 2171.697705][T30323] __get_compat_msghdr+0x514/0x750 [ 2171.703048][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2171.708009][T30323] ___sys_recvmsg+0x19d/0x890 [ 2171.712889][T30323] do_recvmmsg+0x682/0x1180 [ 2171.717514][T30323] __sys_recvmmsg+0x113/0x450 [ 2171.722436][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2171.728827][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2171.734188][T30323] do_fast_syscall_32+0x33/0x70 [ 2171.739168][T30323] do_SYSENTER_32+0x1b/0x20 [ 2171.743873][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2171.750332][T30323] [ 2171.752832][T30323] Local variable msg_sys created at: [ 2171.758188][T30323] do_recvmmsg+0x5c/0x1180 [ 2171.762854][T30323] __sys_recvmmsg+0x113/0x450 [ 2171.964735][T30323] not chained 860000 origins [ 2171.969442][T30323] CPU: 0 PID: 30323 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2171.979753][T30323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2171.989877][T30323] Call Trace: [ 2171.993195][T30323] [ 2171.996173][T30323] dump_stack_lvl+0x1c8/0x256 [ 2172.000953][T30323] dump_stack+0x1a/0x1c [ 2172.005218][T30323] kmsan_internal_chain_origin+0x78/0x120 [ 2172.011075][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2172.017405][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2172.023311][T30323] ? ____sys_recvmsg+0x5c1/0x810 [ 2172.028359][T30323] ? __get_compat_msghdr+0x5b/0x750 [ 2172.033625][T30323] ? get_compat_msghdr+0x8c/0x1c0 [ 2172.038736][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2172.044703][T30323] ? __get_compat_msghdr+0x5b/0x750 [ 2172.050040][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2172.056012][T30323] ? should_fail+0x3f/0x810 [ 2172.060667][T30323] ? __stack_depot_save+0x21/0x4b0 [ 2172.065878][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2172.072283][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2172.078229][T30323] __msan_chain_origin+0xbd/0x140 [ 2172.083348][T30323] __get_compat_msghdr+0x514/0x750 [ 2172.088589][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2172.093504][T30323] ? ___sys_recvmsg+0xa9/0x890 [ 2172.098331][T30323] ? do_recvmmsg+0x682/0x1180 [ 2172.103098][T30323] ___sys_recvmsg+0x19d/0x890 [ 2172.107901][T30323] ? do_recvmmsg+0x6e4/0x1180 [ 2172.112679][T30323] ? __stack_depot_save+0x21/0x4b0 [ 2172.117872][T30323] ? kmsan_internal_check_memory+0x94/0x530 [ 2172.123874][T30323] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2172.129815][T30323] do_recvmmsg+0x682/0x1180 [ 2172.134399][T30323] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2172.140746][T30323] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2172.147314][T30323] __sys_recvmmsg+0x113/0x450 [ 2172.152136][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2172.158521][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2172.163732][T30323] ? exit_to_user_mode_prepare+0x119/0x220 [ 2172.169686][T30323] do_fast_syscall_32+0x33/0x70 [ 2172.174652][T30323] do_SYSENTER_32+0x1b/0x20 [ 2172.179223][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2172.185649][T30323] RIP: 0023:0xf7f04549 [ 2172.189810][T30323] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2172.209555][T30323] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2172.218039][T30323] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2172.226099][T30323] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2172.234158][T30323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2172.242198][T30323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2172.250277][T30323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2172.258352][T30323] [ 2172.268719][T30323] Uninit was stored to memory at: [ 2172.275190][T30323] __get_compat_msghdr+0x514/0x750 [ 2172.280435][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2172.285500][T30323] ___sys_recvmsg+0x19d/0x890 [ 2172.290303][T30323] do_recvmmsg+0x682/0x1180 [ 2172.295004][T30323] __sys_recvmmsg+0x113/0x450 [ 2172.299812][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2172.306283][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2172.311513][T30323] do_fast_syscall_32+0x33/0x70 [ 2172.316560][T30323] do_SYSENTER_32+0x1b/0x20 [ 2172.321127][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2172.327689][T30323] [ 2172.330062][T30323] Uninit was stored to memory at: [ 2172.335325][T30323] __get_compat_msghdr+0x514/0x750 [ 2172.340547][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2172.345615][T30323] ___sys_recvmsg+0x19d/0x890 [ 2172.350420][T30323] do_recvmmsg+0x682/0x1180 [ 2172.355189][T30323] __sys_recvmmsg+0x113/0x450 [ 2172.359976][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2172.366412][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2172.371738][T30323] do_fast_syscall_32+0x33/0x70 [ 2172.376800][T30323] do_SYSENTER_32+0x1b/0x20 [ 2172.381406][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2172.387942][T30323] [ 2172.390326][T30323] Uninit was stored to memory at: [ 2172.395643][T30323] __get_compat_msghdr+0x514/0x750 [ 2172.400869][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2172.405935][T30323] ___sys_recvmsg+0x19d/0x890 [ 2172.410731][T30323] do_recvmmsg+0x682/0x1180 [ 2172.415452][T30323] __sys_recvmmsg+0x113/0x450 [ 2172.420245][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2172.426681][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2172.432005][T30323] do_fast_syscall_32+0x33/0x70 [ 2172.436976][T30323] do_SYSENTER_32+0x1b/0x20 [ 2172.441553][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2172.448144][T30323] [ 2172.450539][T30323] Uninit was stored to memory at: [ 2172.455867][T30323] __get_compat_msghdr+0x514/0x750 [ 2172.461090][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2172.466122][T30323] ___sys_recvmsg+0x19d/0x890 [ 2172.470909][T30323] do_recvmmsg+0x682/0x1180 [ 2172.475637][T30323] __sys_recvmmsg+0x113/0x450 [ 2172.480428][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2172.486863][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2172.492180][T30323] do_fast_syscall_32+0x33/0x70 [ 2172.497160][T30323] do_SYSENTER_32+0x1b/0x20 [ 2172.501895][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2172.508350][T30323] [ 2172.510698][T30323] Uninit was stored to memory at: [ 2172.515987][T30323] __get_compat_msghdr+0x514/0x750 [ 2172.521225][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2172.526289][T30323] ___sys_recvmsg+0x19d/0x890 [ 2172.531075][T30323] do_recvmmsg+0x682/0x1180 [ 2172.535789][T30323] __sys_recvmmsg+0x113/0x450 [ 2172.540573][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2172.547016][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2172.552340][T30323] do_fast_syscall_32+0x33/0x70 [ 2172.557320][T30323] do_SYSENTER_32+0x1b/0x20 [ 2172.562096][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2172.568553][T30323] [ 2172.570900][T30323] Uninit was stored to memory at: [ 2172.576190][T30323] __get_compat_msghdr+0x514/0x750 [ 2172.581410][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2172.586458][T30323] ___sys_recvmsg+0x19d/0x890 [ 2172.591247][T30323] do_recvmmsg+0x682/0x1180 [ 2172.595957][T30323] __sys_recvmmsg+0x113/0x450 [ 2172.600747][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2172.607216][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2172.612540][T30323] do_fast_syscall_32+0x33/0x70 [ 2172.617498][T30323] do_SYSENTER_32+0x1b/0x20 [ 2172.622212][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2172.628669][T30323] [ 2172.631016][T30323] Uninit was stored to memory at: [ 2172.636273][T30323] __get_compat_msghdr+0x514/0x750 [ 2172.641509][T30323] get_compat_msghdr+0x8c/0x1c0 [ 2172.646560][T30323] ___sys_recvmsg+0x19d/0x890 [ 2172.651323][T30323] do_recvmmsg+0x682/0x1180 [ 2172.656097][T30323] __sys_recvmmsg+0x113/0x450 [ 2172.660907][T30323] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2172.667395][T30323] __do_fast_syscall_32+0xa2/0x100 [ 2172.672725][T30323] do_fast_syscall_32+0x33/0x70 [ 2172.677686][T30323] do_SYSENTER_32+0x1b/0x20 [ 2172.682398][T30323] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2172.688862][T30323] [ 2172.691211][T30323] Local variable msg_sys created at: [ 2172.696645][T30323] do_recvmmsg+0x5c/0x1180 [ 2172.701169][T30323] __sys_recvmmsg+0x113/0x450 02:04:15 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) 02:04:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:15 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:15 executing program 3: request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) 02:04:15 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2172.993433][T30353] __nla_validate_parse: 2 callbacks suppressed [ 2172.993499][T30353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:15 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:15 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2173.124195][T30353] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:15 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:15 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="10000000041401"], 0x10}}, 0x0) 02:04:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd, 0x2, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) 02:04:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:16 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2173.827455][T30377] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:16 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:16 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) [ 2173.898776][T30377] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:16 executing program 3: syz_usb_connect(0x6, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xfc, 0x89, 0xc7, 0x0, 0x1822, 0x3201, 0xbf91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x98, 0x89, 0xca}}]}}]}}, 0x0) 02:04:16 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:16 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x975}]}) [ 2174.489455][T30395] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2174.606771][T30395] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:16 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:17 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:17 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, 0x0, 0x0) [ 2175.152166][T30407] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2175.194655][T30407] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:17 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x975}]}) 02:04:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:17 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:04:17 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:17 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:17 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) [ 2175.752130][T30422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2175.805483][T30422] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:18 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x42, 0x0) write$proc_mixer(r0, &(0x7f0000000040)=[{'LINE3', @val={' \'', 'Mic'}}], 0x21) 02:04:18 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:18 executing program 3: timerfd_create(0x0, 0x672c2ea82eb7e93) 02:04:18 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:18 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "080c2779449e0d1165eeb8fe7bba5661a40931dd397ea41f7880277b1ab68a3f"}) 02:04:18 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x64}}, 0x0) 02:04:19 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:19 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffab6b}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:04:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:19 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:19 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="aa", 0x1, r0) 02:04:19 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettfilter={0x24}, 0x24}}, 0x0) 02:04:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:19 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="dc000000020107010000000000000000000000002c00339600005077000000000000000000000020000000048bbc00007fffffff000000070000000300000008800002800c00028005000100210000000600034000040000f9ff018005000100010000140c000280050001002f0000000c000280050001002f00000006000340000000002c0001801400030020010000000000000000000000000000140004000000000000000000000000000000000106000340000300000600034000030000140005800e0001006674702d3230303030000000060012"], 0xdc}}, 0x0) 02:04:20 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) [ 2178.099694][T30480] __nla_validate_parse: 6 callbacks suppressed [ 2178.099757][T30480] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:20 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) [ 2178.200470][T30482] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2178.223527][T30484] input: syz0 as /devices/virtual/input/input35 [ 2178.327508][T30486] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. 02:04:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:20 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0xffffffff) 02:04:20 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:20 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 02:04:20 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) [ 2178.905699][T30499] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2178.967476][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 2178.971733][T30501] input: syz0 as /devices/virtual/input/input36 [ 2178.974138][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 02:04:21 executing program 3: request_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0xfffffffffffffffd) [ 2179.023726][T30499] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:21 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 02:04:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:21 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:21 executing program 4: bpf$MAP_CREATE(0x13, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 02:04:21 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000180)='id_legacy\x00', 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000500)='pkcs7_test\x00', 0x0, &(0x7f0000000580)="48c1", 0x2, r1) request_key(0x0, 0x0, 0x0, 0x0) [ 2179.685031][T30514] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2179.734280][T30514] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2179.744230][T30516] input: syz0 as /devices/virtual/input/input37 02:04:22 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 02:04:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:22 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:22 executing program 4: socketpair(0x2c, 0x0, 0x0, &(0x7f00000000c0)) [ 2180.235288][T30527] input: syz0 as /devices/virtual/input/input38 02:04:22 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 2180.321363][T30530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) [ 2180.413961][T30530] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:22 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) 02:04:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:22 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2180.747506][T30542] input: syz0 as /devices/virtual/input/input39 02:04:23 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 02:04:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:23 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0/../file0/file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='data_err=']) 02:04:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) [ 2181.070965][T30551] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:23 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 2181.428574][T30557] input: syz0 as /devices/virtual/input/input40 [ 2181.539528][T30562] ext3: Bad value for 'data_err' 02:04:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:23 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x14, 0x0, &(0x7f0000000100)) 02:04:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:24 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 02:04:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:24 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff0000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:24 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 02:04:24 executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) 02:04:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:24 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:25 executing program 4: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0xffffffffffffffff) 02:04:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff0000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2182.821964][T30595] input: syz0 as /devices/virtual/input/input42 02:04:25 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 02:04:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:25 executing program 4: openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 02:04:25 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2183.312331][T30606] __nla_validate_parse: 7 callbacks suppressed [ 2183.312397][T30606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:25 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) [ 2183.408880][T30611] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2183.409865][T30609] input: syz0 as /devices/virtual/input/input43 02:04:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff0000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(0xffffffffffffffff) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:25 executing program 4: keyctl$dh_compute(0x1c, &(0x7f0000000300), 0x0, 0x0, 0x0) 02:04:26 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:26 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) [ 2183.926838][T30623] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) [ 2183.993234][T30623] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(0xffffffffffffffff) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:26 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:26 executing program 4: io_uring_setup(0x2fa, &(0x7f0000000080)={0x0, 0x0, 0x20}) 02:04:26 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) [ 2184.585186][T30639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(0xffffffffffffffff) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:04:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:27 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='id_legacy\x00', 0x0, &(0x7f0000000100)="f1", 0x1, r0) 02:04:27 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:27 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) dup(r0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 2185.202953][T30654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:27 executing program 4: request_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='!\x00', 0x0) 02:04:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:27 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) dup(r0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 02:04:27 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2185.753999][T30668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:27 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x2, 0x0, &(0x7f0000000080)=[{}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:04:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) dup(r0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 02:04:28 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:28 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:28 executing program 4: io_uring_setup(0x9e4, &(0x7f0000000000)={0x0, 0x0, 0x2}) [ 2186.386580][T30684] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:28 executing program 3: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:28 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:28 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:28 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x60002, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 02:04:29 executing program 4: clock_getres(0x6, &(0x7f0000000180)) 02:04:29 executing program 3: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:29 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={'blake2b-512-generic\x00'}}) [ 2187.076097][T30704] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:29 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:29 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:29 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000240)) 02:04:29 executing program 3: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="f1", 0x1, r0) add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='/', 0x1, r0) [ 2187.660842][T30718] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:29 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:30 executing program 4: syz_usb_connect_ath9k(0x4, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1dbb3fb8860e48c, [{{0x9, 0x2, 0xfffffffffffffe29}}]}}, 0x0) 02:04:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:30 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:30 executing program 1: r0 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='V', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='V', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r1, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={'cmac-aes-ce\x00'}}) 02:04:30 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:30 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:30 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x1f}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x38}}, 0x0) [ 2188.945442][T30752] __nla_validate_parse: 1 callbacks suppressed [ 2188.945511][T30752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:31 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2189.214741][T30741] could not allocate digest TFM handle cmac-aes-ce 02:04:31 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:31 executing program 1: add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="8b", 0x1, 0xfffffffffffffffc) 02:04:31 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000001100)="e5c1e4e1", 0x4) [ 2189.573610][T30764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:31 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x401], 0x1}) 02:04:32 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 02:04:32 executing program 1: r0 = socket(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) 02:04:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) [ 2190.138968][T30775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:32 executing program 4: add_key(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) 02:04:32 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:32 executing program 1: request_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0) 02:04:32 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 02:04:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) [ 2190.718918][T30790] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=@ipv6_newaddr={0x48, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14}, @IFA_LOCAL={0x14, 0x2, @private2}, @IFA_RT_PRIORITY={0x8}]}, 0x48}}, 0x0) 02:04:33 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3f}]}) 02:04:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:33 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 02:04:33 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2191.406050][T30807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x17, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_nat_t_port={0x1}]}, 0x30}}, 0x0) 02:04:33 executing program 4: madvise(&(0x7f0000fd9000/0x1000)=nil, 0x1000, 0x3) 02:04:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:34 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:34 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2192.164601][T30825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2192.301072][T30825] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:34 executing program 1: syz_emit_ethernet(0xd4, &(0x7f0000000040)={@local, @empty, @val, {@ipv6}}, 0x0) 02:04:34 executing program 4: sigaltstack(&(0x7f0000fd8000), 0x0) sigaltstack(&(0x7f0000fd7000), 0x0) munmap(&(0x7f0000fd7000/0x2000)=nil, 0x2000) 02:04:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:34 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:35 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:35 executing program 1: msgget(0x2, 0x42) 02:04:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000001500)="bf", 0x1, 0x20108, &(0x7f0000001580)={0x10}, 0x10) [ 2193.258061][T30842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) [ 2193.364761][T30842] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:35 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:35 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:35 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) 02:04:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001bc0)={&(0x7f00000019c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000001a80)=[@dstaddrv6={0x1c, 0x84, 0xa, @mcast2}, @sndrcv={0x2c}], 0x48}, 0x0) 02:04:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:36 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x0, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) [ 2194.484645][T30864] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:36 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000080)=ANY=[@ANYBLOB="010cc06b", @ANYRES32=0x0], &(0x7f0000000100)=0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r3, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x2, &(0x7f0000000340)={r2}, &(0x7f0000000380)=0x14) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f00000000c0)={r4}, 0x8) [ 2194.633170][T30864] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000080)=ANY=[@ANYBLOB="010cc06b", @ANYRES32=0x0], &(0x7f0000000100)=0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000340)={r1}, &(0x7f0000000380)=0x14) 02:04:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:37 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x0, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:37 executing program 1: syz_emit_ethernet(0xe0, &(0x7f0000000040)={@local, @empty, @val, {@ipv6}}, 0x0) 02:04:37 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2195.414514][T30885] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:37 executing program 4: getgroups(0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0]) setregid(0x0, r0) getresgid(0x0, &(0x7f0000001080)=0x0, 0x0) setresgid(0x0, r1, 0x0) 02:04:37 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x0, 0x8, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) [ 2195.501296][T30885] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:38 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @empty, @val, {@ipv6}}, 0x0) 02:04:38 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg$unix(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights, @rights], 0x24}, 0x0) 02:04:38 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x0, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:38 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) [ 2196.166584][T30901] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2196.219468][T30904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000180)='\"*', 0x2, 0x0, &(0x7f0000000000), 0x10) 02:04:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:38 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:38 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x0, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="7f404c3ad981acd3162f5ef2cb9c877a56edcd15ca5e5d8344af940e69b0ad8463f98fee69fb6998eb2d", 0x2a}, {&(0x7f00000000c0)="da03a72d989664852223b4600b96ec1c01f9073cc2be3fb2f4a112616927285cd66856d819ab44bc4cbd748b7baec1e7eebc9cc69a09a2406b6e7debb65c8bd5ed89db7fae833e5593e963b995d371d799f8fe223cb346d460e3ab94b9c86959202531a5026ad0", 0x67}, {0x0}], 0x3}, 0x0) 02:04:39 executing program 1: mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x0) [ 2197.004401][T30922] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2197.050566][T30922] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:39 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x0, 0xfffffffa, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:39 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, 0x0) 02:04:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:39 executing program 4: semget$private(0x0, 0xa6b8ab5f6e8ea958, 0x0) 02:04:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0xd, 0x0, 0x0) [ 2197.707428][T30945] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:39 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0x0, 0xffffffff}}}}]}, 0x48}}, 0x0) 02:04:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, 0x0) 02:04:40 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000ec0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x461, 0x4e72, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x147}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xf, 0xb}}}}}]}}]}}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0}) 02:04:40 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:40 executing program 1: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "", ':{'}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 02:04:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:40 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0x0, 0xffffffff}}}}]}, 0x48}}, 0x0) [ 2198.312168][T30960] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, 0x0) 02:04:40 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 2198.532276][ T3566] usb 5-1: new high-speed USB device number 110 using dummy_hcd 02:04:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2198.652609][T10183] usb 2-1: new high-speed USB device number 23 using dummy_hcd 02:04:40 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0x0, 0xffffffff}}}}]}, 0x48}}, 0x0) [ 2198.781900][ T3566] usb 5-1: Using ep0 maxpacket: 32 02:04:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) [ 2198.892090][T10183] usb 2-1: Using ep0 maxpacket: 32 [ 2198.903003][ T3566] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2198.913891][ T3566] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2199.012829][T10183] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2199.022176][T10183] usb 2-1: config 1 has no interface number 1 [ 2199.028455][T10183] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2199.041867][T10183] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2199.053071][T10183] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 02:04:41 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2199.204157][ T3566] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.40 [ 2199.213652][ T3566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.222160][ T3566] usb 5-1: Product: syz [ 2199.226498][ T3566] usb 5-1: Manufacturer: syz [ 2199.231283][ T3566] usb 5-1: SerialNumber: syz [ 2199.434418][T10183] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2199.443927][T10183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.452394][T10183] usb 2-1: Product: syz [ 2199.456746][T10183] usb 2-1: Manufacturer: syz [ 2199.461536][T10183] usb 2-1: SerialNumber: syz [ 2199.499733][T30981] __nla_validate_parse: 1 callbacks suppressed [ 2199.499797][T30981] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2199.732887][ T3566] usbhid 5-1:1.0: can't add hid device: -71 [ 2199.739366][ T3566] usbhid: probe of 5-1:1.0 failed with error -71 [ 2199.784975][ T3566] usb 5-1: USB disconnect, device number 110 [ 2199.966074][T10183] usb 2-1: USB disconnect, device number 23 [ 2200.126174][T30803] udevd[30803]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 02:04:42 executing program 4: syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 02:04:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) 02:04:42 executing program 1: syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 02:04:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:42 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa}}}}]}, 0x48}}, 0x0) 02:04:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fff, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) [ 2200.531980][T30989] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:42 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa}}}}]}, 0x48}}, 0x0) 02:04:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) 02:04:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2200.742235][ T3572] usb 5-1: new high-speed USB device number 111 using dummy_hcd 02:04:43 executing program 1: write$hidraw(0xffffffffffffffff, 0x0, 0x0) 02:04:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x0, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) [ 2200.982044][ T3572] usb 5-1: Using ep0 maxpacket: 32 [ 2201.152529][ T3572] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2201.161464][ T3572] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2201.170770][ T3572] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2201.193239][T31004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2201.453041][ T3572] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2201.462443][ T3572] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.470662][ T3572] usb 5-1: Product: syz [ 2201.475113][ T3572] usb 5-1: Manufacturer: syz [ 2201.479881][ T3572] usb 5-1: SerialNumber: syz [ 2201.902449][ T3572] usb 5-1: 0:2 : does not exist [ 2201.932939][ T3572] usb 5-1: USB disconnect, device number 111 [ 2201.995144][T30818] udevd[30818]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 02:04:44 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x600400, 0x0) close(r0) 02:04:44 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x20, '\x00', 0x7, 0x8, 0xfffffffa}}}}]}, 0x48}}, 0x0) 02:04:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:44 executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000fc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001240)={{0x12, 0x1, 0x0, 0xf3, 0x56, 0x24, 0x0, 0x1618, 0x9116, 0x6571, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x4a}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) 02:04:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 02:04:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x0, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) [ 2202.464025][T31013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "804c81a09ff1849395bf940023987e000200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffffb, 0x0, 0x0, 0x0, 0x0, "3b89e5f140ed5c10626f70f4ed62fad74b5353"}) [ 2202.513359][T31013] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 02:04:44 executing program 2: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a40)='ns/pid_for_children\x00') [ 2202.731913][ T3572] usb 2-1: new high-speed USB device number 24 using dummy_hcd 02:04:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40000142) [ 2202.972543][ T3572] usb 2-1: Using ep0 maxpacket: 32 02:04:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x18, 0x1, 0x1, "c14646b7"}], 0x18}, 0x0) 02:04:45 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) [ 2203.125333][ T3572] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 02:04:45 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={0x0, 0x0, 0x8}, 0x10) [ 2203.247498][T31032] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2203.284916][T31032] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2203.352976][ T3572] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2203.362368][ T3572] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.373736][ T3572] usb 2-1: Product: syz [ 2203.378096][ T3572] usb 2-1: Manufacturer: syz [ 2203.383408][ T3572] usb 2-1: SerialNumber: syz 02:04:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000003080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x7}, 0x48) 02:04:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2203.753431][T31018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2203.763356][T31018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2203.974374][T31046] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2203.994901][T31046] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2204.017308][T28209] usb 2-1: USB disconnect, device number 24 02:04:46 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f00000005c0)=""/171, 0x28, 0xab, 0x1}, 0x20) 02:04:46 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, &(0x7f0000001580)=""/241, 0x2a, 0xf1, 0x1}, 0x20) 02:04:46 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001580)=""/241, 0x28, 0xf1, 0x1}, 0x20) 02:04:46 executing program 4: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000180)) 02:04:46 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) 02:04:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feff", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:46 executing program 3: socketpair(0x28, 0x2, 0x0, &(0x7f0000000a40)) [ 2204.658696][T31057] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2204.699862][T31057] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:46 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) 02:04:47 executing program 2: syz_open_procfs$namespace(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:04:47 executing program 4: socketpair(0x2, 0x5, 0x0, &(0x7f0000000a40)) 02:04:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feff", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x752, 0x5, 0x820}, 0x48) 02:04:47 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000001580)=""/241, 0x1000000, 0xf1, 0x1}, 0x20) 02:04:47 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, 0x0) 02:04:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x752, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x5}, 0x48) 02:04:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) [ 2205.298322][T31072] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2205.385355][T31072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feff", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:47 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x515482, 0x0) 02:04:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000b8"], &(0x7f0000001580)=""/240, 0x29, 0xf0, 0x1}, 0x20) 02:04:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0) close(r1) 02:04:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x752}, 0x48) [ 2205.983893][T31088] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001d80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000033c0)={&(0x7f0000001dc0)=@generic, 0x80, &(0x7f0000003340)=[{0x0, 0x2}, {&(0x7f0000001e80)=""/193, 0xc1}, {&(0x7f0000002080)=""/216, 0xd8}], 0x3}, 0x0) sendmsg$inet(r1, &(0x7f0000004a00)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000003400)='u', 0x1}], 0x1}, 0x0) [ 2206.093874][T31088] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:48 executing program 4: socketpair(0xb, 0x0, 0x0, &(0x7f00000001c0)) 02:04:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff00", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2206.710178][T31103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2206.743348][T31103] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:49 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x40c100, 0x0) 02:04:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000300)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}, @generic={0x6, 0x4, 0x8, 0x3}], &(0x7f0000000340)='GPL\x00', 0x5, 0x0, &(0x7f0000000380), 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xe, 0x2, 0x79a7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='pids.current\x00', 0x0, 0x0) 02:04:49 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680)) 02:04:49 executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x48) 02:04:49 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="189420065215e0fc298c7c7c98914888d35c15a73a2aad0884b3500429fdca84f61705"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:04:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff00", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2207.110975][T31112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000300)) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) syz_clone(0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'geneve1\x00', @local}) 02:04:49 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000040), 0x10, 0x0}, 0x0) [ 2207.200777][T31112] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:49 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='memory.swap.current\x00', 0x0, 0x0) 02:04:49 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 02:04:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff00", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:49 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 02:04:49 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x8}, 0xc) 02:04:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x2, &(0x7f0000000300)=@raw=[@map_val], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000400), 0x10}, 0x80) 02:04:50 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 02:04:50 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@sco={0x1f, @none}, 0x80, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) 02:04:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff0000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000580)='\t', 0x1}, {&(0x7f0000000680)='p', 0x1}], 0x2, &(0x7f0000001ac0)=[{0x28, 0x0, 0x0, "857a75ea515ca8b08561418c3322ed4d27"}], 0x28}, 0x0) 02:04:50 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x7, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:04:50 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f0000001580)=""/241, 0x26, 0xf1, 0x1}, 0x20) 02:04:50 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5460, 0x0) 02:04:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff0000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:50 executing program 1: socketpair(0x28, 0x5, 0x0, &(0x7f0000000a40)) 02:04:51 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='pids.current\x00', 0x0, 0x0) 02:04:51 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x0, 0x5f, 0x2e]}}, &(0x7f00000005c0)=""/171, 0x29, 0xab, 0x1}, 0x20) 02:04:51 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)) 02:04:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x48) 02:04:51 executing program 2: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040), 0x10) 02:04:51 executing program 1: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0), 0x10) 02:04:51 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002140)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, &(0x7f00000021c0)) 02:04:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff0000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:51 executing program 4: syz_mount_image$erofs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='romfs\x00', 0x0, 0x0) 02:04:52 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002140)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) 02:04:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x29, &(0x7f0000000000)="24141598164a51f9db9541d2557a12dd", 0x5000) 02:04:52 executing program 2: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x2, &(0x7f0000001e40)=[{&(0x7f0000000940)='=', 0x1, 0xd2cd}, {&(0x7f0000001dc0)="8b", 0x1, 0xfffffffffffffeff}], 0x0, 0x0) 02:04:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x8000, &(0x7f0000001940)) [ 2209.976904][T31173] __nla_validate_parse: 6 callbacks suppressed [ 2209.976970][T31173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2210.046080][T31175] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:52 executing program 4: socketpair(0x26, 0x0, 0x0, &(0x7f0000000300)) 02:04:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2210.273533][T31183] loop2: detected capacity change from 0 to 264192 02:04:52 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100), 0x488, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 02:04:52 executing program 2: setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="06268a927f1f6588b967481241ba7860ac5cf65acd4aded8974895abaff4b4834ff922b3f1e0b02bd67aa03059bcecc7a9541aa3b77e", 0x36, 0x20c49a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 02:04:52 executing program 1: syz_mount_image$erofs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@mode}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x37]}}]}) 02:04:52 executing program 3: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) [ 2210.663601][T31189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2210.722516][T31189] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:52 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) stat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x81) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r2, 0x0, 0x10000) [ 2210.868233][T31195] tmpfs: Bad value for 'nr_inodes' [ 2211.046738][T31201] not chained 870000 origins [ 2211.051461][T31201] CPU: 0 PID: 31201 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2211.061759][T31201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2211.072187][T31201] Call Trace: [ 2211.075548][T31201] [ 2211.078563][T31201] dump_stack_lvl+0x1c8/0x256 [ 2211.083433][T31201] dump_stack+0x1a/0x1c [ 2211.087752][T31201] kmsan_internal_chain_origin+0x78/0x120 [ 2211.093634][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2211.100043][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2211.106014][T31201] ? ____sys_recvmsg+0x5c1/0x810 [ 2211.111103][T31201] ? __get_compat_msghdr+0x5b/0x750 [ 2211.116439][T31201] ? get_compat_msghdr+0x8c/0x1c0 [ 2211.121600][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2211.127568][T31201] ? __get_compat_msghdr+0x5b/0x750 [ 2211.132913][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2211.138891][T31201] ? should_fail+0x3f/0x810 [ 2211.143551][T31201] ? __stack_depot_save+0x21/0x4b0 [ 2211.148819][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2211.155251][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2211.161221][T31201] __msan_chain_origin+0xbd/0x140 [ 2211.166398][T31201] __get_compat_msghdr+0x514/0x750 [ 2211.171667][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2211.176662][T31201] ? ___sys_recvmsg+0xa9/0x890 [ 2211.181568][T31201] ? do_recvmmsg+0x682/0x1180 [ 2211.186387][T31201] ___sys_recvmsg+0x19d/0x890 [ 2211.191199][T31201] ? do_recvmmsg+0x6e4/0x1180 [ 2211.196025][T31201] ? __stack_depot_save+0x21/0x4b0 [ 2211.201291][T31201] ? kmsan_internal_check_memory+0x94/0x530 [ 2211.207339][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2211.213301][T31201] do_recvmmsg+0x682/0x1180 [ 2211.217952][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2211.224350][T31201] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2211.230921][T31201] __sys_recvmmsg+0x113/0x450 [ 2211.235790][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2211.242198][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2211.247442][T31201] ? exit_to_user_mode_prepare+0x119/0x220 [ 2211.253383][T31201] do_fast_syscall_32+0x33/0x70 [ 2211.258366][T31201] do_SYSENTER_32+0x1b/0x20 [ 2211.263003][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2211.269478][T31201] RIP: 0023:0xf7fd2549 [ 2211.273637][T31201] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2211.293387][T31201] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2211.301935][T31201] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2211.310027][T31201] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2211.318094][T31201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2211.326171][T31201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2211.334248][T31201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2211.342345][T31201] [ 2211.345602][T31201] Uninit was stored to memory at: [ 2211.350803][T31201] __get_compat_msghdr+0x514/0x750 [ 2211.356114][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2211.361097][T31201] ___sys_recvmsg+0x19d/0x890 [ 2211.366057][T31201] do_recvmmsg+0x682/0x1180 [ 2211.370696][T31201] __sys_recvmmsg+0x113/0x450 [ 2211.375573][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2211.382025][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2211.387278][T31201] do_fast_syscall_32+0x33/0x70 [ 2211.392348][T31201] do_SYSENTER_32+0x1b/0x20 [ 2211.396995][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2211.403532][T31201] [ 2211.405921][T31201] Uninit was stored to memory at: [ 2211.411118][T31201] __get_compat_msghdr+0x514/0x750 [ 2211.416424][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2211.421401][T31201] ___sys_recvmsg+0x19d/0x890 [ 2211.426297][T31201] do_recvmmsg+0x682/0x1180 [ 2211.430926][T31201] __sys_recvmmsg+0x113/0x450 [ 2211.435779][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2211.442234][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2211.447484][T31201] do_fast_syscall_32+0x33/0x70 [ 2211.452526][T31201] do_SYSENTER_32+0x1b/0x20 [ 2211.457159][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2211.463692][T31201] [ 2211.466082][T31201] Uninit was stored to memory at: [ 2211.471267][T31201] __get_compat_msghdr+0x514/0x750 [ 2211.476556][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2211.481567][T31201] ___sys_recvmsg+0x19d/0x890 [ 2211.486432][T31201] do_recvmmsg+0x682/0x1180 [ 2211.491082][T31201] __sys_recvmmsg+0x113/0x450 [ 2211.495946][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2211.502408][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2211.507655][T31201] do_fast_syscall_32+0x33/0x70 [ 2211.512698][T31201] do_SYSENTER_32+0x1b/0x20 [ 2211.517327][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2211.523871][T31201] [ 2211.526259][T31201] Uninit was stored to memory at: [ 2211.531449][T31201] __get_compat_msghdr+0x514/0x750 [ 2211.536745][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2211.541778][T31201] ___sys_recvmsg+0x19d/0x890 [ 2211.546582][T31201] do_recvmmsg+0x682/0x1180 [ 2211.551214][T31201] __sys_recvmmsg+0x113/0x450 [ 2211.556080][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2211.562533][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2211.567790][T31201] do_fast_syscall_32+0x33/0x70 [ 2211.572834][T31201] do_SYSENTER_32+0x1b/0x20 [ 2211.577467][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2211.584010][T31201] [ 2211.586400][T31201] Uninit was stored to memory at: [ 2211.591647][T31201] __get_compat_msghdr+0x514/0x750 [ 2211.596889][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2211.601919][T31201] ___sys_recvmsg+0x19d/0x890 [ 2211.606739][T31201] do_recvmmsg+0x682/0x1180 [ 2211.611365][T31201] __sys_recvmmsg+0x113/0x450 [ 2211.616224][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2211.622674][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2211.627923][T31201] do_fast_syscall_32+0x33/0x70 [ 2211.632972][T31201] do_SYSENTER_32+0x1b/0x20 [ 2211.637605][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2211.644139][T31201] [ 2211.646524][T31201] Uninit was stored to memory at: [ 2211.651770][T31201] __get_compat_msghdr+0x514/0x750 [ 2211.657013][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2211.662066][T31201] ___sys_recvmsg+0x19d/0x890 [ 2211.666872][T31201] do_recvmmsg+0x682/0x1180 [ 2211.671494][T31201] __sys_recvmmsg+0x113/0x450 [ 2211.676375][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2211.682826][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2211.688080][T31201] do_fast_syscall_32+0x33/0x70 [ 2211.693119][T31201] do_SYSENTER_32+0x1b/0x20 [ 2211.697747][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2211.704275][T31201] [ 2211.706664][T31201] Uninit was stored to memory at: [ 2211.711911][T31201] __get_compat_msghdr+0x514/0x750 [ 2211.717155][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2211.722188][T31201] ___sys_recvmsg+0x19d/0x890 [ 2211.727000][T31201] do_recvmmsg+0x682/0x1180 [ 2211.731762][T31201] __sys_recvmmsg+0x113/0x450 [ 2211.736565][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2211.743019][T31201] __do_fast_syscall_32+0xa2/0x100 02:04:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x17, 0x228, 0x0, 0xa60, 0x0, 0x1}, 0x48) [ 2211.748279][T31201] do_fast_syscall_32+0x33/0x70 [ 2211.753319][T31201] do_SYSENTER_32+0x1b/0x20 [ 2211.757950][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2211.764485][T31201] [ 2211.766877][T31201] Local variable msg_sys created at: [ 2211.772282][T31201] do_recvmmsg+0x5c/0x1180 [ 2211.776823][T31201] __sys_recvmmsg+0x113/0x450 02:04:54 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f0000000040)='GPL\x00', 0x6, 0xa8, &(0x7f0000000080)=""/168, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:04:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:04:54 executing program 5: rt_tgsigqueueinfo(0x0, 0x0, 0x17, &(0x7f0000000000)={0x0, 0x0, 0x8}) [ 2211.985741][T31201] not chained 880000 origins [ 2211.990449][T31201] CPU: 0 PID: 31201 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2212.000742][T31201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2212.010912][T31201] Call Trace: [ 2212.014275][T31201] [ 2212.017280][T31201] dump_stack_lvl+0x1c8/0x256 [ 2212.022140][T31201] dump_stack+0x1a/0x1c [ 2212.026458][T31201] kmsan_internal_chain_origin+0x78/0x120 [ 2212.032336][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2212.038741][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2212.044700][T31201] ? ____sys_recvmsg+0x5c1/0x810 [ 2212.049772][T31201] ? __get_compat_msghdr+0x5b/0x750 [ 2212.055091][T31201] ? get_compat_msghdr+0x8c/0x1c0 [ 2212.060230][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2212.066180][T31201] ? __get_compat_msghdr+0x5b/0x750 [ 2212.071502][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2212.077467][T31201] ? should_fail+0x3f/0x810 [ 2212.082106][T31201] ? __stack_depot_save+0x21/0x4b0 [ 2212.087353][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2212.093742][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2212.099691][T31201] __msan_chain_origin+0xbd/0x140 [ 2212.104843][T31201] __get_compat_msghdr+0x514/0x750 [ 2212.110107][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2212.115077][T31201] ? ___sys_recvmsg+0xa9/0x890 [ 2212.119956][T31201] ? do_recvmmsg+0x682/0x1180 [ 2212.124755][T31201] ___sys_recvmsg+0x19d/0x890 [ 2212.129548][T31201] ? do_recvmmsg+0x6e4/0x1180 [ 2212.134405][T31201] ? __stack_depot_save+0x21/0x4b0 [ 2212.139650][T31201] ? kmsan_internal_check_memory+0x94/0x530 [ 2212.145683][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2212.151636][T31201] do_recvmmsg+0x682/0x1180 [ 2212.156281][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2212.162668][T31201] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2212.169222][T31201] __sys_recvmmsg+0x113/0x450 [ 2212.174029][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2212.180422][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2212.185667][T31201] ? exit_to_user_mode_prepare+0x119/0x220 [ 2212.191610][T31201] do_fast_syscall_32+0x33/0x70 [ 2212.196601][T31201] do_SYSENTER_32+0x1b/0x20 [ 2212.201237][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2212.207707][T31201] RIP: 0023:0xf7fd2549 [ 2212.211863][T31201] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2212.231625][T31201] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2212.240166][T31201] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2212.248242][T31201] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2212.256306][T31201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2212.264383][T31201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2212.272443][T31201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2212.280528][T31201] [ 2212.283780][T31201] Uninit was stored to memory at: [ 2212.288973][T31201] __get_compat_msghdr+0x514/0x750 [ 2212.294280][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2212.299253][T31201] ___sys_recvmsg+0x19d/0x890 [ 2212.304122][T31201] do_recvmmsg+0x682/0x1180 [ 2212.308752][T31201] __sys_recvmmsg+0x113/0x450 [ 2212.313621][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2212.320009][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2212.325316][T31201] do_fast_syscall_32+0x33/0x70 [ 2212.330299][T31201] do_SYSENTER_32+0x1b/0x20 [ 2212.334994][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2212.341479][T31201] [ 2212.343947][T31201] Uninit was stored to memory at: [ 2212.349147][T31201] __get_compat_msghdr+0x514/0x750 [ 2212.354439][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2212.359423][T31201] ___sys_recvmsg+0x19d/0x890 [ 2212.364289][T31201] do_recvmmsg+0x682/0x1180 [ 2212.368919][T31201] __sys_recvmmsg+0x113/0x450 [ 2212.373853][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2212.380246][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2212.385593][T31201] do_fast_syscall_32+0x33/0x70 [ 2212.390622][T31201] do_SYSENTER_32+0x1b/0x20 [ 2212.395395][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2212.402122][T31201] [ 2212.404511][T31201] Uninit was stored to memory at: [ 2212.409704][T31201] __get_compat_msghdr+0x514/0x750 [ 2212.415068][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2212.420058][T31201] ___sys_recvmsg+0x19d/0x890 [ 2212.424985][T31201] do_recvmmsg+0x682/0x1180 [ 2212.429625][T31201] __sys_recvmmsg+0x113/0x450 [ 2212.434556][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2212.440959][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2212.446338][T31201] do_fast_syscall_32+0x33/0x70 [ 2212.451324][T31201] do_SYSENTER_32+0x1b/0x20 [ 2212.456091][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2212.462565][ T24] audit: type=1804 audit(1994724294.619:44): pid=31206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2815863302/syzkaller.N7NZab/1999/bus" dev="sda1" ino=1166 res=1 errno=0 [ 2212.462624][T31201] [ 2212.462648][T31201] Uninit was stored to memory at: [ 2212.462774][T31201] __get_compat_msghdr+0x514/0x750 [ 2212.492391][ T24] audit: type=1800 audit(1994724294.629:45): pid=31206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1166 res=0 errno=0 [ 2212.495467][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2212.526474][T31201] ___sys_recvmsg+0x19d/0x890 [ 2212.531285][T31201] do_recvmmsg+0x682/0x1180 [ 2212.535971][T31201] __sys_recvmmsg+0x113/0x450 [ 2212.540878][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2212.547375][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2212.552691][T31201] do_fast_syscall_32+0x33/0x70 [ 2212.557682][T31201] do_SYSENTER_32+0x1b/0x20 [ 2212.562452][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2212.568933][T31201] [ 2212.571322][T31201] Uninit was stored to memory at: [ 2212.576626][T31201] __get_compat_msghdr+0x514/0x750 [ 2212.581915][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2212.586894][T31201] ___sys_recvmsg+0x19d/0x890 [ 2212.591802][T31201] do_recvmmsg+0x682/0x1180 [ 2212.596432][T31201] __sys_recvmmsg+0x113/0x450 [ 2212.601235][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2212.607731][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2212.613039][T31201] do_fast_syscall_32+0x33/0x70 [ 2212.618049][T31201] do_SYSENTER_32+0x1b/0x20 [ 2212.622785][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2212.629257][T31201] [ 2212.631709][T31201] Uninit was stored to memory at: [ 2212.636895][T31201] __get_compat_msghdr+0x514/0x750 [ 2212.642235][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2212.647214][T31201] ___sys_recvmsg+0x19d/0x890 [ 2212.652131][T31201] do_recvmmsg+0x682/0x1180 [ 2212.656762][T31201] __sys_recvmmsg+0x113/0x450 [ 2212.661562][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2212.668059][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2212.673423][T31201] do_fast_syscall_32+0x33/0x70 [ 2212.678408][T31201] do_SYSENTER_32+0x1b/0x20 [ 2212.683146][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2212.689624][T31201] [ 2212.692124][T31201] Uninit was stored to memory at: [ 2212.697315][T31201] __get_compat_msghdr+0x514/0x750 [ 2212.702650][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2212.707606][T31201] ___sys_recvmsg+0x19d/0x890 [ 2212.712521][T31201] do_recvmmsg+0x682/0x1180 [ 2212.717174][T31201] __sys_recvmmsg+0x113/0x450 [ 2212.722072][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2212.728470][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2212.733820][T31201] do_fast_syscall_32+0x33/0x70 [ 2212.738816][T31201] do_SYSENTER_32+0x1b/0x20 [ 2212.743505][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2212.749979][T31201] [ 2212.752482][T31201] Local variable msg_sys created at: [ 2212.757842][T31201] do_recvmmsg+0x5c/0x1180 [ 2212.762485][T31201] __sys_recvmmsg+0x113/0x450 02:04:54 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb7020000030000f3bc120000000000008500000024000000b70000006c00000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568935b8d59bd8246a8d8fa150f2e6a61782b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00039ab20b0b8e1148f49faf8924000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413732201f9a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf4c422458e3542c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e48184ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3df9ff3100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaea6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa13a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0590b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f16255e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cd0000a410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a92144e43a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbd6ea6cfc5f8744583c0aa760600000000000000bd75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109bec1267dd7d781aa230ac1cae93576f7b13b519b969ca4576274680d9c5945ca90000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 02:04:54 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) [ 2212.851617][ C0] sched: RT throttling activated [ 2213.028216][T31201] not chained 890000 origins [ 2213.033092][T31201] CPU: 0 PID: 31201 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2213.043381][T31201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2213.053532][T31201] Call Trace: [ 2213.056879][T31201] [ 2213.059872][T31201] dump_stack_lvl+0x1c8/0x256 [ 2213.064721][T31201] dump_stack+0x1a/0x1c [ 2213.069021][T31201] kmsan_internal_chain_origin+0x78/0x120 [ 2213.074888][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2213.081278][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2213.087219][T31201] ? ____sys_recvmsg+0x5c1/0x810 [ 2213.092277][T31201] ? __get_compat_msghdr+0x5b/0x750 [ 2213.097597][T31201] ? get_compat_msghdr+0x8c/0x1c0 [ 2213.102745][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2213.108692][T31201] ? __get_compat_msghdr+0x5b/0x750 [ 2213.114019][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2213.119974][T31201] ? should_fail+0x3f/0x810 [ 2213.124616][T31201] ? __stack_depot_save+0x21/0x4b0 [ 2213.129862][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2213.136247][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2213.142191][T31201] __msan_chain_origin+0xbd/0x140 [ 2213.147344][T31201] __get_compat_msghdr+0x514/0x750 [ 2213.152593][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2213.157562][T31201] ? ___sys_recvmsg+0xa9/0x890 [ 2213.162443][T31201] ? do_recvmmsg+0x682/0x1180 [ 2213.167239][T31201] ___sys_recvmsg+0x19d/0x890 [ 2213.172030][T31201] ? do_recvmmsg+0x6e4/0x1180 [ 2213.176846][T31201] ? __stack_depot_save+0x21/0x4b0 [ 2213.182091][T31201] ? kmsan_internal_check_memory+0x94/0x530 [ 2213.188131][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2213.194085][T31201] do_recvmmsg+0x682/0x1180 [ 2213.198738][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2213.205150][T31201] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.211709][T31201] __sys_recvmmsg+0x113/0x450 [ 2213.216515][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.222901][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2213.228140][T31201] ? exit_to_user_mode_prepare+0x119/0x220 [ 2213.234073][T31201] do_fast_syscall_32+0x33/0x70 [ 2213.239046][T31201] do_SYSENTER_32+0x1b/0x20 [ 2213.243668][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2213.250135][T31201] RIP: 0023:0xf7fd2549 [ 2213.254287][T31201] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2213.274032][T31201] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2213.282569][T31201] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2213.290656][T31201] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2213.298725][T31201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2213.306790][T31201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2213.314852][T31201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2213.322945][T31201] [ 2213.329686][T31201] Uninit was stored to memory at: [ 2213.334956][T31201] __get_compat_msghdr+0x514/0x750 [ 2213.340197][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2213.345226][T31201] ___sys_recvmsg+0x19d/0x890 [ 2213.350040][T31201] do_recvmmsg+0x682/0x1180 [ 2213.354837][T31201] __sys_recvmmsg+0x113/0x450 [ 2213.359647][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.366100][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2213.371345][T31201] do_fast_syscall_32+0x33/0x70 [ 2213.376461][T31201] do_SYSENTER_32+0x1b/0x20 [ 2213.381109][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2213.387716][T31201] [ 2213.390124][T31201] Uninit was stored to memory at: [ 2213.395425][T31201] __get_compat_msghdr+0x514/0x750 [ 2213.400675][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2213.409490][T31201] ___sys_recvmsg+0x19d/0x890 [ 2213.414390][T31201] do_recvmmsg+0x682/0x1180 [ 2213.419035][T31201] __sys_recvmmsg+0x113/0x450 [ 2213.423987][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.430378][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2213.435763][T31201] do_fast_syscall_32+0x33/0x70 [ 2213.440748][T31201] do_SYSENTER_32+0x1b/0x20 [ 2213.445586][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2213.452161][T31201] [ 2213.454565][T31201] Uninit was stored to memory at: [ 2213.459774][T31201] __get_compat_msghdr+0x514/0x750 [ 2213.465156][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2213.470161][T31201] ___sys_recvmsg+0x19d/0x890 [ 2213.475105][T31201] do_recvmmsg+0x682/0x1180 [ 2213.479736][T31201] __sys_recvmmsg+0x113/0x450 [ 2213.484659][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.491055][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2213.496444][T31201] do_fast_syscall_32+0x33/0x70 [ 2213.501440][T31201] do_SYSENTER_32+0x1b/0x20 [ 2213.506240][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2213.516341][T31201] [ 2213.518734][T31201] Uninit was stored to memory at: [ 2213.524258][T31201] __get_compat_msghdr+0x514/0x750 [ 2213.529495][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2213.534584][T31201] ___sys_recvmsg+0x19d/0x890 [ 2213.539394][T31201] do_recvmmsg+0x682/0x1180 [ 2213.544127][T31201] __sys_recvmmsg+0x113/0x450 [ 2213.548936][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.555429][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2213.560681][T31201] do_fast_syscall_32+0x33/0x70 [ 2213.565767][T31201] do_SYSENTER_32+0x1b/0x20 [ 2213.570434][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2213.577007][T31201] [ 2213.579399][T31201] Uninit was stored to memory at: [ 2213.584699][T31201] __get_compat_msghdr+0x514/0x750 [ 2213.589938][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2213.595020][T31201] ___sys_recvmsg+0x19d/0x890 [ 2213.599833][T31201] do_recvmmsg+0x682/0x1180 [ 2213.604568][T31201] __sys_recvmmsg+0x113/0x450 [ 2213.609399][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.615874][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2213.621146][T31201] do_fast_syscall_32+0x33/0x70 [ 2213.626228][T31201] do_SYSENTER_32+0x1b/0x20 02:04:55 executing program 5: brk(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) brk(0x55555ede6001) [ 2213.630861][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2213.637444][T31201] [ 2213.639833][T31201] Uninit was stored to memory at: [ 2213.645088][T31201] __get_compat_msghdr+0x514/0x750 [ 2213.650345][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2213.655454][T31201] ___sys_recvmsg+0x19d/0x890 [ 2213.660267][T31201] do_recvmmsg+0x682/0x1180 [ 2213.664991][T31201] __sys_recvmmsg+0x113/0x450 [ 2213.669835][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.676335][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2213.681652][T31201] do_fast_syscall_32+0x33/0x70 [ 2213.686646][T31201] do_SYSENTER_32+0x1b/0x20 [ 2213.691286][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2213.697877][T31201] [ 2213.700266][T31201] Uninit was stored to memory at: [ 2213.705564][T31201] __get_compat_msghdr+0x514/0x750 [ 2213.710803][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2213.715871][T31201] ___sys_recvmsg+0x19d/0x890 [ 2213.720675][T31201] do_recvmmsg+0x682/0x1180 [ 2213.725418][T31201] __sys_recvmmsg+0x113/0x450 [ 2213.730238][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.736732][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2213.742032][T31201] do_fast_syscall_32+0x33/0x70 [ 2213.747031][T31201] do_SYSENTER_32+0x1b/0x20 [ 2213.751756][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2213.758234][T31201] [ 2213.760620][T31201] Local variable msg_sys created at: [ 2213.766133][T31201] do_recvmmsg+0x5c/0x1180 [ 2213.770699][T31201] __sys_recvmmsg+0x113/0x450 [ 2214.015091][T31201] not chained 900000 origins [ 2214.023455][T31201] CPU: 0 PID: 31201 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2214.033749][T31201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2214.043900][T31201] Call Trace: [ 2214.047247][T31201] [ 2214.050242][T31201] dump_stack_lvl+0x1c8/0x256 [ 2214.055093][T31201] dump_stack+0x1a/0x1c [ 2214.059389][T31201] kmsan_internal_chain_origin+0x78/0x120 [ 2214.065257][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2214.071650][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2214.077601][T31201] ? ____sys_recvmsg+0x5c1/0x810 [ 2214.082657][T31201] ? __get_compat_msghdr+0x5b/0x750 [ 2214.087968][T31201] ? get_compat_msghdr+0x8c/0x1c0 [ 2214.093109][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2214.099055][T31201] ? __get_compat_msghdr+0x5b/0x750 [ 2214.104372][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2214.110322][T31201] ? should_fail+0x3f/0x810 [ 2214.114959][T31201] ? __stack_depot_save+0x21/0x4b0 [ 2214.120205][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2214.126589][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2214.132547][T31201] __msan_chain_origin+0xbd/0x140 [ 2214.137699][T31201] __get_compat_msghdr+0x514/0x750 [ 2214.142950][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2214.147922][T31201] ? ___sys_recvmsg+0xa9/0x890 [ 2214.152798][T31201] ? do_recvmmsg+0x682/0x1180 [ 2214.157595][T31201] ___sys_recvmsg+0x19d/0x890 [ 2214.162387][T31201] ? do_recvmmsg+0x6e4/0x1180 [ 2214.167192][T31201] ? __stack_depot_save+0x21/0x4b0 [ 2214.172438][T31201] ? kmsan_internal_check_memory+0x94/0x530 [ 2214.178477][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2214.184443][T31201] do_recvmmsg+0x682/0x1180 [ 2214.189144][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2214.195550][T31201] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2214.202117][T31201] __sys_recvmmsg+0x113/0x450 [ 2214.206944][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2214.213352][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2214.218596][T31201] ? exit_to_user_mode_prepare+0x119/0x220 [ 2214.224546][T31201] do_fast_syscall_32+0x33/0x70 [ 2214.229525][T31201] do_SYSENTER_32+0x1b/0x20 [ 2214.234155][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2214.240620][T31201] RIP: 0023:0xf7fd2549 [ 2214.244779][T31201] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2214.264524][T31201] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2214.273063][T31201] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2214.281133][T31201] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2214.289195][T31201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2214.297258][T31201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2214.305322][T31201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2214.313420][T31201] [ 2214.320317][T31201] Uninit was stored to memory at: [ 2214.325600][T31201] __get_compat_msghdr+0x514/0x750 [ 2214.330870][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2214.335904][T31201] ___sys_recvmsg+0x19d/0x890 [ 2214.340714][T31201] do_recvmmsg+0x682/0x1180 [ 2214.345407][T31201] __sys_recvmmsg+0x113/0x450 [ 2214.350220][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2214.356688][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2214.362004][T31201] do_fast_syscall_32+0x33/0x70 [ 2214.367010][T31201] do_SYSENTER_32+0x1b/0x20 [ 2214.371718][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2214.378215][T31201] [ 2214.380627][T31201] Uninit was stored to memory at: [ 2214.385899][T31201] __get_compat_msghdr+0x514/0x750 [ 2214.391142][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2214.396184][T31201] ___sys_recvmsg+0x19d/0x890 [ 2214.400993][T31201] do_recvmmsg+0x682/0x1180 [ 2214.405699][T31201] __sys_recvmmsg+0x113/0x450 [ 2214.410516][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2214.416969][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2214.422279][T31201] do_fast_syscall_32+0x33/0x70 [ 2214.427268][T31201] do_SYSENTER_32+0x1b/0x20 [ 2214.431962][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2214.438450][T31201] [ 2214.440860][T31201] Uninit was stored to memory at: [ 2214.446108][T31201] __get_compat_msghdr+0x514/0x750 [ 2214.451346][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2214.456375][T31201] ___sys_recvmsg+0x19d/0x890 [ 2214.461174][T31201] do_recvmmsg+0x682/0x1180 [ 2214.465855][T31201] __sys_recvmmsg+0x113/0x450 [ 2214.470678][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2214.477139][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2214.482450][T31201] do_fast_syscall_32+0x33/0x70 [ 2214.487429][T31201] do_SYSENTER_32+0x1b/0x20 [ 2214.492116][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2214.498769][T31201] [ 2214.501153][T31201] Uninit was stored to memory at: [ 2214.506486][T31201] __get_compat_msghdr+0x514/0x750 [ 2214.511780][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2214.516752][T31201] ___sys_recvmsg+0x19d/0x890 [ 2214.521566][T31201] do_recvmmsg+0x682/0x1180 [ 2214.525426][T31216] syz-executor.1[31216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2214.526368][T31201] __sys_recvmmsg+0x113/0x450 [ 2214.526455][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2214.526555][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2214.554794][T31201] do_fast_syscall_32+0x33/0x70 [ 2214.557967][T31219] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2214.559737][T31201] do_SYSENTER_32+0x1b/0x20 [ 2214.559845][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2214.559946][T31201] [ 2214.582727][T31201] Uninit was stored to memory at: [ 2214.587917][T31201] __get_compat_msghdr+0x514/0x750 [ 2214.593264][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2214.598253][T31201] ___sys_recvmsg+0x19d/0x890 [ 2214.603160][T31201] do_recvmmsg+0x682/0x1180 [ 2214.607794][T31201] __sys_recvmmsg+0x113/0x450 [ 2214.612717][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2214.619109][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2214.624473][T31201] do_fast_syscall_32+0x33/0x70 [ 2214.629459][T31201] do_SYSENTER_32+0x1b/0x20 [ 2214.634196][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2214.640676][T31201] [ 2214.643177][T31201] Uninit was stored to memory at: [ 2214.648370][T31201] __get_compat_msghdr+0x514/0x750 [ 2214.653721][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2214.657531][T31220] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:04:56 executing program 3: syz_mount_image$erofs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) [ 2214.658659][T31201] ___sys_recvmsg+0x19d/0x890 [ 2214.672954][T31201] do_recvmmsg+0x682/0x1180 [ 2214.677586][T31201] __sys_recvmmsg+0x113/0x450 [ 2214.682448][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2214.688836][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2214.694143][T31201] do_fast_syscall_32+0x33/0x70 [ 2214.699126][T31201] do_SYSENTER_32+0x1b/0x20 [ 2214.703866][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2214.710334][T31201] [ 2214.712840][T31201] Uninit was stored to memory at: [ 2214.718030][T31201] __get_compat_msghdr+0x514/0x750 [ 2214.723383][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2214.728362][T31201] ___sys_recvmsg+0x19d/0x890 [ 2214.733281][T31201] do_recvmmsg+0x682/0x1180 [ 2214.737915][T31201] __sys_recvmmsg+0x113/0x450 [ 2214.742826][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2214.749218][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2214.754574][T31201] do_fast_syscall_32+0x33/0x70 [ 2214.759565][T31201] do_SYSENTER_32+0x1b/0x20 [ 2214.764295][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2214.770778][T31201] [ 2214.773276][T31201] Local variable msg_sys created at: [ 2214.778630][T31201] do_recvmmsg+0x5c/0x1180 [ 2214.783280][T31201] __sys_recvmmsg+0x113/0x450 [ 2215.025852][T31201] not chained 910000 origins [ 2215.030556][T31201] CPU: 0 PID: 31201 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2215.040860][T31201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2215.051024][T31201] Call Trace: [ 2215.054384][T31201] [ 2215.057386][T31201] dump_stack_lvl+0x1c8/0x256 [ 2215.062238][T31201] dump_stack+0x1a/0x1c [ 2215.066542][T31201] kmsan_internal_chain_origin+0x78/0x120 [ 2215.072410][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2215.078804][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2215.084747][T31201] ? ____sys_recvmsg+0x5c1/0x810 [ 2215.089806][T31201] ? __get_compat_msghdr+0x5b/0x750 [ 2215.095120][T31201] ? get_compat_msghdr+0x8c/0x1c0 [ 2215.100258][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2215.106203][T31201] ? __get_compat_msghdr+0x5b/0x750 [ 2215.111522][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2215.117484][T31201] ? should_fail+0x3f/0x810 [ 2215.122122][T31201] ? __stack_depot_save+0x21/0x4b0 [ 2215.127369][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2215.133754][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2215.139703][T31201] __msan_chain_origin+0xbd/0x140 [ 2215.144866][T31201] __get_compat_msghdr+0x514/0x750 [ 2215.150131][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2215.155110][T31201] ? ___sys_recvmsg+0xa9/0x890 [ 2215.159993][T31201] ? do_recvmmsg+0x682/0x1180 [ 2215.164811][T31201] ___sys_recvmsg+0x19d/0x890 [ 2215.169609][T31201] ? do_recvmmsg+0x6e4/0x1180 [ 2215.174433][T31201] ? __stack_depot_save+0x21/0x4b0 [ 2215.179703][T31201] ? kmsan_internal_check_memory+0x94/0x530 [ 2215.185751][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2215.191702][T31201] do_recvmmsg+0x682/0x1180 [ 2215.196348][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2215.202747][T31201] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.209319][T31201] __sys_recvmmsg+0x113/0x450 [ 2215.214136][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.220532][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2215.225783][T31201] ? exit_to_user_mode_prepare+0x119/0x220 [ 2215.231729][T31201] do_fast_syscall_32+0x33/0x70 [ 2215.236711][T31201] do_SYSENTER_32+0x1b/0x20 [ 2215.241336][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2215.247805][T31201] RIP: 0023:0xf7fd2549 [ 2215.251961][T31201] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2215.271712][T31201] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2215.280258][T31201] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2215.288348][T31201] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2215.296419][T31201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2215.304489][T31201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2215.312560][T31201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2215.320652][T31201] [ 2215.323900][T31201] Uninit was stored to memory at: [ 2215.329104][T31201] __get_compat_msghdr+0x514/0x750 [ 2215.334428][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2215.339434][T31201] ___sys_recvmsg+0x19d/0x890 [ 2215.344314][T31201] do_recvmmsg+0x682/0x1180 [ 2215.348949][T31201] __sys_recvmmsg+0x113/0x450 [ 2215.353814][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.360204][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2215.365523][T31201] do_fast_syscall_32+0x33/0x70 [ 2215.370512][T31201] do_SYSENTER_32+0x1b/0x20 [ 2215.375207][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2215.381738][T31201] [ 2215.384143][T31201] Uninit was stored to memory at: [ 2215.389339][T31201] __get_compat_msghdr+0x514/0x750 [ 2215.394650][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2215.399631][T31201] ___sys_recvmsg+0x19d/0x890 [ 2215.404495][T31201] do_recvmmsg+0x682/0x1180 [ 2215.409134][T31201] __sys_recvmmsg+0x113/0x450 [ 2215.414065][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.420463][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2215.425778][T31201] do_fast_syscall_32+0x33/0x70 [ 2215.430753][T31201] do_SYSENTER_32+0x1b/0x20 [ 2215.435488][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2215.442027][T31201] [ 2215.444414][T31201] Uninit was stored to memory at: [ 2215.449623][T31201] __get_compat_msghdr+0x514/0x750 [ 2215.454976][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2215.459958][T31201] ___sys_recvmsg+0x19d/0x890 [ 2215.464875][T31201] do_recvmmsg+0x682/0x1180 [ 2215.469503][T31201] __sys_recvmmsg+0x113/0x450 [ 2215.474415][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.480813][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2215.486175][T31201] do_fast_syscall_32+0x33/0x70 [ 2215.491158][T31201] do_SYSENTER_32+0x1b/0x20 [ 2215.495887][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2215.502426][T31201] [ 2215.504815][T31201] Uninit was stored to memory at: [ 2215.510002][T31201] __get_compat_msghdr+0x514/0x750 [ 2215.515364][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2215.520345][T31201] ___sys_recvmsg+0x19d/0x890 [ 2215.525255][T31201] do_recvmmsg+0x682/0x1180 [ 2215.529888][T31201] __sys_recvmmsg+0x113/0x450 [ 2215.534790][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.541182][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2215.546550][T31201] do_fast_syscall_32+0x33/0x70 [ 2215.551539][T31201] do_SYSENTER_32+0x1b/0x20 [ 2215.556268][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2215.562846][T31201] [ 2215.565238][T31201] Uninit was stored to memory at: [ 2215.570422][T31201] __get_compat_msghdr+0x514/0x750 [ 2215.575776][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2215.580762][T31201] ___sys_recvmsg+0x19d/0x890 [ 2215.585681][T31201] do_recvmmsg+0x682/0x1180 [ 2215.590306][T31201] __sys_recvmmsg+0x113/0x450 [ 2215.595216][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.601670][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2215.606918][T31201] do_fast_syscall_32+0x33/0x70 [ 2215.612001][T31201] do_SYSENTER_32+0x1b/0x20 [ 2215.616634][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2215.623214][T31201] [ 2215.625604][T31201] Uninit was stored to memory at: [ 2215.630791][T31201] __get_compat_msghdr+0x514/0x750 [ 2215.636149][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2215.641137][T31201] ___sys_recvmsg+0x19d/0x890 [ 2215.646058][T31201] do_recvmmsg+0x682/0x1180 [ 2215.650692][T31201] __sys_recvmmsg+0x113/0x450 [ 2215.655609][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.662050][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2215.667293][T31201] do_fast_syscall_32+0x33/0x70 [ 2215.672380][T31201] do_SYSENTER_32+0x1b/0x20 [ 2215.677011][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2215.683592][T31201] [ 2215.685981][T31201] Uninit was stored to memory at: [ 2215.691169][T31201] __get_compat_msghdr+0x514/0x750 [ 2215.696514][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2215.701513][T31201] ___sys_recvmsg+0x19d/0x890 [ 2215.706384][T31201] do_recvmmsg+0x682/0x1180 [ 2215.711008][T31201] __sys_recvmmsg+0x113/0x450 [ 2215.715912][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.722354][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2215.727599][T31201] do_fast_syscall_32+0x33/0x70 [ 2215.732685][T31201] do_SYSENTER_32+0x1b/0x20 [ 2215.737318][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2215.743893][T31201] [ 2215.746287][T31201] Local variable msg_sys created at: [ 2215.751705][T31201] do_recvmmsg+0x5c/0x1180 [ 2215.756252][T31201] __sys_recvmmsg+0x113/0x450 [ 2216.021077][T31201] not chained 920000 origins [ 2216.025885][T31201] CPU: 0 PID: 31201 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2216.036178][T31201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2216.046331][T31201] Call Trace: [ 2216.049676][T31201] [ 2216.052670][T31201] dump_stack_lvl+0x1c8/0x256 [ 2216.057518][T31201] dump_stack+0x1a/0x1c [ 2216.061824][T31201] kmsan_internal_chain_origin+0x78/0x120 [ 2216.067692][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2216.074086][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2216.080030][T31201] ? ____sys_recvmsg+0x5c1/0x810 [ 2216.085088][T31201] ? __get_compat_msghdr+0x5b/0x750 [ 2216.090403][T31201] ? get_compat_msghdr+0x8c/0x1c0 [ 2216.095549][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2216.101511][T31201] ? __get_compat_msghdr+0x5b/0x750 [ 2216.106836][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2216.112788][T31201] ? should_fail+0x3f/0x810 [ 2216.117425][T31201] ? __stack_depot_save+0x21/0x4b0 [ 2216.122672][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2216.129060][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2216.135002][T31201] __msan_chain_origin+0xbd/0x140 [ 2216.140154][T31201] __get_compat_msghdr+0x514/0x750 [ 2216.145407][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2216.150375][T31201] ? ___sys_recvmsg+0xa9/0x890 [ 2216.155253][T31201] ? do_recvmmsg+0x682/0x1180 [ 2216.160047][T31201] ___sys_recvmsg+0x19d/0x890 [ 2216.164840][T31201] ? do_recvmmsg+0x6e4/0x1180 [ 2216.169664][T31201] ? __stack_depot_save+0x21/0x4b0 [ 2216.174925][T31201] ? kmsan_internal_check_memory+0x94/0x530 [ 2216.180969][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2216.186927][T31201] do_recvmmsg+0x682/0x1180 [ 2216.191574][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2216.197973][T31201] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.204540][T31201] __sys_recvmmsg+0x113/0x450 [ 2216.209361][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.215759][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2216.221000][T31201] ? exit_to_user_mode_prepare+0x119/0x220 [ 2216.226948][T31201] do_fast_syscall_32+0x33/0x70 [ 2216.231924][T31201] do_SYSENTER_32+0x1b/0x20 [ 2216.236543][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2216.243008][T31201] RIP: 0023:0xf7fd2549 [ 2216.247168][T31201] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2216.266915][T31201] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2216.275448][T31201] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2216.283516][T31201] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2216.291581][T31201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2216.299667][T31201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2216.307731][T31201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2216.315824][T31201] [ 2216.322392][T31201] Uninit was stored to memory at: [ 2216.327606][T31201] __get_compat_msghdr+0x514/0x750 [ 2216.333186][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2216.338165][T31201] ___sys_recvmsg+0x19d/0x890 [ 2216.343036][T31201] do_recvmmsg+0x682/0x1180 [ 2216.347669][T31201] __sys_recvmmsg+0x113/0x450 [ 2216.352542][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.358944][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2216.364267][T31201] do_fast_syscall_32+0x33/0x70 [ 2216.369249][T31201] do_SYSENTER_32+0x1b/0x20 [ 2216.373940][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2216.380440][T31201] [ 2216.382888][T31201] Uninit was stored to memory at: [ 2216.388083][T31201] __get_compat_msghdr+0x514/0x750 [ 2216.393386][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2216.398371][T31201] ___sys_recvmsg+0x19d/0x890 [ 2216.403288][T31201] do_recvmmsg+0x682/0x1180 [ 2216.407925][T31201] __sys_recvmmsg+0x113/0x450 [ 2216.412872][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.419286][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2216.424653][T31201] do_fast_syscall_32+0x33/0x70 [ 2216.429631][T31201] do_SYSENTER_32+0x1b/0x20 [ 2216.434376][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2216.440851][T31201] [ 2216.443339][T31201] Uninit was stored to memory at: [ 2216.448533][T31201] __get_compat_msghdr+0x514/0x750 [ 2216.453893][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2216.458869][T31201] ___sys_recvmsg+0x19d/0x890 [ 2216.463781][T31201] do_recvmmsg+0x682/0x1180 [ 2216.468408][T31201] __sys_recvmmsg+0x113/0x450 [ 2216.473331][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.479719][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2216.485085][T31201] do_fast_syscall_32+0x33/0x70 [ 2216.490093][T31201] do_SYSENTER_32+0x1b/0x20 [ 2216.494839][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2216.501318][T31201] [ 2216.503818][T31201] Uninit was stored to memory at: [ 2216.509013][T31201] __get_compat_msghdr+0x514/0x750 [ 2216.514360][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2216.519355][T31201] ___sys_recvmsg+0x19d/0x890 [ 2216.524262][T31201] do_recvmmsg+0x682/0x1180 [ 2216.528891][T31201] __sys_recvmmsg+0x113/0x450 [ 2216.533803][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.540207][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2216.545564][T31201] do_fast_syscall_32+0x33/0x70 [ 2216.550537][T31201] do_SYSENTER_32+0x1b/0x20 [ 2216.555221][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2216.561791][T31201] [ 2216.564180][T31201] Uninit was stored to memory at: [ 2216.569384][T31201] __get_compat_msghdr+0x514/0x750 [ 2216.574727][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2216.579704][T31201] ___sys_recvmsg+0x19d/0x890 [ 2216.584637][T31201] do_recvmmsg+0x682/0x1180 [ 2216.589271][T31201] __sys_recvmmsg+0x113/0x450 [ 2216.594178][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.600586][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2216.605957][T31201] do_fast_syscall_32+0x33/0x70 [ 2216.610941][T31201] do_SYSENTER_32+0x1b/0x20 [ 2216.615684][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2216.622224][T31201] [ 2216.625480][T31201] Uninit was stored to memory at: [ 2216.630673][T31201] __get_compat_msghdr+0x514/0x750 [ 2216.636017][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2216.641001][T31201] ___sys_recvmsg+0x19d/0x890 [ 2216.645922][T31201] do_recvmmsg+0x682/0x1180 [ 2216.650554][T31201] __sys_recvmmsg+0x113/0x450 [ 2216.655469][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.661911][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2216.667159][T31201] do_fast_syscall_32+0x33/0x70 [ 2216.672243][T31201] do_SYSENTER_32+0x1b/0x20 [ 2216.676873][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2216.683452][T31201] [ 2216.685841][T31201] Uninit was stored to memory at: [ 2216.691066][T31201] __get_compat_msghdr+0x514/0x750 [ 2216.696416][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2216.701410][T31201] ___sys_recvmsg+0x19d/0x890 [ 2216.706355][T31201] do_recvmmsg+0x682/0x1180 [ 2216.711025][T31201] __sys_recvmmsg+0x113/0x450 [ 2216.715949][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.722416][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2216.727675][T31201] do_fast_syscall_32+0x33/0x70 [ 2216.732762][T31201] do_SYSENTER_32+0x1b/0x20 [ 2216.737385][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2216.743966][T31201] [ 2216.746351][T31201] Local variable msg_sys created at: [ 2216.751750][T31201] do_recvmmsg+0x5c/0x1180 [ 2216.756284][T31201] __sys_recvmmsg+0x113/0x450 [ 2217.009890][T31201] not chained 930000 origins [ 2217.014659][T31201] CPU: 0 PID: 31201 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2217.024961][T31201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2217.035114][T31201] Call Trace: [ 2217.038425][T31201] [ 2217.041389][T31201] dump_stack_lvl+0x1c8/0x256 [ 2217.046205][T31201] dump_stack+0x1a/0x1c [ 2217.050501][T31201] kmsan_internal_chain_origin+0x78/0x120 [ 2217.056309][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2217.062663][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2217.068604][T31201] ? ____sys_recvmsg+0x5c1/0x810 [ 2217.073613][T31201] ? __get_compat_msghdr+0x5b/0x750 [ 2217.078880][T31201] ? get_compat_msghdr+0x8c/0x1c0 [ 2217.083986][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2217.089934][T31201] ? __get_compat_msghdr+0x5b/0x750 [ 2217.095225][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2217.101193][T31201] ? should_fail+0x3f/0x810 [ 2217.105796][T31201] ? __stack_depot_save+0x21/0x4b0 [ 2217.111039][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2217.117377][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2217.123295][T31201] __msan_chain_origin+0xbd/0x140 [ 2217.128465][T31201] __get_compat_msghdr+0x514/0x750 [ 2217.133732][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2217.138693][T31201] ? ___sys_recvmsg+0xa9/0x890 [ 2217.143539][T31201] ? do_recvmmsg+0x682/0x1180 [ 2217.148328][T31201] ___sys_recvmsg+0x19d/0x890 [ 2217.153073][T31201] ? do_recvmmsg+0x6e4/0x1180 [ 2217.157825][T31201] ? __stack_depot_save+0x21/0x4b0 [ 2217.163033][T31201] ? kmsan_internal_check_memory+0x94/0x530 [ 2217.169069][T31201] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2217.174960][T31201] do_recvmmsg+0x682/0x1180 [ 2217.179549][T31201] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2217.185899][T31201] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.192474][T31201] __sys_recvmmsg+0x113/0x450 [ 2217.197297][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.203703][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2217.208937][T31201] ? exit_to_user_mode_prepare+0x119/0x220 [ 2217.214844][T31201] do_fast_syscall_32+0x33/0x70 [ 2217.219808][T31201] do_SYSENTER_32+0x1b/0x20 [ 2217.224398][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2217.230876][T31201] RIP: 0023:0xf7fd2549 [ 2217.235008][T31201] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2217.254754][T31201] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2217.263251][T31201] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2217.271314][T31201] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2217.279336][T31201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2217.287375][T31201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2217.295395][T31201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2217.303460][T31201] [ 2217.306685][T31201] Uninit was stored to memory at: [ 2217.311942][T31201] __get_compat_msghdr+0x514/0x750 [ 2217.317204][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2217.322265][T31201] ___sys_recvmsg+0x19d/0x890 [ 2217.327078][T31201] do_recvmmsg+0x682/0x1180 [ 2217.331759][T31201] __sys_recvmmsg+0x113/0x450 [ 2217.336569][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.343017][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2217.348265][T31201] do_fast_syscall_32+0x33/0x70 [ 2217.353349][T31201] do_SYSENTER_32+0x1b/0x20 [ 2217.357963][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2217.364498][T31201] [ 2217.366885][T31201] Uninit was stored to memory at: [ 2217.372173][T31201] __get_compat_msghdr+0x514/0x750 [ 2217.377394][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2217.382430][T31201] ___sys_recvmsg+0x19d/0x890 [ 2217.387243][T31201] do_recvmmsg+0x682/0x1180 [ 2217.391983][T31201] __sys_recvmmsg+0x113/0x450 [ 2217.396791][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.403235][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2217.408484][T31201] do_fast_syscall_32+0x33/0x70 [ 2217.413546][T31201] do_SYSENTER_32+0x1b/0x20 [ 2217.418158][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2217.424697][T31201] [ 2217.427089][T31201] Uninit was stored to memory at: [ 2217.432379][T31201] __get_compat_msghdr+0x514/0x750 [ 2217.437625][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2217.442706][T31201] ___sys_recvmsg+0x19d/0x890 [ 2217.447513][T31201] do_recvmmsg+0x682/0x1180 [ 2217.452241][T31201] __sys_recvmmsg+0x113/0x450 [ 2217.457048][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.463543][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2217.468794][T31201] do_fast_syscall_32+0x33/0x70 [ 2217.473842][T31201] do_SYSENTER_32+0x1b/0x20 [ 2217.478453][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2217.484988][T31201] [ 2217.487379][T31201] Uninit was stored to memory at: [ 2217.492674][T31201] __get_compat_msghdr+0x514/0x750 [ 2217.497916][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2217.502946][T31201] ___sys_recvmsg+0x19d/0x890 [ 2217.507753][T31201] do_recvmmsg+0x682/0x1180 [ 2217.512485][T31201] __sys_recvmmsg+0x113/0x450 [ 2217.517300][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.523792][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2217.529199][T31201] do_fast_syscall_32+0x33/0x70 [ 2217.534242][T31201] do_SYSENTER_32+0x1b/0x20 [ 2217.538852][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2217.545386][T31201] [ 2217.547772][T31201] Uninit was stored to memory at: [ 2217.553062][T31201] __get_compat_msghdr+0x514/0x750 [ 2217.558282][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2217.563317][T31201] ___sys_recvmsg+0x19d/0x890 [ 2217.568121][T31201] do_recvmmsg+0x682/0x1180 [ 2217.572845][T31201] __sys_recvmmsg+0x113/0x450 [ 2217.577645][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.584122][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2217.589350][T31201] do_fast_syscall_32+0x33/0x70 [ 2217.594390][T31201] do_SYSENTER_32+0x1b/0x20 [ 2217.599039][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2217.605633][T31201] [ 2217.608016][T31201] Uninit was stored to memory at: [ 2217.613309][T31201] __get_compat_msghdr+0x514/0x750 [ 2217.618530][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2217.623538][T31201] ___sys_recvmsg+0x19d/0x890 [ 2217.628325][T31201] do_recvmmsg+0x682/0x1180 [ 2217.633012][T31201] __sys_recvmmsg+0x113/0x450 [ 2217.637809][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.644272][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2217.649499][T31201] do_fast_syscall_32+0x33/0x70 [ 2217.654544][T31201] do_SYSENTER_32+0x1b/0x20 [ 2217.659169][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2217.665713][T31201] [ 2217.668089][T31201] Uninit was stored to memory at: [ 2217.673359][T31201] __get_compat_msghdr+0x514/0x750 [ 2217.678599][T31201] get_compat_msghdr+0x8c/0x1c0 [ 2217.683678][T31201] ___sys_recvmsg+0x19d/0x890 [ 2217.688486][T31201] do_recvmmsg+0x682/0x1180 [ 2217.693215][T31201] __sys_recvmmsg+0x113/0x450 [ 2217.697999][T31201] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.704439][T31201] __do_fast_syscall_32+0xa2/0x100 [ 2217.709686][T31201] do_fast_syscall_32+0x33/0x70 [ 2217.714716][T31201] do_SYSENTER_32+0x1b/0x20 [ 2217.719326][T31201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2217.725818][T31201] [ 2217.728196][T31201] Local variable msg_sys created at: [ 2217.733639][T31201] do_recvmmsg+0x5c/0x1180 [ 2217.738158][T31201] __sys_recvmmsg+0x113/0x450 02:05:00 executing program 2: open(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) 02:05:00 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2063010}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c941340c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006fe13dc5dc9fe07f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003916cde278cb053e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028607148000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000024bb00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0d9df833256d71efed66c1011fd3f02486cff12d95bcb51482f2ae498449c5bc30a609968f53ecadf8c2396bdfd45c3afc4797ca0ae925df2942021ad82706a1345170d9d64bed0af4a4ecd634e2bd3ed7bed4c41fcdf680b9553eb8093c92a895e33958163699955fca30b2948a03b4792b3b295bb6a5c6036b4d6e57664a06b69b3958798030205aa00e78286f8a42014d4fe72f418e9c579729ca75478c03372a7c8ab802ba76a64c45aef89de1c4f13eb43279ed2b18022ca11cf5a2489b2d77b699554aca70cffe5d231c63e73ad9de96cd6f0fdb78c7fba7dcb0c1817a4f87503f515ea4b1104ad061b40d008700a82e4598a694ee4b45de7574cd662ea43740b9e7f6949b45db167f46eac99162d466373e05848e98c836fc45bc2e0f0d1747d2ccc9102dc9740587fb27b9d5f227e278fd112426e83e284f71ba0a97dabc663fb7c8345db9a5b827f93b6ba748f894f657f4611b8339d38dbcb26f1618352c99363c13cd5cdd9afe5a7087aa63c2ba9ba221617bf459af06f700fdf7b44b54b220805e6cfcdeb8094f7f55cfc38a6688cba893d5205343db76734703335abd7d68fbe535f4bf351098c9a1c9e2eed2c2cd8871e96093cfe951a6e75e6bb1799cf92ae604b399538565ea486fe81c129c84db9bf79fc1265ed8db54f28a9cc3199e077919564f9fe71e9ca24c448c397b1fa3d7fda5c60272f5dda33fee5d28917539e742fb3d233648899c30c93ac23188db98e2ee60a4a52aa03f6b1ea2a0ac87a07b8ad458db36d9b0cada4da9d3049bfccb2291fffe883799c8aa24b7a2543602dcde549fc1e2d6ab441f5e0a11ea7bed7eab41ce833664c6337944412cba63c8e34e81453bf260add6f6e50a63c256ec5096bf0b261f47202cb8506d594aee8ece5a3e2ec58fdb533bfa3e4c155f9b455f88aefff8903156218a2034643dd4b8b388790c2a77be33b11ec1081fdd4a5f7c9e8a32783f4c2b7236ac1b46e8f9671dd1b490466474545b608aa7dbd5529ef0e96f0108aaebb0f0ff0a22758c1db5fbf698ae3a4ecd621e5640d983f35a2da4d0b07f1a152eaa9fda77c116f17dda1a7d49eb74fa10d7a2957da28fa27fa052e96e9c5a19d99025caa780d3177b534c68e04b83c10811db184ab57010bc631843857b358bf75a2b19619ee9246340aedc6c6261b2963720c85253fd3bfacbf12823321436b03ddae9579ec3f9e11089c387584ec9202d58964eaa786abfe8577c16b74280ae8ebce30e2ddd2f8c6719190bc592224701f51fdf33e6565c12b4b799677e364ae6eb16b6a48bcd27cfa3182d6626f2cb9cfd6982b42abb3136d336c14c99e6292d4aca54eda256195e2cd87b2530d2afd4d5d6f967b6e80a5ae2122a63973d65714b0facde59fb55b10bedc8280a5729417fb48971ab4035b08a1c49db89b0c2146651b0fe56ecee3f629890e690b3ded07482c84a83e379eec37a1019d4c6a1f7350d46f73f89cc65a50583c121bf0322ff0de6ba1c58f3174aec2907aa5b9c5d0465b40dce0f17367c6f93246353279aa76fa69a1908c83a3d53a26ed5568f39760f267be47275e10dec6547695cbf4d6da32319cf4bd579f277242cfd786a60997739ee57000a3b722bd4f2ee1b3179690a8de132782c5789ab19094dcabb0fab19d782871c5939f009565a4954e28e054920c78f06baa67be4e6b09c8ab9ff1641aaae6e8d841584557cfd3ffa94ff242fd4b7b0f8426af5ece3a24477f2dc8c264352b1a577d9b52140eff37291a06b8a5bc23ef541b53ab9ecc1b83cae4bcca0e8eeae7ff8e8380428735248e473322759cfdba04b6bdeedca0826ddde5106209e0e337d4a97c0780b577d481afc58c0b422cd9228bc4f15068b6c0d70f421092f5c47390eee0de29a635677bebab3443e3800293cbc072defad3a92fdc7741f31bc8c96e3e2b7863e1769e52e31cff4b1b61d6313c7ca7c89bf6043ede4171523f7314b9e21e1d3c3a8ed068a4578e32ca9ff1463237ef8a7097ee5765c92caa8760695b9da33f60d7abbe401dcd8fe6cd4bd82e84a61143c6b90fa92bc775de7e3c07017436a023c347abdb8119664ec23192e76db919b0dbf7dee8950e3325db1e73c605c8300b176c48b78e8fb6c5929a90eb72c914e88be263d587db6222ee78f65c4e4cd682012b384d9abb44e5512a9dfb5cc1ff951c25a7c752e3d8715fb26f5ff78435912fadad6b1b328008855f73dd72daaeadba295e2ba660c049e0e1e234333a9173d11e3964ff0a8ab7ada9d7ce9990b57be2414188c250b63439524ef699e5597147f60186271493c69b5a00685a75dc8a013dd0add633f15ebf13fe9c9b9cd4d3eab7f6465ecf2fed0404f2462e90e0bda6d0489638eaa2df0fbb8174adf93121d0a5ca5801ecc3865c27fcecff62ed665e2d14b1d78ebfe7951473363f637c75ba5c8504700609b76b72e96e909bb8e2e3aade41e5288cf5344242369e907668dfbdaaf68f25a70138f2a1393e9079d09ff40809a2401d2eee1460347a835e8a8d21308cc5ec6d7e9bdee4a0c40c9b419bd9d6c84efed5ffdc4a02ef53a219bf791bdee7c9a5e123ec5f4685ff46427fc5672cdb23eda6c533afa6e178d4febdacf15278326f068c6dc035fd87ded96d8f54d91e11b909199285a9565229d34ca116cf88bbe4c65331f36705a478b209f3b5d3f6a6992e84b9c32ea9e461f681f1d5cf8073523f338b88368a618ced3d9aab9f05887f6225a18795d136fcca96f31e5c24316d3e966f124f5d3510d82c0579c5a6df43dfef5f15962b1877d6dedcfc8ff7ded6c9db597b55bfa2e72c087bce9b5355e168492a803cdb7cbdd7e371b41372a9635b57952588747e8e1ae6f0be1510cfabd03e61925e3eec7e01518c5e3425d73226ea6ac632e4da8bc715339cca5c544bbaebaaa2e058e764206e9937b567e1b53d98316f2160a86d52f5b7480473f5fccbbc4260154c4e3f4169dc1e2ebb5aeaa3396fd48b19ba8dbd7a9000c6da43a481f4f5642c844a6e60da98b7a263d966ae6a343081062841beef6258de227c9466260591435e99ea19d1b7a110ef293691b3d43d90a184830fa0bb500175e133ac20156dbc69b502f0be5bd4108e0013270fdf79463f61ec78acd834971e84f7a177e8be18e9329e821022170ffccb730a6b395f7df090e4f1d80cbd9a563bc03588ef5807e14c87cb16c07204ea2285ce7c4e2cc65b7c6d6b8ec3ba5a5c6d4c426b03269a367dafaffb9ccb16170d83322c566e8f5da1c9e46f7e91101ba49719cc0eddfc725847018171c8a13a626df3266e940170e49057041967899a806eaa61ea73a5cff11ec622a3624e83a9ad0e04bee3a953ecc80fe16dd417d10b7809815dc008f5ad09084aabd09d8cc6a1132dd3da04e080d5affca47f7ff152af667aa4471fd4a84201380b414097c85db842855c2732a4ec59df48e48c44dccffbc5537b1f09767330bc920dc843e4f7b019f05b6b44488e60701334f22247192cc99588dfa859452919b3a7cd53034b4ae36b5fc3cd51e49885c5f60db685e9f7c43e580952528776f3bddc3e0db87b03b11115d2796e29c565c25f779d6984ab6ff3e3fdfd5836f45e9d1fee8bc9abe2a17d5273cf4745dba5756271e55add728141ec8997c58898b15bfe98fee27e727337549d9f59845f7d500d1bf71bcaa71da69b6f8e2ecc73c8c82cea22fddbc64f8762e8244e1c05c6e0c8730e2f79db7fa71d2285d1fe198c4f9209ff033262744780b4e381742e4be7763ce1c8719cbdd0b422ec54a144393459d751a6903797e9d5a7c8320b37b8700fc536949419fab2aa987571e65635ed679fd72f70095ba9de94d99723fdd0cd68e80bf876eca57e2cdfa5a2a968f937c5a8cb88e57350fa168f07ea18349b7291da39e769714074aeae5da76bc64026e6e536ed179dcbf1def99de562382243cf521f41549b291edd8f878c5ed81149d2ed77a080848ae94a236fd9c0e3dc93342e63836b13db6f963bb66dd965fdbc755f3d586548abe0bfdd1a8cc760a56ef654c4cf180761cb4f35da27249b1fff64f73e7cea36f53a6ce6dbeb8a4b37731289577f4046c97611a965c3ee07a291f6df709161a631de366ad44fb65d982d6fbdae862cfe615233f30d2a8305900488a09f5fcba7fb51e225177cabb55da0bde467c050f2220b8f95a8d7083deb1abe836ed392a8d8de5c0e853d71d7b41a0548ab5f38f1672ba2d431d29f7e99b15af5aebd0ba4b08f730d508b52a60d68b7b6fb6aef6027a819fb3749eb403fdcb329a2979fbc06acabe1534a013b1f34a33bb1f6d8ecf13710e86001261eda200c033706f17e9b748a21d815fcdefb463c052490cd5a1a03c8e28cb4f2ea9774508731bece5e7f2b23538daaf65f3bf3ca3bd52740298703fa123fa1f3bb2e819d040d3fc2d918779db893f3ec8a6d6f66f250c3285a2ae9386a4f12dfe8d84751ae42f351f1c42bf9e0e0bbaf937d0503ec3a5e03f2e82e57ce306ce877b996b65ea01cf89025b5efd35c817a0055ad208fcc59f6d94e96c16053d3e0748d8a9ad0e24396907994f3b3e3b4eccf1eb39dcca2e8bf024fe600e1d073570e275613f44bddb1ad38e7d09655b600db561ffe4cce2049c97564a25f6201df9bda6740195d8ba2875a0d4fe22d3281a3c03fa1e9ce46a19a6ea13521533990472886c48a6b32003486cfcbea7f93fef6dc331817fbadf3a6ecb8542fc4817ee616b0ef078e1a042e543092c0cca4e98e5d295e9a7e9b201ed31dd9710af971468612e8f118fcc51c2b55fd87f791da260eedd3bc4551dafbf7f6072544f2dc0dc4305ceea2e147b333650ca8341ff6ac7c0c75b521be073d515a57a04eca11ad5ff25441349fa6afd3a80b724af7dd8dd6afeb8b2dc8245a5b74ebb9fa712c89ffca946efcb690fc13bb8d9d5bee2f27e79003e240328a60169b3e6977d1cc8f6115830e5e148ef0d07650e52196d0ef2b8703c27a68cc12ff7ceaedb0e8bb90efeec08d9c89c8451b5799c9dc0dc72d3c885bb7e9ae8dc482e992f8b935607cbe8eb300cd50ef8a68caafba6ed51144512dcf7fe99423675039940dcd0f1298b83728b6c50742a4266fc5a4bb17278c5ece67ea727d8a3bc67e2bca0ab7f5196b1052f1221e5726bb7f0f2ccb1c34807b395eaae7f1d9b6433c3e6d892da0a4561af10ac336d066607217ef4b31d1d7440035717f704b61b70c57995d36fa9e20cc93b763f00c866874bde54b45295da11a2e396884c92da3ddba3b244eb2fc1f73a3e8cae0914cd1f93d8fbde70b89f966ccf5222500bbd55c25ccb03bc6f77f494e46d5a2244e8c008c1f152765498464f1bd6c5207771f384481421a0e8a75e1e5b3ef6308f1d8df40477f3ae9113e006e9ce7936316dbdcc7edadcc7244a7c7693e0b704f0759869d76ada6048f204c4b65f98c633f6079ac803db5e3489a75121b4d9b416c5f30dff9c3cdea78b8a673e6d71ed0c818c8cf27b68aa2f1e3aed7c57624f4d4391650590c9c5bb5590d0a1137d3a8b5d7f09062665b535d174fc3b9dcf82660861f26ae0188248ce76e22fcb8b6ddbd1eb4a1ec60ba27f8883307c39b839e9fa259cd243e46c557c77f670252941edfa431f5c8decc8baf708a0b47262d90f473a155b1cd0e64b1d9e33fe94aa5ec8932e91e728289e4cfca46456fe669d84420d1f469dca6e83303f50e7004ecdf85a8e3b0dae936c4c54be8a6365d0301eb1f1aba9f891fa7e52a617d037c03cd5466c4994ac8abc4e8ebd26f6b43788f76d2597a13dbcce469e4bba9a97085d0559297f015587a256594a35aa97a787d43b5b15ede170ea50edfae378c7409be30e94a2e80d27f6eca5779341060af63fc1fa2929b257db7ef8a3f56c163f3f987bddc0f199e7d190a440c1dc772275e117077baff37879fb47ad6bfad4e006f86aa2a2cf3ad1420dcb41014f7f40b5af42ce4695cf3884686b6f02d8a3115bf650dde23d7dc236030681a709910a9cada5ea36eb0d5134d06e8cf34f3390fe3e420a20eeedf7db2baccdafe03201b0c5d0b5ac869a4645128d00fc7b4d021db9f40786b5190d735090f97ac7260016347fa66d90c10028465df6a221ecb1630a5b8d945eeee3c0bb768de5a37f41d409f5d94544721c425ce4fa8d78190543454c2f8262a4f92b463b323028f5b94d46c662ea7053cbdb3b9da9660b6fb81ff8c8bfa42a0e815891af0b56216ff7d0b871039919dcbcb909ccac6061ba3d3b63fc8e7903057a7c25fb6e37d5231b30b431e4b52bcbf92fc39569f620753d556ce8b2cf7e8b51ac03a299ce1fd388f7cceb77a13e0b1978cd9833806fc16d4c363ccec0c2fd7a68a2a259eb5a3af35e9f87b5e27206427e8b93d623ba87cc96f92caef05d50c38605446ac7911fb6f606a0357501076f3fa9a18ffc7a6ba0dd82b11ad372913dc5ce96bd7c353487eb17de90d9ca9a8662efc8876a9ff068ed10789f02fa7c8abb1f4ffdaa1483c6c0aa4571e9b12ed42fde59a98c794dde0a683787c16d6c10693f0048508bdfb68985536c751f2d127d5c858b1a3076c3b1a8d4026f9804bf172ffa270ccbdc9fd7d1ea73699cbc09ffab38c6dc8de1accd1724ba9745a3980a47c7f2a315994234a889942fb6bfd4c01a71b609cede81208adeb0e50ab26e50880eca138ec8fc1190c8fe9fb0ef75a299fe861296606f6c05618d60af6601051e452b748779b7ac0e3166f87219d8f9604698c5029a798bda7c48a67b59d7d322cc55b39adcfdadad01a75ee4d6cabfceb3b0649c7125ae61a84204b0d3497d0beba3df7cbb21501f50f7afa3ab16a5313d99952047907d3cf5c0ce578cd08969716f90fcaa8d1592fbae8a104cb15b29ac424ddea4810403b5665fd7a80900dcac0889be7bfea3da1de40d5cb4b223f63ffdc49e8dfc707e8dd9228f2ca1630e56005240308df7314e419231992d0675269c49f87d40aa335f7fd157807dc475391d6a5ccfb6b6c2f169fe0a61e6f5ef42546bbc1adc8781d80bf7d4b0eb1bfb4da1deff882cc7e7ecc82139d68ea9ed3274d68247e7f5d9506c29ad32480752a554a7818e3127dd09faa73c6b200bd2cba58d2ec4b41ba99daa6afeed95fef4cf7d6ee91dca2ebcbf32737275889b698bc27528d83269965fd026e93682ce616782d0382569f19ad94a8110c94c17153f6b12a0ea07588dee10baad1e14b8488b28f3d013a62f05f1d733d59a0a5c1d40942a17c840864241eb0cdbd4d2b69f9473d36c949b88a5392a676647e8b2a26ba983f55f598154f5f1569f997a80bab4bc33f92679144f0f67a4bc158f912b95c1a043a91e9d6fd0513c0fbb544d5573d1b0ccbe3debf0a44930ff2caf5b1e1fc596b73ad91eee49b2d76b1bca26f63893e04a73a462daee4d2b25e72e48a18767d155c23ad49ce95c6125f8eebea3153e40b3221eb9df4db909e5b731f33f1882e2892e5b484c98a13f4bd57667d3c46eba2671f85da43dcc612ad3aeb070aad84c4d6a3d540c6ca43c25e0c511a9339e513e25e9c23194ff81155fd81ccde7791831a7916f522839f9e811ce6a5c40b3f28b57961689f3e683d3861775fee1502b8d499f80ac4d98538cac6d2d2872f32f071476ed87eaa0d0e2a693a06950f80f459142fd30e83ddb3ab0c4f39e464a263e17af79d14ca59402b53fabbe534add7a89a4b50910ddbf308d9ef8039b26bd4ad0beb0981e5b6188c0167df998c0af554ec341a0560420d8092c8b0827a98412b6deb43bd2570f8b1d3fc165f3fd316e47e322f0b410dc57c64b3c9ea1d9a801e2ba6b23de7b8dfb53ff63e4405e37bdf3cd51185e1f1089627ba72d5c82deb23fe41e39b697aba132cb65aa27302ad503f97a35b035a11115eeaafd1189d7d479322540d58ddd13b48ab2431e0a2199251ac3139ebdadb35d662ac1228ffba762cf6f784ccf7664081da03502cde2b640723fb3345de47069850b447c4f3a4857775b3fdfc10bc91548d6b8ebe81c07397e0c4d58108a066475f508ec203134ae83ddd67a694da486c8d9320958eb10466f3c67e20652b2166d8736e7461af021b9a9a7e143b2593be9bb3897c63d868a5700f2842a37365b76b6116d6b2c44f1d7687acbbd6a67c0bccff7b1aa9fe36b3732a92c29f6a9059ef9752226f658e75c33325858cdf1e75877d25f421d512080293b741b8a494fa055d6b5f12bf5fbdebdf6618e1f3d38be9ac7f2f33a198b5dd268eb8e02c66c58c19d3d087a9e7965d36882db5a89405e8f3164e2df9a0e4ecf0e9c36b3d601722ec8825fbe44b7dff911cca7a264e551a6434304182903aa1c08198c1b4cdb70f065a4bdf454af9d177c809687b71e19f5b61dc89da486ab83c8e41ce6eb8e26f20a573c2641f1fcafa04cda26e9df8142dd820451d9c61dd6051074525f73f1251ae6fbe442a65df9304d66dad9ca8b6c698712d46390a166f74035cf5fc768112e2cc6cd52fd78dfea92550dddc9fce0070a7db1be86ef0851b8a6f81b2bb45a1542d7e9b693e4097e4ec12babe8b15c4dbfffa180fc9d66430f17895b90df5b12f81d8ced10d1194897d6a44b5fcd9aed9765467ab93c7f14fa82662869c4c6c1707606f0f74099a4bffb1a20062dbeb49b6e76c2829b5688795f3321d47cfd310b0ce4c2547a71ad8a2a3206d664566e26b91cb11109f85730dd3105df8d7e02c522b6580e21e3d29fc42e4d17401a1896cf92f74d2ad2c7b222a79da6c8170740f49d16d7abec5956c22f9b75416a101578d54c5cb40f4e5efa8e83500a42646c7dacb4a9369623d487d95a7d142727e8c9b224b5e5102e8d32d7435fd5d0e9b8c15a2bdbece146b84bfee5a79e21fc1649ce07d009c637fb1c5b7253be05cc283cb25f4264c683bb064b7ee305e6636d2de82f26cf4ceb85a173421970e74394d9f0c23aa5444886c270c5444c17f3d936a4164511c39e73ce0c00c116df0758c4a9385122b74bd165e927e438bb786b0f5a71272aeac5cdb5a41fbfffa2e0db91c75d1eb5cdaee147511a794c4e5d73285d04427eb5e6c9157381a72b3b0c5f51af1790cfff59e6501a69c37a5471f6003b42b6e08acf60a28b9aa6d8de5720116d0b5d219355a20cace8fb35fa7bea1f8fac65a6ba898f0a98300da30aec6fd3bc8d2b55c6dcf6015e73d5f64d866985a7af5ec53eafaff0d4b4cb6d79cbe5dc1d62c1cc6291c415eaf55d548cedb25566e0d75fb4c6629f368d0b99a978393d8bbf0480aa121121063af3959b87d17a15787d1869d6f70d66be70091fcd5f51708e8c1f009a525f7b3dcd86d96f55683d8064a19d847d5621372d567a44baa688a18f24fb56f380abd6fca21dea840982302759736ff2ca8015db3f4efe5054c6ed5630a93886f9618cd11b4c62e07d12c3fb85f8ddc56aa2e1f9d55e467bff166ed55cc64dbc6d60d34e4118d272a6cb685410e3f9dc4d79842e893bc5e8fcf033824f8549ca7ac392c7658d7ac697d3efa7b4a90db4d52d8064f8670588cee1e326d65444b3c1116f94641230a58c85ce9623adf7ba27063e0154f813a820deb5d04298dd74dd3eecf5e586109a77d46a8c949314b46cb290be745ccce24f6c3d8cc3b80b88913aaccf76aabef10f89e77413cf080ca0a5564535fa08047d2ebeae133b3e5ed067e3d297310896117525749d4d8dcc29a2da139d6f9230b093186c46e755cf7c3bc9d54f52918d88ae59ab555bf7734ef2ff94016f45263669c594eddc2e753d49641bc2a3bb2c3884ecbda21c2edafa3b7bfdb95fe13bd0404c693fcd7f9f352fe72e11c9377c1f165b7f99fa391bc96e22e92d4870961bdf1d8b0b5bb55fc5745ebde901a7d5426e175d6d1553ff6f9a82916a46690b8df5f2a475628a5405f0a7ccb355da2ee6d32461dcbd1e5a2643b89acf71718255a4169e957d9347d590c9b855c5ee13e46294965a11f9800078e4c5d43da7210882318b1fe935216054aec6b9ef46ec71fbd2e4464d481521c14850d9621a92ae9cb43c3af0c50a6b147a4c92bb648eac2c8c84edc3eb2e338532514c6316e4b47337f1d72e12a3b71f002fa08b21e897916b78210d49f4060947637ec88cce1847b2da55676d187989e595308940c03caee7ddfdc4d33bdbfbb96e3b90020d9cc6100bbd3c6e8d55380901d728b5497951a4ed06c44ad6c16d5d3da85583de05c1a57f7befedbac79f6ac40717cc7a194c0776fe7b4d7fe0db509d0be852fc9b30c44806a59b4c60fb6c9edecc26e61e50f0779d5227f5f7e7ea7d2bf9d1da4454a9802829798cbbf992f9b2a2e3184dbef826828f59e0c059be53f31badeb0317e5e31ba4dc7443924049524e033ef4f72ae5352c9e0b4ee1b8a72dbe7815ce5422a8398b010a269056ac620908a6177d33d8e931aaec10a915cf44a564846c62fdce1ccb37c96c1f7a18d75cfd8db81f00cb84ebe27e5647dd748b6d6d7155d51d2e302d95da2fb3d8be0e3db99b57ffbcc5aa5e740dbecfce1b8f398dbeeefb5dfb193b23a4a3bfce509f43261483c13bae594b099730304ca771695965dc91beebd45b94c6128a43ad8f3ae20c8c5f6dfadb72623cacc6346c334d3e03e4dee0f5522df18bc845f61340c7148a8087ed676435809687dcf925fdbf08f7266aba2f441cf25d25de15fb466376f0f1a0d3437b624443fadde3bf422339fff76b49048137ee1f551e17a8559bf0f0591b7553f86ea34b0ec624aa8fbc5a9133e79c9f48bf81a4fcf6ae6cfd08ec5ee9f3b6fe6657e6274ddf2a261dd48c5e4a2d1bc9557d79807dd9616b9433b948e700f858e0154b384151e44f557e7d0510eaaa1fb4ba0c43d2050e9664d159de6d27b9647c7842b79c7704b22128cf68380c3bf6b66f68df22391c61d7f4c73aeb7a7f4abe046a5629d6101ab3b527db88bab312dc6beec0b6315fec329352f0f64709e0f81e509bd05aeec2751c09fb543e3ac262498bdcc6925b65f5740d7ab2cbbcdeb92668cd8782b331a342d4b1519193aaa4d3c3d6cf91ddd04eb3088149cb58c0f48ff3b3cb831bbe51c9427cb297204e33681c0ce365a2ebd70f9d524bfee1477fcfb7cffaa5bc2291a7978b201e647cf894ba04477b640377b6a278e2235e39f270b5788be673d965cee331b29273df27dfe3a121dfd8dcc901edda1c43539e58af5d3ada3c2d5586421fbd5fcde313fdbd8a8fca819b379d58bd72fd3ad0e04c53c65b248bac3b55dce628338fd0f3f07d826948f32466bc2acfe7e56be42528615c7889370861073b78339ce8499c15f6ced775a4eee777b143e0fa888638febfea440894a5eb599f04a8c514763a0d8ef9804ea918fcff2fb761fa1004e420d75749ac95adeb9e8333fb750fc6d51addca0b8c55d25274ca5758728c3fecf5ae6af3061c384f3aa718e51307b72d1c8855053e0e30abf934d6cfdc1f92fcc096a5c9d217d2d638161282312bf33474715b8014f1b9fceaa53118130d85c9b1792b42e141a062c27fadc9e29c53a356e4ceda56a1e1ba3ddcbfd4d285d6ef416c23de", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b0"], 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 02:05:00 executing program 4: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={&(0x7f0000000080)='./file1\x00'}, 0x10) 02:05:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:00 executing program 3: socketpair(0x1, 0x4, 0x8004, &(0x7f0000000080)) 02:05:00 executing program 5: syz_mount_image$erofs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10000c2, &(0x7f0000000180)={'trans=unix,', {[{@version_9p2000}, {@noextend}, {@version_L}], [{@appraise}]}}) 02:05:00 executing program 4: bpf$MAP_CREATE(0x1e, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 02:05:00 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 2218.043865][T31236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2218.147896][T31236] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:00 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003680)={0x15, 0x2, &(0x7f0000003400)=@raw=[@cb_func], &(0x7f0000003480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:05:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 02:05:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:00 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 02:05:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 02:05:00 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003680)={0x1e, 0x2, &(0x7f0000003400)=@raw=[@cb_func], &(0x7f0000003480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:05:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) 02:05:01 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000200)={'tunl0\x00', 0x0}) 02:05:01 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) [ 2219.064107][T31258] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2219.100874][T31258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="f8000000", @ANYRES16, @ANYBLOB="01"], 0x1f8}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {0x3}, [@SEG6_ATTR_SECRETLEN={0x5}]}, 0x1c}}, 0x0) 02:05:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="11000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 02:05:01 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 02:05:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0xf, 0x0, &(0x7f0000000380)) 02:05:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0xfffffffffffffcc7}}, 0x0) 02:05:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x2060, 0x0, 0x0) 02:05:01 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8905, &(0x7f0000000000)) 02:05:02 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002500)={0x14, 0x14, 0x1}, 0x14}}, 0x0) 02:05:02 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8922, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[]}) [ 2219.995208][T31280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) [ 2220.049335][T31280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x48}}, 0x0) 02:05:02 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x894b, &(0x7f0000000000)) 02:05:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 02:05:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:02 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003680)={0x19, 0x2, &(0x7f0000003400)=@raw=[@cb_func], &(0x7f0000003480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:05:02 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0x38, 0x0, &(0x7f0000000380)) 02:05:02 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r0, &(0x7f0000000380)=@nfc, 0x80) 02:05:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8001, 0x7, 0x404}, 0x48) 02:05:03 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8943, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) [ 2220.889947][T31302] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="f8010000", @ANYRES16, @ANYBLOB="01"], 0x1f8}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 2220.999941][T31302] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x48}}, 0x0) 02:05:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@ipv6_deladdr={0x18}, 0x18}, 0x300}, 0x0) 02:05:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:03 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x401c5820, &(0x7f0000000040)={'sit0\x00', 0x0}) 02:05:03 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, &(0x7f0000000000)) 02:05:03 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8912, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 02:05:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@ipv6_deladdr={0x18}, 0xa}}, 0x0) 02:05:03 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8921, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) [ 2221.776695][T31319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2221.867261][T31319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="f8010000", @ANYRES16, @ANYBLOB="01"], 0x1f8}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000fa01"], 0x28}}, 0x0) 02:05:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x2}, 0x48) 02:05:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 02:05:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000200), 0x4) 02:05:04 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8924, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 02:05:04 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, 0x0) 02:05:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="224e165a5f05a78a9901e6fa70708f98818e1eb73547e247062ea80ef9fb1d4c00c7eef91c30a3c715cb70985414bddfabcde6d4f2b005c8426acbafa167266386dc9583557869424cabfe368f7ffb067824110ac04ffe24af333b737be82a32366b", 0x62}, {&(0x7f00000000c0)="b8cfb66bb07caccaf59e6663439e11d621caa7ab79d27cf4e75db5a8c352e091b40eab1623fb35ab5cce33e2bc1c9988b779149c5483751a86b02ec2bfd63c831f8e71c26b17b3a46cbc9c199d3c781ded40bfeb4dc34993d549e4287eb532d90f420bc91504be8b3c85cab025b1ea4f6ad0c394d7548938bbf47df216de19505ccd14975f09e87438398812ec71484adcf47c607556bbf1243b73601cb174ddadcd82", 0xa3}, {&(0x7f0000000180)="e9e7aca577403ce0aaeff223abc85e46eeafe48540e16a035fd665eb68ad77fbbd934a47bb15b695c3f7317ccc911eb2e089676f7bec54104ae33bf565e13b0260b5e33198e2b0d0c9d2ee897b64aa84b8e2ee6aaf871dfc4199248a51ed83c19f82de0bbd51b7946d5c90afab4fb6fb47f723bd9d4815cd2d2e8a92f8b3fd0f458db284fcd146da92e25d7feaaf227c2fb0172630f251b4759dca6eddeb5cab4faece107a1b415140736256f918a601c7cf49fe6b43bc5765b3917674454bb2173b0c3428bf5f455597342a785e3781a5fa54cb1ec2728ae3dcc8ad72dbad466301caa6d730", 0xe6}, {&(0x7f0000000280)="fece55e7b0aad6319fd65595c4800b850b33d90935f3c8c8e4dd84fbedf9d05b02becdf9427644179d35fe3da6fe295d8c5178a9144fe242", 0x38}, {&(0x7f00000002c0)="333f793dce02e5f9b68effd19492781a633cc19e0d147867dc29d85cffd778bad9361fe97d613d628a2d20d8efddf24654e6f80b2fce7a78237d4aa4f4287286eb3ea5d532897c6b907f9592ba9ba02a0b843fb1b09dff58c476c04e505cb403696a2fe9bfde3453d4627eacb0adb3160ad867c92f0b4ca0cb96ad580bafac1e9e54035c75c49cef1e1026cf2737d90047e6dac1f5f84219c2aa9453ccbc", 0x9e}], 0x5}}, {{&(0x7f0000000740)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32], 0xc0}}], 0x2, 0x0) 02:05:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) 02:05:05 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89a0, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 02:05:05 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8931, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 02:05:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:05 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x80c1) 02:05:05 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x20000004) 02:05:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x7}]}}, &(0x7f00000001c0)=""/234, 0x26, 0xea, 0x1}, 0x20) 02:05:05 executing program 2: bpf$MAP_CREATE(0x1d, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 02:05:05 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003680)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000060000000000000018200000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000003480)='GPL\x00', 0x2, 0xf6, &(0x7f00000034c0)=""/246, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:05:05 executing program 5: socketpair(0x29, 0x2, 0x0, &(0x7f0000000140)) 02:05:05 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003680)={0x12, 0x2, &(0x7f0000003400)=@raw=[@cb_func], &(0x7f0000003480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2223.549457][T31361] __nla_validate_parse: 3 callbacks suppressed [ 2223.549524][T31361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:05 executing program 4: bpf$MAP_CREATE(0x9, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 2223.658619][T31363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:06 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8947, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 02:05:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}}], 0x2, 0x0) 02:05:06 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003680)={0x8, 0x2, &(0x7f0000003400)=@raw=[@cb_func], &(0x7f0000003480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:05:06 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) select(0x40, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={0x8}, 0x0) 02:05:06 executing program 4: bpf$MAP_CREATE(0x23, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 02:05:06 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) [ 2224.339022][T31377] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2224.455318][T31377] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:06 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000200), &(0x7f0000000280)=0x4) 02:05:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xf, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:05:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={0x0}}, 0x4041) 02:05:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x5865}, 0x0) 02:05:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:07 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) bind$can_raw(r0, 0x0, 0x7) 02:05:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0x0, "9e4b86"}) 02:05:07 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'gre0\x00', &(0x7f0000001700)=ANY=[]}) 02:05:07 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private1, @empty, 0x11}}) 02:05:07 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0xd, 0x0, &(0x7f0000000380)) [ 2225.324463][T31400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5b1ff6b56c433453081e67"], 0x28}}, 0x0) [ 2225.398614][T31402] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}}, 0x0) 02:05:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x2, 0x4}, 0x48) 02:05:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0) 02:05:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8010000", @ANYRES16, @ANYBLOB="11"], 0x1f8}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, r1, 0x1, 0x0, 0x0, {0x3}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}}, 0x0) [ 2225.850011][T31412] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2225.858910][T31412] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 02:05:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@ipv6_deladdr={0x48, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x48}}, 0x0) 02:05:08 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0xe, 0x0, &(0x7f0000000380)) [ 2226.187101][T31420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x14, r1, 0x1}, 0x14}}, 0x0) select(0x40, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={0x8}, 0x0) 02:05:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000900)={&(0x7f0000000380), 0x8, &(0x7f00000008c0)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) [ 2226.272549][T31420] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2226.358865][T31423] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 02:05:08 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) 02:05:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01"], 0x1c}}, 0x0) 02:05:08 executing program 5: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}) 02:05:08 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x18, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:05:09 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, 0x0) [ 2226.920700][T31434] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 2226.959269][T31434] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2227.046356][T31436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:09 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb701, 0x0) 02:05:09 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10}, 0x7ffff000}}, 0x0) 02:05:09 executing program 4: bpf$MAP_CREATE(0x14, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 02:05:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x17, 0x0, 0xc73c, 0x7ff, 0x0, 0x1, 0x7}, 0x48) 02:05:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:09 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) 02:05:09 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0x3b, 0x0, &(0x7f0000000380)) 02:05:10 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x2, 0x0, 0x0) 02:05:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x2c}}, 0x0) 02:05:10 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0x2d, 0x0, &(0x7f0000000380)) 02:05:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:10 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$NS_GET_OWNER_UID(r0, 0x40049409, 0x0) 02:05:10 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000380)) 02:05:10 executing program 5: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0xc0189436, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@empty, @dev}}) 02:05:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0x3e, 0x0, &(0x7f0000000380)) [ 2228.821270][T31470] __nla_validate_parse: 4 callbacks suppressed [ 2228.821334][T31470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2228.938046][T31473] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="f8010000", @ANYRES16, @ANYBLOB="01"], 0x1f8}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x3, @private1={0xfc, 0x9}}]}, 0x28}}, 0x0) 02:05:11 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb702, 0x0) 02:05:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0xa8}]}, 0x1c}}, 0x0) 02:05:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x14) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x48}}, 0x0) 02:05:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0xfffffffe}, 0x48) 02:05:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@ipv6_deladdr={0x17, 0x15, 0x1}, 0x18}}, 0x0) 02:05:11 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0x3d, 0x0, &(0x7f0000000380)) [ 2229.674709][T31486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2229.787360][T31486] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:12 executing program 2: socketpair(0x23, 0x0, 0x2, &(0x7f0000000140)) 02:05:12 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 02:05:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) [ 2230.043079][T31492] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 02:05:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001380)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 02:05:12 executing program 3: socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) 02:05:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09002bbd7000ffdbdfb8030000004c0002"], 0x60}}, 0x0) 02:05:12 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 02:05:12 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0x541b, 0x0) [ 2230.576125][T31502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2230.689981][T31502] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:12 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb703, 0x0) 02:05:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x0, "9e4b86", 0x20}) 02:05:13 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0x2a, 0x0, &(0x7f0000000380)) 02:05:13 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0x12, 0x0, &(0x7f0000000380)) 02:05:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00\'']}) 02:05:13 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0x23, 0x0, &(0x7f0000000380)) 02:05:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = getpid() sendmmsg$unix(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}}], 0x1, 0x0) 02:05:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="f8010000", @ANYRES16, @ANYBLOB="01"], 0x1f8}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 02:05:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf2503000000080003"], 0x48}}, 0x0) [ 2231.540029][T31525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2231.592095][T31528] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:13 executing program 4: bpf$MAP_CREATE(0x3, 0x0, 0xae) 02:05:14 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) write$binfmt_script(r0, 0x0, 0x0) 02:05:14 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x4, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xe3) [ 2231.936433][T31535] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 02:05:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$sock(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) 02:05:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:14 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 02:05:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a0, &(0x7f0000000040)={0x3, 0x0, "9e4b86", 0x20}) 02:05:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x17, 0x81, 0x0, 0x7ff, 0x0, 0x1}, 0x48) 02:05:14 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8937, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) [ 2232.427251][T31545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:14 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@empty, @dev}}) 02:05:14 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0x2e, 0x0, &(0x7f0000000380)) 02:05:14 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10}, 0x33fe0}}, 0x0) 02:05:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:15 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 02:05:15 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8971, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 02:05:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="f8010000", @ANYRES16, @ANYBLOB="01"], 0x1f8}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x2, @private1={0xfc, 0x9}}]}, 0x28}}, 0x0) 02:05:15 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8932, &(0x7f0000000000)) [ 2233.202046][ T3572] Bluetooth: hci3: command 0x0401 tx timeout 02:05:15 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8927, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 02:05:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 02:05:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0x3, 0x0, &(0x7f0000000380)) [ 2233.441038][T31569] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 02:05:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="f8010000", @ANYRES16, @ANYBLOB="01"], 0x1f8}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) 02:05:15 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0x24, 0x0, &(0x7f0000000380)) 02:05:15 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, &(0x7f0000000000)=""/176, 0x3c, 0x0, 0x0, 0x0) 02:05:16 executing program 1: r0 = socket(0x11, 0x3, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1008, 0x0, 0x0) 02:05:16 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2234.070905][T31583] __nla_validate_parse: 3 callbacks suppressed [ 2234.070970][T31583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:16 executing program 4: syz_emit_ethernet(0x22, &(0x7f0000000140)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 02:05:16 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1ffffffffffff}) [ 2234.179792][T31586] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:16 executing program 2: r0 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000000)=0x191, 0x4) 02:05:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:16 executing program 1: r0 = socket(0x2, 0x2, 0x0) readv(r0, &(0x7f0000000500)=[{0x0}], 0x1) 02:05:16 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x0) 02:05:16 executing program 5: r0 = socket(0x18, 0x2, 0x0) setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 02:05:16 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$unix(r1, 0x0, 0x0) 02:05:17 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) close(r1) setsockopt$inet_opts(r1, 0x0, 0x0, 0x0, 0x0) 02:05:17 executing program 5: r0 = socket(0x18, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:05:17 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) [ 2235.096867][T31607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:17 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x5}, &(0x7f00000000c0)={0xa}, 0x0) 02:05:17 executing program 4: socket(0x11, 0x3, 0xfc) [ 2235.179254][T31607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:17 executing program 3: syz_emit_ethernet(0x66, &(0x7f00000000c0)={@broadcast, @local, @val, {@ipv6}}, 0x0) 02:05:17 executing program 5: r0 = socket(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 02:05:17 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup(r0) 02:05:17 executing program 1: r0 = socket(0x11, 0x3, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/139, 0x8b}], 0x1) connect$inet6(r0, &(0x7f0000000340)={0x18}, 0xc) 02:05:18 executing program 4: truncate(&(0x7f0000000280)='.\x00', 0x0) 02:05:18 executing program 3: select(0x40, &(0x7f0000000000)={0x3}, &(0x7f0000000080)={0x5}, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x80000001}, 0x0, 0x0, 0x0) [ 2236.032226][T31627] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2236.111421][T31632] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:18 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0x6) 02:05:18 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000540)) 02:05:18 executing program 4: r0 = socket(0x18, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001180)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0}, 0x0) 02:05:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:18 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001600)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000001480)=[@cred, @cred], 0x40}, 0x0) 02:05:18 executing program 5: bind$unix(0xffffffffffffff9c, 0x0, 0x0) 02:05:18 executing program 4: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @local, @val, {@ipv4}}, 0x0) 02:05:19 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = getuid() fchown(r0, r1, 0xffffffffffffffff) 02:05:19 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000003c0)=0x9) 02:05:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000200)=[@cred], 0x20}, 0x0) [ 2236.980655][T31646] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2237.028175][T31646] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:19 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x0) 02:05:19 executing program 4: r0 = socket(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1, 0x0, 0x0) 02:05:19 executing program 2: socket$inet6(0x18, 0x0, 0x20) 02:05:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:19 executing program 1: r0 = socket(0x18, 0x2, 0x0) recvfrom(r0, &(0x7f0000000080)=""/4096, 0x1000, 0x0, 0x0, 0x0) 02:05:19 executing program 3: r0 = socket(0x18, 0x2, 0x0) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 02:05:19 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x4) 02:05:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="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", 0x801}], 0x1}, 0x0) 02:05:20 executing program 2: fchmodat(0xffffffffffffffff, 0x0, 0x0) 02:05:20 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000140)={@random="f1dbc404ab63", @empty, @val, {@ipv6}}, 0x0) [ 2237.959452][T31669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2238.010483][T31671] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f0000000340)) 02:05:20 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000000080)={@random="cdfc905c4d3a", @remote, @val, {@generic={0x8035}}}, 0x0) 02:05:20 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) close(r1) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 02:05:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:20 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) fchdir(r1) 02:05:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 02:05:20 executing program 3: ioperm(0x0, 0x9, 0x8000) 02:05:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}}, 0x0) 02:05:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001400)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 02:05:21 executing program 2: syz_io_uring_setup(0x6233, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xa2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:05:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001400)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201}], {0x14}}, 0x70}}, 0x0) 02:05:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000f00)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000) 02:05:21 executing program 4: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00') 02:05:21 executing program 5: openat$dir(0xffffffffffffff9c, 0x0, 0x400000, 0x0) 02:05:21 executing program 2: syz_io_uring_setup(0x6124, &(0x7f0000000140)={0x0, 0xa360, 0x8, 0x1, 0x58}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 02:05:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x0, 0x9, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) [ 2239.612574][T31710] __nla_validate_parse: 2 callbacks suppressed [ 2239.612640][T31710] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:21 executing program 3: syz_io_uring_setup(0x4280, &(0x7f00000001c0)={0x0, 0x0, 0x31}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 02:05:21 executing program 5: clock_adjtime(0x0, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 2239.688954][T31712] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:21 executing program 4: rt_sigaction(0xb, &(0x7f0000000140)={&(0x7f0000000000)="c4c2c50229c4225516eac481437d0366410fe913c4c119f5820000010042d0569e6566420feced670fdb2065440faef4470fdfe3", 0x0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000240)) 02:05:22 executing program 2: setgroups(0x3, &(0x7f0000000200)=[0x0, 0x0, 0xee00]) 02:05:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:22 executing program 3: modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) 02:05:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x0, 0x9, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) 02:05:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 02:05:22 executing program 5: socketpair(0x26, 0x0, 0x0, &(0x7f00000008c0)) 02:05:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x2c, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT={0x8}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x2c}}, 0x0) [ 2240.407736][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 2240.414463][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 [ 2240.499679][T31727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2240.535197][T31727] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x0, 0xb1f7684a51c47c8d}, 0x14}}, 0x0) 02:05:22 executing program 5: syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x40) 02:05:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x401, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0xc}, [@NFTA_TABLE_USERDATA={0x5, 0x6, "85"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x1, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) 02:05:23 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:05:23 executing program 4: mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}) 02:05:23 executing program 5: bpf$MAP_CREATE(0xa, &(0x7f0000001540), 0x48) [ 2241.295773][T31747] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x2, 0x2, 0x3}, 0x14}}, 0x0) 02:05:23 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 02:05:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x38}}, 0x0) [ 2241.407318][T31747] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:23 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 02:05:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x0, 0x9, 0x801}, 0x14}}, 0x0) [ 2241.779708][T31757] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 02:05:24 executing program 2: fspick(0xffffffffffffffff, 0x0, 0x8f194c347a1abd0e) 02:05:24 executing program 3: socketpair(0xa, 0x5, 0x0, &(0x7f0000000480)) 02:05:24 executing program 4: r0 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000002c0)='sync\x00', 0x0, 0x0) 02:05:24 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x20000001) [ 2242.109769][T31763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2242.123446][T31763] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:24 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000022c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)=""/221, 0x1a, 0xdd, 0x1}, 0x20) 02:05:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x58}}, 0x0) 02:05:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:24 executing program 4: socketpair(0x2, 0x0, 0x7fff, &(0x7f0000000000)) 02:05:24 executing program 1: bpf$MAP_CREATE(0xd, &(0x7f0000001540), 0x48) 02:05:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) 02:05:25 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)) 02:05:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1) [ 2242.947308][T31783] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2243.010548][T31783] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x10}, 0x48) 02:05:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0xe}, 0x48) 02:05:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0xd}, 0x48) 02:05:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:25 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x400aac0, 0x0) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 02:05:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1) 02:05:25 executing program 2: bpf$BPF_BTF_LOAD(0x2, &(0x7f0000000d80)={&(0x7f0000000c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 02:05:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x16}, 0x48) 02:05:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x17, 0xa, 0x101}, 0x14}}, 0x0) 02:05:26 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x400aac0, 0x0) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 02:05:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1) 02:05:26 executing program 2: syz_open_dev$usbmon(&(0x7f0000000880), 0x0, 0x0) 02:05:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:26 executing program 4: fsopen(&(0x7f0000000780)='efivarfs\x00', 0x0) 02:05:26 executing program 1: socketpair(0x10, 0x0, 0x10000002, &(0x7f0000000000)) 02:05:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1) 02:05:26 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x400aac0, 0x0) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 02:05:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) 02:05:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, 0x38}}, 0x0) 02:05:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:27 executing program 4: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) 02:05:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000cc0), 0x0, 0x20c001) 02:05:27 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x400aac0, 0x0) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 2245.064333][T31835] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:05:27 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0) 02:05:27 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2a4c0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/msg\x00', 0x0, 0x0) 02:05:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x890b, &(0x7f0000000200)={'sit0\x00', 0x0}) [ 2245.447476][T31843] __nla_validate_parse: 4 callbacks suppressed [ 2245.447538][T31843] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:27 executing program 3: syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000012c0), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001400), r0) socket$nl_generic(0x10, 0x3, 0x10) [ 2245.544853][T31848] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:27 executing program 5: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000b40), 0x241180, 0x0) 02:05:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x4, 0x8, 0x5a5a, 0xa, 0x1}, 0x48) 02:05:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0x5, 0x5a5a}, 0x48) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) 02:05:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:28 executing program 4: sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x0) pipe2$watch_queue(&(0x7f0000002a40), 0x80) 02:05:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) pipe(&(0x7f00000002c0)) 02:05:28 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000001540)) [ 2246.298809][T31863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000a80), 0x8) [ 2246.392101][T31863] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:28 executing program 1: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000003c0)={[{@dmode={'dmode', 0x3d, 0xffffffff}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}) 02:05:28 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @generic="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"}}, 0x825) 02:05:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:29 executing program 5: syz_emit_ethernet(0x66, &(0x7f00000010c0)={@link_local, @link_local, @val={@void}, {@ipv4={0x800, @tcp={{0x10, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @remote, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @rr={0x7, 0x1b, 0x0, [@loopback, @loopback, @broadcast, @dev, @broadcast, @dev]}, @ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 02:05:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) 02:05:29 executing program 1: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000003c0)={[{@dmode={'dmode', 0x3d, 0xffffffff}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}) [ 2247.214862][T31880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2247.275838][T31881] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:32 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 02:05:32 executing program 3: syz_mount_image$hfsplus(0x0, 0x0, 0x0, 0x1, &(0x7f0000004340)=[{&(0x7f0000003340)="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", 0x1000}], 0x0, 0x0) 02:05:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 02:05:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003980)=[{0x0}, {0x0, 0x210}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 02:05:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:32 executing program 1: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000003c0)={[{@dmode={'dmode', 0x3d, 0xffffffff}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}) [ 2249.944125][T31894] loop3: detected capacity change from 0 to 8 [ 2250.003456][T31898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:32 executing program 3: timer_create(0x5, &(0x7f0000001080)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) [ 2250.089016][T31898] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2250.098506][ T2848] Dev loop3: unable to read RDB block 8 [ 2250.098654][ T2848] loop3: unable to read partition table [ 2250.099524][ T2848] loop3: partition table beyond EOD, truncated 02:05:32 executing program 4: bpf$MAP_CREATE(0x6, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 02:05:32 executing program 5: syz_clone(0x8e040100, 0x0, 0x0, 0x0, 0x0, 0x0) 02:05:32 executing program 1: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000003c0)={[{@dmode={'dmode', 0x3d, 0xffffffff}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}) 02:05:32 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 02:05:32 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559"}, 0x28) 02:05:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, '-)%\x00'}]}, 0x1c}}, 0x0) 02:05:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x3, 0x0, 0x0, 0x0, @empty, @private}}}}) 02:05:33 executing program 2: openat$vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 02:05:33 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x0, 0x12, 0x0, &(0x7f0000000040)) 02:05:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000a00), &(0x7f0000000a40)='./file1\x00', 0x0, 0x2, &(0x7f0000001c00)=[{0x0, 0x0, 0x59e5}, {&(0x7f0000000b80)="690b17c2be5430c78d060c38bf", 0xd, 0x2}], 0x0, &(0x7f0000001c80)) 02:05:33 executing program 4: nanosleep(&(0x7f0000000080)={0x0, 0x989680}, 0x0) 02:05:33 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000000)={0x0, "77051a3a127778acc194cc19c966f0d8273aea4c77d77c83f94085909c09686fb168dda7d74b34bcf80077be4d660b9996e794285d446d1ddfc190236b38c17a70c6211fdb749d42b6fd2407ce0a8699361d3cecbe074eedd5fe1ca3ba1c0ccb73defc98af4c75d4baa604ff7c17b2e9c8e7152c942ced96d8e2a2f5c439231d"}) 02:05:33 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000001580)=@null) 02:05:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002a40)={&(0x7f0000000300)={0xa, 0x4e24, 0x0, @loopback, 0x2f7}, 0x1c, 0x0, 0x0, &(0x7f0000002880)=[@hoplimit={{0x14}}], 0x18}, 0x845) [ 2251.803444][T31928] loop3: detected capacity change from 0 to 89 02:05:34 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) 02:05:34 executing program 1: r0 = msgget(0x0, 0x311) msgctl$IPC_RMID(r0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x1}, 0x8, 0x0) [ 2251.992352][T31928] FAT-fs (loop3): bogus number of FAT structure [ 2251.998894][T31928] FAT-fs (loop3): Can't find a valid FAT filesystem 02:05:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x36) 02:05:34 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="15000000e5ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xe) getgid() setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f00000001c0)=ANY=[], 0x1f3a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r3, 0x0) [ 2252.173472][T31935] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:34 executing program 3: socket(0x1e, 0x0, 0x5) [ 2252.316042][T31935] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:05:34 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0]) 02:05:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ae40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) 02:05:34 executing program 1: syz_mount_image$exfat(0x0, 0x0, 0x0, 0x3d, &(0x7f0000000000)=[{&(0x7f00000000c0)="b0a5bbb5174365c7c85dcc8360e9668c698962178a4a8c34177c7467b0197f18937459a7d37ffbe3ce2024b101848ae63c31f9c61925010a449e449c90de1861f6d0c021fd9a7b3325560518ed0856a265c8fd1743c5cb214cc7fe4679f64d88806a295a7caa29def6853c100b938c6e17118809e4aab65e3263ce6970ac073f46ce1b19ec9e3ebad0b308fb7bb0ae8a0177ef03fd139f9c085f80573a3b14a0e65ec58bb5d9a8a2cd581e49acbeac00d402e7bf", 0xb4, 0x5}], 0x2000000, 0x0) 02:05:34 executing program 3: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 02:05:35 executing program 5: prctl$PR_SET_MM(0x8, 0x6, &(0x7f0000ffd000/0x2000)=nil) [ 2252.857456][T31945] ===================================================== [ 2252.864919][T31945] BUG: KMSAN: uninit-value in p9_client_write+0xb23/0xee0 [ 2252.873253][T31945] p9_client_write+0xb23/0xee0 [ 2252.878185][T31945] v9fs_fid_xattr_set+0x201/0x3a0 [ 2252.883575][T31945] v9fs_xattr_handler_set+0xf8/0x170 [ 2252.890173][T31945] __vfs_setxattr+0x671/0x770 [ 2252.895174][T31945] __vfs_setxattr_noperm+0x24d/0xa40 [ 2252.900604][T31945] __vfs_setxattr_locked+0x43c/0x470 [ 2252.906496][T31945] vfs_setxattr+0x2a1/0x680 [ 2252.911152][T31945] setxattr+0x560/0x5d0 [ 2252.915658][T31945] path_setxattr+0x202/0x3f0 [ 2252.920399][T31945] __ia32_sys_setxattr+0xf0/0x170 [ 2252.925725][T31945] __do_fast_syscall_32+0xa2/0x100 [ 2252.934875][T31945] do_fast_syscall_32+0x33/0x70 [ 2252.940259][T31945] do_SYSENTER_32+0x1b/0x20 [ 2252.945020][T31945] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2252.951511][T31945] [ 2252.954050][T31945] Uninit was created at: [ 2252.958507][T31945] kmem_cache_alloc_trace+0x69e/0xdf0 [ 2252.964182][T31945] p9_fid_create+0x5e/0x400 [ 2252.968852][T31945] p9_client_walk+0xdc/0xdb0 [ 2252.973715][T31945] v9fs_fid_xattr_set+0xf9/0x3a0 [ 2252.978813][T31945] v9fs_xattr_handler_set+0xf8/0x170 [ 2252.984395][T31945] __vfs_setxattr+0x671/0x770 [ 2252.989233][T31945] __vfs_setxattr_noperm+0x24d/0xa40 [ 2252.994802][T31945] __vfs_setxattr_locked+0x43c/0x470 [ 2253.000251][T31945] vfs_setxattr+0x2a1/0x680 [ 2253.005020][T31945] setxattr+0x560/0x5d0 [ 2253.009448][T31945] path_setxattr+0x202/0x3f0 [ 2253.014340][T31945] __ia32_sys_setxattr+0xf0/0x170 [ 2253.019513][T31945] __do_fast_syscall_32+0xa2/0x100 [ 2253.024911][T31945] do_fast_syscall_32+0x33/0x70 [ 2253.029931][T31945] do_SYSENTER_32+0x1b/0x20 [ 2253.034666][T31945] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2253.041172][T31945] [ 2253.043652][T31945] CPU: 0 PID: 31945 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2253.054079][T31945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2253.064409][T31945] ===================================================== [ 2253.071429][T31945] Disabling lock debugging due to kernel taint [ 2253.077833][T31945] Kernel panic - not syncing: kmsan.panic set ... [ 2253.084364][T31945] CPU: 0 PID: 31945 Comm: syz-executor.2 Tainted: G B 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2253.096052][T31945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2253.106211][T31945] Call Trace: [ 2253.109558][T31945] [ 2253.112559][T31945] dump_stack_lvl+0x1c8/0x256 [ 2253.117425][T31945] dump_stack+0x1a/0x1c [ 2253.121744][T31945] panic+0x4d3/0xc69 [ 2253.125801][T31945] kmsan_report+0x2cc/0x2d0 [ 2253.130450][T31945] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2253.136841][T31945] ? __msan_warning+0x92/0x110 [ 2253.141731][T31945] ? p9_client_write+0xb23/0xee0 [ 2253.146816][T31945] ? v9fs_fid_xattr_set+0x201/0x3a0 [ 2253.152163][T31945] ? v9fs_xattr_handler_set+0xf8/0x170 [ 2253.157773][T31945] ? __vfs_setxattr+0x671/0x770 [ 2253.162749][T31945] ? __vfs_setxattr_noperm+0x24d/0xa40 [ 2253.168336][T31945] ? __vfs_setxattr_locked+0x43c/0x470 [ 2253.173925][T31945] ? vfs_setxattr+0x2a1/0x680 [ 2253.178720][T31945] ? setxattr+0x560/0x5d0 [ 2253.183173][T31945] ? path_setxattr+0x202/0x3f0 [ 2253.188062][T31945] ? __ia32_sys_setxattr+0xf0/0x170 [ 2253.193391][T31945] ? __do_fast_syscall_32+0xa2/0x100 [ 2253.198800][T31945] ? do_fast_syscall_32+0x33/0x70 [ 2253.203941][T31945] ? do_SYSENTER_32+0x1b/0x20 [ 2253.208733][T31945] ? entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2253.215379][T31945] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2253.221339][T31945] ? preempt_count_sub+0x7d/0x280 [ 2253.226582][T31945] ? _raw_spin_unlock_irqrestore+0x34/0x50 [ 2253.232549][T31945] ? __stack_depot_save+0x38d/0x4b0 [ 2253.237894][T31945] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2253.244287][T31945] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2253.250254][T31945] __msan_warning+0x92/0x110 [ 2253.255024][T31945] p9_client_write+0xb23/0xee0 [ 2253.259990][T31945] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2253.265998][T31945] v9fs_fid_xattr_set+0x201/0x3a0 [ 2253.271202][T31945] v9fs_xattr_handler_set+0xf8/0x170 [ 2253.276646][T31945] ? v9fs_xattr_handler_get+0x170/0x170 [ 2253.282394][T31945] __vfs_setxattr+0x671/0x770 [ 2253.287247][T31945] __vfs_setxattr_noperm+0x24d/0xa40 [ 2253.292693][T31945] __vfs_setxattr_locked+0x43c/0x470 [ 2253.298137][T31945] vfs_setxattr+0x2a1/0x680 [ 2253.302801][T31945] setxattr+0x560/0x5d0 [ 2253.307101][T31945] ? preempt_count_sub+0x7d/0x280 [ 2253.312281][T31945] ? __mnt_want_write+0x262/0x350 [ 2253.317480][T31945] ? __mnt_want_write+0x300/0x350 [ 2253.322674][T31945] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2253.328638][T31945] path_setxattr+0x202/0x3f0 [ 2253.333381][T31945] __ia32_sys_setxattr+0xf0/0x170 [ 2253.338555][T31945] __do_fast_syscall_32+0xa2/0x100 [ 2253.343798][T31945] ? exit_to_user_mode_prepare+0x119/0x220 [ 2253.349754][T31945] do_fast_syscall_32+0x33/0x70 [ 2253.354745][T31945] do_SYSENTER_32+0x1b/0x20 [ 2253.359384][T31945] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2253.365872][T31945] RIP: 0023:0xf7fd2549 [ 2253.370036][T31945] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2253.389803][T31945] RSP: 002b:00000000f7fcd5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 2253.398352][T31945] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00000000200001c0 [ 2253.406448][T31945] RDX: 00000000200001c0 RSI: 0000000000001f3a RDI: 0000000000000000 [ 2253.414520][T31945] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2253.422591][T31945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2253.430664][T31945] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2253.438749][T31945] [ 2253.441993][T31945] Kernel Offset: disabled [ 2253.446369][T31945] Rebooting in 86400 seconds..