0x113/0x450 [ 432.406061][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 432.412501][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 432.417679][ T7104] do_fast_syscall_32+0x33/0x70 [ 432.422731][ T7104] do_SYSENTER_32+0x1b/0x20 [ 432.427348][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 432.433958][ T7104] [ 432.436326][ T7104] Uninit was stored to memory at: [ 432.441454][ T7104] get_compat_msghdr+0x4fc/0x720 [ 432.446607][ T7104] ___sys_recvmsg+0x18c/0x840 [ 432.451389][ T7104] do_recvmmsg+0x682/0x1180 [ 432.456099][ T7104] __sys_recvmmsg+0x113/0x450 [ 432.460895][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 432.467364][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 432.472652][ T7104] do_fast_syscall_32+0x33/0x70 [ 432.477561][ T7104] do_SYSENTER_32+0x1b/0x20 [ 432.482265][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 432.488784][ T7104] [ 432.491150][ T7104] Local variable msg_sys created at: [ 432.496582][ T7104] do_recvmmsg+0x5c/0x1180 [ 432.501110][ T7104] __sys_recvmmsg+0x113/0x450 [ 432.679642][ T7104] not chained 230000 origins [ 432.684422][ T7104] CPU: 1 PID: 7104 Comm: syz-executor.5 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 432.694922][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 432.705063][ T7104] Call Trace: [ 432.708405][ T7104] [ 432.711391][ T7104] dump_stack_lvl+0x1c8/0x256 [ 432.716175][ T7104] dump_stack+0x1a/0x1c [ 432.720421][ T7104] kmsan_internal_chain_origin+0x78/0x120 [ 432.726254][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 432.732212][ T7104] ? ____sys_recvmsg+0x5c1/0x810 [ 432.737223][ T7104] ? ___sys_recvmsg+0x217/0x840 [ 432.742162][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 432.748135][ T7104] ? ____sys_recvmsg+0x5c1/0x810 [ 432.753143][ T7104] ? kfree+0x44/0x980 [ 432.757191][ T7104] ? ___sys_recvmsg+0x248/0x840 [ 432.762145][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 432.768106][ T7104] ? get_compat_msghdr+0x51/0x720 [ 432.773241][ T7104] ? ___sys_recvmsg+0x18c/0x840 [ 432.778170][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 432.784103][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 432.790064][ T7104] ? should_fail+0x3f/0x810 [ 432.794664][ T7104] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 432.801014][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 432.806929][ T7104] __msan_chain_origin+0xbd/0x140 [ 432.812083][ T7104] get_compat_msghdr+0x4fc/0x720 [ 432.817105][ T7104] ___sys_recvmsg+0x18c/0x840 [ 432.821883][ T7104] ? __stack_depot_save+0x21/0x4b0 [ 432.827154][ T7104] ? kmsan_internal_check_memory+0x94/0x530 [ 432.833206][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 432.839181][ T7104] do_recvmmsg+0x682/0x1180 [ 432.843808][ T7104] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 432.850366][ T7104] __sys_recvmmsg+0x113/0x450 [ 432.855117][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 432.861443][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 432.866645][ T7104] ? exit_to_user_mode_prepare+0x119/0x220 [ 432.872581][ T7104] do_fast_syscall_32+0x33/0x70 [ 432.877505][ T7104] do_SYSENTER_32+0x1b/0x20 [ 432.882090][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 432.888596][ T7104] RIP: 0023:0xf7f13549 [ 432.892709][ T7104] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 432.912414][ T7104] RSP: 002b:00000000f7eed5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 432.920912][ T7104] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 432.928940][ T7104] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 432.936962][ T7104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 432.944999][ T7104] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 432.953051][ T7104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.961100][ T7104] [ 432.965910][ T7104] Uninit was stored to memory at: [ 432.971113][ T7104] get_compat_msghdr+0x4fc/0x720 [ 432.976248][ T7104] ___sys_recvmsg+0x18c/0x840 [ 432.981058][ T7104] do_recvmmsg+0x682/0x1180 [ 432.985754][ T7104] __sys_recvmmsg+0x113/0x450 [ 432.990547][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 432.997004][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 433.002312][ T7104] do_fast_syscall_32+0x33/0x70 [ 433.007284][ T7104] do_SYSENTER_32+0x1b/0x20 [ 433.011973][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 433.018467][ T7104] [ 433.020815][ T7104] Uninit was stored to memory at: [ 433.026060][ T7104] get_compat_msghdr+0x4fc/0x720 [ 433.031103][ T7104] ___sys_recvmsg+0x18c/0x840 [ 433.035934][ T7104] do_recvmmsg+0x682/0x1180 [ 433.040535][ T7104] __sys_recvmmsg+0x113/0x450 [ 433.045417][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 433.051865][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 433.057094][ T7104] do_fast_syscall_32+0x33/0x70 [ 433.062173][ T7104] do_SYSENTER_32+0x1b/0x20 [ 433.066775][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 433.073339][ T7104] [ 433.075725][ T7104] Uninit was stored to memory at: [ 433.080861][ T7104] get_compat_msghdr+0x4fc/0x720 [ 433.085952][ T7104] ___sys_recvmsg+0x18c/0x840 [ 433.090730][ T7104] do_recvmmsg+0x682/0x1180 [ 433.095405][ T7104] __sys_recvmmsg+0x113/0x450 [ 433.100189][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 433.106601][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 433.111904][ T7104] do_fast_syscall_32+0x33/0x70 [ 433.116859][ T7104] do_SYSENTER_32+0x1b/0x20 [ 433.121419][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 433.127959][ T7104] [ 433.130327][ T7104] Uninit was stored to memory at: [ 433.135601][ T7104] get_compat_msghdr+0x4fc/0x720 [ 433.140644][ T7104] ___sys_recvmsg+0x18c/0x840 [ 433.145479][ T7104] do_recvmmsg+0x682/0x1180 [ 433.150083][ T7104] __sys_recvmmsg+0x113/0x450 [ 433.154969][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 433.161335][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 433.166643][ T7104] do_fast_syscall_32+0x33/0x70 [ 433.171595][ T7104] do_SYSENTER_32+0x1b/0x20 [ 433.176257][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 433.182832][ T7104] [ 433.185195][ T7104] Uninit was stored to memory at: [ 433.190312][ T7104] get_compat_msghdr+0x4fc/0x720 [ 433.195414][ T7104] ___sys_recvmsg+0x18c/0x840 [ 433.200194][ T7104] do_recvmmsg+0x682/0x1180 [ 433.204892][ T7104] __sys_recvmmsg+0x113/0x450 [ 433.209669][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 433.216084][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 433.221302][ T7104] do_fast_syscall_32+0x33/0x70 [ 433.226333][ T7104] do_SYSENTER_32+0x1b/0x20 [ 433.230955][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 433.237485][ T7104] [ 433.239855][ T7104] Uninit was stored to memory at: [ 433.245114][ T7104] get_compat_msghdr+0x4fc/0x720 [ 433.250155][ T7104] ___sys_recvmsg+0x18c/0x840 [ 433.255024][ T7104] do_recvmmsg+0x682/0x1180 [ 433.259624][ T7104] __sys_recvmmsg+0x113/0x450 [ 433.264497][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 433.270878][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 433.276187][ T7104] do_fast_syscall_32+0x33/0x70 [ 433.281139][ T7104] do_SYSENTER_32+0x1b/0x20 [ 433.285796][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 433.292374][ T7104] [ 433.294754][ T7104] Uninit was stored to memory at: [ 433.299890][ T7104] get_compat_msghdr+0x4fc/0x720 [ 433.305023][ T7104] ___sys_recvmsg+0x18c/0x840 [ 433.309803][ T7104] do_recvmmsg+0x682/0x1180 [ 433.314500][ T7104] __sys_recvmmsg+0x113/0x450 [ 433.319287][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 433.325706][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 433.330943][ T7104] do_fast_syscall_32+0x33/0x70 [ 433.335959][ T7104] do_SYSENTER_32+0x1b/0x20 [ 433.340565][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 433.347093][ T7104] [ 433.349462][ T7104] Local variable msg_sys created at: [ 433.354913][ T7104] do_recvmmsg+0x5c/0x1180 [ 433.359429][ T7104] __sys_recvmmsg+0x113/0x450 [ 433.563250][ T7104] not chained 240000 origins [ 433.567931][ T7104] CPU: 0 PID: 7104 Comm: syz-executor.5 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 433.578331][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 433.588466][ T7104] Call Trace: [ 433.591791][ T7104] [ 433.594752][ T7104] dump_stack_lvl+0x1c8/0x256 [ 433.599527][ T7104] dump_stack+0x1a/0x1c [ 433.603759][ T7104] kmsan_internal_chain_origin+0x78/0x120 [ 433.609588][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 433.615507][ T7104] ? ____sys_recvmsg+0x5c1/0x810 [ 433.620569][ T7104] ? ___sys_recvmsg+0x217/0x840 [ 433.625539][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 433.631503][ T7104] ? ____sys_recvmsg+0x5c1/0x810 [ 433.636558][ T7104] ? kfree+0x44/0x980 [ 433.640644][ T7104] ? ___sys_recvmsg+0x248/0x840 [ 433.645560][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 433.651456][ T7104] ? get_compat_msghdr+0x51/0x720 [ 433.656545][ T7104] ? ___sys_recvmsg+0x18c/0x840 [ 433.661459][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 433.667382][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 433.673335][ T7104] ? should_fail+0x3f/0x810 [ 433.677932][ T7104] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 433.684265][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 433.690162][ T7104] __msan_chain_origin+0xbd/0x140 [ 433.695288][ T7104] get_compat_msghdr+0x4fc/0x720 [ 433.700326][ T7104] ___sys_recvmsg+0x18c/0x840 [ 433.705079][ T7104] ? __stack_depot_save+0x21/0x4b0 [ 433.710282][ T7104] ? kmsan_internal_check_memory+0x94/0x530 [ 433.716288][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 433.722240][ T7104] do_recvmmsg+0x682/0x1180 [ 433.726854][ T7104] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 433.733351][ T7104] __sys_recvmmsg+0x113/0x450 [ 433.738104][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 433.744443][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 433.749640][ T7104] ? exit_to_user_mode_prepare+0x119/0x220 [ 433.755542][ T7104] do_fast_syscall_32+0x33/0x70 [ 433.760455][ T7104] do_SYSENTER_32+0x1b/0x20 [ 433.765035][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 433.771536][ T7104] RIP: 0023:0xf7f13549 [ 433.775688][ T7104] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 433.795429][ T7104] RSP: 002b:00000000f7eed5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 433.803911][ T7104] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 433.811956][ T7104] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 433.820009][ T7104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.828026][ T7104] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 433.836045][ T7104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 433.844081][ T7104] [ 433.847601][ T7104] Uninit was stored to memory at: [ 433.852919][ T7104] get_compat_msghdr+0x4fc/0x720 [ 433.857984][ T7104] ___sys_recvmsg+0x18c/0x840 [ 433.862904][ T7104] do_recvmmsg+0x682/0x1180 [ 433.867525][ T7104] __sys_recvmmsg+0x113/0x450 [ 433.872422][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 433.878806][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 433.884296][ T7104] do_fast_syscall_32+0x33/0x70 [ 433.889263][ T7104] do_SYSENTER_32+0x1b/0x20 [ 433.893973][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 433.900478][ T7104] [ 433.903089][ T7104] Uninit was stored to memory at: [ 433.908281][ T7104] get_compat_msghdr+0x4fc/0x720 [ 433.913434][ T7104] ___sys_recvmsg+0x18c/0x840 [ 433.918213][ T7104] do_recvmmsg+0x682/0x1180 [ 433.922906][ T7104] __sys_recvmmsg+0x113/0x450 [ 433.927686][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 433.934219][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 433.939439][ T7104] do_fast_syscall_32+0x33/0x70 [ 433.944489][ T7104] do_SYSENTER_32+0x1b/0x20 [ 433.949095][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 433.955660][ T7104] [ 433.958030][ T7104] Uninit was stored to memory at: [ 433.963373][ T7104] get_compat_msghdr+0x4fc/0x720 [ 433.968432][ T7104] ___sys_recvmsg+0x18c/0x840 [ 433.973326][ T7104] do_recvmmsg+0x682/0x1180 [ 433.977931][ T7104] __sys_recvmmsg+0x113/0x450 [ 433.982842][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 433.989208][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 433.994593][ T7104] do_fast_syscall_32+0x33/0x70 [ 433.999544][ T7104] do_SYSENTER_32+0x1b/0x20 [ 434.004294][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 434.010801][ T7104] [ 434.013481][ T7104] Uninit was stored to memory at: [ 434.018676][ T7104] get_compat_msghdr+0x4fc/0x720 [ 434.023879][ T7104] ___sys_recvmsg+0x18c/0x840 [ 434.028671][ T7104] do_recvmmsg+0x682/0x1180 [ 434.033449][ T7104] __sys_recvmmsg+0x113/0x450 [ 434.038224][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 434.044733][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 434.049952][ T7104] do_fast_syscall_32+0x33/0x70 [ 434.055015][ T7104] do_SYSENTER_32+0x1b/0x20 [ 434.059617][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 434.066187][ T7104] [ 434.068557][ T7104] Uninit was stored to memory at: [ 434.073865][ T7104] get_compat_msghdr+0x4fc/0x720 [ 434.078907][ T7104] ___sys_recvmsg+0x18c/0x840 [ 434.083834][ T7104] do_recvmmsg+0x682/0x1180 [ 434.088441][ T7104] __sys_recvmmsg+0x113/0x450 [ 434.093320][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 434.099693][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 434.105050][ T7104] do_fast_syscall_32+0x33/0x70 [ 434.110021][ T7104] do_SYSENTER_32+0x1b/0x20 [ 434.114828][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 434.121321][ T7104] [ 434.123845][ T7104] Uninit was stored to memory at: [ 434.129040][ T7104] get_compat_msghdr+0x4fc/0x720 [ 434.134244][ T7104] ___sys_recvmsg+0x18c/0x840 [ 434.139040][ T7104] do_recvmmsg+0x682/0x1180 [ 434.143833][ T7104] __sys_recvmmsg+0x113/0x450 [ 434.148631][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 434.155125][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 434.160347][ T7104] do_fast_syscall_32+0x33/0x70 [ 434.165491][ T7104] do_SYSENTER_32+0x1b/0x20 [ 434.170093][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 434.176750][ T7104] [ 434.179118][ T7104] Uninit was stored to memory at: [ 434.184442][ T7104] get_compat_msghdr+0x4fc/0x720 [ 434.189485][ T7104] ___sys_recvmsg+0x18c/0x840 [ 434.194373][ T7104] do_recvmmsg+0x682/0x1180 [ 434.198980][ T7104] __sys_recvmmsg+0x113/0x450 [ 434.203850][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 434.210219][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 434.215553][ T7104] do_fast_syscall_32+0x33/0x70 [ 434.220508][ T7104] do_SYSENTER_32+0x1b/0x20 [ 434.225212][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 434.231851][ T7104] [ 434.234237][ T7104] Local variable msg_sys created at: [ 434.239581][ T7104] do_recvmmsg+0x5c/0x1180 [ 434.244275][ T7104] __sys_recvmmsg+0x113/0x450 [ 434.408049][ T7104] not chained 250000 origins [ 434.412877][ T7104] CPU: 0 PID: 7104 Comm: syz-executor.5 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 434.423317][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 434.433423][ T7104] Call Trace: [ 434.436735][ T7104] [ 434.439706][ T7104] dump_stack_lvl+0x1c8/0x256 [ 434.444496][ T7104] dump_stack+0x1a/0x1c [ 434.448741][ T7104] kmsan_internal_chain_origin+0x78/0x120 [ 434.454553][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 434.460452][ T7104] ? ____sys_recvmsg+0x5c1/0x810 [ 434.465454][ T7104] ? ___sys_recvmsg+0x217/0x840 [ 434.470367][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 434.476286][ T7104] ? ____sys_recvmsg+0x5c1/0x810 [ 434.481348][ T7104] ? kfree+0x44/0x980 [ 434.485446][ T7104] ? ___sys_recvmsg+0x248/0x840 [ 434.490403][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 434.496303][ T7104] ? get_compat_msghdr+0x51/0x720 [ 434.501398][ T7104] ? ___sys_recvmsg+0x18c/0x840 [ 434.506314][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 434.512217][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 434.518125][ T7104] ? should_fail+0x3f/0x810 [ 434.522767][ T7104] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 434.529188][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 434.535161][ T7104] __msan_chain_origin+0xbd/0x140 [ 434.540318][ T7104] get_compat_msghdr+0x4fc/0x720 [ 434.545356][ T7104] ___sys_recvmsg+0x18c/0x840 [ 434.550146][ T7104] ? __stack_depot_save+0x21/0x4b0 [ 434.555400][ T7104] ? kmsan_internal_check_memory+0x94/0x530 [ 434.561385][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 434.567283][ T7104] do_recvmmsg+0x682/0x1180 [ 434.571911][ T7104] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 434.578473][ T7104] __sys_recvmmsg+0x113/0x450 [ 434.583279][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 434.589684][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 434.594909][ T7104] ? exit_to_user_mode_prepare+0x119/0x220 [ 434.600796][ T7104] do_fast_syscall_32+0x33/0x70 [ 434.605815][ T7104] do_SYSENTER_32+0x1b/0x20 [ 434.610402][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 434.616891][ T7104] RIP: 0023:0xf7f13549 [ 434.621005][ T7104] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 434.640694][ T7104] RSP: 002b:00000000f7eed5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 434.649181][ T7104] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 434.657204][ T7104] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 434.665241][ T7104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.673311][ T7104] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 434.681387][ T7104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 434.689456][ T7104] [ 434.692891][ T7104] Uninit was stored to memory at: [ 434.698094][ T7104] get_compat_msghdr+0x4fc/0x720 [ 434.703287][ T7104] ___sys_recvmsg+0x18c/0x840 [ 434.708089][ T7104] do_recvmmsg+0x682/0x1180 [ 434.712819][ T7104] __sys_recvmmsg+0x113/0x450 [ 434.717615][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 434.724136][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 434.729359][ T7104] do_fast_syscall_32+0x33/0x70 [ 434.734411][ T7104] do_SYSENTER_32+0x1b/0x20 [ 434.739016][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 434.745619][ T7104] [ 434.748001][ T7104] Uninit was stored to memory at: [ 434.753386][ T7104] get_compat_msghdr+0x4fc/0x720 [ 434.758442][ T7104] ___sys_recvmsg+0x18c/0x840 [ 434.763322][ T7104] do_recvmmsg+0x682/0x1180 [ 434.767929][ T7104] __sys_recvmmsg+0x113/0x450 [ 434.772785][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 434.779153][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 434.784505][ T7104] do_fast_syscall_32+0x33/0x70 [ 434.789457][ T7104] do_SYSENTER_32+0x1b/0x20 [ 434.794189][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 434.800698][ T7104] [ 434.803225][ T7104] Uninit was stored to memory at: [ 434.808415][ T7104] get_compat_msghdr+0x4fc/0x720 [ 434.813876][ T7104] ___sys_recvmsg+0x18c/0x840 [ 434.818671][ T7104] do_recvmmsg+0x682/0x1180 [ 434.823414][ T7104] __sys_recvmmsg+0x113/0x450 [ 434.828204][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 434.834720][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 434.839954][ T7104] do_fast_syscall_32+0x33/0x70 [ 434.845052][ T7104] do_SYSENTER_32+0x1b/0x20 [ 434.849670][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 434.856283][ T7104] [ 434.858664][ T7104] Uninit was stored to memory at: [ 434.863955][ T7104] get_compat_msghdr+0x4fc/0x720 [ 434.869008][ T7104] ___sys_recvmsg+0x18c/0x840 [ 434.873903][ T7104] do_recvmmsg+0x682/0x1180 [ 434.878518][ T7104] __sys_recvmmsg+0x113/0x450 [ 434.883427][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 434.889812][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 434.895164][ T7104] do_fast_syscall_32+0x33/0x70 [ 434.900129][ T7104] do_SYSENTER_32+0x1b/0x20 [ 434.904880][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 434.911389][ T7104] [ 434.913894][ T7104] Uninit was stored to memory at: [ 434.919108][ T7104] get_compat_msghdr+0x4fc/0x720 [ 434.924278][ T7104] ___sys_recvmsg+0x18c/0x840 [ 434.929071][ T7104] do_recvmmsg+0x682/0x1180 [ 434.933826][ T7104] __sys_recvmmsg+0x113/0x450 [ 434.938615][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 434.945092][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 434.950324][ T7104] do_fast_syscall_32+0x33/0x70 [ 434.955419][ T7104] do_SYSENTER_32+0x1b/0x20 [ 434.960037][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 434.966846][ T7104] [ 434.969225][ T7104] Uninit was stored to memory at: [ 434.974529][ T7104] get_compat_msghdr+0x4fc/0x720 [ 434.979585][ T7104] ___sys_recvmsg+0x18c/0x840 [ 434.984486][ T7104] do_recvmmsg+0x682/0x1180 [ 434.989108][ T7104] __sys_recvmmsg+0x113/0x450 [ 434.994051][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.000438][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 435.005814][ T7104] do_fast_syscall_32+0x33/0x70 [ 435.010782][ T7104] do_SYSENTER_32+0x1b/0x20 [ 435.015575][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 435.022187][ T7104] [ 435.024566][ T7104] Uninit was stored to memory at: [ 435.029750][ T7104] get_compat_msghdr+0x4fc/0x720 [ 435.034971][ T7104] ___sys_recvmsg+0x18c/0x840 [ 435.039768][ T7104] do_recvmmsg+0x682/0x1180 [ 435.044470][ T7104] __sys_recvmmsg+0x113/0x450 [ 435.049266][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.055944][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 435.061177][ T7104] do_fast_syscall_32+0x33/0x70 [ 435.066325][ T7104] do_SYSENTER_32+0x1b/0x20 [ 435.070950][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 435.077571][ T7104] [ 435.079941][ T7104] Local variable msg_sys created at: [ 435.085456][ T7104] do_recvmmsg+0x5c/0x1180 [ 435.089968][ T7104] __sys_recvmmsg+0x113/0x450 [ 435.267727][ T7104] not chained 260000 origins [ 435.272519][ T7104] CPU: 0 PID: 7104 Comm: syz-executor.5 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 435.282920][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 435.293024][ T7104] Call Trace: [ 435.296357][ T7104] [ 435.299325][ T7104] dump_stack_lvl+0x1c8/0x256 [ 435.304106][ T7104] dump_stack+0x1a/0x1c [ 435.308341][ T7104] kmsan_internal_chain_origin+0x78/0x120 [ 435.314173][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 435.320071][ T7104] ? ____sys_recvmsg+0x5c1/0x810 [ 435.325071][ T7104] ? ___sys_recvmsg+0x217/0x840 [ 435.329983][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 435.335894][ T7104] ? ____sys_recvmsg+0x5c1/0x810 [ 435.340953][ T7104] ? kfree+0x44/0x980 [ 435.345038][ T7104] ? ___sys_recvmsg+0x248/0x840 [ 435.350015][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 435.355968][ T7104] ? get_compat_msghdr+0x51/0x720 [ 435.361082][ T7104] ? ___sys_recvmsg+0x18c/0x840 [ 435.366042][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 435.371954][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 435.377869][ T7104] ? should_fail+0x3f/0x810 [ 435.382511][ T7104] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 435.388904][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 435.394807][ T7104] __msan_chain_origin+0xbd/0x140 [ 435.399926][ T7104] get_compat_msghdr+0x4fc/0x720 [ 435.404949][ T7104] ___sys_recvmsg+0x18c/0x840 [ 435.409703][ T7104] ? __stack_depot_save+0x21/0x4b0 [ 435.414929][ T7104] ? kmsan_internal_check_memory+0x94/0x530 [ 435.420932][ T7104] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 435.426831][ T7104] do_recvmmsg+0x682/0x1180 [ 435.431430][ T7104] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.437953][ T7104] __sys_recvmmsg+0x113/0x450 [ 435.442744][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.449073][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 435.454253][ T7104] ? exit_to_user_mode_prepare+0x119/0x220 [ 435.460143][ T7104] do_fast_syscall_32+0x33/0x70 [ 435.465076][ T7104] do_SYSENTER_32+0x1b/0x20 [ 435.469675][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 435.476106][ T7104] RIP: 0023:0xf7f13549 [ 435.480218][ T7104] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 435.499934][ T7104] RSP: 002b:00000000f7eed5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 435.508463][ T7104] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 435.516490][ T7104] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 435.524512][ T7104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 435.532548][ T7104] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 435.540625][ T7104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 435.548718][ T7104] [ 435.553401][ T7104] Uninit was stored to memory at: [ 435.558618][ T7104] get_compat_msghdr+0x4fc/0x720 [ 435.563781][ T7104] ___sys_recvmsg+0x18c/0x840 [ 435.568587][ T7104] do_recvmmsg+0x682/0x1180 [ 435.573301][ T7104] __sys_recvmmsg+0x113/0x450 [ 435.578103][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.584581][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 435.589821][ T7104] do_fast_syscall_32+0x33/0x70 [ 435.594917][ T7104] do_SYSENTER_32+0x1b/0x20 [ 435.599527][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 435.606111][ T7104] [ 435.608496][ T7104] Uninit was stored to memory at: [ 435.613775][ T7104] get_compat_msghdr+0x4fc/0x720 [ 435.618849][ T7104] ___sys_recvmsg+0x18c/0x840 [ 435.623788][ T7104] do_recvmmsg+0x682/0x1180 [ 435.628459][ T7104] __sys_recvmmsg+0x113/0x450 [ 435.633417][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.639810][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 435.645204][ T7104] do_fast_syscall_32+0x33/0x70 [ 435.650185][ T7104] do_SYSENTER_32+0x1b/0x20 [ 435.654877][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 435.661390][ T7104] [ 435.663924][ T7104] Uninit was stored to memory at: [ 435.669079][ T7104] get_compat_msghdr+0x4fc/0x720 [ 435.674239][ T7104] ___sys_recvmsg+0x18c/0x840 [ 435.679019][ T7104] do_recvmmsg+0x682/0x1180 [ 435.683696][ T7104] __sys_recvmmsg+0x113/0x450 [ 435.688478][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.694944][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 435.700166][ T7104] do_fast_syscall_32+0x33/0x70 [ 435.705195][ T7104] do_SYSENTER_32+0x1b/0x20 [ 435.709803][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 435.716395][ T7104] [ 435.718768][ T7104] Uninit was stored to memory at: [ 435.724085][ T7104] get_compat_msghdr+0x4fc/0x720 [ 435.729144][ T7104] ___sys_recvmsg+0x18c/0x840 [ 435.734099][ T7104] do_recvmmsg+0x682/0x1180 [ 435.738711][ T7104] __sys_recvmmsg+0x113/0x450 [ 435.743619][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.749987][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 435.755282][ T7104] do_fast_syscall_32+0x33/0x70 [ 435.760255][ T7104] do_SYSENTER_32+0x1b/0x20 [ 435.764934][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 435.771433][ T7104] [ 435.773943][ T7104] Uninit was stored to memory at: [ 435.779088][ T7104] get_compat_msghdr+0x4fc/0x720 [ 435.784250][ T7104] ___sys_recvmsg+0x18c/0x840 [ 435.789035][ T7104] do_recvmmsg+0x682/0x1180 [ 435.793711][ T7104] __sys_recvmmsg+0x113/0x450 [ 435.798493][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.804976][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 435.810195][ T7104] do_fast_syscall_32+0x33/0x70 [ 435.815237][ T7104] do_SYSENTER_32+0x1b/0x20 [ 435.819863][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 435.826493][ T7104] [ 435.828860][ T7104] Uninit was stored to memory at: [ 435.834163][ T7104] get_compat_msghdr+0x4fc/0x720 [ 435.839205][ T7104] ___sys_recvmsg+0x18c/0x840 [ 435.844100][ T7104] do_recvmmsg+0x682/0x1180 [ 435.848710][ T7104] __sys_recvmmsg+0x113/0x450 [ 435.853603][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.859973][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 435.865321][ T7104] do_fast_syscall_32+0x33/0x70 [ 435.870279][ T7104] do_SYSENTER_32+0x1b/0x20 [ 435.874957][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 435.881618][ T7104] [ 435.884117][ T7104] Uninit was stored to memory at: [ 435.889262][ T7104] get_compat_msghdr+0x4fc/0x720 [ 435.894419][ T7104] ___sys_recvmsg+0x18c/0x840 [ 435.899195][ T7104] do_recvmmsg+0x682/0x1180 [ 435.903865][ T7104] __sys_recvmmsg+0x113/0x450 [ 435.908642][ T7104] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.915119][ T7104] __do_fast_syscall_32+0xa2/0x100 [ 435.920357][ T7104] do_fast_syscall_32+0x33/0x70 [ 435.925434][ T7104] do_SYSENTER_32+0x1b/0x20 [ 435.930054][ T7104] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 435.936634][ T7104] [ 435.939018][ T7104] Local variable msg_sys created at: [ 435.944497][ T7104] do_recvmmsg+0x5c/0x1180 [ 435.949024][ T7104] __sys_recvmmsg+0x113/0x450 07:16:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00cf"], 0x14}}, 0x0) 07:16:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newnexthop={0x18, 0x66, 0x1}, 0x18}}, 0x0) 07:16:16 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000000c0)="e1", 0x1}], 0x2}, 0x40) 07:16:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53", 0x39, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000000140)="ed2500f4655fd2f4655f00000000000004140994666e68b3dfbeb1df8c281d98dd68fba40bee2192cd", 0x29, 0x8c80}, {0x0, 0x0, 0xfffffffffffffffe}], 0x0, &(0x7f0000000040)) 07:16:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000110001000000000000001e1a2ed0c118286c323f2d"], 0x24}}, 0x0) 07:16:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x7fffffff, 0xa01) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) [ 436.181289][ T7134] loop3: detected capacity change from 0 to 264192 07:16:16 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0) 07:16:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x1}, 0x24}}, 0x0) 07:16:16 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x89e0, 0x0) [ 436.275337][ T7134] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 07:16:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x0, 0xb0}, 0x48) 07:16:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000000140)="ed2500f4655fd2f4655f00000000000004140994666e68b3dfbeb1df8c281d98dd68fba40bee2192cd", 0x29, 0x8c80}, {0x0, 0x0, 0xfffffffffffffffe}], 0x0, &(0x7f0000000040)) [ 436.511593][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 07:16:16 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/class/mmc_host', 0x0, 0x0) 07:16:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004a40)=0x2) close(0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000000d67) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000007000000000000000000009500000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) 07:16:16 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) close(r0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) sendfile(r0, r1, 0x0, 0x68f) 07:16:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@gettfilter={0x24, 0x13, 0x1}, 0x24}}, 0x0) 07:16:16 executing program 4: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000380)) [ 436.857786][ T7154] loop3: detected capacity change from 0 to 264192 [ 436.948961][ T7154] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 07:16:17 executing program 5: syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x400, 0x0, 0x25dfdbfb}, 0x14}}, 0x40010) syz_clone(0x2000, 0x0, 0x0, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="8013a6b5de78029aba4d0e41f524601c3697028dee2dfafea3afe34bac0f61a9e6134b502cf7a0b9ad28f4f19ce20402180c5f9c1a004fa407958122c6a30f3fc8201aaef89e00670397ff6a086761955ea139224737d6fa4c1599a2e99d6f9e5f8ad84ef00075e7ea1ce728cd1f4b246c69c8838456345d83bc4a2efe00f348ce5a822cc3b490d917d9d2") 07:16:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000000140)="ed2500f4655fd2f4655f00000000000004140994666e68b3dfbeb1df8c281d98dd68fba40bee2192cd", 0x29, 0x8c80}, {0x0, 0x0, 0xfffffffffffffffe}], 0x0, &(0x7f0000000040)) 07:16:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={0x0, 0x3, &(0x7f0000001240)={&(0x7f0000001a40)=ANY=[@ANYBLOB="1100000012000173"], 0x1c}}, 0x0) [ 437.233888][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:16:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x20008005) 07:16:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x258, 0x0, 0xffffffff, 0x0, 0x258, 0x488, 0x488, 0xffffffff, 0x488, 0x488, 0x5, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'syzkaller1\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@private1, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@dev, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x258}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 437.633486][ T7175] loop3: detected capacity change from 0 to 264192 07:16:17 executing program 5: r0 = socket(0x2, 0x3, 0x8) recvfrom$rxrpc(r0, 0x0, 0x0, 0x60, 0x0, 0x0) [ 437.685296][ T7175] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 07:16:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x1c}}, 0x0) 07:16:17 executing program 4: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, 0x0) [ 438.162720][ T7159] not chained 270000 origins [ 438.167536][ T7159] CPU: 0 PID: 7159 Comm: syz-executor.1 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 438.177988][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 438.188127][ T7159] Call Trace: [ 438.191464][ T7159] [ 438.194456][ T7159] dump_stack_lvl+0x1c8/0x256 [ 438.199288][ T7159] dump_stack+0x1a/0x1c [ 438.203576][ T7159] kmsan_internal_chain_origin+0x78/0x120 [ 438.209442][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 438.215383][ T7159] ? ____sys_recvmsg+0x5c1/0x810 [ 438.220426][ T7159] ? ___sys_recvmsg+0x217/0x840 [ 438.225385][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 438.231330][ T7159] ? ____sys_recvmsg+0x5c1/0x810 [ 438.236375][ T7159] ? kfree+0x44/0x980 [ 438.240451][ T7159] ? ___sys_recvmsg+0x248/0x840 [ 438.245410][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 438.251355][ T7159] ? get_compat_msghdr+0x51/0x720 [ 438.256489][ T7159] ? ___sys_recvmsg+0x18c/0x840 [ 438.261446][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 438.267398][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 438.273351][ T7159] ? should_fail+0x3f/0x810 [ 438.277998][ T7159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 438.284385][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 438.290367][ T7159] __msan_chain_origin+0xbd/0x140 [ 438.295522][ T7159] get_compat_msghdr+0x4fc/0x720 [ 438.300597][ T7159] ___sys_recvmsg+0x18c/0x840 [ 438.305396][ T7159] ? __stack_depot_save+0x21/0x4b0 [ 438.310643][ T7159] ? kmsan_internal_check_memory+0x94/0x530 [ 438.316677][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 438.322642][ T7159] do_recvmmsg+0x682/0x1180 [ 438.327285][ T7159] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.333834][ T7159] __sys_recvmmsg+0x113/0x450 [ 438.338645][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.345036][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 438.350258][ T7159] ? exit_to_user_mode_prepare+0x119/0x220 [ 438.356210][ T7159] do_fast_syscall_32+0x33/0x70 [ 438.361184][ T7159] do_SYSENTER_32+0x1b/0x20 [ 438.365798][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 438.372294][ T7159] RIP: 0023:0xf7ff9549 [ 438.376456][ T7159] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 438.396204][ T7159] RSP: 002b:00000000f7fd35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 438.404735][ T7159] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 438.412806][ T7159] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 438.420873][ T7159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.428937][ T7159] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 438.436995][ T7159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.445160][ T7159] [ 438.449112][ T7159] Uninit was stored to memory at: [ 438.454412][ T7159] get_compat_msghdr+0x4fc/0x720 [ 438.459470][ T7159] ___sys_recvmsg+0x18c/0x840 [ 438.464386][ T7159] do_recvmmsg+0x682/0x1180 [ 438.469028][ T7159] __sys_recvmmsg+0x113/0x450 [ 438.474000][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.480389][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 438.485761][ T7159] do_fast_syscall_32+0x33/0x70 [ 438.490744][ T7159] do_SYSENTER_32+0x1b/0x20 [ 438.495468][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 438.502085][ T7159] [ 438.504471][ T7159] Uninit was stored to memory at: [ 438.509665][ T7159] get_compat_msghdr+0x4fc/0x720 [ 438.514824][ T7159] ___sys_recvmsg+0x18c/0x840 [ 438.519630][ T7159] do_recvmmsg+0x682/0x1180 [ 438.524363][ T7159] __sys_recvmmsg+0x113/0x450 [ 438.529157][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.535838][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 438.541100][ T7159] do_fast_syscall_32+0x33/0x70 [ 438.546227][ T7159] do_SYSENTER_32+0x1b/0x20 [ 438.550857][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 438.557510][ T7159] [ 438.559894][ T7159] Uninit was stored to memory at: [ 438.565288][ T7159] get_compat_msghdr+0x4fc/0x720 [ 438.570362][ T7159] ___sys_recvmsg+0x18c/0x840 [ 438.575299][ T7159] do_recvmmsg+0x682/0x1180 [ 438.579937][ T7159] __sys_recvmmsg+0x113/0x450 [ 438.584852][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.591244][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 438.596581][ T7159] do_fast_syscall_32+0x33/0x70 [ 438.601557][ T7159] do_SYSENTER_32+0x1b/0x20 [ 438.606308][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 438.612960][ T7159] [ 438.615344][ T7159] Uninit was stored to memory at: [ 438.620538][ T7159] get_compat_msghdr+0x4fc/0x720 [ 438.625991][ T7159] ___sys_recvmsg+0x18c/0x840 [ 438.630796][ T7159] do_recvmmsg+0x682/0x1180 [ 438.635541][ T7159] __sys_recvmmsg+0x113/0x450 [ 438.640332][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.646852][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 438.652325][ T7159] do_fast_syscall_32+0x33/0x70 [ 438.657294][ T7159] do_SYSENTER_32+0x1b/0x20 [ 438.662044][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 438.668550][ T7159] [ 438.670958][ T7159] Uninit was stored to memory at: [ 438.676257][ T7159] get_compat_msghdr+0x4fc/0x720 [ 438.681338][ T7159] ___sys_recvmsg+0x18c/0x840 [ 438.686248][ T7159] do_recvmmsg+0x682/0x1180 [ 438.690870][ T7159] __sys_recvmmsg+0x113/0x450 [ 438.695835][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.702368][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 438.707605][ T7159] do_fast_syscall_32+0x33/0x70 [ 438.712792][ T7159] do_SYSENTER_32+0x1b/0x20 [ 438.717426][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 438.724103][ T7159] [ 438.726484][ T7159] Uninit was stored to memory at: [ 438.731866][ T7159] get_compat_msghdr+0x4fc/0x720 [ 438.736934][ T7159] ___sys_recvmsg+0x18c/0x840 [ 438.741884][ T7159] do_recvmmsg+0x682/0x1180 [ 438.746507][ T7159] __sys_recvmmsg+0x113/0x450 [ 438.751299][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.757809][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 438.763185][ T7159] do_fast_syscall_32+0x33/0x70 [ 438.768154][ T7159] do_SYSENTER_32+0x1b/0x20 [ 438.772996][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 438.779512][ T7159] [ 438.782068][ T7159] Uninit was stored to memory at: [ 438.787273][ T7159] get_compat_msghdr+0x4fc/0x720 [ 438.792494][ T7159] ___sys_recvmsg+0x18c/0x840 [ 438.797307][ T7159] do_recvmmsg+0x682/0x1180 [ 438.802102][ T7159] __sys_recvmmsg+0x113/0x450 [ 438.806893][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.813478][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 438.818720][ T7159] do_fast_syscall_32+0x33/0x70 [ 438.823861][ T7159] do_SYSENTER_32+0x1b/0x20 [ 438.828490][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 438.835168][ T7159] [ 438.837555][ T7159] Local variable msg_sys created at: [ 438.843064][ T7159] do_recvmmsg+0x5c/0x1180 [ 438.847593][ T7159] __sys_recvmmsg+0x113/0x450 [ 439.355142][ T7159] not chained 280000 origins [ 439.359847][ T7159] CPU: 1 PID: 7159 Comm: syz-executor.1 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 439.370256][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 439.380369][ T7159] Call Trace: [ 439.383705][ T7159] [ 439.386700][ T7159] dump_stack_lvl+0x1c8/0x256 [ 439.391487][ T7159] dump_stack+0x1a/0x1c [ 439.395728][ T7159] kmsan_internal_chain_origin+0x78/0x120 [ 439.401540][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 439.407439][ T7159] ? ____sys_recvmsg+0x5c1/0x810 [ 439.412503][ T7159] ? ___sys_recvmsg+0x217/0x840 [ 439.417473][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 439.423439][ T7159] ? ____sys_recvmsg+0x5c1/0x810 [ 439.428482][ T7159] ? kfree+0x44/0x980 [ 439.432578][ T7159] ? ___sys_recvmsg+0x248/0x840 [ 439.437534][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 439.443448][ T7159] ? get_compat_msghdr+0x51/0x720 [ 439.448583][ T7159] ? ___sys_recvmsg+0x18c/0x840 [ 439.453518][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 439.459468][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 439.465395][ T7159] ? should_fail+0x3f/0x810 [ 439.470042][ T7159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 439.476379][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 439.482354][ T7159] __msan_chain_origin+0xbd/0x140 [ 439.487510][ T7159] get_compat_msghdr+0x4fc/0x720 [ 439.492558][ T7159] ___sys_recvmsg+0x18c/0x840 [ 439.497348][ T7159] ? __stack_depot_save+0x21/0x4b0 [ 439.502576][ T7159] ? kmsan_internal_check_memory+0x94/0x530 [ 439.508617][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 439.514572][ T7159] do_recvmmsg+0x682/0x1180 [ 439.519162][ T7159] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 439.525681][ T7159] __sys_recvmmsg+0x113/0x450 [ 439.530493][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 439.536874][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 439.542075][ T7159] ? exit_to_user_mode_prepare+0x119/0x220 [ 439.548011][ T7159] do_fast_syscall_32+0x33/0x70 [ 439.552950][ T7159] do_SYSENTER_32+0x1b/0x20 [ 439.557557][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 439.564006][ T7159] RIP: 0023:0xf7ff9549 [ 439.568149][ T7159] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 439.587867][ T7159] RSP: 002b:00000000f7fd35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 439.596374][ T7159] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 439.604489][ T7159] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 439.612559][ T7159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 439.620625][ T7159] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 439.628667][ T7159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 439.636739][ T7159] [ 439.640404][ T7159] Uninit was stored to memory at: [ 439.645680][ T7159] get_compat_msghdr+0x4fc/0x720 [ 439.650734][ T7159] ___sys_recvmsg+0x18c/0x840 [ 439.655596][ T7159] do_recvmmsg+0x682/0x1180 [ 439.660214][ T7159] __sys_recvmmsg+0x113/0x450 [ 439.665105][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 439.671492][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 439.676831][ T7159] do_fast_syscall_32+0x33/0x70 [ 439.681908][ T7159] do_SYSENTER_32+0x1b/0x20 [ 439.686531][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 439.693233][ T7159] [ 439.695619][ T7159] Uninit was stored to memory at: [ 439.700780][ T7159] get_compat_msghdr+0x4fc/0x720 [ 439.705873][ T7159] ___sys_recvmsg+0x18c/0x840 [ 439.710660][ T7159] do_recvmmsg+0x682/0x1180 [ 439.715327][ T7159] __sys_recvmmsg+0x113/0x450 [ 439.720113][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 439.726612][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 439.731934][ T7159] do_fast_syscall_32+0x33/0x70 [ 439.736885][ T7159] do_SYSENTER_32+0x1b/0x20 [ 439.741468][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 439.748035][ T7159] [ 439.750419][ T7159] Uninit was stored to memory at: [ 439.755764][ T7159] get_compat_msghdr+0x4fc/0x720 [ 439.760807][ T7159] ___sys_recvmsg+0x18c/0x840 [ 439.765658][ T7159] do_recvmmsg+0x682/0x1180 [ 439.770279][ T7159] __sys_recvmmsg+0x113/0x450 [ 439.775173][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 439.781558][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 439.786872][ T7159] do_fast_syscall_32+0x33/0x70 [ 439.791952][ T7159] do_SYSENTER_32+0x1b/0x20 [ 439.796572][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 439.803184][ T7159] [ 439.805572][ T7159] Uninit was stored to memory at: [ 439.810711][ T7159] get_compat_msghdr+0x4fc/0x720 [ 439.815888][ T7159] ___sys_recvmsg+0x18c/0x840 [ 439.820668][ T7159] do_recvmmsg+0x682/0x1180 [ 439.825389][ T7159] __sys_recvmmsg+0x113/0x450 [ 439.830192][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 439.836673][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 439.841980][ T7159] do_fast_syscall_32+0x33/0x70 [ 439.846931][ T7159] do_SYSENTER_32+0x1b/0x20 [ 439.851495][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 439.858094][ T7159] [ 439.860465][ T7159] Uninit was stored to memory at: [ 439.865744][ T7159] get_compat_msghdr+0x4fc/0x720 [ 439.870790][ T7159] ___sys_recvmsg+0x18c/0x840 [ 439.875659][ T7159] do_recvmmsg+0x682/0x1180 [ 439.880300][ T7159] __sys_recvmmsg+0x113/0x450 [ 439.885207][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 439.891609][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 439.896972][ T7159] do_fast_syscall_32+0x33/0x70 [ 439.902008][ T7159] do_SYSENTER_32+0x1b/0x20 [ 439.906614][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 439.913165][ T7159] [ 439.915548][ T7159] Uninit was stored to memory at: [ 439.920687][ T7159] get_compat_msghdr+0x4fc/0x720 [ 439.925833][ T7159] ___sys_recvmsg+0x18c/0x840 [ 439.930627][ T7159] do_recvmmsg+0x682/0x1180 [ 439.935441][ T7159] __sys_recvmmsg+0x113/0x450 [ 439.940233][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 439.946738][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 439.952063][ T7159] do_fast_syscall_32+0x33/0x70 [ 439.957015][ T7159] do_SYSENTER_32+0x1b/0x20 [ 439.961593][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 439.968180][ T7159] [ 439.970557][ T7159] Uninit was stored to memory at: [ 439.975824][ T7159] get_compat_msghdr+0x4fc/0x720 [ 439.980911][ T7159] ___sys_recvmsg+0x18c/0x840 [ 439.985828][ T7159] do_recvmmsg+0x682/0x1180 [ 439.990452][ T7159] __sys_recvmmsg+0x113/0x450 [ 439.995397][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.001876][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 440.007093][ T7159] do_fast_syscall_32+0x33/0x70 [ 440.012185][ T7159] do_SYSENTER_32+0x1b/0x20 [ 440.016803][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 440.023440][ T7159] [ 440.025822][ T7159] Local variable msg_sys created at: [ 440.031172][ T7159] do_recvmmsg+0x5c/0x1180 [ 440.035819][ T7159] __sys_recvmmsg+0x113/0x450 [ 440.218130][ T7159] not chained 290000 origins [ 440.222835][ T7159] CPU: 1 PID: 7159 Comm: syz-executor.1 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 440.233248][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 440.243384][ T7159] Call Trace: [ 440.246700][ T7159] [ 440.249659][ T7159] dump_stack_lvl+0x1c8/0x256 [ 440.254462][ T7159] dump_stack+0x1a/0x1c [ 440.258744][ T7159] kmsan_internal_chain_origin+0x78/0x120 [ 440.264589][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 440.270484][ T7159] ? ____sys_recvmsg+0x5c1/0x810 [ 440.275506][ T7159] ? ___sys_recvmsg+0x217/0x840 [ 440.280458][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 440.286351][ T7159] ? ____sys_recvmsg+0x5c1/0x810 [ 440.291356][ T7159] ? kfree+0x44/0x980 [ 440.295411][ T7159] ? ___sys_recvmsg+0x248/0x840 [ 440.300383][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 440.306346][ T7159] ? get_compat_msghdr+0x51/0x720 [ 440.311502][ T7159] ? ___sys_recvmsg+0x18c/0x840 [ 440.316435][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 440.322397][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 440.328299][ T7159] ? should_fail+0x3f/0x810 [ 440.332910][ T7159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 440.339294][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 440.345204][ T7159] __msan_chain_origin+0xbd/0x140 [ 440.350306][ T7159] get_compat_msghdr+0x4fc/0x720 [ 440.355347][ T7159] ___sys_recvmsg+0x18c/0x840 [ 440.360142][ T7159] ? __stack_depot_save+0x21/0x4b0 [ 440.365342][ T7159] ? kmsan_internal_check_memory+0x94/0x530 [ 440.371327][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 440.377249][ T7159] do_recvmmsg+0x682/0x1180 [ 440.381887][ T7159] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.388387][ T7159] __sys_recvmmsg+0x113/0x450 [ 440.393164][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.399541][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 440.404740][ T7159] ? exit_to_user_mode_prepare+0x119/0x220 [ 440.410675][ T7159] do_fast_syscall_32+0x33/0x70 [ 440.415608][ T7159] do_SYSENTER_32+0x1b/0x20 [ 440.420228][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 440.426671][ T7159] RIP: 0023:0xf7ff9549 [ 440.430778][ T7159] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 440.450474][ T7159] RSP: 002b:00000000f7fd35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 440.458999][ T7159] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 440.467038][ T7159] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 440.475113][ T7159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 440.483180][ T7159] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 440.491229][ T7159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 440.499266][ T7159] [ 440.502803][ T7159] Uninit was stored to memory at: [ 440.508006][ T7159] get_compat_msghdr+0x4fc/0x720 [ 440.513174][ T7159] ___sys_recvmsg+0x18c/0x840 [ 440.517966][ T7159] do_recvmmsg+0x682/0x1180 [ 440.522674][ T7159] __sys_recvmmsg+0x113/0x450 [ 440.527467][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.533910][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 440.539093][ T7159] do_fast_syscall_32+0x33/0x70 [ 440.544130][ T7159] do_SYSENTER_32+0x1b/0x20 [ 440.548738][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 440.555272][ T7159] [ 440.557645][ T7159] Uninit was stored to memory at: [ 440.562991][ T7159] get_compat_msghdr+0x4fc/0x720 [ 440.568051][ T7159] ___sys_recvmsg+0x18c/0x840 [ 440.572981][ T7159] do_recvmmsg+0x682/0x1180 [ 440.577591][ T7159] __sys_recvmmsg+0x113/0x450 [ 440.582474][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.588843][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 440.594121][ T7159] do_fast_syscall_32+0x33/0x70 [ 440.599076][ T7159] do_SYSENTER_32+0x1b/0x20 [ 440.603779][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 440.610274][ T7159] [ 440.612820][ T7159] Uninit was stored to memory at: [ 440.617982][ T7159] get_compat_msghdr+0x4fc/0x720 [ 440.623178][ T7159] ___sys_recvmsg+0x18c/0x840 [ 440.627975][ T7159] do_recvmmsg+0x682/0x1180 [ 440.632724][ T7159] __sys_recvmmsg+0x113/0x450 [ 440.637506][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.643979][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 440.649211][ T7159] do_fast_syscall_32+0x33/0x70 [ 440.654263][ T7159] do_SYSENTER_32+0x1b/0x20 [ 440.658877][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 440.665450][ T7159] [ 440.667839][ T7159] Uninit was stored to memory at: [ 440.673226][ T7159] get_compat_msghdr+0x4fc/0x720 [ 440.678273][ T7159] ___sys_recvmsg+0x18c/0x840 [ 440.683247][ T7159] do_recvmmsg+0x682/0x1180 [ 440.687868][ T7159] __sys_recvmmsg+0x113/0x450 [ 440.692818][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.699196][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 440.704509][ T7159] do_fast_syscall_32+0x33/0x70 [ 440.709466][ T7159] do_SYSENTER_32+0x1b/0x20 [ 440.714144][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 440.720648][ T7159] [ 440.723142][ T7159] Uninit was stored to memory at: [ 440.728290][ T7159] get_compat_msghdr+0x4fc/0x720 [ 440.733420][ T7159] ___sys_recvmsg+0x18c/0x840 [ 440.738202][ T7159] do_recvmmsg+0x682/0x1180 [ 440.742939][ T7159] __sys_recvmmsg+0x113/0x450 [ 440.747732][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.754209][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 440.759433][ T7159] do_fast_syscall_32+0x33/0x70 [ 440.764494][ T7159] do_SYSENTER_32+0x1b/0x20 [ 440.769096][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 440.775637][ T7159] [ 440.778009][ T7159] Uninit was stored to memory at: [ 440.783283][ T7159] get_compat_msghdr+0x4fc/0x720 [ 440.788326][ T7159] ___sys_recvmsg+0x18c/0x840 [ 440.793192][ T7159] do_recvmmsg+0x682/0x1180 [ 440.797818][ T7159] __sys_recvmmsg+0x113/0x450 [ 440.802773][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.809142][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 440.814408][ T7159] do_fast_syscall_32+0x33/0x70 [ 440.819362][ T7159] do_SYSENTER_32+0x1b/0x20 [ 440.824074][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 440.830563][ T7159] [ 440.833103][ T7159] Uninit was stored to memory at: [ 440.838245][ T7159] get_compat_msghdr+0x4fc/0x720 [ 440.843400][ T7159] ___sys_recvmsg+0x18c/0x840 [ 440.848196][ T7159] do_recvmmsg+0x682/0x1180 [ 440.852931][ T7159] __sys_recvmmsg+0x113/0x450 [ 440.857709][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.864203][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 440.869420][ T7159] do_fast_syscall_32+0x33/0x70 [ 440.874421][ T7159] do_SYSENTER_32+0x1b/0x20 [ 440.879024][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 440.885587][ T7159] [ 440.887954][ T7159] Local variable msg_sys created at: [ 440.893416][ T7159] do_recvmmsg+0x5c/0x1180 [ 440.897929][ T7159] __sys_recvmmsg+0x113/0x450 [ 441.078115][ T7159] not chained 300000 origins [ 441.082900][ T7159] CPU: 1 PID: 7159 Comm: syz-executor.1 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 441.093360][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 441.103516][ T7159] Call Trace: [ 441.106846][ T7159] [ 441.109806][ T7159] dump_stack_lvl+0x1c8/0x256 [ 441.114604][ T7159] dump_stack+0x1a/0x1c [ 441.118889][ T7159] kmsan_internal_chain_origin+0x78/0x120 [ 441.124715][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 441.130660][ T7159] ? ____sys_recvmsg+0x5c1/0x810 [ 441.135681][ T7159] ? ___sys_recvmsg+0x217/0x840 [ 441.140654][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 441.146597][ T7159] ? ____sys_recvmsg+0x5c1/0x810 [ 441.151610][ T7159] ? kfree+0x44/0x980 [ 441.155658][ T7159] ? ___sys_recvmsg+0x248/0x840 [ 441.160574][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 441.166475][ T7159] ? get_compat_msghdr+0x51/0x720 [ 441.171569][ T7159] ? ___sys_recvmsg+0x18c/0x840 [ 441.176499][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 441.182467][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 441.188417][ T7159] ? should_fail+0x3f/0x810 [ 441.193030][ T7159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 441.199417][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 441.205311][ T7159] __msan_chain_origin+0xbd/0x140 [ 441.210422][ T7159] get_compat_msghdr+0x4fc/0x720 [ 441.215483][ T7159] ___sys_recvmsg+0x18c/0x840 [ 441.220233][ T7159] ? __stack_depot_save+0x21/0x4b0 [ 441.225431][ T7159] ? kmsan_internal_check_memory+0x94/0x530 [ 441.231419][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 441.237318][ T7159] do_recvmmsg+0x682/0x1180 [ 441.241963][ T7159] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.248524][ T7159] __sys_recvmmsg+0x113/0x450 [ 441.253299][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.259690][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 441.264896][ T7159] ? exit_to_user_mode_prepare+0x119/0x220 [ 441.270824][ T7159] do_fast_syscall_32+0x33/0x70 [ 441.275747][ T7159] do_SYSENTER_32+0x1b/0x20 [ 441.280314][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 441.286759][ T7159] RIP: 0023:0xf7ff9549 [ 441.290901][ T7159] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 441.310635][ T7159] RSP: 002b:00000000f7fd35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 441.319120][ T7159] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 441.327153][ T7159] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 441.335175][ T7159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 441.343213][ T7159] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 441.351264][ T7159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.359298][ T7159] [ 441.364280][ T7159] Uninit was stored to memory at: [ 441.369502][ T7159] get_compat_msghdr+0x4fc/0x720 [ 441.374653][ T7159] ___sys_recvmsg+0x18c/0x840 [ 441.379455][ T7159] do_recvmmsg+0x682/0x1180 [ 441.384152][ T7159] __sys_recvmmsg+0x113/0x450 [ 441.388951][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.395416][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 441.400655][ T7159] do_fast_syscall_32+0x33/0x70 [ 441.405706][ T7159] do_SYSENTER_32+0x1b/0x20 [ 441.410319][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 441.416898][ T7159] [ 441.419270][ T7159] Uninit was stored to memory at: [ 441.424516][ T7159] get_compat_msghdr+0x4fc/0x720 [ 441.429559][ T7159] ___sys_recvmsg+0x18c/0x840 [ 441.434435][ T7159] do_recvmmsg+0x682/0x1180 [ 441.439038][ T7159] __sys_recvmmsg+0x113/0x450 [ 441.443880][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.450249][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 441.455552][ T7159] do_fast_syscall_32+0x33/0x70 [ 441.460520][ T7159] do_SYSENTER_32+0x1b/0x20 [ 441.465232][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 441.471819][ T7159] [ 441.474204][ T7159] Uninit was stored to memory at: [ 441.479345][ T7159] get_compat_msghdr+0x4fc/0x720 [ 441.484441][ T7159] ___sys_recvmsg+0x18c/0x840 [ 441.489276][ T7159] do_recvmmsg+0x682/0x1180 [ 441.493987][ T7159] __sys_recvmmsg+0x113/0x450 [ 441.498764][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.505229][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 441.510452][ T7159] do_fast_syscall_32+0x33/0x70 [ 441.515505][ T7159] do_SYSENTER_32+0x1b/0x20 [ 441.520110][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 441.526656][ T7159] [ 441.529047][ T7159] Uninit was stored to memory at: [ 441.534331][ T7159] get_compat_msghdr+0x4fc/0x720 [ 441.539370][ T7159] ___sys_recvmsg+0x18c/0x840 [ 441.544242][ T7159] do_recvmmsg+0x682/0x1180 [ 441.548845][ T7159] __sys_recvmmsg+0x113/0x450 [ 441.553706][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.560077][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 441.565355][ T7159] do_fast_syscall_32+0x33/0x70 [ 441.570314][ T7159] do_SYSENTER_32+0x1b/0x20 [ 441.575024][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 441.581514][ T7159] [ 441.583976][ T7159] Uninit was stored to memory at: [ 441.589128][ T7159] get_compat_msghdr+0x4fc/0x720 [ 441.594267][ T7159] ___sys_recvmsg+0x18c/0x840 [ 441.599050][ T7159] do_recvmmsg+0x682/0x1180 [ 441.603755][ T7159] __sys_recvmmsg+0x113/0x450 [ 441.608536][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.615000][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 441.620234][ T7159] do_fast_syscall_32+0x33/0x70 [ 441.625265][ T7159] do_SYSENTER_32+0x1b/0x20 [ 441.629875][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 441.636399][ T7159] [ 441.638772][ T7159] Uninit was stored to memory at: [ 441.644055][ T7159] get_compat_msghdr+0x4fc/0x720 [ 441.649102][ T7159] ___sys_recvmsg+0x18c/0x840 [ 441.653986][ T7159] do_recvmmsg+0x682/0x1180 [ 441.658594][ T7159] __sys_recvmmsg+0x113/0x450 [ 441.663475][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.669847][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 441.675173][ T7159] do_fast_syscall_32+0x33/0x70 [ 441.680129][ T7159] do_SYSENTER_32+0x1b/0x20 [ 441.684790][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 441.691279][ T7159] [ 441.693750][ T7159] Uninit was stored to memory at: [ 441.698900][ T7159] get_compat_msghdr+0x4fc/0x720 [ 441.704010][ T7159] ___sys_recvmsg+0x18c/0x840 [ 441.708790][ T7159] do_recvmmsg+0x682/0x1180 [ 441.713495][ T7159] __sys_recvmmsg+0x113/0x450 [ 441.718274][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.724734][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 441.729963][ T7159] do_fast_syscall_32+0x33/0x70 [ 441.735020][ T7159] do_SYSENTER_32+0x1b/0x20 [ 441.739639][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 441.746210][ T7159] [ 441.748583][ T7159] Local variable msg_sys created at: [ 441.754039][ T7159] do_recvmmsg+0x5c/0x1180 [ 441.758559][ T7159] __sys_recvmmsg+0x113/0x450 [ 441.929754][ T7159] not chained 310000 origins [ 441.934503][ T7159] CPU: 1 PID: 7159 Comm: syz-executor.1 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 441.944917][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 441.955059][ T7159] Call Trace: [ 441.958369][ T7159] [ 441.961332][ T7159] dump_stack_lvl+0x1c8/0x256 [ 441.966134][ T7159] dump_stack+0x1a/0x1c [ 441.970446][ T7159] kmsan_internal_chain_origin+0x78/0x120 [ 441.976300][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 441.982216][ T7159] ? ____sys_recvmsg+0x5c1/0x810 [ 441.987287][ T7159] ? ___sys_recvmsg+0x217/0x840 [ 441.992245][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 441.998141][ T7159] ? ____sys_recvmsg+0x5c1/0x810 [ 442.003160][ T7159] ? kfree+0x44/0x980 [ 442.007256][ T7159] ? ___sys_recvmsg+0x248/0x840 [ 442.012225][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 442.018188][ T7159] ? get_compat_msghdr+0x51/0x720 [ 442.023339][ T7159] ? ___sys_recvmsg+0x18c/0x840 [ 442.028296][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 442.034205][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 442.040118][ T7159] ? should_fail+0x3f/0x810 [ 442.044738][ T7159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 442.051149][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 442.057058][ T7159] __msan_chain_origin+0xbd/0x140 [ 442.062193][ T7159] get_compat_msghdr+0x4fc/0x720 [ 442.067277][ T7159] ___sys_recvmsg+0x18c/0x840 [ 442.072098][ T7159] ? __stack_depot_save+0x21/0x4b0 [ 442.077349][ T7159] ? kmsan_internal_check_memory+0x94/0x530 [ 442.083356][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 442.089304][ T7159] do_recvmmsg+0x682/0x1180 [ 442.093923][ T7159] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.100498][ T7159] __sys_recvmmsg+0x113/0x450 [ 442.105310][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.111695][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 442.116935][ T7159] ? exit_to_user_mode_prepare+0x119/0x220 [ 442.122850][ T7159] do_fast_syscall_32+0x33/0x70 [ 442.127820][ T7159] do_SYSENTER_32+0x1b/0x20 [ 442.132389][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 442.138824][ T7159] RIP: 0023:0xf7ff9549 [ 442.142950][ T7159] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 442.162720][ T7159] RSP: 002b:00000000f7fd35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 442.171267][ T7159] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 442.179337][ T7159] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 442.187386][ T7159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.195427][ T7159] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 442.203502][ T7159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.211571][ T7159] [ 442.216318][ T7159] Uninit was stored to memory at: [ 442.221531][ T7159] get_compat_msghdr+0x4fc/0x720 [ 442.226685][ T7159] ___sys_recvmsg+0x18c/0x840 [ 442.231485][ T7159] do_recvmmsg+0x682/0x1180 [ 442.236179][ T7159] __sys_recvmmsg+0x113/0x450 [ 442.240973][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.247490][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 442.252791][ T7159] do_fast_syscall_32+0x33/0x70 [ 442.257759][ T7159] do_SYSENTER_32+0x1b/0x20 [ 442.262512][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 442.269043][ T7159] [ 442.271391][ T7159] Uninit was stored to memory at: [ 442.276674][ T7159] get_compat_msghdr+0x4fc/0x720 [ 442.281819][ T7159] ___sys_recvmsg+0x18c/0x840 [ 442.286593][ T7159] do_recvmmsg+0x682/0x1180 [ 442.291153][ T7159] __sys_recvmmsg+0x113/0x450 [ 442.296021][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.302490][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 442.307721][ T7159] do_fast_syscall_32+0x33/0x70 [ 442.312807][ T7159] do_SYSENTER_32+0x1b/0x20 [ 442.317428][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 442.324048][ T7159] [ 442.326425][ T7159] Uninit was stored to memory at: [ 442.331613][ T7159] get_compat_msghdr+0x4fc/0x720 [ 442.336751][ T7159] ___sys_recvmsg+0x18c/0x840 [ 442.341543][ T7159] do_recvmmsg+0x682/0x1180 [ 442.346230][ T7159] __sys_recvmmsg+0x113/0x450 [ 442.351030][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.357491][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 442.362850][ T7159] do_fast_syscall_32+0x33/0x70 [ 442.367849][ T7159] do_SYSENTER_32+0x1b/0x20 [ 442.372735][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 442.379389][ T7159] [ 442.382032][ T7159] Uninit was stored to memory at: [ 442.387269][ T7159] get_compat_msghdr+0x4fc/0x720 [ 442.392438][ T7159] ___sys_recvmsg+0x18c/0x840 [ 442.397234][ T7159] do_recvmmsg+0x682/0x1180 [ 442.401963][ T7159] __sys_recvmmsg+0x113/0x450 [ 442.406766][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.413263][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 442.418498][ T7159] do_fast_syscall_32+0x33/0x70 [ 442.423551][ T7159] do_SYSENTER_32+0x1b/0x20 [ 442.428180][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 442.434762][ T7159] [ 442.437148][ T7159] Uninit was stored to memory at: [ 442.442467][ T7159] get_compat_msghdr+0x4fc/0x720 [ 442.447547][ T7159] ___sys_recvmsg+0x18c/0x840 [ 442.452469][ T7159] do_recvmmsg+0x682/0x1180 [ 442.457084][ T7159] __sys_recvmmsg+0x113/0x450 [ 442.461940][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.468304][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 442.473620][ T7159] do_fast_syscall_32+0x33/0x70 [ 442.478588][ T7159] do_SYSENTER_32+0x1b/0x20 [ 442.483332][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 442.489857][ T7159] [ 442.492330][ T7159] Uninit was stored to memory at: [ 442.497531][ T7159] get_compat_msghdr+0x4fc/0x720 [ 442.502697][ T7159] ___sys_recvmsg+0x18c/0x840 [ 442.507474][ T7159] do_recvmmsg+0x682/0x1180 [ 442.512171][ T7159] __sys_recvmmsg+0x113/0x450 [ 442.516979][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.523445][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 442.528688][ T7159] do_fast_syscall_32+0x33/0x70 [ 442.533738][ T7159] do_SYSENTER_32+0x1b/0x20 [ 442.538358][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 442.544932][ T7159] [ 442.547321][ T7159] Uninit was stored to memory at: [ 442.552611][ T7159] get_compat_msghdr+0x4fc/0x720 [ 442.557670][ T7159] ___sys_recvmsg+0x18c/0x840 [ 442.562582][ T7159] do_recvmmsg+0x682/0x1180 [ 442.567205][ T7159] __sys_recvmmsg+0x113/0x450 [ 442.572116][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.578498][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 442.583806][ T7159] do_fast_syscall_32+0x33/0x70 [ 442.588766][ T7159] do_SYSENTER_32+0x1b/0x20 [ 442.593460][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 442.599943][ T7159] [ 442.602434][ T7159] Local variable msg_sys created at: [ 442.607772][ T7159] do_recvmmsg+0x5c/0x1180 [ 442.612376][ T7159] __sys_recvmmsg+0x113/0x450 [ 442.785675][ T7159] not chained 320000 origins [ 442.790334][ T7159] CPU: 0 PID: 7159 Comm: syz-executor.1 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 442.800733][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 442.810835][ T7159] Call Trace: [ 442.814150][ T7159] [ 442.817110][ T7159] dump_stack_lvl+0x1c8/0x256 [ 442.821888][ T7159] dump_stack+0x1a/0x1c [ 442.826135][ T7159] kmsan_internal_chain_origin+0x78/0x120 [ 442.831968][ T7159] ? ____sys_recvmsg+0x5c1/0x810 [ 442.837018][ T7159] ? ___sys_recvmsg+0x217/0x840 [ 442.841971][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 442.847869][ T7159] ? ____sys_recvmsg+0x5c1/0x810 [ 442.852870][ T7159] ? kfree+0x44/0x980 [ 442.856904][ T7159] ? ___sys_recvmsg+0x248/0x840 [ 442.861814][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 442.867722][ T7159] ? get_compat_msghdr+0x51/0x720 [ 442.872807][ T7159] ? ___sys_recvmsg+0x18c/0x840 [ 442.877720][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 442.883638][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 442.889600][ T7159] ? should_fail+0x3f/0x810 [ 442.894263][ T7159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 442.900665][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 442.906613][ T7159] __msan_chain_origin+0xbd/0x140 [ 442.911772][ T7159] get_compat_msghdr+0x4fc/0x720 [ 442.916832][ T7159] ___sys_recvmsg+0x18c/0x840 [ 442.921627][ T7159] ? __stack_depot_save+0x21/0x4b0 [ 442.926860][ T7159] ? kmsan_internal_check_memory+0x94/0x530 [ 442.932866][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 442.938810][ T7159] do_recvmmsg+0x682/0x1180 [ 442.943406][ T7159] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.949902][ T7159] __sys_recvmmsg+0x113/0x450 [ 442.954647][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.960978][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 442.966155][ T7159] ? exit_to_user_mode_prepare+0x119/0x220 [ 442.972042][ T7159] do_fast_syscall_32+0x33/0x70 [ 442.976957][ T7159] do_SYSENTER_32+0x1b/0x20 [ 442.981515][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 442.987965][ T7159] RIP: 0023:0xf7ff9549 [ 442.992106][ T7159] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 443.011794][ T7159] RSP: 002b:00000000f7fd35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 443.020293][ T7159] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 443.028330][ T7159] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 443.036373][ T7159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 443.044438][ T7159] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 443.052512][ T7159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 443.060577][ T7159] [ 443.064275][ T7159] Uninit was stored to memory at: [ 443.069485][ T7159] get_compat_msghdr+0x4fc/0x720 [ 443.074668][ T7159] ___sys_recvmsg+0x18c/0x840 [ 443.079463][ T7159] do_recvmmsg+0x682/0x1180 [ 443.084201][ T7159] __sys_recvmmsg+0x113/0x450 [ 443.088997][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 443.095512][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 443.100744][ T7159] do_fast_syscall_32+0x33/0x70 [ 443.105837][ T7159] do_SYSENTER_32+0x1b/0x20 [ 443.110446][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 443.117005][ T7159] [ 443.119377][ T7159] Uninit was stored to memory at: [ 443.124760][ T7159] get_compat_msghdr+0x4fc/0x720 [ 443.129802][ T7159] ___sys_recvmsg+0x18c/0x840 [ 443.134813][ T7159] do_recvmmsg+0x682/0x1180 [ 443.139438][ T7159] __sys_recvmmsg+0x113/0x450 [ 443.144396][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 443.150775][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 443.156151][ T7159] do_fast_syscall_32+0x33/0x70 [ 443.161123][ T7159] do_SYSENTER_32+0x1b/0x20 [ 443.165870][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 443.172539][ T7159] [ 443.174915][ T7159] Uninit was stored to memory at: [ 443.180055][ T7159] get_compat_msghdr+0x4fc/0x720 [ 443.185278][ T7159] ___sys_recvmsg+0x18c/0x840 [ 443.190065][ T7159] do_recvmmsg+0x682/0x1180 [ 443.194751][ T7159] __sys_recvmmsg+0x113/0x450 [ 443.199534][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 443.206039][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 443.211263][ T7159] do_fast_syscall_32+0x33/0x70 [ 443.216375][ T7159] do_SYSENTER_32+0x1b/0x20 [ 443.220998][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 443.227654][ T7159] [ 443.230023][ T7159] Uninit was stored to memory at: [ 443.235287][ T7159] get_compat_msghdr+0x4fc/0x720 [ 443.240342][ T7159] ___sys_recvmsg+0x18c/0x840 [ 443.245268][ T7159] do_recvmmsg+0x682/0x1180 [ 443.249876][ T7159] __sys_recvmmsg+0x113/0x450 [ 443.254854][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 443.261218][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 443.266563][ T7159] do_fast_syscall_32+0x33/0x70 [ 443.271517][ T7159] do_SYSENTER_32+0x1b/0x20 [ 443.276227][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 443.282891][ T7159] [ 443.285272][ T7159] Uninit was stored to memory at: [ 443.290437][ T7159] get_compat_msghdr+0x4fc/0x720 [ 443.295630][ T7159] ___sys_recvmsg+0x18c/0x840 [ 443.300410][ T7159] do_recvmmsg+0x682/0x1180 [ 443.305240][ T7159] __sys_recvmmsg+0x113/0x450 [ 443.310024][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 443.316457][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 443.321791][ T7159] do_fast_syscall_32+0x33/0x70 [ 443.326761][ T7159] do_SYSENTER_32+0x1b/0x20 [ 443.331365][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 443.337938][ T7159] [ 443.340306][ T7159] Uninit was stored to memory at: [ 443.345585][ T7159] get_compat_msghdr+0x4fc/0x720 [ 443.350642][ T7159] ___sys_recvmsg+0x18c/0x840 [ 443.355550][ T7159] do_recvmmsg+0x682/0x1180 [ 443.360182][ T7159] __sys_recvmmsg+0x113/0x450 [ 443.365106][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 443.371477][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 443.376815][ T7159] do_fast_syscall_32+0x33/0x70 [ 443.381907][ T7159] do_SYSENTER_32+0x1b/0x20 [ 443.386527][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 443.393159][ T7159] [ 443.395539][ T7159] Uninit was stored to memory at: [ 443.400659][ T7159] get_compat_msghdr+0x4fc/0x720 [ 443.405855][ T7159] ___sys_recvmsg+0x18c/0x840 [ 443.410659][ T7159] do_recvmmsg+0x682/0x1180 [ 443.415451][ T7159] __sys_recvmmsg+0x113/0x450 [ 443.420248][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 443.426819][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 443.432176][ T7159] do_fast_syscall_32+0x33/0x70 [ 443.437148][ T7159] do_SYSENTER_32+0x1b/0x20 [ 443.441860][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 443.448358][ T7159] [ 443.450726][ T7159] Local variable msg_sys created at: [ 443.456160][ T7159] do_recvmmsg+0x5c/0x1180 [ 443.460679][ T7159] __sys_recvmmsg+0x113/0x450 [ 443.637762][ T7159] not chained 330000 origins [ 443.642559][ T7159] CPU: 0 PID: 7159 Comm: syz-executor.1 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 443.652974][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 443.663109][ T7159] Call Trace: [ 443.666422][ T7159] [ 443.669379][ T7159] dump_stack_lvl+0x1c8/0x256 [ 443.674162][ T7159] dump_stack+0x1a/0x1c [ 443.678399][ T7159] kmsan_internal_chain_origin+0x78/0x120 [ 443.684212][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 443.690101][ T7159] ? ____sys_recvmsg+0x5c1/0x810 [ 443.695101][ T7159] ? ___sys_recvmsg+0x217/0x840 [ 443.700016][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 443.705930][ T7159] ? ____sys_recvmsg+0x5c1/0x810 [ 443.710991][ T7159] ? kfree+0x44/0x980 [ 443.715081][ T7159] ? ___sys_recvmsg+0x248/0x840 [ 443.719994][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 443.725890][ T7159] ? get_compat_msghdr+0x51/0x720 [ 443.730981][ T7159] ? ___sys_recvmsg+0x18c/0x840 [ 443.735894][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 443.741795][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 443.747693][ T7159] ? should_fail+0x3f/0x810 [ 443.752307][ T7159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 443.758711][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 443.764669][ T7159] __msan_chain_origin+0xbd/0x140 [ 443.769837][ T7159] get_compat_msghdr+0x4fc/0x720 [ 443.774895][ T7159] ___sys_recvmsg+0x18c/0x840 [ 443.779663][ T7159] ? __stack_depot_save+0x21/0x4b0 [ 443.784862][ T7159] ? kmsan_internal_check_memory+0x94/0x530 [ 443.790839][ T7159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 443.796737][ T7159] do_recvmmsg+0x682/0x1180 [ 443.801327][ T7159] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 443.807848][ T7159] __sys_recvmmsg+0x113/0x450 [ 443.812641][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 443.818971][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 443.824151][ T7159] ? exit_to_user_mode_prepare+0x119/0x220 [ 443.830036][ T7159] do_fast_syscall_32+0x33/0x70 [ 443.834953][ T7159] do_SYSENTER_32+0x1b/0x20 [ 443.839514][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 443.845944][ T7159] RIP: 0023:0xf7ff9549 [ 443.850052][ T7159] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 443.869743][ T7159] RSP: 002b:00000000f7fd35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 443.878222][ T7159] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 443.886247][ T7159] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 443.894266][ T7159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 443.902302][ T7159] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 443.910381][ T7159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 443.918481][ T7159] [ 443.923211][ T7159] Uninit was stored to memory at: [ 443.928421][ T7159] get_compat_msghdr+0x4fc/0x720 [ 443.933580][ T7159] ___sys_recvmsg+0x18c/0x840 [ 443.938381][ T7159] do_recvmmsg+0x682/0x1180 [ 443.943114][ T7159] __sys_recvmmsg+0x113/0x450 [ 443.947914][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 443.954403][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 443.959624][ T7159] do_fast_syscall_32+0x33/0x70 [ 443.964641][ T7159] do_SYSENTER_32+0x1b/0x20 [ 443.969247][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 443.975842][ T7159] [ 443.978227][ T7159] Uninit was stored to memory at: [ 443.983565][ T7159] get_compat_msghdr+0x4fc/0x720 [ 443.988621][ T7159] ___sys_recvmsg+0x18c/0x840 [ 443.993511][ T7159] do_recvmmsg+0x682/0x1180 [ 443.998111][ T7159] __sys_recvmmsg+0x113/0x450 [ 444.003006][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 444.009371][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 444.014712][ T7159] do_fast_syscall_32+0x33/0x70 [ 444.019664][ T7159] do_SYSENTER_32+0x1b/0x20 [ 444.024378][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 444.030884][ T7159] [ 444.033351][ T7159] Uninit was stored to memory at: [ 444.038552][ T7159] get_compat_msghdr+0x4fc/0x720 [ 444.043702][ T7159] ___sys_recvmsg+0x18c/0x840 [ 444.048480][ T7159] do_recvmmsg+0x682/0x1180 [ 444.053155][ T7159] __sys_recvmmsg+0x113/0x450 [ 444.057932][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 444.064410][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 444.069636][ T7159] do_fast_syscall_32+0x33/0x70 [ 444.074654][ T7159] do_SYSENTER_32+0x1b/0x20 [ 444.079258][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 444.085837][ T7159] [ 444.088224][ T7159] Uninit was stored to memory at: [ 444.093550][ T7159] get_compat_msghdr+0x4fc/0x720 [ 444.098595][ T7159] ___sys_recvmsg+0x18c/0x840 [ 444.103493][ T7159] do_recvmmsg+0x682/0x1180 [ 444.108110][ T7159] __sys_recvmmsg+0x113/0x450 [ 444.113029][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 444.119397][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 444.124769][ T7159] do_fast_syscall_32+0x33/0x70 [ 444.129743][ T7159] do_SYSENTER_32+0x1b/0x20 [ 444.134419][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 444.140911][ T7159] [ 444.143405][ T7159] Uninit was stored to memory at: [ 444.148595][ T7159] get_compat_msghdr+0x4fc/0x720 [ 444.153743][ T7159] ___sys_recvmsg+0x18c/0x840 [ 444.158533][ T7159] do_recvmmsg+0x682/0x1180 [ 444.163235][ T7159] __sys_recvmmsg+0x113/0x450 [ 444.168018][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 444.174447][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 444.179684][ T7159] do_fast_syscall_32+0x33/0x70 [ 444.184801][ T7159] do_SYSENTER_32+0x1b/0x20 [ 444.189430][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 444.196095][ T7159] [ 444.198478][ T7159] Uninit was stored to memory at: [ 444.203795][ T7159] get_compat_msghdr+0x4fc/0x720 [ 444.208850][ T7159] ___sys_recvmsg+0x18c/0x840 [ 444.213728][ T7159] do_recvmmsg+0x682/0x1180 [ 444.218330][ T7159] __sys_recvmmsg+0x113/0x450 [ 444.223228][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 444.229590][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 444.234914][ T7159] do_fast_syscall_32+0x33/0x70 [ 444.239868][ T7159] do_SYSENTER_32+0x1b/0x20 [ 444.244542][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 444.251029][ T7159] [ 444.253519][ T7159] Uninit was stored to memory at: [ 444.258665][ T7159] get_compat_msghdr+0x4fc/0x720 [ 444.263808][ T7159] ___sys_recvmsg+0x18c/0x840 [ 444.268595][ T7159] do_recvmmsg+0x682/0x1180 [ 444.273300][ T7159] __sys_recvmmsg+0x113/0x450 [ 444.278095][ T7159] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 444.284618][ T7159] __do_fast_syscall_32+0xa2/0x100 [ 444.289855][ T7159] do_fast_syscall_32+0x33/0x70 [ 444.294911][ T7159] do_SYSENTER_32+0x1b/0x20 [ 444.299515][ T7159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 444.306056][ T7159] [ 444.308430][ T7159] Local variable msg_sys created at: [ 444.313889][ T7159] do_recvmmsg+0x5c/0x1180 [ 444.318424][ T7159] __sys_recvmmsg+0x113/0x450 07:16:24 executing program 1: socketpair(0x11, 0x2, 0xfd, &(0x7f0000000000)) 07:16:24 executing program 2: r0 = socket(0x2, 0x5, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:16:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000000140)="ed2500f4655fd2f4655f00000000000004140994666e68b3dfbeb1df8c281d98dd68fba40bee2192cd", 0x29, 0x8c80}, {0x0, 0x0, 0xfffffffffffffffe}], 0x0, &(0x7f0000000040)) 07:16:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 07:16:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, 0x0, 0x0) 07:16:24 executing program 4: r0 = socket(0x2, 0x3, 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f00000000c0)={0x0}}, 0x0) [ 444.495052][ T7197] loop3: detected capacity change from 0 to 264192 07:16:24 executing program 0: r0 = socket(0x2, 0x3, 0x8) recvfrom$rxrpc(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 07:16:24 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 07:16:24 executing program 2: r0 = socket(0x2, 0x3, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1, &(0x7f0000000340)=@raw=[@generic], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:16:24 executing program 5: r0 = socket(0x2, 0x3, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vxcan0\x00'}) [ 444.623041][ T7197] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 07:16:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000000140)="ed2500f4655fd2f4655f00000000000004140994666e68b3dfbeb1df8c281d98dd68fba40bee2192cd", 0x29, 0x8c80}, {0x0, 0x0, 0xfffffffffffffffe}], 0x0, 0x0) 07:16:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x20}}, 0x0) 07:16:25 executing program 0: r0 = socket(0x2, 0x3, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1, &(0x7f0000000340)=@raw=[@generic], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:16:25 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11907064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x600000) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r2, 0x0) 07:16:25 executing program 4: r0 = socket(0x2a, 0x2, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 445.153017][ T7214] loop3: detected capacity change from 0 to 264192 07:16:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000000140)="ed2500f4655fd2f4655f00000000000004140994666e68b3dfbeb1df8c281d98dd68fba40bee2192cd", 0x29, 0x8c80}, {0x0, 0x0, 0xfffffffffffffffe}], 0x0, 0x0) 07:16:25 executing program 1: r0 = socket(0x2, 0x3, 0x8) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) 07:16:25 executing program 4: r0 = socket(0x2, 0x3, 0x8) sendto$rxrpc(r0, 0x0, 0x0, 0x7, 0x0, 0x0) 07:16:25 executing program 2: r0 = socket(0x2, 0x3, 0x8) bind$vsock_stream(r0, 0x0, 0x0) [ 445.873653][ T7231] loop3: detected capacity change from 0 to 264192 [ 445.883717][ T7232] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 07:16:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000000140)="ed2500f4655fd2f4655f00000000000004140994666e68b3dfbeb1df8c281d98dd68fba40bee2192cd", 0x29, 0x8c80}, {0x0, 0x0, 0xfffffffffffffffe}], 0x0, 0x0) 07:16:26 executing program 1: r0 = socket(0x2, 0x3, 0x8) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:16:26 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 07:16:26 executing program 4: r0 = socket(0x2, 0x5, 0x0) sendto$rxrpc(r0, 0x0, 0x7000000, 0x0, 0x0, 0x0) 07:16:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x140}}}}, 0x20}}, 0x0) 07:16:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x102}]}, 0x28}}, 0x0) [ 446.526649][ T7244] loop3: detected capacity change from 0 to 264192 07:16:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x20}}, 0x0) 07:16:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 07:16:27 executing program 0: r0 = socket(0x2, 0x2, 0x1) connect$netrom(r0, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:16:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x105}]}, 0x28}}, 0x0) 07:16:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff5bb}]}]}, 0x20}}, 0x0) 07:16:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}}, 0x0) 07:16:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x10a}]}, 0x28}}, 0x0) 07:16:27 executing program 2: socket(0x0, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x21, 0x455, 0x0, 0x0, {0x10}}, 0x20}}, 0x0) [ 447.663051][ T7261] netlink: 'syz-executor.3': attribute type 266 has an invalid length. 07:16:27 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="020000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:27 executing program 3: r0 = socket(0x2, 0x3, 0x8) accept4$netrom(r0, 0x0, 0x0, 0x0) 07:16:27 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="040000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:28 executing program 1: r0 = socket(0x2, 0x3, 0x8) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xf) 07:16:28 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000400)={0xffffffffffffffff, 0xa2f, 0x10001, 0x7fffffff}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001500)={'veth0_macvtap\x00', {0x2, 0x4e21, @empty}}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0x0) 07:16:28 executing program 0: r0 = socket(0x2, 0x3, 0x8) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, 0x0, 0x0) 07:16:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 07:16:28 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="040300008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) [ 448.303902][ T7281] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 07:16:28 executing program 2: r0 = socket(0x2, 0x3, 0x8) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x2, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xf) 07:16:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x18}}, 0x0) 07:16:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:16:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x20}}, 0x0) 07:16:28 executing program 4: r0 = socket(0x2, 0x5, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x2400c045) 07:16:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@mcast2}, {@in=@multicast1, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}}]}, 0x154}}, 0x0) 07:16:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000300)="b9", 0x1, 0x40, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 07:16:29 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb8100180088fb"], 0x0) 07:16:29 executing program 0: r0 = socket(0x2, 0x3, 0x8) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x2, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) 07:16:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x3}]}, 0x28}}, 0x0) 07:16:29 executing program 5: r0 = socket(0x2, 0x2, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) [ 449.315469][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:16:29 executing program 1: r0 = socket(0x2, 0x3, 0x8) pipe(&(0x7f0000000d80)) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 07:16:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) 07:16:29 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000440)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}], 0x1, 0x0) close(r0) [ 449.645378][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 07:16:29 executing program 5: r0 = socket(0x2, 0x5, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 07:16:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x24}}, 0x0) 07:16:30 executing program 2: r0 = socket(0x2a, 0x2, 0x0) bind$rxrpc(r0, &(0x7f0000000500)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) 07:16:30 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="070000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:30 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:30 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}}, 0x0) 07:16:30 executing program 0: r0 = socket(0x2, 0x3, 0x8) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) 07:16:30 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0, 0x2c}}, 0x0) 07:16:30 executing program 2: r0 = socket(0x2a, 0x2, 0x0) bind$rxrpc(r0, 0x0, 0x0) 07:16:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x88, 0x65, 0x0, &(0x7f00000000c0)=0x7) 07:16:30 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:30 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x10e}]}, 0x28}}, 0x0) 07:16:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x1) 07:16:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x12}, 0x0) 07:16:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x37}, @void, @val={0xc}}}}, 0x28}}, 0x0) [ 450.996595][ T7346] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:31 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:31 executing program 0: r0 = socket(0x2, 0x3, 0x8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000800)) 07:16:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES32, @ANYRES8=r2, @ANYBLOB="e55bd17092b91c91cc0b40b3ee44c0be0c8f7c16a9f1b50038a8ffffffff43260fba1560d34bfa497b3ff9553dc4430000cbb205000000cbfea310078894247597cbd8bd2241b08f85d196626600ad33aeb08b085172593115bcbd8b7b9898c72cf2c61d7e16fca5c1fb1487b1fe20ae4cff79e35b00ed95d0fd08e70b975dcc0eee0b5246ed79dfd19aa7f48975bfbe7bac767234a667e5869b31a5ceaef79db549192a2d53a3748ddf999102006531ede691e8dc0906d7f18e975482ea6d84b3992a1268039a6884460a3206c6cb9f058bb01da99988bff83dcc8d19949effc5"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1500048}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRES16, @ANYRES32, @ANYRES64, @ANYBLOB="34c3cdeb", @ANYBLOB="256b1a0055074be0ec35e41e07000000000000006e401d2c084aa3c93ba60bc92f7e43f1a93c417e0000000000000000d3c1601be99ad3"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="a74281425055cf3d0fc19ad74b58b25f62d3621c38d07c2333bad07432bd239610d99e939039beba8b783119631a878004af7775aa3239b409b47eda12e1", @ANYRES16=r4, @ANYBLOB="08002dbd7000fddbdf3532000000bc8dcf019abc0706d6c5f2b6f4c63d4638a46cdfb863c2ff8f8033c1add4dca99f51f01352562a50110efe0419d08ef1e054dcc4204f6977cb57c97ffaf21a77cc6b532e04aca160572d5f16e2279e2fac887abb0edaff0d59401332e62da13ebbba5c920791ecd53b3680341155c799fa90733c8f26e29e4ba85c6b413f43230fd2b63c435e00fdffff2623e3c5c22b4fc3a77bf67ac9839512e92f31007af4c3869afe47c00a65b7046e1fdd6ff57ad015b4"], 0xfffffffffffffc3b}, 0x1, 0x0, 0x0, 0x200048d0}, 0x404c0e1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0x605, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x1211}, [@IFLA_EXT_MASK={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 07:16:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x12}, 0x0) 07:16:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:31 executing program 1: r0 = socket(0x2, 0x3, 0x8) bind$vsock_stream(r0, &(0x7f0000000500)={0x28, 0x0, 0xffffffff, @host}, 0x10) 07:16:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:31 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() r2 = gettid() sendmsg$netlink(r0, &(0x7f0000005140)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f0000005080)=[{&(0x7f0000000100)={0xec4, 0x0, 0x0, 0x0, 0x0, "", [@nested={0xeb1, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback}, @generic="5ef4b5d540e6fb006e6d6b30de", @generic="95d419bb791eb56c6f7887f9fde5a74991b4d11b7987e03bd779ba76dad8aaf78d0173896e89c84af878395c510cbb6de646c1cc8bbffdf254535d0e2722de3c639492f98143a72435ae21d7bd4421735f0fc08f5d120718899d546c09b2f06118e81427e98c0c30275d50b8d2321075226331c01cd0727839ebcdbdc00c753c744bf789b6831f82bc0b8ab17297a2a03d", @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="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"]}]}, 0xec4}], 0x1, &(0x7f0000005100)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40}, 0x0) [ 451.794646][ T24] audit: type=1804 audit(1663053391.856:6): pid=7361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir827392565/syzkaller.Vkdm2T/253/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 [ 451.836999][ T7372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:31 executing program 1: r0 = socket(0x2, 0x3, 0x8) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) [ 452.148550][ T7376] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 07:16:32 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="c8", 0x30000}], 0x5a) 07:16:32 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:32 executing program 3: r0 = socket(0x2, 0x3, 0x8) sendto$rxrpc(r0, 0x0, 0x7000000, 0x0, 0x0, 0x0) 07:16:32 executing program 0: pipe2$9p(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r0, 0x0, 0x0) 07:16:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:32 executing program 1: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 07:16:32 executing program 2: r0 = socket(0x2, 0x3, 0x8) recvmsg$can_raw(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x10043) 07:16:32 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) [ 452.863466][ T7395] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:33 executing program 0: r0 = socket(0x2, 0x3, 0x8) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 07:16:33 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x11}]}}, &(0x7f0000000200)=""/166, 0x32, 0xa6, 0x1}, 0x20) 07:16:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) 07:16:33 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:33 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) 07:16:33 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:33 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) 07:16:33 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x181001, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) 07:16:33 executing program 5: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000440), 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:33 executing program 2: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 453.643914][ T7416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:33 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) 07:16:34 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 07:16:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x1) 07:16:34 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:34 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$inet6(r0, 0x0, 0x0) 07:16:34 executing program 5: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000440), 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:34 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 07:16:34 executing program 0: syz_clone(0x0, &(0x7f0000006900), 0x0, &(0x7f0000006a00), &(0x7f0000006a40), &(0x7f0000006a80)) 07:16:34 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) statx(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 07:16:34 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:34 executing program 5: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000440), 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:34 executing program 2: io_uring_setup(0x0, &(0x7f00000005c0)) 07:16:34 executing program 3: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 07:16:34 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) 07:16:35 executing program 1: faccessat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) 07:16:35 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:35 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, 0x0, 0x4040080) 07:16:35 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:35 executing program 3: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001100), 0x2, 0x0) 07:16:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000ac0)={'vxcan1\x00'}) 07:16:35 executing program 1: pipe2$9p(&(0x7f0000000900), 0x0) 07:16:35 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:35 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/user\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 07:16:35 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:35 executing program 3: pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') 07:16:35 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x0) 07:16:35 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)) [ 455.814086][ T7471] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:36 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:36 executing program 3: syz_clone(0x8000, &(0x7f0000006900)="d9", 0x1, &(0x7f0000006a00), &(0x7f0000006a40), &(0x7f0000006a80)) 07:16:36 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:36 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 07:16:36 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 07:16:36 executing program 1: pipe2$9p(&(0x7f0000000080), 0x800) [ 456.396017][ T7487] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:36 executing program 0: setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) 07:16:36 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:36 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/114, 0x72}], 0x1}, 0x0) 07:16:36 executing program 2: r0 = creat(&(0x7f0000000c00)='./file0\x00', 0x0) timerfd_gettime(r0, 0x0) 07:16:36 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 07:16:36 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:36 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) recvmsg(r0, 0x0, 0x0) 07:16:37 executing program 2: stat(&(0x7f0000006ac0)='./file0\x00', 0x0) 07:16:37 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:37 executing program 3: creat(&(0x7f0000000c00)='./file0\x00', 0x1e4) [ 457.122305][ T7510] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:37 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x180, 0x10) 07:16:37 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)) 07:16:37 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:16:37 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 07:16:37 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:37 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 07:16:37 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:37 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2002c5, 0x0) [ 457.964890][ T7532] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:38 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 07:16:38 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 07:16:38 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x180, 0x0) 07:16:38 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:38 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 07:16:38 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:38 executing program 3: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 07:16:38 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, 0x0) [ 458.613123][ T7547] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 458.676050][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 458.682715][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 07:16:38 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:38 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x181001, 0x0) write$nbd(r0, 0x0, 0xc2) 07:16:39 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:16:39 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:39 executing program 1: timerfd_settime(0xffffffffffffffff, 0xd55870162c620056, 0x0, 0x0) 07:16:39 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) fstat(r0, &(0x7f0000000580)) 07:16:39 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, 0x0, 0x0, 0x0) 07:16:39 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) [ 459.333633][ T7564] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:39 executing program 3: syz_clone(0x0, &(0x7f0000006900), 0x0, 0x0, 0x0, &(0x7f0000006a80)) 07:16:39 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:39 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f000000a240), 0x8200, 0x0) 07:16:39 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000980), 0x0, 0x0, 0x2) 07:16:39 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, 0x0, 0x0, 0x0) 07:16:39 executing program 0: semget(0x2, 0x30d2789700000154, 0x0) 07:16:39 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x26, 0x0, 0x0) [ 459.843047][ T7578] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:40 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:40 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x4, 0x0, 0x11}, 0x98) 07:16:40 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, 0x0, 0x0, 0x0) 07:16:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f00000000c0)=@in={0x10, 0x2}, 0x10) 07:16:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000c80)={&(0x7f0000000280)=@un=@abs={0x8}, 0x8, &(0x7f00000006c0)=[{&(0x7f00000002c0)="90ecee3cb00577148e7900e9d2627fdf4fa97b3d0092287604922567847350f0d1b261f1c0e4cb6e86f18abda1942bb48ec637df36afcd3c6a1f749ad90be5f349efcf511bf39fb0ce5da6a27dab1b0591db29fb", 0x54}, {&(0x7f0000000380)='\x00', 0x1}], 0x2, &(0x7f0000000740)=[{0x10}], 0x10}, 0x2018c) 07:16:40 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000004c0), &(0x7f0000000580)=0x98) [ 460.523851][ T7595] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:40 executing program 2: mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) 07:16:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000004c0), &(0x7f0000000580)=0x98) 07:16:40 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockname$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) 07:16:40 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}], 0x1, 0x0) 07:16:40 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:40 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x33, 0x0, &(0x7f0000000000)) 07:16:41 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) 07:16:41 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x1c, 0x1c}, 0x25) 07:16:41 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}], 0x1, 0x0) 07:16:41 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@in6={0x0, 0x1c, 0x3}, 0x1c) [ 461.313256][ T7620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:41 executing program 3: shmget$private(0x0, 0x800000, 0x0, &(0x7f00007ff000/0x800000)=nil) madvise(&(0x7f0000ce1000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) 07:16:41 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) 07:16:41 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}], 0x1, 0x0) 07:16:41 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:42 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000180), 0x4) 07:16:42 executing program 3: syz_emit_ethernet(0xe, &(0x7f00000001c0)={@random="79d6dca510bf", @remote}, 0x0) 07:16:42 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f00000000c0)={@mcast1}, 0x14) 07:16:42 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) 07:16:42 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:42 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 07:16:42 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000340)="17af311acc8af9cf2c2bdcb39d0a1206a9ed53e2a8ec4fbe2a926588f259bbed3a6fcd8f878dc581c3dd4593b1fe2e54ac33edd3f297b49a064c034182357eb5da733072f8e354beb51990bb8fc83a25a672aa2e20b2ea2024bd42f1e2aa590b27d637cbe81d4f3e5cae6978d7bb598f902d847a5576aa101e5035bb0cce0143be699a41ec5838afd742275a54b7fea5bf3db599978daa45f25411eb4a58f8513009e895eb60b71ae32e8223d33a1c34a26c1784796d869b307b94763622fd65e49fd3e8b381cb11752fa8102ed0140fe2b88acf01fbb0fbe8c931f256d094fa19", 0xe1) 07:16:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@gettfilter={0x1c, 0x1c, 0x1}, 0x24}}, 0x0) 07:16:42 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) 07:16:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000080)={0x0, 0x2, "dd47"}, &(0x7f0000000180)=0xa) 07:16:42 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 07:16:42 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:43 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x52, 0x0, 0x0) 07:16:43 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:43 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 07:16:43 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) 07:16:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000100), &(0x7f00000001c0)=0xb0) 07:16:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000c80)={&(0x7f0000000280)=@un=@abs={0x8}, 0x8, &(0x7f00000006c0)=[{&(0x7f00000002c0)="90ecee3cb00577148e7900e9d2627fdf4fa97b3d0092287604922567847350f0d1b261f1c0e4cb6e86f18abda1942bb48ec637df36afcd3c6a1f749ad90be5f349efcf511bf39fb0ce5da6a27dab1b0591db29fb", 0x54}, {&(0x7f0000000380)='\x00', 0x1}, {0x0}], 0x3, &(0x7f0000000740)=[{0x10}], 0x10}, 0x2018c) [ 463.795489][ T7681] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1017, &(0x7f0000000000)=0x4, 0x4) 07:16:44 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 07:16:44 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)}}], 0x2, 0x0) 07:16:44 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x9, 0x0, 0x0) 07:16:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000080), &(0x7f0000000180)=0x8) 07:16:44 executing program 0: syz_emit_ethernet(0x1ff7, &(0x7f00000020c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd602e88001fc100000000000000000000000000000000000000000000000000000000ff"], 0x0) 07:16:44 executing program 1: recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002800)=@in={0x10, 0x2}, 0x10) [ 464.632434][ T7699] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000180), 0x90) 07:16:44 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)}}], 0x2, 0x0) 07:16:44 executing program 3: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3}, 0x0) 07:16:45 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:45 executing program 0: syz_emit_ethernet(0x810, &(0x7f0000000840)=ANY=[], 0x0) 07:16:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) 07:16:45 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x24, &(0x7f0000000000)="80", 0x1) 07:16:45 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x25, 0x0, 0x0) 07:16:45 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)}}], 0x2, 0x0) [ 465.431976][ T7714] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:45 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:45 executing program 0: getresuid(0x0, &(0x7f0000000100), 0x0) 07:16:45 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x10) 07:16:45 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x2, 0x0) 07:16:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r0, &(0x7f0000000040)=@in6={0xffffffffffffff08, 0x1c}, 0x1c) 07:16:46 executing program 1: renameat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, 0x0) [ 466.163987][ T7731] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080), 0x98) 07:16:46 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x2, 0x0) 07:16:46 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:46 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002980)=[{0x10}], 0x10}, 0x0) 07:16:46 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)='0', 0x1, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) 07:16:46 executing program 1: socket$inet(0x2, 0x0, 0x6dc204df) 07:16:46 executing program 0: socketpair(0x1, 0x20000001, 0x0, 0x0) [ 466.982663][ T7749] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:47 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x2, 0x0) 07:16:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights], 0x10}, 0x0) 07:16:47 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x23, 0x0, &(0x7f00000000c0)) 07:16:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:47 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x20007, 0x0) 07:16:47 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x1}}], 0x2, 0x0) 07:16:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004c00)=[{&(0x7f0000002ac0)=""/80, 0x50}], 0x1, &(0x7f0000004c80)=""/221, 0xdd}, 0x82) 07:16:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x8) [ 467.887611][ T7770] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:48 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="da", 0x1}], 0x1}, 0x20007) 07:16:48 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x1}}], 0x2, 0x0) 07:16:48 executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0xffffffffffffffff}) 07:16:48 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x55, 0x0, 0x0) 07:16:48 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) 07:16:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x44, &(0x7f0000000100), 0x4) 07:16:48 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x1}}], 0x2, 0x0) [ 468.630257][ T7793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:48 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$inet6(r0, 0x0, 0x0, 0x301, 0x0, 0x0) 07:16:48 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400000002c2, 0x0) unlink(&(0x7f0000000180)='./file0\x00') 07:16:49 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 07:16:49 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:49 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) listen(r0, 0x0) 07:16:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000280)=[{0x0}, {0x0}, {&(0x7f0000000480)="b9", 0x1}], 0x3}, 0x0) 07:16:49 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10", 0x1c}], 0x1}}], 0x2, 0x0) [ 469.398949][ T7809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:49 executing program 3: fchownat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 07:16:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40083) 07:16:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x886}, 0x14) 07:16:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x20, 0x0, 0x0) 07:16:49 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10", 0x1c}], 0x1}}], 0x2, 0x0) 07:16:50 executing program 3: select(0x40, &(0x7f0000000000)={0xc40}, 0x0, 0x0, 0x0) 07:16:50 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000100), &(0x7f00000001c0)=0xb0) 07:16:50 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:50 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000100), 0x4) 07:16:50 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000200)="6717df7871bea78d2a70d1faae5e1a1d4343fbe6637a87ea995c6c312570d333e14f9a213686f003a29be3e5c2997c2b9386224e1b3b4cbf8f7f61a2a64d6cdc3ab95ee4db9e7993d055a2cbb5b9de9791706156a3c28a809f", 0x59}], 0x1}, 0x0) execve(0x0, &(0x7f0000000240), 0x0) 07:16:50 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10", 0x1c}], 0x1}}], 0x2, 0x0) 07:16:50 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000380)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x8) 07:16:50 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @empty, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @broadcast, "", @broadcast, "439ad6e7be1e95fa924f27f8a3a4c85d"}}}}, 0x0) [ 470.547743][ T7835] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:50 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x28, 0x0, 0x0) 07:16:50 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800", 0x2a}], 0x1}}], 0x2, 0x0) 07:16:51 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000300), 0x8) 07:16:51 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)=0x8) 07:16:51 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x32, 0x0, &(0x7f00000012c0)) 07:16:51 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800", 0x2a}], 0x1}}], 0x2, 0x0) 07:16:51 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x53, 0x0, 0x0) [ 471.418251][ T7857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:51 executing program 3: sync() connect(0xffffffffffffff9c, 0x0, 0x0) 07:16:51 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000000240)=@in={0x10, 0x2}, 0x10) 07:16:51 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800", 0x2a}], 0x1}}], 0x2, 0x0) 07:16:52 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c0", 0x1, 0x185, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) [ 472.101157][ T7876] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:52 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r1, r0) 07:16:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:16:52 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) 07:16:52 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55c", 0x31}], 0x1}}], 0x2, 0x0) 07:16:52 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000012c0)={@broadcast, @random="5f01f721bcab", @val, {@ipv4}}, 0x0) [ 472.727802][ T7894] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000440), &(0x7f0000000480)=0xc) 07:16:52 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) getsockopt$sock_int(r0, 0xffff, 0x1012, &(0x7f0000000040), &(0x7f0000000080)=0x4) 07:16:52 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55c", 0x31}], 0x1}}], 0x2, 0x0) 07:16:53 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@rights, @cred, @rights], 0xa8}, 0x0) 07:16:53 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000280), &(0x7f0000000340)=0x98) 07:16:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000440), &(0x7f0000000480)=0xc) 07:16:53 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55c", 0x31}], 0x1}}], 0x2, 0x0) 07:16:53 executing program 0: ioctl$EVIOCSREP(0xffffffffffffffff, 0x80084503, 0xfffffffffffffffe) [ 473.477568][ T7912] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:53 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:53 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 07:16:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000440), &(0x7f0000000480)=0xc) 07:16:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80}, 0x10) 07:16:53 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8", 0x35}], 0x1}}], 0x2, 0x0) 07:16:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000400)={0x0, @in, 0x0, 0x0, 0x80}, 0x98) [ 473.988338][ T7927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:54 executing program 1: syz_emit_ethernet(0x810, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) 07:16:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000440), &(0x7f0000000480)=0xc) 07:16:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x1, 0x4) 07:16:54 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:54 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8", 0x35}], 0x1}}], 0x2, 0x0) 07:16:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x2) 07:16:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000740)=[{0x10}], 0x10}, 0x2018c) [ 474.713115][ T7945] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:54 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x2000, 0x0, &(0x7f0000000000)) 07:16:54 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x1c, 0x1c, 0x1}, 0x1c) 07:16:55 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8", 0x35}], 0x1}}], 0x2, 0x0) 07:16:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1014, &(0x7f0000000000), 0x4) 07:16:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000280)={0x0, @in, 0x0, 0x10000, 0x212}, 0xd7) 07:16:55 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@un=@abs={0x8}, 0x8, 0x0}, 0x100) 07:16:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x401, &(0x7f0000000040)=""/232, &(0x7f0000000140)=0xe8) 07:16:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) 07:16:55 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da89", 0x37}], 0x1}}], 0x2, 0x0) 07:16:55 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000180)=0x2, 0x4) [ 475.636522][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:55 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendto$inet6(r0, 0x0, 0x0, 0x108, 0x0, 0x0) 07:16:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r0, 0x1) 07:16:56 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:56 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da89", 0x37}], 0x1}}], 0x2, 0x0) 07:16:56 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000180)='htcp\x00', 0x5) 07:16:56 executing program 3: getresuid(&(0x7f00000000c0), 0x0, &(0x7f0000000140)) 07:16:56 executing program 1: open(0x0, 0x480, 0x0) 07:16:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000180), &(0x7f0000000240)=0x98) [ 476.413857][ T7988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:56 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) listen(r0, 0xcef) 07:16:56 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da89", 0x37}], 0x1}}], 0x2, 0x0) 07:16:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1015, 0x0, 0x0) 07:16:56 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:56 executing program 2: r0 = shmget(0x0, 0x1000, 0x0, &(0x7f0000ff8000/0x1000)=nil) shmat(r0, &(0x7f0000ff8000/0x4000)=nil, 0x2000) 07:16:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) listen(r0, 0x0) [ 477.037724][ T8008] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:57 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x1, 0x0) 07:16:57 executing program 3: syz_emit_ethernet(0x109f, &(0x7f00000012c0)={@broadcast, @random="5f01f721bcab", @val, {@ipv4}}, 0x0) 07:16:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:16:57 executing program 0: syz_emit_ethernet(0xe, &(0x7f00000001c0)={@local, @remote}, 0x0) 07:16:57 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, 0x0, 0x0) 07:16:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000002580)=[{&(0x7f00000000c0)="35178cf87799ead869b6671df34e008f996a53ff5befe258744293fe993f4aadf7abc834b754f5d7b1d8558428320442f4c19ce358cd72e58f1a0a49702b9bd031a81238dfccd12ce5b4bc149d8600d58c611e3412cccb3e2419aa92d4a5b77774350b2959c22d396279495ea3b65a6eb9b2969966d5c5bb09b332f6229ff3d82aa77ca132e8a4fda2acd80b3654d4ccda57d48e110983bac6895d2a52c43f98211b134e8529983d11bc7f06db66d4c1f7ee5538f4e2464038e179fe40517ade25a453c8ef578f1c38f3f42d7fc71b6a4c0cc9da60681c", 0xd7}, {&(0x7f0000000040)="871b5272061c44dce03cb9b0fdaf3c5f0d927aae9f351c9f5bffc86654bb93ad0628781da5b864477f41c45c7648549174f11159a64805da", 0x38}, {&(0x7f00000001c0)="683404bc75526d2d06df1ef490f379a6676c57c75295d94b55febf0e79b4e6e9407abb5fbea47509d66d60f8d714db00d72953b0473ab1c0edb940ee64cf64f905aa3c299f7f8b6ba0e745c645a3899a83c6c5814e739d652001da9a0e96770fbc4db94c876bfb30892f10d55ae79397bfe6503fa18f128045e8fbbed71eae6be6570330e0015c8af78db8b14102ea960f8862a3707f45bc3ee5856b6765141e2f19867f81b1d6cc7fbe95469bf10eadcae3395a8e88d279e567c00fae751a0d19671b860fc27d02c5c1399c346de1190a309dfc772d7cc8f38a852b717a97c3", 0xe0}, {&(0x7f00000002c0)="ef3e6c25169910cdfe2d1507c59bb69a222111f0bafe5c82414961e6f713c149f80ebec51d99939d0eb726665b9673992eda995c92acb89e9ee35d9c055ab3436c58e182a1dd9140580d783c44035ced50265f30fe36448c4e306f221ca9f9a60f9f44940c7bc4ee577a5d46fde3de13f390bc73da6c2f81af1945fe797cdc3a07144c0cdcb0cdf98563424dcb0493ff92a10b942e35cc23d1713d3f6109a5766a49ea003d1c1519a4d10ffd7b3c123cb7edf59fe28bcc1919d07614b6624dad7b4e0254eb74b559bb7791bfd74b697cffc9df558d27ee7747dc3457e37286ecec8c84ab726cbe92688c4f", 0xeb}, {&(0x7f00000003c0)="160ac85e1bf8d2d7919b9171c27feb9dc5f6265aa28041088baba03ec0ffc15cd22aa86f45478bea5b08bc54650aea0bdbee7c9c20514134dc82279411503d872ffa3ced3b3d8c3803e0a9d79186ce775b14d2b6f6ebce99c9fd7b7f1f174c0309f0a279eb5c314013aedfb40d41a399bfef9a574ed74da3eea9d4ce71337f93f14d37839155eeb2c3cac82b4c3eae32e79b8945feea79b98a2311a293ec66e5d3a38c9dee9761db6fdb723a492c8d46c0f2", 0xb2}, {&(0x7f0000000480)="156a9b95c4fbe64d3e178b5d55bda5fbabeef75c037e", 0x16}, {&(0x7f00000004c0)="0325793cdc3778613fcad0935fbc5a10987c27cefbefeb6875ed4e506851eea17b2505b5036bc510debc37c3d12e70cc17cac3c58d7c9f04f05a687d69863abb8e5ab647ebc9baa5f05f8f43dd935b588e74ff6867a6a05fbe268df7130652de2fdae252ab594611c74a80a1a3ad6213d4cd45367c046f9937a9f5ec309caf1e69a5a3b60aff6b3e024d71a01417b9ab91fe14588c0032bfdf591ef46ff516e2ac65eff92e0e9f01f6410e11dbf5bbd2dc5933e210ab4709d5a9262ff235b4694740dcea5cf548afee8250d281ee91a8d422cb167622a29097325728076f3e98461a2840fc6e1f9074f21bc8e9ea778e30e93310191d67144baf28e4f56a0869e710316cf501390727b2e5b47edcba34ece2396ccc99aa52cd6f4b7faca5bbd38d74b72fe347fcc81842e6d4b3ab9eb9a60f2497560efff345aae009350f6ed1d5bc402d0f787cdd2005740d4e7884b5f7a1976e35e0689d30bd79a91353a712bbdb217bb669fa8bd37480496ea4c62a2a9856e21b8baed339b6c1c77ed80546865aba32c301afe106f53b5d788045b2d180af6b1525f83e1593e80311d796a54856f53bb22f8073c76a04bf332ff5d73e7e90976873562bec514aca6541ffa6deb848af7e30fd893db22b4dc40385f1f0763b19d89733d5e7f262faaa12755f1f30379ecc6c0e7129602fd3a726878b9c4f0acbbae7ca51d187a1fb7df62c1a28efd9cd6868f4b5b83a58fcb2669e88fcd95e69ef865727baea7daedfcb1a6966d37dc2b2ca83240c57935d22409222b9611744ccd2de5da3881e580ffdd72bff6602e2cf6d236a8fda6fdbf0824d865c3212fed20a236ad47c09f381848087db71dd73a5ae42a8670050d9666d643f8fe2aa1c6aa2d2707822c4e89a5d46424f2f4e594de09b8d90717993f6eea41d10491f48ae62059f3c6e72a4e3b33bd40c87c89a34cfcae89da5d6c5966c30241948bf5ce1528e3e9a556217c6860d24b121d03cf1ae851e756cf3ed78c854d47323eec5b3edca3432339e5cea7322ef97932d451944d635225992761163be075e3488c39eff2cedca47559ec8be0933f08b4839da59e9c192df997df139c809745bd1ea78af71ca5fde6a4a3166d0e5c8d9c3ba5f383546a90abdfe9d7073ef8b32eaf3e4555b1a5663809acc60d8d83ce2a114b2ec625350bf510743868c071532771cff37826f19b7be6445f8ec35968e9f07000c124a1dba3087cf3bb86d6a14deaa0c4f010f18b280fd7e2140f2b346118d64666aebb25ff677933816ec5173c7a5674dd4e137707bafa264c07ad951762ec02b4026a5b17bc01c67693375a3f6fe7b9d6dfba5174ee9193d7feb003ac475c6dcdd62b31a9ed0bc8cb038bd0803ecc7a081bfd4363471c67d0edb2f2e56b1c663ced0296d9017dc2f25f37046fe426a1182ecc90b5ca34ea809065d546f3af21e73f357cf0788cebd9548b28123b1ad3184d512dcaaffbef1dfa6c1bc0b4f1b7538af7d8b2c2f4eb757c05c03f39c52920d1d380c04671112cf931fc3d0b760f3c7847b863628c154ec752847ad5bfc7d3d33dbf1bacffd70a0b4f7ee00df84f4ec3aaa72b470cbe380e90ef5f78e8e5734cc359a680f52e9a41f40e7d7917590740d66ab10a23d1043fa53cb8add6043c40d74d1b705756b641652535596128bb763bba74b6b31f0ea1cadec4f4939e49614a3aea4fc459def44a453179bacbe46d5fcf6f0b4577d7d0eceab572e17994c56847702382e02ceff670c6150cc632d12304eca2a5f6b9a1f244f770414cc020b3e9b1174cb1704327b39e1331235f920919fd0f30f7ecd224f1cb0518d805d0d49bae6cd0edce2476983bd145f324ffa4205ca22c713c553caaf82be3ce5aa6ae21ce716a270a6ef5489480ce028c73077ca8216cbcf1a2ec7a8866eb78ce092ccd025ffe6cb87dc00718088b5e53ed013746fac08c679150fc8d9798ef5be4c1915bde6d69bc949c3d2af57c7c49dded7f299057fc6d830512bdbbce7d0abcb70e746dc0316e980dcf5e03dcac29615cdc6d8fb8c01737949ca6f54ce94fad11b7a0b90641e2581ab4cf450564b2fb3cfd3367337fe0a595983fd23ebadcd5e887cf36ed698703154df38bc958185ffb57bef967144ee1f722fb1c99da1446582acfd6d8e20e574709b7e383054f2a7bcba5c2edc344a79d571375dd17f309f37df89ea318f6acd5d1392772d6be31027e78ba359be14a0506c6f85b4e1f22431767691a0d6eef581206048210bb5d3d87234c346c864173653cbb31d6214903bd46dd1bed4d6788237e2788d2a803862d358f3bd7c13395e24232db93abb51adbd742d9de76d3ad11a18f4efc7a43cd745440b9d2e5c254db66e01e9d5e1d5eadb5aab184f59f8f322e33bafaf542651a70f0831ef8b12c78a50dcbb07f672078795d66c2db66a6849a9f449bacfa543d0ead774e5073376a3db82a78a18644e37e3895ddb1d4b41311572b35fba340a981f307f1992c3fddfbd99ff5a8ff9d06d816401d55b4173c8c6c3545504000ccd172f5d793c9261c0e5b71cc669955560b7a2cbcb79efcdec0de31b17542c952794e168af9d3878b542aa117ac167882a20b9a528bd7bacb1bc3ce8e2f32372fba0d6fc3bf51344f92575142416f46feae6ffdb4afbe0501886dde81782a6300cc77d4f8bf72695338870f9ea38c9f248a066cfa0c47cbd1b3883600834fd5678e03b41633a37e953d955da99328658be5ce77c441eb0ae96c34f29b106589f6df1267a327d21a079909ac88f4221f676a7f5d3b8cc8c84481205c1fad709e676349d9ce542c53341c238e90807e9ba01b6c1723d2eca0526faa2464569ef57e83d634f360c6f761cedfc435f2a2b1b50742346689a6eb8dd1d885b966f5cbfa9690d66744fa40be31d94584f26207a185e7b4e83fbe8de55103b034b7a38698bd4efa0d625d373ca10f990e975dca989966a79d8e0f218b171d82c967977e377c091fe944830aa5e7b5add2c4776cf70682ff6e2af66afc23155c907cbd3afcb18c33426c4d0528775575d18b7ba85baf6f80cba58543927aab6dbdcfb60b07debfa25e44114e82ca1ed64522d6573cd0980123058bc584a9cfb618f6c0af98c82a3b0e15b54037a49e1b13e41412d0d3eaffa51aaff5883f11ec548c7a4f44f6a6471e6f22bb0a775cb3f7c4b84c75ba4d1850a2014e04b35b2008e44de2ffe0d54f0ce637c817427e378281b54cbb19355b3a82fff9159589dac97857cd32a58a613d27a61f909b9d98f510876e45580d53a1cdeb7eeb5d7664f28f46af065efd36155b6728bbad7b8c61bb0c96f4d1532cbbe216604883dc4584b1d7f74c9ba15840b9cddd1d64a7132bc8f4ae564dcc26759d5bcf87122d0b0e22d5343e6a0c6a933741027947a4d1b329d2134676ee48fae1591bd5f6a916fb2454de11a9b5ea8a9f2d1097cd1bb309d44838bd1379123e25feec6a56989cf5875a06114a406bb07439db57dbfb1207884dcf5e08b5eeeabc1ac6c8a5831f934e4724ef48a8e3af2773f32e1f3ea08fd12baec95b63a053562af46e82ad6d47479a1fca797e534c0410a68baa10f4b32159c9d8be58a990e7f121244c351947e81bbc1bdd80e8830c9cf7822f4202ceeb97cf37a202c5ee05efeaa0b0f7ad3665befed18f21dbb7ce212f9b1edc16e5611ae6ca62761119020bc98855c1efe300b07b1acb16469d72e9882f2858023837639d0e9ed017d1e7a55bbef5ea607a2194ff44e714236b6fee19f15057b1fd702a76ba262ee49a41b536638d07d99966a06ad08560ebab481895cce58fb7ae48fefd678841437889b0a837b55fd52aa1527fa4c6235256b120a4c410047b616ce4411ca449ae86b6df35fe7d389b8ec4b34a70da3c084b27c1333e2e2b54ab0ef6a2d45ed96489346b167dd98cfc7045dc337d890db1e464a4bdce8d68f2802daed6f0628a9158d7d9a5504b6029fb83d0e29202f966bf563838c5c267590d6c0aec8006dd35f333022536a40b969f492aecb5ddf9212510b0ea61fd74ff71eeb224a91ea7827db90c35e2f63ed4fb23441ad79fb1730740ca231bf69d5471a84d6b94402640c98d6c0f2db8f3118a9004a63298f00d3f880735e74c8edf80f19fda47423ab5f156eed96777b54a31442f30c5b75c3440017a70d3ef19699495fda54c23b22cddc1a86119a93b146986404b8908d0920d3666de1ceec88b9e2f5fa8bd70eca8efb270b7b6e11b029e36a122bb191eece5c7c9587da34efbb550d7f9b15f2326e9a443a739e7351688ffed184c8a495403b65502d3899c96c0b87e9946e69b3bd7e3410f04571a5e79ea23b02130ce4b0592a321815b5d67b249432eeb57e1d412ca1cf0ee48d1faa74490ea3538ea8c5d7726303475549b77bae7f438198e4c8750052f7d0f5acc371c0e8cae1761f3869e5f87dff3faf20654fd2cc93039426b0861fe7f411fe54c9d5459491538a95d6684fe2e6fcbc1fd125f3c58455eee031f72a7f6eef9c5453fe06169791df284127689e8338e9aab5c2ae9933bd865365bdaf2c6a5defc6a55110860526a4f9fb759d79961bb635bdd135eea5910b279a28215d3f74f42ad231e948fd1944818ddcc72081e930872c8ad6b48da0da93eab0e2cd5858ce85265cbb88f224ade7f023a108cb99ee36f77ed44909dddb1edb46e8cc8336eb7382328235f7a48f1fd0898051f08c28bcb6e3b30547aef44f1e4c8a1aeb9e6dc2c6593c40927502d0bd40d5b1f09ad8d099df765391e9d73b0c88da409b161c4e143fe657d45cb62a12c0dd3acd5f1eae9d5f2feef28a8cadb5033afd3402df685d7378f2fc296f898934127b0d69a1d514789e450164b2bdc6f8bbb923a065b0b17ff151a416683feb3f9d4a57bde7ba40764997010fb8bab90485970271889cdef67028944bedfa5f07ee6f9640a4094b7c0b55896a333dd0bc677909c834603508355e7ea56504a80e8796252d6d0444d0d65e6ca9785af07a723e9cd58d45c91f97312a51e5dbaa91be20beeff218e400b07ec414f2890177343c9b7de0869afb3665d612fdaf844927b7b90bf0cd697cbe5943c1328a46db05ef63a1b60b27c90e6596357c51ccb3d4654edb59c3d046f55232c4e49c15f7b37324420267ce6a643ff7262912a15db613da648327d5fdd355c1881a355f22b123ab7347bc51d96143fad63be5d7e81b4fb20a7d03fc90622d70196a9b2a5942f7092c14161e231bf1d4a92a893029fc020e6d57e15e30c373e989dedd403d366e400481587b28402a0e204721a0b18285d6b191edebb0c3032c29729e817feee28094946edf90109ca814ff0aa51f9f4e75c5e7058629cdb9b46c8696fbd38df586c281c0034ae76eef4bd1ba815819f676867f430778b9cbefb0a44a9859be287daeb69769f586b6a5680eeefe9ff1cb5752b39e58cfe9dcf7e23a98d7a6a6662bad35c3ff52c4bb738843c0660efc86d89428e296fe7d9c0671c86701af812cbd1d60801f8bcfe777dfabd4bfb6007f0d1378f9e5a3b36d1dd34505588a293949c5d8055a5733cbf950a8ebbee074a1b0d32ffd9f04dea9f1ee265932620207ed20cd445d39d0f4a372e928dcff0a3391e1fdadf59577addbace436120a6a98192bbb6c21458898cfa0b4f09e1d7704cd5eb31eb7ab1633b59acdfd25daafb687b519ee6163a2bf2d9bb2fcd293fbfc4c226aa9e67ed611015bd1c60261d8c2eedb759885777b71d01dac71d6991de5b36d7cc2374ce2e87da8068abf07ef", 0x1000}, {&(0x7f00000014c0)="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", 0xc4f}], 0x8, &(0x7f0000002640)=[{0x10}, {0x10}], 0x20}, 0x0) 07:16:57 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x1, 0x0) 07:16:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000000)={0x0, 0x8}, 0x8) [ 477.767878][ T8024] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:57 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) 07:16:57 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000002c00)={&(0x7f0000002780)=@un=@abs={0x8}, 0x8, 0x0}, 0x0) 07:16:58 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x7, 0x0, 0x0) 07:16:58 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x1, 0x0) 07:16:58 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000200)="6717df7871bea78d2a70d1faae5e1a1d4343fbe6637a87ea995c6c312570d333e14f9a213686f003a29be3e5c2997c2b9386224e1b3b4cbf8f7f61a2a64d6cdc3ab95ee4db9e7993d055a2cbb5b9de9791706156a3c28a809f60fd660919", 0x5e}], 0x1}, 0x0) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000140)='($-\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00'], 0x0) 07:16:58 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:58 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) [ 478.534099][ T8049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:58 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 07:16:58 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@in6={0x0, 0x1c, 0x3}, 0x1c) 07:16:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000100)="f6", 0x1, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 07:16:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f00000001c0), 0x88) 07:16:59 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:59 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:59 executing program 2: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400000002c2, 0x0) r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) close(r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) dup2(r0, r1) getsockname$inet6(r1, 0x0, &(0x7f00000000c0)) 07:16:59 executing program 3: select(0x40, &(0x7f0000000140)={0x6}, &(0x7f0000000380)={0x6}, 0x0, 0x0) 07:16:59 executing program 1: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 07:16:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x1, 0x0, 0x0) [ 479.531644][ T8070] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:16:59 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="b806083f1be4", @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @multicast2, @empty, @multicast1}}}}, 0x0) 07:16:59 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:16:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x2000, 0x0, 0x0) 07:16:59 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:16:59 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000180)='htcp\x00', 0x5) close(r0) 07:17:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000180)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000100)=ANY=[@ANYRES32=0xffffffffffffffff], &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000080)=0x10) 07:17:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000), 0x4) 07:17:00 executing program 1: socket(0x2, 0x3, 0x3) [ 480.167991][ T8085] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:00 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:00 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet6(r0, 0x0, &(0x7f0000000040)) 07:17:00 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:17:00 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:00 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000080)=@in={0x10, 0x2}, 0x10) 07:17:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 07:17:01 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r0, &(0x7f0000000040)=""/46, 0x2e, 0x0, 0x0, 0x0) 07:17:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x0, 0x9, 0x410}, 0x98) [ 481.228800][ T8106] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:01 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x400, &(0x7f00000000c0), 0x49) 07:17:01 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 07:17:01 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:01 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1011, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 482.083242][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:02 executing program 1: syz_emit_ethernet(0x3e, &(0x7f00000020c0)={@broadcast, @empty, @val, {@ipv6}}, 0x0) 07:17:02 executing program 0: futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x0, 0x8000000000000000}}) 07:17:02 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x23, &(0x7f0000000000)={0x0, 0x0, '\x00', [@pad1]}, 0x10) 07:17:02 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:02 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:02 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 07:17:02 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:02 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 07:17:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000000), 0xc) 07:17:03 executing program 2: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) connect(r0, &(0x7f0000000140)=@in6={0x1c, 0x1c}, 0x1c) [ 483.040003][ T8148] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:03 executing program 3: semget(0x2, 0x0, 0x61) 07:17:03 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:03 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup2(r0, r1) dup2(r3, r2) connect$inet6(r2, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) 07:17:03 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), &(0x7f0000000040)=0x98) 07:17:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 07:17:04 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000280)="d84f1cecccab04d87c81bc5c12c607a2f88415889e7e67ab283b80e0537b8c0e101f4661ea754e5f3dd78e1f37d9374257707af8a3b00a96e62184b9ee03a32f4e6ad27d7fea2b57d086cca9ba1aa5fcc1049adb3c410ac2e47fb67d24cb1e7d44788ba942724b54f2f8325e1ec3179dd57551861652204b324ddb1e488cfa63b28cc736a60c12dc236ef796ec6b35323197a9c14fd15d01295563c7cc6e30f17b4057a0c80dc811460dfca4b7cbb9e3201f861ec566927d540d8c072e50c6b7328958929c5abccd9a202fcfd02dc8b3f3a0c086645e2fd8da52fa36b4f79ddba926b8cf87f95148ab47d9e2f8ae2a9bb977e2bd5b9fe6f6296807241e0db3947655a1567a68590b5339c1b905d5ced14aa49071f9d9da7dd4b1937398b304a301c6b0cf903e343665b6c66408b52f88096f4dec1a58e54db784730890c716946d27644f8367ad3cf4d68a32ecd95dbe9f840a8538bf79f2e20d20c44c475243d9a731d2edae37bc1b4e7c3758ea2fb8d13a933a1793e61ba8fd25bb47fba96128cbb1a0584f2dc518a2622d93df8ea674c4ec6f0540cbb8319f3aa458de4cea7241401c1e52584cacb1dd7ce6b87814492dd8dcb22b790e67ca40217e5e395f081550d96e3e346273c76a6be4d1ce7668454b98ec9560053c75272488739a7f7c047593b998fb2b1f22a3355ad8f2fb6789aa48ecb2be612b78206d187b11ac2abce92fbc20d9997c02e133a5263d3b91146e1550a41e295acaaf1afba77c067bdde4e13ef414b689c2d9d9f893d556e7a8865b3dc200b0b813c163625e5c62aac43b48df7c280a80e70e5fd8882ff2e3749209a83c37450a245f5b1c3fa1350dbc71d6303c98f5739f6a328a54e94bc7ef2fcf51555a5ff89c2ecfb2e4f840d8189b7daf65f223f2361d5c947e3e01d2a2c3555062e614e79c5b5030360edd1147416c5931989b3efe48f4bffddb0eee0d1d7c5e28143ccb632f02480435bd8cd5d61b4ffe806b0799295fe495fc0fd55a9c672b8e8a67af4ee5b3f8df3480022f7cf2a5fe728374330c138fbea6cb1626c5c5641699258082ea6fa38bc96d3cbe2a7256b4c3046f271dd739d15f31cbb0daaf964f9e2ea6090910836cde70c4e9a70a700c71b94a8a9a7f47c45a6fa73c6448406ecdef0884f98dd1956f7f7da0770d548e0aacf791f6b9128df915da8c8296e7c5725172870c2c6d8b1ca64885ca0d7202488b7eccdd6430ea10ecda9e2e6ab00aba6da7071302e68ef8eb1278bec00d858bbf16bf003685e16c02af2505b5d695b3a9a8663fad24ab12ab2836f246bcfe9fdaea71cf482a8df5ae621bcc792bd3237ba95ec3953c1240b5b51fdf0a2b95e4308a479a88ec77bd07f71f10eeae361928682c55705b8df624da86faf4b65953a209117b79938685a945ee9f813371b6a322aed864f2dca8180d5743e417bc6346d75dffd0271c9f139a159bdc9ecfc32bceaf499c36733168471c8948edcab111f51174eee151e246b5108293a0d012ad2e71ae23f3e143d7731ccf1de13b99ec12acb95366c390d60827e864bf12f0362517ff0e35233924d1c3bc3eb6c15eef5354bab153abc7adbab79b1ab1902ca2552ee6d90cadf18cc9be7f6c5ec4c1432f80e00b96bbe5df9498d3fc830e3543d2d8226394e14416c6ea6ee431fe9f3491b6c61735539ef620bb409b83f443a9fe4acdeb87cbc3036ad3f2fdb6c4c9971a13904de9265d08a4e5ef306085f5ddccb8174d6ce4b7951f939dc053a15a0c5f8588e9ee998ec8c69ddb4b579d6d3a3f6561acb0a16496f0875af8b2cb0df5a26ba39861ceea97262ad3a10d2cf92eaa065f47d55dda2be87130eadb1e3acac4f80f2d31328206c2e383b5d77732615fdbc56ccd16d2e47632022892125487e13a853ee199ad5afe39e134347a61196efd1b5dde2f31cc95329a3e1883175f5e42ef38e0945405d4ac72528e55f005f85d643e1e311b8b9662c10b272349762df0ad2e9e671d98c82d07bfdb2bb4cac8280eb1a0053a63800ba5288b8dba2dd5c99134f08ef71ea3498056aaa44f12bb9de334a352fae77bebc8b29dcc7fc275dcaffed698b79da1993da2087031709e2d1676dce112708163a5fcb6eb440c9ccdef9c2fd9e766bb24487456074b02729e33ac950145b7ffb9e49849f77857ac0ead8c3aa54fc6b1bd0186ccd647b6546500e0aaa283a0b70635fe37f15c8375448f4cbf9364d24bf95fde20f447a2f61a686abb28565c8dbdd83a0e2b1a3c72db5458f353c017d315b4369948b67636b99f771a89b2bbb1411df8f097c138776dce427a7d42cce1300f380edcaee60fa7de25ab11fc9c225ef5601d4066e6166c4b46900077d19b18f561db3ad078e8db13a110e23f90b5984be8fb7418c676827c747531db438b696f653a7bc4df45d4d8c6582ab2c9e15f8837180993a366764f37df6bffb59e17067a42c96ed5f05cb6bbabc824815c21069c66cab460f17e38ac32c2c1a608555f280aec2f17e5be30847e73efad5029097a72f63bdcb939b6690034f765724054678d8da076a179fa3557fea8ba99a3bbb74a956d61cae5b3ea0608aa2785a63695842dce283c8c91fb3176298465e9bab37f7a00a6287f0357034af11dfa680930d77c665aa1d48804fa57e9b19f2e0e6602a63e58e2d95100450520d9e585e32a24e9c56b3fd7b5a3a054a92b3d121aea5748a773de1ed510572d17bf80a514ccd84fa1c6c1dcd9195d63e4ee039e4187742fc1b1b26d19f43abe3c3dc996cc7f635c8e86c391df5ba4a6fe707625a888e852da2222340db85bac30877554b1168c080e8b01cbb56d68faf695175f222d9d8c409cc69e8b5423c861edae", 0x7f1, 0x81, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) 07:17:04 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) [ 484.316029][ T8168] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:04 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) connect(r0, &(0x7f0000000140)=@in6={0x1c, 0x1c}, 0x1c) 07:17:04 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:04 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000100), 0x1000000000000034, &(0x7f0000001340)=""/6, 0x6}, 0x0) 07:17:05 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:05 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 07:17:05 executing program 2: semget(0x1, 0x30d278973c309d5a, 0x212) [ 485.460945][ T8193] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:05 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x100) shutdown(r0, 0x1) 07:17:05 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000300), &(0x7f0000001500)=0x8) 07:17:05 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 07:17:05 executing program 2: r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r1 = shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x3000) shmdt(r1) r2 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r2, &(0x7f0000fff000/0x1000)=nil, 0x0) 07:17:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:06 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:17:06 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000280), &(0x7f00000002c0)=0x8) 07:17:06 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x180, &(0x7f0000000180)={0x10, 0x2}, 0x10) 07:17:06 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216", 0x12}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) [ 486.375857][ T8210] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:06 executing program 2: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r1, r0) 07:17:06 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1016, 0x0, &(0x7f0000000280)) 07:17:06 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216", 0x12}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:06 executing program 1: syz_emit_ethernet(0x1fff, &(0x7f00000000c0)={@broadcast, @empty, @val, {@ipv6}}, 0x0) 07:17:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1018, 0x0, 0x0) 07:17:07 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) connect(r0, &(0x7f0000000140)=@in6={0x1c, 0x1c}, 0x1c) 07:17:07 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000200)="6717df7871bea78d2a70d1faae5e1a1d4343fbe6637a87ea995c6c312570d333e14f9a213686f003a29be3e5c2997c2b9386224e1b3b4cbf8f7f61a2a64d6cdc3ab95ee4db9e7993d055a2cbb5b9de9791706156a3c28a809f60fd6609", 0x5d}], 0x1}, 0x0) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000140)='($-\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00'], 0x0) [ 487.133308][ T8231] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:07 executing program 0: r0 = socket(0x2, 0x3, 0x0) sendmsg$unix(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@file={0xa}, 0xa, 0x0}, 0x8) 07:17:07 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216", 0x12}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:07 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:07 executing program 2: r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r1 = shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x3000) shmdt(r1) 07:17:07 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf", 0x1b}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x400, 0x0, 0x0) [ 487.670750][ T8244] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, 0x0, 0x0) 07:17:08 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf", 0x1b}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:08 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:08 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000004c0), &(0x7f0000000000)=0x98) 07:17:08 executing program 2: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) connect(r0, &(0x7f0000000140)=@in6={0x1c, 0x1c}, 0x1c) 07:17:08 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x150}, 0x28c) 07:17:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1004, 0x0, 0x0) 07:17:08 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf", 0x1b}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) [ 488.508929][ T8270] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:08 executing program 1: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) fchownat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x2000) 07:17:08 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @broadcast, @random="3687a689cf25", @remote={0xac, 0x14, 0x0}}}}}, 0x0) 07:17:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1004, 0x0, 0x0) 07:17:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000000), &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000d80), &(0x7f0000000e40)=0x88) 07:17:09 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:09 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef", 0x20}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:09 executing program 3: syz_emit_ethernet(0x2b9, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd63e7176802833c02fe0000000000000000bbff020000000000000000000000000001"], 0x0) 07:17:09 executing program 1: sigaltstack(&(0x7f0000ffc000), 0x0) getresgid(0x0, 0x0, &(0x7f0000000440)) 07:17:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1004, 0x0, 0x0) [ 489.478873][ T8291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:09 executing program 2: sendmsg$unix(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) 07:17:09 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef", 0x20}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:09 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:09 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @broadcast, @val, {@ipv6}}, 0x0) 07:17:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1004, 0x0, 0x0) 07:17:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x9, &(0x7f0000000040)={@local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, 0x8) setsockopt$inet_mreqsrc(r0, 0x0, 0x48, &(0x7f00000001c0)={@multicast2, @loopback, @broadcast}, 0xc) 07:17:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred], 0x68}, 0x81) 07:17:10 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef", 0x20}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:10 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$inet6(r0, &(0x7f0000000040)="e0e6b2f25745a7c8e7f3c3bcf668bbca10785ea383d6bcf2bc5f68d4d5e5780c18349f71d70a029f410237465b291fc6cd061e3ab0fdf31f57ce5826e68261a3a0c1d317b283215f79e581334f438556ccb50933b9", 0x55, 0x4, 0x0, 0x0) 07:17:10 executing program 1: select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), 0x0) [ 490.399109][ T8316] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:10 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c6", 0x1, 0x0, &(0x7f0000000040)={0x1c, 0x1c}, 0x1c) 07:17:10 executing program 2: syz_emit_ethernet(0xf, &(0x7f00000001c0)={@random="79d6dca510bf", @remote, @val, {@generic={0x0, "e2"}}}, 0x0) 07:17:10 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f55", 0x22}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:10 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1011, 0x0, &(0x7f00000000c0)) 07:17:11 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0xfffffffffffffeb6, 0x0, 0x0, 0x0) 07:17:11 executing program 3: getresuid(0x0, &(0x7f0000000100), &(0x7f0000000140)) 07:17:11 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f55", 0x22}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) [ 491.119666][ T8332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:11 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[], 0x1f8}, 0x0) 07:17:11 executing program 3: getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) 07:17:11 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="eb074ceea531", @val, {@ipv4}}, 0x0) 07:17:11 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:11 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f55", 0x22}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), &(0x7f00000001c0)=0x98) 07:17:11 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="551e"], 0xf8) 07:17:11 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x25, 0x0, 0x0) [ 491.867593][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:12 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 07:17:12 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f", 0x23}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:12 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x284}, 0x98) 07:17:12 executing program 2: open$dir(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 07:17:12 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:12 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x8}, 0x10) 07:17:12 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f", 0x23}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:12 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x51, 0x0, 0x0) 07:17:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x80, 0x0, 0x0) [ 492.707990][ T8373] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000000), &(0x7f00000001c0)=0x98) 07:17:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r0, 0x3f, 0x0, 0x0, 0x0) 07:17:13 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:13 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f", 0x23}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:13 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg$unix(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB='0\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000006800000000000000ffff000003000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT], 0x160}, 0x0) 07:17:13 executing program 0: getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 493.391130][ T8390] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:13 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000), 0x4) 07:17:13 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:13 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0), &(0x7f0000000000)=0x98) 07:17:14 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x1, 0x0, &(0x7f0000000240)) 07:17:14 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:14 executing program 2: setrlimit(0x0, &(0x7f0000000540)={0x79b3}) 07:17:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000440), 0x8) [ 494.217656][ T8407] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:14 executing program 0: select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x1}) 07:17:14 executing program 3: msgget(0x2, 0x8a) 07:17:14 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:14 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:14 executing program 2: r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) 07:17:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="c855455a208eda858e3299a9c9d19eb9eafeb3036ac84b46dfa2ece8cdb41f7a76796a8919295a4768cc2e6cfa4e7f884cbd0ac325de62a9d63287d79544f902876f5432432b72f485a8800146b8e9e475c06aabe8a6d11c544aa367709c03af4ee08a3919695a2ae36520dc72248608445ca54fd140bf59a959f43561071fb14a2e6334b5cddfbb2476c21f", 0x8c}, {&(0x7f0000000100)="f43c86643b8e44f857aea618b4c65416e26a03a28738943e7f37fb9d2f74d67fc0c3fc05f9ef50a629be99cad8bbb368d4902f257654a5bd972bc1b28594cc076a24f4a2be8d", 0x46}, {&(0x7f0000000480)="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", 0xee3}], 0x3}, 0x0) [ 494.870399][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:14 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) 07:17:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000300), 0x14) 07:17:15 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="c855455a208eda858e3299a9c9d19eb9eafeb3036ac84b46dfa2ece8cdb41f7a76796a8919295a4768cc2e6cfa4e7f884cbd0ac325de62a9d63287d79544f902876f5432432b72f485a8800146b8e9e475c06aabe8a6d11c544aa367709c03af4ee08a3919695a2ae36520dc72248608445ca54fd140bf59a959f43561071fb14a2e6334b5cddfbb2476c21f98590ba6", 0x90}, {&(0x7f0000000100)="f43c86643b8e44f857aea618b4c65416e26a03a28738943e7f37fb9d2f74d67fc0c3fc05f9ef50a629be99cad8bbb368d4902f257654a5bd972bc1b28594cc076a24f4a2be8d", 0x46}, {&(0x7f0000000480)="b99f99a10fd5bf6ceb2e62b5b833ee7c785a38f80181f3a4d00aada8d4d154c9f06c809760e51b0f6579e360a0b2e814e009a4bafe81f8c0b1d92f2b93cd7aa5ff7dcb3be7c154931e43fc30f56e8bb62270ae220ee12d65f25b69be4b8bcec9f6b5f93febbf006f8e00f27edeb1f7fc60b78ddb8341b2df878876324d839ca90f1c2037b9a4b0e627371fba91949fc33f641e73d402699b773d6e5ba02379b83b2b320c9bf9d540ea0f293370dd58b1b2a7350021578b91a23c8d8ec7ec86b423815ee9c08a72ced868753abc491c9efe93491babed8b9abc9214a3e02be67824d7679429fe4e0a1885f07cab484d3dab6d820e95b8e14eda4be63e5fcf8cd19c894591dd8bc519176ff46c23bc8680954f7a3f80c500e005fc8c1d5acad2aab662c1f9dbd8d4516d93622acd161a2c5239a336eeb92bbf82b40281d486fc3d445edcc766c7b3e78c7e1b8096f53001772b42a7b4e645b53e39afb9c2fce3faec78987e28fbd07f78220ef5d9f335492dd8d169e5baf5cfd32160b207d041cb15f7475630c89bd26d610e0564e62d657baed50a356da81aaf737efe5c7e7d6d775fdf95ed3f8b82c4d285d728cf907407bbb37fcaa5bcfb1e4cb8ff65f7b4edf5aba9bc6f7689cfbd1430123648edcc6d0c66d4aa2a365b74aa85ca8560b08d3b014397fc3626a40317bdf8090008589dabdfabf0ce4d204ad7df9ad5a07dae45cb1ecd3df9ed971cba070ab521ef242aa73097b0237f01a07caa82b01c143427ae04409396a76ae4a884c4b1994909a6549135d05b99984e728d517a7440d9c51c115fe9568ebceea82b5726911d27fef6e470946d31d8dc2e3da9d7b907eaa110cc517c735331e4a0ee67ecb0785c55247099ff1b9fa08926cbe2c72ebd26b5ad6f324f01ca5b48b7820164f0e521d5b9b246d728894cac9d8da1d3df8b2de347e9bdcc8a00c65eaca3736de8349fde2582ed771aa47dde2e90d063f799872a01fa9e3ecb154bfb11cb97b05cf315a482862dfd2255105733477e96d3f2fde98d431f785a115d929364175e2423f0f15a75189a65d19ee272735d1b83b94384d0b87ba4c60e3730730a4f782d5130567acb4024c88b90d3a948cff73bd612a58891f02223f2586a16b667cbcdba12c870cab02d1f3164fdf84b64f097116ee10de8bb331e65b11d3fee399ac7b1ec46482aa718cba56808d5e78a26b263b9b04488c1fc59874847d09b61655d399c3a1b4f4d177d54582d70be4931bf5b2fbe161e4c72d36d0c33eb5098f9e15a0f5f59e35eeb7bc04d0f4b385687602d2980b181180d8b0f15cbc81e249703e0025825ee9da4123f3fff0d65667050e3201876a3aae8479a1da0ec246ac49840c65ffb6ae059349ae86d5bc3d267f128090cecd9b7f599f5c3726639ac65c3386dabbf98798d2075c0d01192c195dc929b4fd0f0625725e89670674a9c2cacf7c0ff374f832161c12d84e87370472c1b46dcff373bb6ae9848a504bb7e17e408441e0c5d3c1b587e6603efe03bc77c5af6130b08c6e653c4357cbaf05565f8f0af1ac1b8d88a813eb088fddac4d91776f6b7651567a00563c12210e09cac15d78d61e0dc39e57b5b27c5f2524c7d7992604b3e5be3e4bfe83801b2356fe27bc90183504ceea80b6bbc7ec03dcb0d39ba202c70b8cdb47937aff53aa25ee8a5882c20642216863e63ec430971f5dd9eee821325766b11f74423e0ee755216e9ac3845890fa3c688e723436ccfeb9881bef673cf2dbae1238fe3a0ef5d28c34d13fdc3be33b0df7ee6a161ff070c8bf1f01cb4957c65038ee7d36d7384ffa9c97c70c0d2bd677cfca3c6c40138ad94c53322c1f9d68d4e36acbc3e507f23cc3a41c0c9632d355d0cbeef7bec82515209e2f1d2612bd5962cb610fa67063f60eb6c4b518923a22cb7f2a6a7f0180cd81e3c747fd33c5c9f98b96e23934c52f22a48cc7183a53a302b95376a6adfd7d882287d16f3d1fe5cd7d4c53d7b591d19388c5ad115ef89021624e5314d162507f4eaaa0e6b0b800c0dbc89fb6df9d793be2601685618d1995ae23f84dcc4c9114b5f3970a8261e6f0d87aabcdf6ad752173b289d62728ee8655071939e38a71171186b4f63d6827634951a0e9305c9ccf3911e50562d1935a1719e2ed846e588f07694af45d7403cef94b2697f239e0f6cf34941a333217743cde7e0d2d9f5508cea94e6647ca6ae161943b3e86bfc46d58b931d2cda2fc1e91f19180223e715f5444dada21a22ce52cf3155b498e8158a778eb06adab9f60bed86228d299b1bf286bc1c41eb7ac7144e620ef18d45b9cfde3bacce565dbe60c63e579603937e0d7025cca8be5be8c8743a3b26e9f6bce0c646897330ec57da3ed7b41db72199732ea065d9dbd5dcc64ba0a021a27c1df7a4046bc74495014bbe4586d531d2ef09b5dd667ebeb9d6fc1b054f647970dfe8d9c1194de20c9aca354c9d0e2be851e4788667f946574ed09d5224c80d1b22da739bbb9b527e8de2f013db4b5f12038713bd8f0924e2936c5166d8d1362e8a111d96f9d25b5d7f9fdbd8bbdb74013dfdee076eb80e4418bb66add55624f0defcc52f1ef608422e963a5caf83d4047e05cbff624be6bb5350ccbf09752ae63529f2080ce053faa1b5f430315dc023d906a62b242dcfde47dddf5afaa78cd2659863478ed9a968766ada1364469f210aecf1a035835ca5946a1d058ed7bad0cec0cd3988f9dd1c67a7b8ef27be773b009ed298a8b549c6190deb383fba5d180c06bf8029897b078dcf6df391b92e7a9a5a6c23d7a824e32ebbb9e1d9d32723fd37d626610bb9efe56c3385702f3c51f30765f0b5eb4b3ee36f9072c8f62b4420dd3f499b5682486d72b6ce9f3aee14100d848106c61b5e8c4a6cec81d523f2d029897c14a7dabd3c76acd6439d9a487aea4a8e3f20f1cb6b064a98b726b3c71878268c6ae046f6a9692dfa4c0efd3662f6681493f4787f77c3b148f0b54ca1f810231b568f651b5dc4eefa974f5ab3d7abbda24de3218fea35675db055fcd08fcd4fe8cf574e472115c4bf2dd49cdc5f4f2d4aac0b80577f90ae8efbd043e5f696800fcc0fb21e8eb3843507b1bfcfc5130e7adca31cac6f37d80ea4bfa68dc6772d8303826e3fd207940dc66856790b93c2dbc11403421cdb317be41efee74a799619f22e05e243f4f91178dd67a6306d5da2ce1f67a1b759a66fab5925f832ba4def64e5d8a319224644907f18c5b84f7da422772b5f0fb81357f042b60c0cb411f0494b5b1daa4a90f3c1b2a812fb8507effbd360b0b9577bfc3bbd0d7a3054ab64db222c8c96a053e7a6e20e04ac91fe8d85b03894c747bb51c3592a2011d59223b0e573066167d78d944fc74f280ccdb2247a72f988ae2bc7ccce7ee5c4f442b775a841a02fc60d2338245639ce7ed4bda0dd9b670287c29a1652c47ad9257f4b40b44dafeeb9ed5e11d0d5c1eac295e25bb3cb066e5a738dab3297f4f9b81b1a5b2f9ebd6163680a6c65e37f936da351b0d361b61db1628eb4523bbc116eda50b56a7c7aadf7ee96c1833f09d43c19cb9c4fd3994c60fa87e833ad3666fea7e59cac3ccf487049cd2d239526970553f6a4adacf2b0055b86ffee9824cb77cfa62d9e7fb92e7daba4101fbc516679d8e9986d2e89d8632c6ac7e9d6a54ad1ac68fbb4c2451cedddeb2b770f01829644614f276110fb26131bded2262ee2ebda9ae308f8a5077d165b8cb16e3a2d965798e9cc44ff50ce535962b7419778b188e25aff38ae7034856f646617f8d00f8382d76674aca7795ec449ebec6fb1f50a3e9ee7d445d130820fa9148827714139133fb933c4739f02dd135d71cdd10dddec72c1ce28cb5d550bdd06e56ea0b65b68fe7cbe89f3c8c0185f6836734ce25572a8ff1a82cbe2719063512f9a0c3eb8875b35c2fb0b5b85ea670469369f544ce6db4f6d624dd1960138a703734974798389b859ab07217eed8dd3b15c9dc488567813ed7ef9451221ee5567a3b88e5391bb31e19b9460f890c20f0707cbfc92cb189e4f727ed174a5472e8f0713a7747b8862567a9fc35c8945516f41bbcf85a94628ca7a32426aa39bf698df7e608ffd110f67085e1ad5069d43bd7bef3f86a0e445e9ee4ae1c1150b0bca3d1d7fa184b6bab0f105ec31c02c72e1474d7c735ea403f20a4cfb6104a758f09800b08290eed67b9b8c8c814568d3349afd0364eaf8b3bf952c4b2c972ddaad99d99fc00266e4bb57d7f62421da5becaa63e36ed0113f1dee4f01ecf93db5a105f1209ff65044661d0a8e7d88e228cc09bf8b89f93ca9e5b0b5f8b996ba3cc653f83537a899a755dcbdc15f4133cf9cfc2c648fd4b22776ba0f6f2bea53705344ca41163929daca0a305cd3c7732a12781293df09fb37ac8e9283f7ba140218db43e5c82f1beb389cd278585dd8f565f605ba8d1028c4329febe89189addb7707470ec52a56f31a7b7f8dc86991331b63574d06bd9c90c995850abee5265a9424f5c8291f0d12cec152774b88fee2b1140fcae79d397800ccdfe2d85c383b7363de92ddc3860513ee31601640d7cd86d283db4a6698e77c8319a2e70ef7d70e6230559c4eb63db210637fa48f4f6f72254b62821a029e922b8c5c658988f154bcb9e665453685ebc568aec535e5292553fafc5f3ddd2489374d8c9d269c6b4f3d4af99fc9b26f6e5850b7d6ccf42b0a9861d621aa6968cf213912cc3c48193e3cb387cd8d5071b06983cf888a538ae49f2620b4bf38445c95eca2ec3718a3c41eb7cb1a3b3fbe33b7e9176d5ebf7d39b83090cba47f884e856d697a9105db68ae6a7e3e16c9817039c06ad61e5d5e3815ccd0643e3e447213c092aeb7bff9d7d3f1aadec2ef7d2b5df67e9a81f42d615f20889341bd5d844d93c61c92b78de9c4bb83456f008ff39f903b6c1dada77d2e33643b24eb518046309b03b2366fad053213d95b76fff0da9deea98551b453fda1b6f580939f2bfdf12594b09a19ac90a5ede638d5b2909817bd1d91fc6a39a1382d440a49299038c0c9b26d8dd5c226037d8c4d1459bf15c4cfd206fad0054c41afe3977c72059ba37c4e03a7a2c5e33722d9888e25bfa6175e34a79834c4a11f2158dfcd6e60006b6fc9c540f48fd5c0c61604039f6167246a2acf5fe4ac84aa41c556e5246fe8afa3ae289b85d132ed6738654bd4640b47cdaaae60a1d79513fa53f13e3f3b7fa9ec54298fb0a20256e20a8e19084ea270945a22e1d172ea67d1b3daf99b0bbde0ed39af840c08a544e9b7ae2df5f957c5ec24f5881c83ee7f48946d34322fde8821c519f925afc43cf98f921705cc00d3f90595e652d3045239d175ec3f9576e45bd3cfdfe5d948c5cbd6", 0xedf}], 0x3}, 0x1) 07:17:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000180)={0x8000000000000000}, 0x10) 07:17:15 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:15 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:17:15 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, @in, 0x0, 0x0, 0x8}, 0x98) 07:17:15 executing program 1: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7) [ 495.624210][ T8445] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:15 executing program 0: r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x3000) shmdt(0x0) r1 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x3000) r2 = shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x3000) shmdt(r2) 07:17:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x902, &(0x7f00000001c0), 0x4) 07:17:16 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:16 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:16 executing program 1: r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r1 = shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x3000) shmdt(r1) r2 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r2, &(0x7f0000fff000/0x1000)=nil, 0x0) 07:17:16 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x1a, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 07:17:16 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x5, 0xffffff86, 0x1}, 0x10) [ 496.305913][ T8461] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f00000003c0), &(0x7f0000000400)=0x8) 07:17:16 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:16 executing program 1: fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x2000) 07:17:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x26, &(0x7f00000005c0)="210b0acf0d0ffab0a1fe24252eb0d3bb0977c283266834e1452ec7ea8f7e69cd", 0x20) 07:17:16 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:16 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x32, &(0x7f0000000340)=ANY=[], 0xf8) 07:17:16 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) fchownat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0) 07:17:16 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000000)={@empty, @broadcast}, 0x0) 07:17:17 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) [ 497.113138][ T8482] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:17 executing program 3: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) 07:17:17 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000000), &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000180), &(0x7f00000000c0)=0xb0) 07:17:17 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, 0x0, 0x0) 07:17:17 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000080), &(0x7f0000000140)=0x98) 07:17:17 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ec0)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000e00)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000e40)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:17:17 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)={&(0x7f0000000ac0)='./file0/file0\x00'}, 0x10) 07:17:17 executing program 2: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0xb, &(0x7f00000027c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 497.818057][ T8503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:18 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c4", 0xa}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, 0x0, 0x0) 07:17:18 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2}, 0x0) 07:17:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip_vti0\x00'}) 07:17:18 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:18 executing program 0: syz_clone(0x200900, 0x0, 0x0, 0x0, 0x0, 0x0) 07:17:18 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c4", 0xa}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:18 executing program 2: syz_clone(0x1100, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) 07:17:18 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x145000, 0x0) [ 498.506521][ T8523] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:18 executing program 1: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x14, 0x0, 0x0) 07:17:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'batadv0\x00', 0x400}) 07:17:18 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c4", 0xa}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:18 executing program 2: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) 07:17:18 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:19 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={0x0, 0x0, 0x14}, 0x10) 07:17:19 executing program 1: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000340)) 07:17:19 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000002c0)='GPL\x00', 0x2, 0xcc, &(0x7f0000001800)=""/204, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:17:19 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5", 0xf}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:19 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='afs_receive_data\x00'}, 0x10) [ 499.283281][ T8545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:19 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001140), 0x10) 07:17:19 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x7, &(0x7f0000000000)=@raw=[@map_idx_val, @map_idx, @alu, @call, @jmp], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:17:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x0, 0x7a}, 0x48) 07:17:19 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5", 0xf}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:19 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:19 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:17:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000003cc0)=[{0x0}, {&(0x7f0000003b00)="fa", 0x1}], 0x2}, 0x0) 07:17:19 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) 07:17:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a5", 0x1}], 0x1, &(0x7f0000002f40)=[{0x98, 0x0, 0x0, "a64bbb564efa43a0f6627f87da4531326f2020f5321d50f0f3b4e4c755de9af18df8be6989d6a27725049b5436fc7fd467774c36f008ae3aafbc2126cf43426c3089e9d37bcaf674a1918228465d2ecb1c2f8d4bb4c3ded6ce03b7852f7eff818bd47416ba101346e1ddf9da52c90c4c97cde3b266cbe08bb53233c0ed9e39f0ac"}, {0x68, 0x0, 0x0, "f320909c086ec9bfb2f4286882e5ad8dd013722a0d7e19f63ff547b8d8302a0ffd3d17991cec0d780cd65a86140de91ecbb0118ad33ea75fc28fc82bf5b9252c4c01ade9fa5ff63ed116da41dde011a263"}, {0x18, 0x0, 0x0, '~'}, {0x1010, 0x0, 0x0, "61955cc51c6f9c37bb185c25cc8467ca9e98d937ffaca4f1e3176986b2503c546d4168972bbe48c02881762bdd77e3058d0d1f40941c427340fc358fc7f2587475602fbe15c4ad40416b4bb7ac889758d72704bc03334139b0afeeac80b922b6264b2b79cbc5c05bb16ff4bc93d699235fe0f73e79012de4bdd17964ab3118eb022b6aee0c741e7e2e3d6d6018b1817d4502f870e01538b2e3eadfc8a92e5a476eaa3a12289ed046ae1f60ffa4e83763f8b8f7110b9288a64ef2d9b7bf11012897c1c611b2a96b0fbca10f58ec973978afb79a03dc14751f3e101d0b3184ace8d6f28e63962f384db71283e6a90b416444f27e5f9e8555994df1e2d1c9eb172d90d2757b8cf51f8d9daf5099849a476c7e070e1e733a49e04cd067a6a94784cec3d709e1fcb093baba021ccd11a6dfc24d9cef09057df317249846d1813a7cb7c96657feca247d95a957c867ea1edca0bfdea10ff6065dd178173fc7db004120fe23e25b0bfd77e12f132f7586c6eb5525476b21ace915b14f6553bb1171708ab0579f60c750a3a409c26dcd9aa7b1ed537978a0de1522592eea5f942f5cf4edaeceecccecaa0cad54746d070f065d26649d3786c6ec7da714b2d7e52f22e7b8efcc2d0ecb1ba6ce872cecb30a891e4dbf65a478777e89f6c4efd5cf468bd12924c2aa4bf391358c54f65f76a915d257de27e6aff43237a71776c5780e118e2612d1c391d2c892d3b34431d71882c34757a0d0b39326110c9b16bc27f30aaf55569dd2bf2ffe0d8788ac93f76fd43d3df3f0240a8ee6aaf3b1f9d432a75283c0d3efff01835a3dd1ed345fb5d600f1dc92ead983d60a8fb87ebb24b05e0fdc3e361ba4bd7f933e18ead43c0c4c42cadfb8d75ae207afef5af8989ae1c5c31a59968dde96dff4a93e33c5903132f477fe97cf98337c0ac4e3a13f5234c0f31b274d82378d658c5563c479a20b1cc6b4cc14b38bef002de4bc5d4221eec131bc84718f17024b87472e16086e6abcc8454798e60aa70ff9ff63a0019097e5227420792a53b1ec96fcb833314fed81c709172c1d328a612c44187734bf08a4045d4002183a0f4ec579e6c677766960457586df0ae2ce245a6fe1c68cfbf0e919aa5b081db2835cfe35ceadab6ea8bf2d835e0cf1a0afd4a51d4c97a5b8c47c1cbd13308254ba3ac734610634df7d3ee8b7c8b3514f9e86d8f38ac2cf0629a0ee2d82af08666679f6982d67cf54a84ba67c5b45453917f7c9748ae9527be554d0108eb7c1b957929b6aa95d1466ab88a58568f58697e314d30bcdd67996126cafac4064efce6257fa9f6d3b6aa73c539c93db06ef922d94c25ecd7b04417d0c5de7b2eff70e96ed780e13d08cb7a7b4ad87e2cbddb0c3ec603896946ac480dc2d53f59e3847d2f7b29d09250dcf2b3e960fc799f1cb32c60fef2aa293c57f4975b4b8e518ea1f356dd9988de43cce0f022bc1de399e00fbcb6d8d989d5da58b48fd65530d18aeeaca29f60db240057907676ac0ac962901e6f5f9bd837bb4349157a721b73c944109327143f71b61da4e739b3b163148ed726e4bd8cbacee8fcd0fc99a76e3216719aba7cff4a71fab6435852380bbfa8c8a02344323f748b3fafbd2f8180469150550fc367c49ebba910e037fdbcc473d3c8f1ba331470efe0c655858f4871a3e51a4f902362e6d125e8b3e2b3d72a46de7b21e285f1a054b2fdacaf6aaac11c1d2da48a2b7108ebfd73c9f8949d91646dcd207ac6a6e7d6acf061e6faa7390b8959e6c5b259cf675532beac5376bc4dcbb963f4877428f1f5abe5d4ad07f30be1b73b3a4449ee146fe41c96b7107ea4c192a36dbaed3fd00cc869d50f53ce98843fa83960708196ed18f964b5eb428a7ea2ec9f89e492528ee27e095145e82c0fe9e292b0d70fc7b3da883c553429ec08621a9a60200c066378e76b475257f0d665835c34e350d330554efd37d45077cd6fa7133cae4913956bf3ea2d50318f8c259b0dfb2ccb775365908c499c7d80f3351e8a1ee41c50777a53e85d396060f729e955082af86f7b5d518a9a8930ef232dc67c90960cf5b40e03b4692a3eb9a05141aed7c0866abc88b200f30c2a4da355cc49a1d9d655ed066f36142a16cb1b0852f1c1216f622f037fca4078e8863c46375e5f23709a521948fda9399c3be7c29d1a9efb4952cb235c44cdcfe13f21de9eeb7e6c2ab3e2db031c07907f4635b2dfac2935587ab88ae517a01b9284ac1d98eee5a87e446c1c72ecf9231acdb45f354d7c7ca88bc37b6c0d260462491af2941bcf08cba7230f58e9baf73770b9a1faf8ee2d10fc291f86caf5376214b7af4f1d320f4c056316aa7fdec2b2fd2a5cd072373cf5e98a0c180eb38ff04feedbc16335b660048ccde7abf002d09e241a594e0bd4f1c137b13e055b71b83787ebd7760fd703f53067f6f8f8dcafa279ed9ab5b71280c3391c504bb028c30769d39573ee5c5bb60a69b8338149ad7a92b319341e40857f66dd3e5cf2d8adfa940cb296164201403884890f12c21ccd908bd66ab145f4a673160bfcd4d3807aa719a5231c4f400c5077d2c6ef9eebfe6cd668ba5c87481827bcc3a7b9a8f4dd13562da653110c056b2a61efcee9271bee92d35b38b51fc3771ac8d663a570e6872853ccc1956e9e37a950091519005400462cd865bd2d2b9b4f961ffa39ac09135d0fa5d61e0d2dc482f4962ec3dfe6445fe8bf8db396292e6c8b606b214d31a016ec5a56d99f84cc081569449bbbf029d16e724a458e23ef14fa3ce029fee8f04eb4b97e07db554a2f1c7567b3729ead1b480c6950ba444a7f653ecd49546d0210f0c753f026162f3d068d9be1a85f2cf4d190a0a9c3af1baaf5f1cffecaa0afb14d38183a910cf9cac59b865349a5147d51cab10ea18cad8a1f238843a14feb66f876f0ce3bb8b486da6527139d30cbf8b88cf392aa0c850278c5d309dc9f4439100a9422dd351e86f2d7d1c0641fe56657fec7b2733b18eae4a258a76f535225f1227eb94f71dcb018621fffe158a91432e2b80ae839c183ee1dd8f64832229f21ab3480611ff69e5badb0798fd1cbe2f938db3e98b5a8b9aa94b1b1587bf3ed3ede680c0802359159749375eef190e55458c70f6552f028153b6db6d4d6e2cded3d8b15fca123480eb53417aaa88aeb37a2d68f03f474c0fa11bcc9c82a4dfc287a1ba5662d6af4ff33f180467eb9d293380459e9b022374bba1d8c31973aee68074700be507d0346f604a08ceecb08ff490d19fbd8be27c0111d4e8ad180fbf36191c4f3e1e4a47307f027e61b2d861cbf99818174c504c29a9dea1af704617c96d94f48b4763d35fa0f80847f426d6d3e5b29a234025ce3e5b07fcb081c980c6e30d8f2bbcf91f9f76475650fdf3880b268735fc297d8bced35907a98625e375f32080748a1945acdbcb4f4b5088b598e227c9898ccca461556a5569337f9895c49e74403d00aa9698dd8dd471ec738679377cf8f1d0e77bd2a045c7619e4a215fe359d9d0c50312a447e0ad52d1f9642eaa83187f0c95808fee020be059a810dc0d3bcc887696718d58cb01c7a36bbb63da1de8499e6555a654ec1e695a62cfa1193eea5b837a08055c97c6b689960a25cc5349d657730271ff3898d3d7fb26d40d87f35f7caad37c48fed37ecc9085cb24c194e5159d340415484e83c2e5d70bfcfa7b0b1db825e8c364947fbd6021d40acee645f6c3f05e8da2134208f957568ec269bfec7f87a390a14df857e62bd7cd255a035dec5724b15c55066d7af8170a42c0449624dd400c2d146912adb3ae1dc148c4b1a5a2dd7894448ee2895edb0ffa1b71fbfa217d5bac53c098fe8510ecd125cfeb4bd0200ed2c2f6d0ff9b720d2f9ac4f256087bd0b5d059a5cd76a20e66f5f20ea7e0a209ca03d744ebadac34bc838265c6708727ec1eca10ed36c3c59895572320e28da3e08a3f9b90513b235a41425e35ae8d0544062cbea0ef3f986f6deddcd730e372aa06f2955d6ebb8497657e5742c744eba9c1468652288fc44dce406e1dc59f19caa2b241543140228697433409dd4c087d34ecadf6651da997fc9f7fd85afeabddd743653ed592e0efd6b67a66233a675c8ec3d1fd8928f54b4d4c3ced905c8c3dba5db78dff48270b44a44b8d6c59a3120e2e673874902f218f1190c0cebce2bc9d5b80dc1b47a3a908ac9810459ae5c0896a64b56e1175333b41403a5629790c2e1d405fe193a0188d1fee8bc217775ed0b67fdb2523a709581850c12961837a3cf53d1ac0962282f10e37bb82acf1541b8c8cddcdd576bd494f26c61bdbdc911f9d63a5b2d43706d59602bab8bf1b775177b3220989b81c4c112ada074ed2cca6a577e0ffd298713f33f0ef7b77c420fcd7ecf98b193f9c177214d7d2b546f7891bef962e35ca91d645d7e0ab1d6a1a92451efdb70c5e0acf36a88aaf323927e68e4f7c987f5b93f2801987ddb796729361d97063a2e52ac62d2a7dd72373ff2f66bef8d197afe9abcaf70f6ad85a5fbb86ee3d59230abcf15a42809281a2f296d1133f44708aaa2caccab6a89220763b5bbba2b025168aeeff6f886fd33cf8029163bb0cfdd3dff327c1c8dde6cbc70485036c36aeb9fa1cea0b45b07373cd643e3077f32f66684eef3d2d01368e97e34ea3f0c9de576b46a2b3d998fb4035e2fd16eab8ddd0922f454a484477882f52b89be9b59ea65cd5c1e1d2dac792dd6e22764e9417b852e03f673256d804a2264b72ed820e398e634edad1918542c7f841c399a6bfd5c31e7d39845efaa165c29a082659f4ce60e9f965b96d4ffdf5592dd66f39db679f4d2e6b5717b5763f54a42f3ebc30efc981cf57496b50619c6428be472ce73a4aa81d70f2c1c3cd3546b5b8e68896e57e2919e7bcaf83a3fd12fdda207d7baaa2ff266420cc9afed6de43c8795ded07874aac8524b5546ff8baa09a90349015ec40696593c3d72fcbbbd48fede30149212c3015512469238525bc1302b55ebafe9f6778789f538682fbcc77a4082251f67adfaf0beae4f22cf2642abe376d886017dfb3f9747dbbc9a047b385fb2e100bd46f7fa072be84b64d92177c7d55b7337bc34da4ea52256394edfe9b713c21106b30019194d953409863663383a5902a9c9a095c7d83da5d54841e906f1d7c1f13454354603b8bc102263fbafa91faa4f6ebb31e7889c64f6c0d4fe0f8f1f8b3b1770973a5ea811de4cb852f1154a22efc72bfd3c12f715d74502249606c8451bdbcf442a808bb5650364be71c5227bbc300f993da1a9e364230fa922cdb867ad8a8b0145306c2e4652dc061f8b881fa07633462db4bc602599311fd3319bbdb196be63db637d75e317acd608593eaf4eb233f802a7ec9df0c13f96c26bf1aac58e2e70afa41451c540f0cbb1493cd7ea34495579d0b5b2e87ad06dbe44df7775f876722ccb076be5b0402bf82cf0e033395375d863d85883c50ff4e2b3650d31e8709fd175d208aa1c465f1cbd7a46fffa85e03c82370368f3b533011db10d7cd5074a257beb9bd5b6a6fd76d3fafac645d8d88cce96bde799e0ff459a0eed066d8bd8ee50b673571e25be4f7b144d8f319aa604caa8da76857b8073d4be3057dd643505803f7699e37eac908362fa2cef641533d4a6d7df0585ca5dcebb310b529ba67e2d80ff86419a0336e947bd4a943ffc8c9c9451689946c7c91e88202ca5fad9fb33ce82a2b17db3de56d6463f98a5ea700836c1d13ea6055f76a11140ed3dfef04ce7cdbdce73376e7d1"}, {0xee0, 0x0, 0x0, "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"}], 0x2008}, 0x0) [ 500.036076][ T8564] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:20 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5", 0xf}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0x16, 0x0, 0x6, 0x101, 0x0, 0x1}, 0x48) 07:17:20 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002680)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:17:20 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[{0x50, 0x1, 0x0, "4cd32e6939a63a076ca364577b7ef85b527e001910197e8c17e2b56d79f48d81771a5b37f99f1b9edf48003a98126b3183c7f669eb7d807cf6"}, {0xc0, 0x0, 0x0, "b13a8b917da3574696151cad99f79d686f11086e235c1a71571f1bd8bdf69c1c6a822091b0d0038dad1fe7804c3dd0c934e59f116a17fab5ee9fcf5cea7aa47981ebf06985dff524d769027a50837adf9ac7bdb93a416d3245b9e7757525787ee1bc18d68c2f9ef76bae959d69dcab2115d09b3f35450b95bd495926975753e225c1f84600a6c3c79f0cfbb165e72edf0d14acabd1d52479157100b9ba0c433470b78553f963a853ed"}, {0xa0, 0x0, 0x0, "c24222c87e144b66a9ffc2f9d7e58c4dcc4abb902ecefae55404dc688b9a9689e78773184f24da6d32e3fe1243ad477590603e4b860604afd9278e8863559f6484ec28956a2920a733279f741edf2edbc848d0fd8b9b34287b1d0fcf7d8c67e1b006aeafcea04eca6fddf1f6e2f11b6f4c95bff4a90fa91fb0d0136d8706f321913c853eae55b692ee"}, {0x1010, 0x0, 0x0, "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"}, {0xe48, 0x0, 0x0, "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"}], 0x2008}, 0x0) 07:17:20 executing program 0: sendmsg$sock(0xffffffffffffffff, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1a, 0x0, 0x0, &(0x7f0000002940)) 07:17:20 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55", 0x12}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:20 executing program 3: openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) [ 500.659134][ T8582] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x0, 0x0, 0x0, 0x8a}, 0x48) 07:17:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000180)) 07:17:20 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40) 07:17:20 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map}, 0x14) 07:17:21 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55", 0x12}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:21 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x3) 07:17:21 executing program 1: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) fsync(r0) 07:17:21 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@map=0x1}, 0x14) 07:17:21 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) 07:17:21 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55", 0x12}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) [ 501.426241][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:21 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000002480)={0x0, 0x0, 0x18}, 0x10) 07:17:21 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) 07:17:21 executing program 1: mkdir(&(0x7f0000006180)='./file0\x00', 0x0) 07:17:21 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000680)="f1", 0x1}, {0x0}, {&(0x7f0000000840)="a9", 0x1}], 0x3}, 0x0) 07:17:21 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:21 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e4", 0x13}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:21 executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0x22, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) 07:17:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x0, 0x0, 0x0, 0x61}, 0x48) 07:17:22 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x10}, 0x10) 07:17:22 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e4", 0x13}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:22 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@func], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 502.194595][ T8626] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:22 executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0x3, 0x0, 0xee) 07:17:22 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0x1e, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) 07:17:22 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:22 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) 07:17:22 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e4", 0x13}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="030000008677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 07:17:22 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 07:17:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000088c0), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) 07:17:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'tunl0\x00'}) 07:17:23 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)='N', 0x1}], 0x1}, 0x4040) [ 502.964205][ T8646] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:23 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) 07:17:23 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20501, 0x0) 07:17:23 executing program 0: bpf$BPF_LINK_UPDATE(0x1d, 0xfffffffffffffffe, 0x0) 07:17:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x2021, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x1, 0xfc, &(0x7f0000000540)=""/252, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:17:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x0, 0x0, 0x0, 0x948}, 0x48) 07:17:23 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:23 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b80), 0x10) 07:17:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000088c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge_slave_1\x00'}) 07:17:23 executing program 0: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000400)) 07:17:23 executing program 2: socketpair(0x18, 0x0, 0x7ff, &(0x7f00000000c0)) [ 503.792854][ T8669] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:23 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000440)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x8045) 07:17:24 executing program 5: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x38) 07:17:24 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000680)="f1", 0x1}, {&(0x7f0000000740)="c0", 0x1}, {&(0x7f0000000840)="a9", 0x1}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000ac0)='9', 0x1}, {0x0}, {0x0}], 0x9}, 0x0) 07:17:24 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:24 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0x0, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 07:17:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) 07:17:24 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)='l', 0x1}], 0x1}, 0x8045) 07:17:24 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x2021, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:17:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) [ 504.540262][ T8687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:24 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 07:17:24 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x10}, {0x10}], 0x20}, 0x4040) 07:17:24 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 07:17:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000088c0), 0x728b01, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) 07:17:25 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:25 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="e0", 0x1}, {&(0x7f0000000180)="fd", 0x1}], 0x2, &(0x7f00000002c0)=[@mark={{0x14}}, @timestamping={{0x14}}], 0x30}, 0x0) 07:17:25 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f00000001c0)="a3", 0x1}], 0x3}, 0x0) 07:17:25 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x2021, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x1, 0xfc, &(0x7f0000000540)=""/252, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x0, 0x0, 0x5d}, 0x10}, 0x80) 07:17:25 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) close(r0) [ 505.270817][ T8707] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:25 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x7}, 0x10) 07:17:25 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x2, &(0x7f00000008c0)=@raw=[@map_idx_val], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940), 0x8, 0x10, 0x0}, 0x80) 07:17:25 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:25 executing program 3: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x15, 0xf5, &(0x7f0000000000)="6d6572045e803d200dae4bf1503635a9f3c2cfa89f71a9ad1573bb24ba76e1bd2e23487f086c7109a1b30b0cecd68d3adb0616d4e85c5119aeed7b560b2e7b8c6ab2d5afea21be0016a4a2fc7a1f00dc9ada705037e53df2b3065cd98549460d41f8953ed13316e21ebca0c081779432cdd5d91320cce9b726558ef104f8e59c5785275c236dc83ae0f15ca3d580bfc22f879004552ae93663525cd5a28de8be4f35c0d5e98a590195c8f8194487e0c7d8d14ced48f04c61851745172442e5c6028a10cb073841d5fe7e691a30952758f0fe6d1ed1cd277e3899a64283787fdeb657266421c75fef66ea6aa1bf227c3c42069dc676"}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000140)=""/24) r0 = syz_open_dev$hiddev(&(0x7f0000000180), 0x7955, 0x1c000) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000001c0)={0x3, 0x1, 0xfd8a}) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000200)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000280)={0x55, 0x422c, 0x200, {0x9, 0x800}, {0x1, 0x3ff}, @period={0x5c, 0x81, 0x1000, 0x9, 0x3f, {0x8, 0x5, 0x8, 0x3ff}, 0x6, &(0x7f0000000240)=[0x5, 0x1, 0x4, 0xfe, 0x5, 0xffe0]}}) r1 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x6, 0x101840) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000300)={0x3, 0x100, 0x3}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000340)=""/86) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000003c0)=""/4096) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f00000013c0)={0x1, 0x200, 0x7}) r2 = syz_open_dev$hiddev(&(0x7f0000001400), 0x4, 0x484900) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000001440)={0x3, 0x200, 0x7, 0x9, 0x1, 0xfffff800}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001640)={0x2c, &(0x7f0000001480)={0x20, 0x4, 0x91, {0x91, 0x10, "ee7084e034d47fbc9bfb234f9a78cf18fdde9748b1eac32332ecd395af33a977a49b69dc25cc36071bcdb2b6c73f3a1bf674ee3e61683599c47503c90ce4cfba8e348511ff7270826c0173306d9fc0efbac00b842928a2d7f9e2a9561c6caf43a2ac5ce987f88ae0541709c8a95389837d6db6fd3bb9b76187f3012c8a7076e9087eff6aa74b52804d00521b6aa202"}}, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000001580)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "6f504f8aadfebb9287a63202a4171943"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x13, 0x0, 0x5}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0xaf, 0x3f, 0xef, 0x8}, @ptm_cap={0x3}]}}, &(0x7f00000015c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x8, 0x3, 0x1, "80a47770", "cb4374b1"}}, &(0x7f0000001600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x8, 0x4, 0xf2, 0x5, 0x9, 0x1f}}}, &(0x7f0000001b40)={0x84, &(0x7f0000001680)={0x0, 0x13, 0xef, "969ab895c6f206642b6c720fe0613be0ee2c39830dc17a558566420dc3cdf7e791c74832d99e69f018b01ed170c7cba512601f7ddb094ba635520e27be33298a607d0584e802d759218459919229fb84f8bf72c4851657795e6d14417fec723b9abf3682c6adc35b6b242f14b24e25fa05c0a019226fea0ff7472360c5bd9ec9833b8772086de54d909968168539970055e0e03f8b19a6f5b49768972d187628a37349344e7dba8fefa68dc01e94edaffef257d46d0723fd4d68266b7e684db81b410ec18b627fc3361a6d99e21276f9d430d27f8c5552fca696233d39988c11c1a0da65330501933bd1fc5d7d7f56"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0xdc}, &(0x7f0000001800)={0x20, 0x0, 0x4, {0x4}}, &(0x7f0000001840)={0x20, 0x0, 0x4, {0xc0, 0x1}}, &(0x7f0000001880)={0x40, 0x7, 0x2, 0xf000}, &(0x7f00000018c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001900)={0x40, 0xb, 0x2, "32f6"}, &(0x7f0000001940)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000001980)={0x40, 0x13, 0x6}, &(0x7f00000019c0)={0x40, 0x17, 0x6, @random="b4e3251858ec"}, &(0x7f0000001a00)={0x40, 0x19, 0x2, "299d"}, &(0x7f0000001a40)={0x40, 0x1a, 0x2, 0x40}, &(0x7f0000001a80)={0x40, 0x1c, 0x1}, &(0x7f0000001ac0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001b00)={0x40, 0x21, 0x1, 0xa6}}) r3 = syz_usb_connect$cdc_ncm(0x0, 0x89, &(0x7f0000001c00)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0x4, 0xc0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '\f'}, {0x5, 0x24, 0x0, 0xffc1}, {0xd, 0x24, 0xf, 0x1, 0xdd89e5c, 0x8, 0x3f, 0x6}, {0x6, 0x24, 0x1a, 0x8000, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0x1f}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1f}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ccf393fab4d9009, 0x1, 0xee, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3f, 0x55, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x7, 0xbc}}}}}}}]}}, &(0x7f0000001f00)={0xa, &(0x7f0000001cc0)={0xa, 0x6, 0x201, 0x0, 0x20, 0x81, 0x10, 0x80}, 0x61, &(0x7f0000001d00)={0x5, 0xf, 0x61, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x5, 0x0, 0x6, [0xff]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "c0373234a561c0e5f2b9cef9729f9d2e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0xea, 0x2}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x1, 0x0, 0xc79e, [0x30, 0x3f00, 0xf, 0xf0, 0x60, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0x5, 0xf28e}]}, 0x3, [{0x4, &(0x7f0000001d80)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000001dc0)=@lang_id={0x4, 0x3, 0x80c}}, {0xe2, &(0x7f0000001e00)=@string={0xe2, 0x3, "b9146ff924d7ec0211e959df7767cad259d26023ccd02b54d295bd3a599672a1c3a44da0f7315a76fb342337d068b136388f8f455fafa49a93dcf497cc3e768a9bbf41c513e7aa24eb24a7498d4f64276e3a2ba4609a4976184c7e59b9caf3194ba5d19d2ff105be44e7b34238ef9c26a26399668c1343845a2969f2fd3cfca1599b417a45ea7aa6bc8def499475be518f970325d6dcc0e97a7a4bcfd61173c247bfcde5526eb6750f99d0f5aaf3b7622007c70801e66e754b89d3b04c3b68f4bfe10a4d1f00eee7b004bbbafc459557b914c5427255ee1014f09c3e19ccf2bf"}}]}) syz_usb_ep_read(r3, 0x5, 0x2d, &(0x7f0000001f40)=""/45) r4 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000001f80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x30, 0x3, 0x1, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xcc, 0x8, 0x2}}]}}}]}}]}}, &(0x7f00000020c0)={0xa, &(0x7f0000001fc0)={0xa, 0x6, 0x110, 0xcc, 0x8, 0xff, 0x20, 0x6}, 0x2f, &(0x7f0000002000)={0x5, 0xf, 0x2f, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x50, 0x5, 0x1, 0xf, 0x5, [0x1fe0140, 0xf, 0xff0000, 0xc000, 0xc0c0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x0, 0xff}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000002080)=@lang_id={0x4, 0x3, 0x448}}]}) syz_usb_control_io$printer(r4, &(0x7f0000002180)={0x14, &(0x7f0000002100)={0x20, 0xe, 0x25, {0x25, 0x2, "454f3f455061d5e383c54a4b9a75f9bf225ae89b5b227d927a03ed1a5e4a422a9d055a"}}, &(0x7f0000002140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, &(0x7f0000002440)={0x34, &(0x7f00000021c0)={0x20, 0xa, 0xa0, "63f74ecc9a0759bdf841c43cf697732930ce3c3def23653f9d0f5cd2ad6a50a206c40b512585c39952583680dd666281700393feb38c2f25e3266d4922e004de01b9e628e535918f46cc2baf6905b7fb6d4196e2d659c568ecdf402957e9f58fedb70c94e624d1e91c79ad51882b673ce6ed387e1e2ea6431d67bb6790d991b1f73973ea4545cd231550854af1fb46eef9544d8c0cd5de9345858fcf2f06ad0b"}, &(0x7f0000002280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000022c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000002300)={0x20, 0x0, 0x9f, {0x9d, "c7d8d59162f9018d47aac28c6d06dddd1fe5ac6b65748a52b0dd637fabb861f2fc0459b86670de61c02716ba9ac81801ad104c78842b56e895f9ae090bec56151fc228d1bc01dfa0bd9818ae194b89e79276a02945cfdbc9a9fe0543795522dbc73b3cc236b04eacdb5fd15f7985d0cc26f0b944d6a107c7b9a940f4a4dcac0daa85a4e3c5ea01d9da47312c1c8463068a1ed3b8bf933a99aa45046617"}}, &(0x7f00000023c0)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000002400)={0x20, 0x0, 0x1, 0x7f}}) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000002480)=0x1) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000002500)=""/3) 07:17:25 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 07:17:25 executing program 1: syz_open_dev$evdev(&(0x7f0000003580), 0x0, 0x90401) 07:17:25 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x88, &(0x7f0000001c00)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x3f}, {0x6}, [@mdlm={0x15}, @call_mgmt={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x7, 0xbc}}}}}}}]}}, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0}) 07:17:25 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) [ 505.909788][ T8722] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:26 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 07:17:26 executing program 1: utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={{0x0, 0x8000000000000000}}, 0x0) 07:17:26 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:26 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x1}, 0xc) [ 506.312014][ T3564] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 506.412092][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd 07:17:26 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) 07:17:26 executing program 1: syz_open_dev$hiddev(&(0x7f0000001400), 0x0, 0x581882) [ 506.572741][ T3564] usb 4-1: Using ep0 maxpacket: 32 [ 506.608123][ T8739] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 506.663149][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 506.802321][ T3564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32777, setting to 1024 [ 506.814213][ T3564] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 506.824568][ T3564] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 506.825547][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 506.933954][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.945176][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.955266][ T25] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 506.965286][ T25] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 07:17:27 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 506.975311][ T25] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 506.985232][ T25] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 507.083742][ T3564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.093124][ T3564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.101320][ T3564] usb 4-1: Product: ᒹ說휤ˬ杷틊퉙⍠탌含闒㪽陙ꅲ꓃ꁍㇷ癚㓻㜣棐㚱輸䖏꽟骤韴㻌詶뾛앁⒪⓫䦧侍❤㩮ꐫ驠癉䰘奾쪹᧳ꕋ鷑븅䊳⚜探暙ᎌ葃⥚㳽ꇼ魙穁ꙺ趼䧯疔冾鞏┃空콋ᇖ쉳뽇湒疶餏抷ܠࣇ畮襋냓㭌䴊Ұ못䗼垕ᒹ䋅啲ხ㺜찙뿲 [ 507.133607][ T3564] usb 4-1: Manufacturer: ࠌ [ 507.138368][ T3564] usb 4-1: SerialNumber: syz [ 507.332660][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.342143][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.350337][ T25] usb 3-1: Product: syz [ 507.354930][ T25] usb 3-1: Manufacturer: syz [ 507.359717][ T25] usb 3-1: SerialNumber: syz [ 507.702642][ T25] cdc_ncm 3-1:1.0: bind() failure [ 507.717665][ T25] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 507.724824][ T25] cdc_ncm 3-1:1.1: bind() failure [ 507.758492][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.768869][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.836250][ T25] usb 3-1: USB disconnect, device number 5 [ 507.923583][ T3564] cdc_ncm 4-1:1.0: bind() failure [ 507.975293][ T3564] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 507.982676][ T3564] cdc_ncm 4-1:1.1: bind() failure [ 508.037522][ T3564] usb 4-1: USB disconnect, device number 2 07:17:28 executing program 3: syz_mount_image$sysv(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000100)="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", 0xfe, 0xbc7}], 0x8806, 0x0) 07:17:28 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:28 executing program 1: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000001440)={0x3, 0x200, 0x0, 0x9, 0x0, 0xfffff800}) syz_usb_connect$cdc_ncm(0x0, 0x6f, &(0x7f0000001c00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x0, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '\f'}, {0x5, 0x24, 0x0, 0xffc1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x6}, {0x6, 0x24, 0x1a, 0x8000}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xee}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x7, 0xbc}}}}}}}]}}, 0x0) 07:17:28 executing program 0: r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 07:17:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r4 = syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0xcc82, 0x2, 0x2, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000480), 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {r4}}, './file0\x00'}) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) 07:17:28 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x88, &(0x7f0000001c00)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x3f}, {0x6}, [@mdlm={0x15}, @call_mgmt={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x7, 0xbc}}}}}}}]}}, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0}) 07:17:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000140)='..\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='./file0/file0\x00', 0x3) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00') [ 508.625264][ T8759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 508.842052][ T3557] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 508.939239][ T8770] loop3: detected capacity change from 0 to 11 [ 509.052328][ T3564] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 509.054289][ T8752] Dev loop3: unable to read RDB block 11 [ 509.067256][ T8752] loop3: unable to read partition table [ 509.102107][ T3557] usb 2-1: Using ep0 maxpacket: 32 [ 509.123742][ T8752] loop3: partition table beyond EOD, truncated 07:17:29 executing program 3: syz_mount_image$sysv(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x8, &(0x7f0000000580)=[{&(0x7f0000000140)="138138385e5793", 0x7, 0x81}, {&(0x7f0000000640)="10aacda1dc4ad8350be2e6b74feb407fc5558892e63b3df15594f2408dcefe", 0x2, 0xffffffffffffffff}, {&(0x7f00000001c0)="6decedd0bf484b50662da24809f41522ad2af2feb8416b252ecebe7b6e19e7b8ca0a31da856d9454ecf90d6ec227687015db18309ef46d6b42327b600b085af9751d780c", 0x44, 0x2}, {&(0x7f0000000240)="9573b3a5038b76bbbf594167c0a9b841334242e9b642f3357b66d40ae4aff420ac164d86a40ea209ab7395bb50b239e810206c5aee3d0a81f0eb6a77455a02de32ab0ea20b8ba1320c1a0b91c261e5892f261757ecdde57c", 0xfffffffffffffe02, 0x81}, {&(0x7f00000002c0)="a037e03d3d948b68ac223357ea4e86188ad615d63c692536b854cf5b1f87233b2997aba35c358a8fdb0aa912367576533e2d9dadc4c4a01147919f45b4", 0x3d, 0x7f}, {&(0x7f0000000300)="3f50838354f92428460bb787ad2e08f250a51ab9dca773a83a50850458777b4f7a1a2fd0fb63052507b6fa588736385c688804e16c22efb6136fc8275758c7f68b63f85c837c66bdc50ab95a4ecaad39a0c4b472acb59049fb87d8783de7e6174d3363de0c6f89e474c1cace793611c76ea78bc1f93de6678bcc82daee445e97bc295b83efa66e5670bc256b4a2cd7a91e333114eb96e5831473019925737c3dbec9f36c1eb7f8f40706a5edfaba99a7d62d3a733e4d57f47875cff02a95cc30b6cc708bb987f8cb", 0xc8, 0x1}, {&(0x7f0000000400)="8f017bf383108309df433aea4132eb83cf57c3ae6af5169a07c546b390ba1d0ce16db19fecc5bbe7d2b7808b2339e9fbb5c5e7172f74e9bdee53a1122a3c8f7a1ce57033d0a3af1484a9", 0x4a, 0x1f}, {&(0x7f0000000480)="ec09b067b48a467e1acfaadc0fbf8eb11f4b445b230f530000000000", 0x1c, 0xfffffffffffffff7}], 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='appraise,euid=', @ANYRESDEC, @ANYBLOB="2c5c2f2e252c73b842ec8fa25647c65db8d2666f776e65723d", @ANYRESDEC, @ANYBLOB=',appraise_type=imasig,uid=', @ANYRESDEC, @ANYBLOB=',euid<', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) 07:17:29 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) [ 509.223376][ T3557] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.234622][ T3557] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.244807][ T3557] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 509.255121][ T3557] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 509.322785][ T3564] usb 3-1: Using ep0 maxpacket: 32 07:17:29 executing program 0: socketpair(0x18, 0x0, 0xe3a, &(0x7f0000000140)) 07:17:29 executing program 5: socketpair(0x2, 0x3, 0x0, &(0x7f0000000080)) [ 509.503920][ T3564] usb 3-1: unable to get BOS descriptor or descriptor too short [ 509.602339][ T3564] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.614424][ T3564] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.623247][ T3557] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 509.624406][ T3564] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 509.633881][ T3557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.643185][ T3564] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 509.651248][ T3557] usb 2-1: Product: syz [ 509.661051][ T3564] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 509.665445][ T3557] usb 2-1: Manufacturer: syz [ 509.674991][ T3564] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 509.679635][ T3557] usb 2-1: SerialNumber: syz [ 509.763744][ T8775] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:30 executing program 0: mq_open(&(0x7f0000000040)='\a\xc2\xaf\xea', 0x0, 0x0, 0x0) 07:17:30 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) [ 510.334391][ T3564] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.343820][ T3564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.352269][ T3564] usb 3-1: Product: syz [ 510.356602][ T3564] usb 3-1: Manufacturer: syz [ 510.361362][ T3564] usb 3-1: SerialNumber: syz [ 510.402737][ T3557] cdc_ncm 2-1:1.0: bind() failure [ 510.420312][ T3557] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 510.427440][ T3557] cdc_ncm 2-1:1.1: bind() failure 07:17:30 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) [ 510.568358][ T3557] usb 2-1: USB disconnect, device number 7 [ 510.742710][ T3564] cdc_ncm 3-1:1.0: bind() failure [ 510.757428][ T3564] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 510.764860][ T3564] cdc_ncm 3-1:1.1: bind() failure [ 510.924814][ T3564] usb 3-1: USB disconnect, device number 6 07:17:31 executing program 1: syz_mount_image$sysv(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x7ffffff9, &(0x7f0000000680)=[{&(0x7f0000000100)="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", 0xfe, 0xbc7}], 0x8800, &(0x7f0000000780)={[{'{&'}, {'/sys/\x00\xf0\xef\xf7\xff\x7f\x00\x00ebug/sync/info\x00'}, {'/sys/kernel/debug/sync/info\x00'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/sys/kernel/debug/sync/info\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/sys/kernel/debug/sync/info\x00'}}]}) 07:17:31 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x14b042, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x4103fe) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0}) 07:17:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:31 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x2, 0x2000ff00) 07:17:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xfffffff000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000001200)={0x3, 0x91}, &(0x7f0000001240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x5, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/85, 0x55}, {&(0x7f00000005c0)=""/21, 0x15}], 0x2}, 0x2}, {{&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, &(0x7f00000032c0)=""/4096, 0x1000}, 0xb54}, {{&(0x7f0000000700)=@tipc=@name, 0x80, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/49, 0x31}], 0x3, &(0x7f00000008c0)=""/48, 0x30}}, {{&(0x7f0000000900)=@phonet, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000980)=""/22, 0x16}, {&(0x7f00000009c0)=""/152, 0x98}, {&(0x7f0000000a80)=""/249, 0xf9}], 0x3, &(0x7f0000000bc0)=""/115, 0x73}, 0x4}, {{&(0x7f0000000c40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000000780)=""/80, 0x50}, {&(0x7f0000004340)=""/41, 0x29}, {&(0x7f0000004380)=""/55, 0x37}], 0x3, &(0x7f0000004400)=""/134, 0x86}}, {{&(0x7f00000044c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004700)=[{&(0x7f0000004540)=""/225, 0xe1}, {&(0x7f0000004640)=""/175, 0xaf}], 0x2}, 0x6}], 0x7, 0x40, &(0x7f0000004900)) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x161842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000500), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000d00)=ANY=[@ANYBLOB="620af8ff0c203321bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020e0e4a9446c7670568982b4e420f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c29184ff7f0000cef809606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa15a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1beeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000459ff4b40000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b98008006c4a00000000ff435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0adb02d9ba96e1010000000000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4a00fca0493cf29b33dcc9ffffffffffffffd39fec2271ff0158929646efd1cf870cd7bb2366fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768e7f711af57ea09b446ee58969ced595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30fa94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c709a2e5877050cb1301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80}, 0x10}, 0x80) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0xfffffffd) 07:17:31 executing program 5: syz_mount_image$sysv(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0xc800, &(0x7f0000000680)=[{&(0x7f0000000100)="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", 0xfe, 0xbc7}], 0x8800, &(0x7f0000000780)={[{'{&'}, {'/sys/kernel/debug/sync/info\x00'}, {'/sys/kernel/debug/sync/info\x00'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/sys/kernel/debug/sync/info\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/sys/kernel/debug/sync/info\x00'}}]}) 07:17:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000003440)=[{0x0}, {0x0}, {&(0x7f00000022c0)='j', 0x1}], 0x3}}], 0x2, 0x4c000) 07:17:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:31 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) read$snddsp(r0, &(0x7f0000000640)=""/4096, 0x1000) 07:17:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:31 executing program 2: mremap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 07:17:32 executing program 3: ustat(0x10, 0x0) 07:17:32 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 07:17:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xff, 0x8386, 0x0, 0x1}, 0x48) 07:17:32 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)) [ 512.968254][ T8805] not chained 340000 origins [ 512.973153][ T8805] CPU: 0 PID: 8805 Comm: syz-executor.0 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 512.983614][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 512.993773][ T8805] Call Trace: [ 512.997126][ T8805] [ 513.000131][ T8805] dump_stack_lvl+0x1c8/0x256 [ 513.004981][ T8805] dump_stack+0x1a/0x1c [ 513.009286][ T8805] kmsan_internal_chain_origin+0x78/0x120 [ 513.015170][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 513.021152][ T8805] ? ____sys_recvmsg+0x5c1/0x810 [ 513.026216][ T8805] ? ___sys_recvmsg+0x217/0x840 [ 513.031193][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 513.037160][ T8805] ? ____sys_recvmsg+0x5c1/0x810 [ 513.042220][ T8805] ? kfree+0x44/0x980 [ 513.046313][ T8805] ? ___sys_recvmsg+0x248/0x840 [ 513.051287][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 513.057254][ T8805] ? get_compat_msghdr+0x51/0x720 [ 513.062420][ T8805] ? ___sys_recvmsg+0x18c/0x840 [ 513.067396][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 513.073370][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 513.079343][ T8805] ? should_fail+0x3f/0x810 [ 513.084012][ T8805] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 513.090417][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 513.096388][ T8805] __msan_chain_origin+0xbd/0x140 [ 513.101569][ T8805] get_compat_msghdr+0x4fc/0x720 [ 513.106660][ T8805] ___sys_recvmsg+0x18c/0x840 [ 513.111477][ T8805] ? __stack_depot_save+0x21/0x4b0 [ 513.116746][ T8805] ? kmsan_internal_check_memory+0x94/0x530 [ 513.122811][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 513.128793][ T8805] do_recvmmsg+0x682/0x1180 [ 513.133465][ T8805] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 513.140034][ T8805] __sys_recvmmsg+0x113/0x450 [ 513.144824][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 513.151159][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 513.156352][ T8805] ? exit_to_user_mode_prepare+0x119/0x220 [ 513.162239][ T8805] do_fast_syscall_32+0x33/0x70 [ 513.167171][ T8805] do_SYSENTER_32+0x1b/0x20 [ 513.171750][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 513.178199][ T8805] RIP: 0023:0xf7f84549 [ 513.182350][ T8805] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 513.202093][ T8805] RSP: 002b:00000000f7f5e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 513.210572][ T8805] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 513.218595][ T8805] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 513.226631][ T8805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 513.234667][ T8805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.242718][ T8805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 513.250754][ T8805] [ 513.254716][ T8805] Uninit was stored to memory at: [ 513.259935][ T8805] get_compat_msghdr+0x4fc/0x720 [ 513.265102][ T8805] ___sys_recvmsg+0x18c/0x840 [ 513.269968][ T8805] do_recvmmsg+0x682/0x1180 [ 513.274727][ T8805] __sys_recvmmsg+0x113/0x450 [ 513.279529][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 513.286109][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 513.291355][ T8805] do_fast_syscall_32+0x33/0x70 [ 513.296537][ T8805] do_SYSENTER_32+0x1b/0x20 [ 513.301159][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 513.307817][ T8805] [ 513.310199][ T8805] Uninit was stored to memory at: [ 513.315620][ T8805] get_compat_msghdr+0x4fc/0x720 [ 513.320664][ T8805] ___sys_recvmsg+0x18c/0x840 [ 513.325578][ T8805] do_recvmmsg+0x682/0x1180 [ 513.330201][ T8805] __sys_recvmmsg+0x113/0x450 [ 513.335166][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 513.341534][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 513.346835][ T8805] do_fast_syscall_32+0x33/0x70 [ 513.351919][ T8805] do_SYSENTER_32+0x1b/0x20 [ 513.356538][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 513.363275][ T8805] [ 513.365666][ T8805] Uninit was stored to memory at: [ 513.370814][ T8805] get_compat_msghdr+0x4fc/0x720 [ 513.376119][ T8805] ___sys_recvmsg+0x18c/0x840 [ 513.380909][ T8805] do_recvmmsg+0x682/0x1180 [ 513.385615][ T8805] __sys_recvmmsg+0x113/0x450 [ 513.390428][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 513.397011][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 513.402425][ T8805] do_fast_syscall_32+0x33/0x70 [ 513.407380][ T8805] do_SYSENTER_32+0x1b/0x20 [ 513.412119][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 513.418627][ T8805] [ 513.421019][ T8805] Uninit was stored to memory at: [ 513.426317][ T8805] get_compat_msghdr+0x4fc/0x720 [ 513.431387][ T8805] ___sys_recvmsg+0x18c/0x840 [ 513.436298][ T8805] do_recvmmsg+0x682/0x1180 [ 513.440927][ T8805] __sys_recvmmsg+0x113/0x450 [ 513.445885][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 513.452507][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 513.457743][ T8805] do_fast_syscall_32+0x33/0x70 [ 513.462916][ T8805] do_SYSENTER_32+0x1b/0x20 [ 513.467542][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 513.474223][ T8805] [ 513.476607][ T8805] Uninit was stored to memory at: [ 513.481926][ T8805] get_compat_msghdr+0x4fc/0x720 [ 513.486982][ T8805] ___sys_recvmsg+0x18c/0x840 [ 513.491924][ T8805] do_recvmmsg+0x682/0x1180 [ 513.496546][ T8805] __sys_recvmmsg+0x113/0x450 [ 513.501335][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 513.507795][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 513.513151][ T8805] do_fast_syscall_32+0x33/0x70 [ 513.518118][ T8805] do_SYSENTER_32+0x1b/0x20 [ 513.522922][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 513.529434][ T8805] [ 513.531937][ T8805] Uninit was stored to memory at: [ 513.537125][ T8805] get_compat_msghdr+0x4fc/0x720 [ 513.542278][ T8805] ___sys_recvmsg+0x18c/0x840 [ 513.547087][ T8805] do_recvmmsg+0x682/0x1180 [ 513.551845][ T8805] __sys_recvmmsg+0x113/0x450 [ 513.556628][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 513.563130][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 513.568353][ T8805] do_fast_syscall_32+0x33/0x70 [ 513.573454][ T8805] do_SYSENTER_32+0x1b/0x20 [ 513.578077][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 513.584763][ T8805] [ 513.587149][ T8805] Uninit was stored to memory at: [ 513.592508][ T8805] get_compat_msghdr+0x4fc/0x720 [ 513.597566][ T8805] ___sys_recvmsg+0x18c/0x840 [ 513.602502][ T8805] do_recvmmsg+0x682/0x1180 [ 513.607122][ T8805] __sys_recvmmsg+0x113/0x450 [ 513.612069][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 513.618453][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 513.623771][ T8805] do_fast_syscall_32+0x33/0x70 [ 513.628734][ T8805] do_SYSENTER_32+0x1b/0x20 [ 513.633477][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 513.639965][ T8805] [ 513.642563][ T8805] Local variable msg_sys created at: [ 513.647924][ T8805] do_recvmmsg+0x5c/0x1180 [ 513.652596][ T8805] __sys_recvmmsg+0x113/0x450 [ 513.828873][ T8805] not chained 350000 origins [ 513.833689][ T8805] CPU: 0 PID: 8805 Comm: syz-executor.0 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 513.844147][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 513.854294][ T8805] Call Trace: [ 513.857624][ T8805] [ 513.860584][ T8805] dump_stack_lvl+0x1c8/0x256 [ 513.865367][ T8805] dump_stack+0x1a/0x1c [ 513.869623][ T8805] kmsan_internal_chain_origin+0x78/0x120 [ 513.875486][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 513.881429][ T8805] ? ____sys_recvmsg+0x5c1/0x810 [ 513.886449][ T8805] ? ___sys_recvmsg+0x217/0x840 [ 513.891377][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 513.897300][ T8805] ? ____sys_recvmsg+0x5c1/0x810 [ 513.902385][ T8805] ? kfree+0x44/0x980 [ 513.906466][ T8805] ? ___sys_recvmsg+0x248/0x840 [ 513.911401][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 513.917301][ T8805] ? get_compat_msghdr+0x51/0x720 [ 513.922415][ T8805] ? ___sys_recvmsg+0x18c/0x840 [ 513.927329][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 513.933245][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 513.939146][ T8805] ? should_fail+0x3f/0x810 [ 513.943764][ T8805] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 513.950180][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 513.956159][ T8805] __msan_chain_origin+0xbd/0x140 [ 513.961321][ T8805] get_compat_msghdr+0x4fc/0x720 [ 513.966431][ T8805] ___sys_recvmsg+0x18c/0x840 [ 513.971186][ T8805] ? __stack_depot_save+0x21/0x4b0 [ 513.976388][ T8805] ? kmsan_internal_check_memory+0x94/0x530 [ 513.982389][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 513.988326][ T8805] do_recvmmsg+0x682/0x1180 [ 513.992998][ T8805] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 513.999542][ T8805] __sys_recvmmsg+0x113/0x450 [ 514.004292][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 514.010621][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 514.015800][ T8805] ? exit_to_user_mode_prepare+0x119/0x220 [ 514.021700][ T8805] do_fast_syscall_32+0x33/0x70 [ 514.026633][ T8805] do_SYSENTER_32+0x1b/0x20 [ 514.031199][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 514.037630][ T8805] RIP: 0023:0xf7f84549 [ 514.041758][ T8805] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 514.061498][ T8805] RSP: 002b:00000000f7f5e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 514.069997][ T8805] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 514.078042][ T8805] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 514.086101][ T8805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.094282][ T8805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.102408][ T8805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.110610][ T8805] [ 514.114157][ T8805] Uninit was stored to memory at: [ 514.119364][ T8805] get_compat_msghdr+0x4fc/0x720 [ 514.124618][ T8805] ___sys_recvmsg+0x18c/0x840 [ 514.129423][ T8805] do_recvmmsg+0x682/0x1180 [ 514.134194][ T8805] __sys_recvmmsg+0x113/0x450 [ 514.139003][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 514.145501][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 514.150697][ T8805] do_fast_syscall_32+0x33/0x70 [ 514.155821][ T8805] do_SYSENTER_32+0x1b/0x20 [ 514.160453][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 514.167115][ T8805] [ 514.169530][ T8805] Uninit was stored to memory at: [ 514.174941][ T8805] get_compat_msghdr+0x4fc/0x720 [ 514.179994][ T8805] ___sys_recvmsg+0x18c/0x840 [ 514.184903][ T8805] do_recvmmsg+0x682/0x1180 [ 514.189510][ T8805] __sys_recvmmsg+0x113/0x450 [ 514.194444][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 514.200838][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 514.206140][ T8805] do_fast_syscall_32+0x33/0x70 [ 514.211112][ T8805] do_SYSENTER_32+0x1b/0x20 [ 514.215866][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 514.222508][ T8805] [ 514.224892][ T8805] Uninit was stored to memory at: [ 514.230036][ T8805] get_compat_msghdr+0x4fc/0x720 [ 514.235253][ T8805] ___sys_recvmsg+0x18c/0x840 [ 514.240033][ T8805] do_recvmmsg+0x682/0x1180 [ 514.244725][ T8805] __sys_recvmmsg+0x113/0x450 [ 514.249523][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 514.259922][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 514.265249][ T8805] do_fast_syscall_32+0x33/0x70 [ 514.270231][ T8805] do_SYSENTER_32+0x1b/0x20 [ 514.274988][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 514.281495][ T8805] [ 514.284014][ T8805] Uninit was stored to memory at: [ 514.289215][ T8805] get_compat_msghdr+0x4fc/0x720 [ 514.294380][ T8805] ___sys_recvmsg+0x18c/0x840 [ 514.299165][ T8805] do_recvmmsg+0x682/0x1180 [ 514.303911][ T8805] __sys_recvmmsg+0x113/0x450 [ 514.308742][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 514.315295][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 514.320518][ T8805] do_fast_syscall_32+0x33/0x70 [ 514.325620][ T8805] do_SYSENTER_32+0x1b/0x20 [ 514.330234][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 514.336889][ T8805] [ 514.339275][ T8805] Uninit was stored to memory at: [ 514.344628][ T8805] get_compat_msghdr+0x4fc/0x720 [ 514.349691][ T8805] ___sys_recvmsg+0x18c/0x840 [ 514.354627][ T8805] do_recvmmsg+0x682/0x1180 [ 514.359243][ T8805] __sys_recvmmsg+0x113/0x450 [ 514.364185][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 514.370573][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 514.375909][ T8805] do_fast_syscall_32+0x33/0x70 [ 514.380876][ T8805] do_SYSENTER_32+0x1b/0x20 [ 514.385618][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 514.392229][ T8805] [ 514.394609][ T8805] Uninit was stored to memory at: [ 514.399756][ T8805] get_compat_msghdr+0x4fc/0x720 [ 514.404935][ T8805] ___sys_recvmsg+0x18c/0x840 [ 514.409738][ T8805] do_recvmmsg+0x682/0x1180 [ 514.414482][ T8805] __sys_recvmmsg+0x113/0x450 [ 514.419294][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 514.425800][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 514.431027][ T8805] do_fast_syscall_32+0x33/0x70 [ 514.436125][ T8805] do_SYSENTER_32+0x1b/0x20 [ 514.440752][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 514.447359][ T8805] [ 514.449737][ T8805] Uninit was stored to memory at: [ 514.455039][ T8805] get_compat_msghdr+0x4fc/0x720 [ 514.460087][ T8805] ___sys_recvmsg+0x18c/0x840 [ 514.464997][ T8805] do_recvmmsg+0x682/0x1180 [ 514.469620][ T8805] __sys_recvmmsg+0x113/0x450 [ 514.474555][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 514.480924][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 514.486209][ T8805] do_fast_syscall_32+0x33/0x70 [ 514.491188][ T8805] do_SYSENTER_32+0x1b/0x20 [ 514.495922][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 514.502536][ T8805] [ 514.504919][ T8805] Local variable msg_sys created at: [ 514.510273][ T8805] do_recvmmsg+0x5c/0x1180 [ 514.514963][ T8805] __sys_recvmmsg+0x113/0x450 [ 514.687120][ T8805] not chained 360000 origins [ 514.691902][ T8805] CPU: 0 PID: 8805 Comm: syz-executor.0 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 514.702311][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 514.712464][ T8805] Call Trace: [ 514.715775][ T8805] [ 514.718735][ T8805] dump_stack_lvl+0x1c8/0x256 [ 514.723510][ T8805] dump_stack+0x1a/0x1c [ 514.727741][ T8805] kmsan_internal_chain_origin+0x78/0x120 [ 514.733545][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 514.739434][ T8805] ? ____sys_recvmsg+0x5c1/0x810 [ 514.744435][ T8805] ? ___sys_recvmsg+0x217/0x840 [ 514.749346][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 514.755259][ T8805] ? ____sys_recvmsg+0x5c1/0x810 [ 514.760316][ T8805] ? kfree+0x44/0x980 [ 514.764416][ T8805] ? ___sys_recvmsg+0x248/0x840 [ 514.769328][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 514.775223][ T8805] ? get_compat_msghdr+0x51/0x720 [ 514.780310][ T8805] ? ___sys_recvmsg+0x18c/0x840 [ 514.785224][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 514.791119][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 514.797015][ T8805] ? should_fail+0x3f/0x810 [ 514.801604][ T8805] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 514.807974][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 514.813934][ T8805] __msan_chain_origin+0xbd/0x140 [ 514.819100][ T8805] get_compat_msghdr+0x4fc/0x720 [ 514.824156][ T8805] ___sys_recvmsg+0x18c/0x840 [ 514.828904][ T8805] ? __stack_depot_save+0x21/0x4b0 [ 514.834099][ T8805] ? kmsan_internal_check_memory+0x94/0x530 [ 514.840076][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 514.845972][ T8805] do_recvmmsg+0x682/0x1180 [ 514.850560][ T8805] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 514.857079][ T8805] __sys_recvmmsg+0x113/0x450 [ 514.861889][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 514.868260][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 514.873440][ T8805] ? exit_to_user_mode_prepare+0x119/0x220 [ 514.879327][ T8805] do_fast_syscall_32+0x33/0x70 [ 514.884241][ T8805] do_SYSENTER_32+0x1b/0x20 [ 514.888800][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 514.895245][ T8805] RIP: 0023:0xf7f84549 [ 514.899355][ T8805] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 514.919068][ T8805] RSP: 002b:00000000f7f5e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 514.927549][ T8805] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 514.935570][ T8805] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 514.943589][ T8805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.951603][ T8805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.959639][ T8805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.967729][ T8805] [ 514.971324][ T8805] Uninit was stored to memory at: [ 514.985785][ T8805] get_compat_msghdr+0x4fc/0x720 [ 514.990865][ T8805] ___sys_recvmsg+0x18c/0x840 [ 514.995764][ T8805] do_recvmmsg+0x682/0x1180 [ 515.000379][ T8805] __sys_recvmmsg+0x113/0x450 [ 515.005366][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 515.011844][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 515.017086][ T8805] do_fast_syscall_32+0x33/0x70 [ 515.022194][ T8805] do_SYSENTER_32+0x1b/0x20 [ 515.026796][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 515.033332][ T8805] [ 515.035705][ T8805] Uninit was stored to memory at: [ 515.040835][ T8805] get_compat_msghdr+0x4fc/0x720 [ 515.045989][ T8805] ___sys_recvmsg+0x18c/0x840 [ 515.050765][ T8805] do_recvmmsg+0x682/0x1180 [ 515.055437][ T8805] __sys_recvmmsg+0x113/0x450 [ 515.060218][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 515.066644][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 515.071968][ T8805] do_fast_syscall_32+0x33/0x70 [ 515.076933][ T8805] do_SYSENTER_32+0x1b/0x20 [ 515.081544][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 515.088167][ T8805] [ 515.090547][ T8805] Uninit was stored to memory at: [ 515.095839][ T8805] get_compat_msghdr+0x4fc/0x720 [ 515.100878][ T8805] ___sys_recvmsg+0x18c/0x840 [ 515.105718][ T8805] do_recvmmsg+0x682/0x1180 [ 515.110318][ T8805] __sys_recvmmsg+0x113/0x450 [ 515.115211][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 515.121578][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 515.126876][ T8805] do_fast_syscall_32+0x33/0x70 [ 515.131934][ T8805] do_SYSENTER_32+0x1b/0x20 [ 515.136552][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 515.143147][ T8805] [ 515.145516][ T8805] Uninit was stored to memory at: [ 515.150635][ T8805] get_compat_msghdr+0x4fc/0x720 [ 515.155736][ T8805] ___sys_recvmsg+0x18c/0x840 [ 515.160514][ T8805] do_recvmmsg+0x682/0x1180 [ 515.165234][ T8805] __sys_recvmmsg+0x113/0x450 [ 515.170012][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 515.176437][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 515.181654][ T8805] do_fast_syscall_32+0x33/0x70 [ 515.186744][ T8805] do_SYSENTER_32+0x1b/0x20 [ 515.191358][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 515.197959][ T8805] [ 515.200340][ T8805] Uninit was stored to memory at: [ 515.205649][ T8805] get_compat_msghdr+0x4fc/0x720 [ 515.210693][ T8805] ___sys_recvmsg+0x18c/0x840 [ 515.215582][ T8805] do_recvmmsg+0x682/0x1180 [ 515.220184][ T8805] __sys_recvmmsg+0x113/0x450 [ 515.225026][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 515.231395][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 515.236675][ T8805] do_fast_syscall_32+0x33/0x70 [ 515.241625][ T8805] do_SYSENTER_32+0x1b/0x20 [ 515.246333][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 515.252928][ T8805] [ 515.255295][ T8805] Uninit was stored to memory at: [ 515.260436][ T8805] get_compat_msghdr+0x4fc/0x720 [ 515.265545][ T8805] ___sys_recvmsg+0x18c/0x840 [ 515.270326][ T8805] do_recvmmsg+0x682/0x1180 [ 515.275047][ T8805] __sys_recvmmsg+0x113/0x450 [ 515.279837][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 515.286261][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 515.291489][ T8805] do_fast_syscall_32+0x33/0x70 [ 515.296509][ T8805] do_SYSENTER_32+0x1b/0x20 [ 515.301114][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 515.307695][ T8805] [ 515.310079][ T8805] Uninit was stored to memory at: [ 515.315407][ T8805] get_compat_msghdr+0x4fc/0x720 [ 515.320465][ T8805] ___sys_recvmsg+0x18c/0x840 [ 515.325348][ T8805] do_recvmmsg+0x682/0x1180 [ 515.329956][ T8805] __sys_recvmmsg+0x113/0x450 [ 515.334799][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 515.341163][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 515.346451][ T8805] do_fast_syscall_32+0x33/0x70 [ 515.351409][ T8805] do_SYSENTER_32+0x1b/0x20 [ 515.356089][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 515.362700][ T8805] [ 515.365081][ T8805] Local variable msg_sys created at: [ 515.370418][ T8805] do_recvmmsg+0x5c/0x1180 [ 515.375007][ T8805] __sys_recvmmsg+0x113/0x450 [ 515.551384][ T8805] not chained 370000 origins [ 515.556147][ T8805] CPU: 0 PID: 8805 Comm: syz-executor.0 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 515.566540][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 515.576642][ T8805] Call Trace: [ 515.579951][ T8805] [ 515.582915][ T8805] dump_stack_lvl+0x1c8/0x256 [ 515.587689][ T8805] dump_stack+0x1a/0x1c [ 515.591972][ T8805] kmsan_internal_chain_origin+0x78/0x120 [ 515.597784][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 515.603761][ T8805] ? ____sys_recvmsg+0x5c1/0x810 [ 515.608781][ T8805] ? ___sys_recvmsg+0x217/0x840 [ 515.613741][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 515.619712][ T8805] ? ____sys_recvmsg+0x5c1/0x810 [ 515.624758][ T8805] ? kfree+0x44/0x980 [ 515.628798][ T8805] ? ___sys_recvmsg+0x248/0x840 [ 515.633725][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 515.639647][ T8805] ? get_compat_msghdr+0x51/0x720 [ 515.644766][ T8805] ? ___sys_recvmsg+0x18c/0x840 [ 515.649688][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 515.655588][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 515.661486][ T8805] ? should_fail+0x3f/0x810 [ 515.666102][ T8805] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 515.672519][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 515.678490][ T8805] __msan_chain_origin+0xbd/0x140 [ 515.683642][ T8805] get_compat_msghdr+0x4fc/0x720 [ 515.688664][ T8805] ___sys_recvmsg+0x18c/0x840 [ 515.693413][ T8805] ? __stack_depot_save+0x21/0x4b0 [ 515.698614][ T8805] ? kmsan_internal_check_memory+0x94/0x530 [ 515.704595][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 515.710504][ T8805] do_recvmmsg+0x682/0x1180 [ 515.715123][ T8805] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 515.721675][ T8805] __sys_recvmmsg+0x113/0x450 [ 515.726453][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 515.732798][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 515.737974][ T8805] ? exit_to_user_mode_prepare+0x119/0x220 [ 515.743859][ T8805] do_fast_syscall_32+0x33/0x70 [ 515.748773][ T8805] do_SYSENTER_32+0x1b/0x20 [ 515.753345][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 515.759780][ T8805] RIP: 0023:0xf7f84549 [ 515.763909][ T8805] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 515.783642][ T8805] RSP: 002b:00000000f7f5e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 515.792118][ T8805] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 515.800142][ T8805] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 515.808160][ T8805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 515.816197][ T8805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.824265][ T8805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 515.832331][ T8805] [ 515.835820][ T8805] Uninit was stored to memory at: [ 515.841046][ T8805] get_compat_msghdr+0x4fc/0x720 [ 515.846219][ T8805] ___sys_recvmsg+0x18c/0x840 [ 515.851019][ T8805] do_recvmmsg+0x682/0x1180 [ 515.855739][ T8805] __sys_recvmmsg+0x113/0x450 [ 515.860539][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 515.867039][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 515.872376][ T8805] do_fast_syscall_32+0x33/0x70 [ 515.877352][ T8805] do_SYSENTER_32+0x1b/0x20 [ 515.882100][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 515.888595][ T8805] [ 515.890948][ T8805] Uninit was stored to memory at: [ 515.896236][ T8805] get_compat_msghdr+0x4fc/0x720 [ 515.901304][ T8805] ___sys_recvmsg+0x18c/0x840 [ 515.906203][ T8805] do_recvmmsg+0x682/0x1180 [ 515.910808][ T8805] __sys_recvmmsg+0x113/0x450 [ 515.915653][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 515.922125][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 515.927344][ T8805] do_fast_syscall_32+0x33/0x70 [ 515.932410][ T8805] do_SYSENTER_32+0x1b/0x20 [ 515.937030][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 515.943623][ T8805] [ 515.946002][ T8805] Uninit was stored to memory at: [ 515.951189][ T8805] get_compat_msghdr+0x4fc/0x720 [ 515.956391][ T8805] ___sys_recvmsg+0x18c/0x840 [ 515.961173][ T8805] do_recvmmsg+0x682/0x1180 [ 515.965840][ T8805] __sys_recvmmsg+0x113/0x450 [ 515.970617][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 515.977040][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 515.982367][ T8805] do_fast_syscall_32+0x33/0x70 [ 515.987334][ T8805] do_SYSENTER_32+0x1b/0x20 [ 515.992031][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 515.998518][ T8805] [ 516.000864][ T8805] Uninit was stored to memory at: [ 516.006126][ T8805] get_compat_msghdr+0x4fc/0x720 [ 516.011165][ T8805] ___sys_recvmsg+0x18c/0x840 [ 516.016012][ T8805] do_recvmmsg+0x682/0x1180 [ 516.020634][ T8805] __sys_recvmmsg+0x113/0x450 [ 516.025535][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 516.032011][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 516.037227][ T8805] do_fast_syscall_32+0x33/0x70 [ 516.042239][ T8805] do_SYSENTER_32+0x1b/0x20 [ 516.046859][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 516.053440][ T8805] [ 516.055819][ T8805] Uninit was stored to memory at: [ 516.061001][ T8805] get_compat_msghdr+0x4fc/0x720 [ 516.066152][ T8805] ___sys_recvmsg+0x18c/0x840 [ 516.070943][ T8805] do_recvmmsg+0x682/0x1180 [ 516.075645][ T8805] __sys_recvmmsg+0x113/0x450 [ 516.080427][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 516.086852][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 516.092177][ T8805] do_fast_syscall_32+0x33/0x70 [ 516.097130][ T8805] do_SYSENTER_32+0x1b/0x20 [ 516.101803][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 516.108306][ T8805] [ 516.110671][ T8805] Uninit was stored to memory at: [ 516.115923][ T8805] get_compat_msghdr+0x4fc/0x720 [ 516.120964][ T8805] ___sys_recvmsg+0x18c/0x840 [ 516.125862][ T8805] do_recvmmsg+0x682/0x1180 [ 516.130470][ T8805] __sys_recvmmsg+0x113/0x450 [ 516.135319][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 516.141799][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 516.147036][ T8805] do_fast_syscall_32+0x33/0x70 [ 516.152137][ T8805] do_SYSENTER_32+0x1b/0x20 [ 516.156755][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 516.163345][ T8805] [ 516.165726][ T8805] Uninit was stored to memory at: [ 516.170907][ T8805] get_compat_msghdr+0x4fc/0x720 [ 516.176058][ T8805] ___sys_recvmsg+0x18c/0x840 [ 516.180848][ T8805] do_recvmmsg+0x682/0x1180 [ 516.185557][ T8805] __sys_recvmmsg+0x113/0x450 [ 516.190347][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 516.196829][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 516.202144][ T8805] do_fast_syscall_32+0x33/0x70 [ 516.207112][ T8805] do_SYSENTER_32+0x1b/0x20 [ 516.211820][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 516.218320][ T8805] [ 516.220697][ T8805] Local variable msg_sys created at: [ 516.226145][ T8805] do_recvmmsg+0x5c/0x1180 [ 516.230670][ T8805] __sys_recvmmsg+0x113/0x450 [ 516.527177][ T8805] not chained 380000 origins [ 516.531943][ T8805] CPU: 0 PID: 8805 Comm: syz-executor.0 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 516.542357][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 516.552502][ T8805] Call Trace: [ 516.555811][ T8805] [ 516.558800][ T8805] dump_stack_lvl+0x1c8/0x256 [ 516.563597][ T8805] dump_stack+0x1a/0x1c [ 516.567842][ T8805] kmsan_internal_chain_origin+0x78/0x120 [ 516.573651][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 516.579570][ T8805] ? ____sys_recvmsg+0x5c1/0x810 [ 516.584584][ T8805] ? ___sys_recvmsg+0x217/0x840 [ 516.589503][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 516.595422][ T8805] ? ____sys_recvmsg+0x5c1/0x810 [ 516.600480][ T8805] ? kfree+0x44/0x980 [ 516.604567][ T8805] ? ___sys_recvmsg+0x248/0x840 [ 516.609529][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 516.615482][ T8805] ? get_compat_msghdr+0x51/0x720 [ 516.620618][ T8805] ? ___sys_recvmsg+0x18c/0x840 [ 516.625536][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 516.631437][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 516.637333][ T8805] ? should_fail+0x3f/0x810 [ 516.641944][ T8805] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 516.648345][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 516.654294][ T8805] __msan_chain_origin+0xbd/0x140 [ 516.659406][ T8805] get_compat_msghdr+0x4fc/0x720 [ 516.664432][ T8805] ___sys_recvmsg+0x18c/0x840 [ 516.669181][ T8805] ? __stack_depot_save+0x21/0x4b0 [ 516.674373][ T8805] ? kmsan_internal_check_memory+0x94/0x530 [ 516.680353][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 516.686250][ T8805] do_recvmmsg+0x682/0x1180 [ 516.690837][ T8805] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 516.697354][ T8805] __sys_recvmmsg+0x113/0x450 [ 516.702152][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 516.708483][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 516.713658][ T8805] ? exit_to_user_mode_prepare+0x119/0x220 [ 516.719544][ T8805] do_fast_syscall_32+0x33/0x70 [ 516.724457][ T8805] do_SYSENTER_32+0x1b/0x20 [ 516.729454][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 516.735877][ T8805] RIP: 0023:0xf7f84549 [ 516.739986][ T8805] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 516.759695][ T8805] RSP: 002b:00000000f7f5e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 516.768217][ T8805] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 516.776242][ T8805] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 516.784260][ T8805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 516.792292][ T8805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.800365][ T8805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 516.808452][ T8805] [ 516.813208][ T8805] Uninit was stored to memory at: [ 516.818417][ T8805] get_compat_msghdr+0x4fc/0x720 [ 516.823594][ T8805] ___sys_recvmsg+0x18c/0x840 [ 516.828395][ T8805] do_recvmmsg+0x682/0x1180 [ 516.833106][ T8805] __sys_recvmmsg+0x113/0x450 [ 516.837899][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 516.844376][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 516.849600][ T8805] do_fast_syscall_32+0x33/0x70 [ 516.854675][ T8805] do_SYSENTER_32+0x1b/0x20 [ 516.859277][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 516.865863][ T8805] [ 516.868245][ T8805] Uninit was stored to memory at: [ 516.873522][ T8805] get_compat_msghdr+0x4fc/0x720 [ 516.878585][ T8805] ___sys_recvmsg+0x18c/0x840 [ 516.883511][ T8805] do_recvmmsg+0x682/0x1180 [ 516.888122][ T8805] __sys_recvmmsg+0x113/0x450 [ 516.892964][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 516.899331][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 516.904670][ T8805] do_fast_syscall_32+0x33/0x70 [ 516.909643][ T8805] do_SYSENTER_32+0x1b/0x20 [ 516.914365][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 516.920865][ T8805] [ 516.923367][ T8805] Uninit was stored to memory at: [ 516.928511][ T8805] get_compat_msghdr+0x4fc/0x720 [ 516.933680][ T8805] ___sys_recvmsg+0x18c/0x840 [ 516.938457][ T8805] do_recvmmsg+0x682/0x1180 [ 516.943173][ T8805] __sys_recvmmsg+0x113/0x450 [ 516.947953][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 516.954402][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 516.959620][ T8805] do_fast_syscall_32+0x33/0x70 [ 516.964695][ T8805] do_SYSENTER_32+0x1b/0x20 [ 516.969297][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 516.975881][ T8805] [ 516.978265][ T8805] Uninit was stored to memory at: [ 516.983590][ T8805] get_compat_msghdr+0x4fc/0x720 [ 516.988646][ T8805] ___sys_recvmsg+0x18c/0x840 [ 516.993545][ T8805] do_recvmmsg+0x682/0x1180 [ 516.998175][ T8805] __sys_recvmmsg+0x113/0x450 [ 517.003104][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 517.009471][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 517.014758][ T8805] do_fast_syscall_32+0x33/0x70 [ 517.019711][ T8805] do_SYSENTER_32+0x1b/0x20 [ 517.024431][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 517.030922][ T8805] [ 517.033422][ T8805] Uninit was stored to memory at: [ 517.038570][ T8805] get_compat_msghdr+0x4fc/0x720 [ 517.043728][ T8805] ___sys_recvmsg+0x18c/0x840 [ 517.048509][ T8805] do_recvmmsg+0x682/0x1180 [ 517.053231][ T8805] __sys_recvmmsg+0x113/0x450 [ 517.058006][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 517.064487][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 517.069727][ T8805] do_fast_syscall_32+0x33/0x70 [ 517.074782][ T8805] do_SYSENTER_32+0x1b/0x20 [ 517.079387][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 517.085968][ T8805] [ 517.088335][ T8805] Uninit was stored to memory at: [ 517.093642][ T8805] get_compat_msghdr+0x4fc/0x720 [ 517.098681][ T8805] ___sys_recvmsg+0x18c/0x840 [ 517.103565][ T8805] do_recvmmsg+0x682/0x1180 [ 517.108186][ T8805] __sys_recvmmsg+0x113/0x450 [ 517.113068][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 517.119450][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 517.124777][ T8805] do_fast_syscall_32+0x33/0x70 [ 517.129730][ T8805] do_SYSENTER_32+0x1b/0x20 [ 517.134395][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 517.140886][ T8805] [ 517.143383][ T8805] Uninit was stored to memory at: [ 517.148528][ T8805] get_compat_msghdr+0x4fc/0x720 [ 517.153725][ T8805] ___sys_recvmsg+0x18c/0x840 [ 517.158518][ T8805] do_recvmmsg+0x682/0x1180 [ 517.163238][ T8805] __sys_recvmmsg+0x113/0x450 [ 517.168014][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 517.174439][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 517.179660][ T8805] do_fast_syscall_32+0x33/0x70 [ 517.184737][ T8805] do_SYSENTER_32+0x1b/0x20 [ 517.189340][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 517.195923][ T8805] [ 517.198307][ T8805] Local variable msg_sys created at: [ 517.203780][ T8805] do_recvmmsg+0x5c/0x1180 [ 517.208293][ T8805] __sys_recvmmsg+0x113/0x450 [ 517.373310][ T8805] not chained 390000 origins [ 517.377992][ T8805] CPU: 0 PID: 8805 Comm: syz-executor.0 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 517.388382][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 517.398497][ T8805] Call Trace: [ 517.401816][ T8805] [ 517.404778][ T8805] dump_stack_lvl+0x1c8/0x256 [ 517.409554][ T8805] dump_stack+0x1a/0x1c [ 517.413784][ T8805] kmsan_internal_chain_origin+0x78/0x120 [ 517.419592][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 517.425505][ T8805] ? ____sys_recvmsg+0x5c1/0x810 [ 517.430564][ T8805] ? ___sys_recvmsg+0x217/0x840 [ 517.435513][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 517.441411][ T8805] ? ____sys_recvmsg+0x5c1/0x810 [ 517.446413][ T8805] ? kfree+0x44/0x980 [ 517.450446][ T8805] ? ___sys_recvmsg+0x248/0x840 [ 517.455359][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 517.461268][ T8805] ? get_compat_msghdr+0x51/0x720 [ 517.466357][ T8805] ? ___sys_recvmsg+0x18c/0x840 [ 517.471270][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 517.477185][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 517.483151][ T8805] ? should_fail+0x3f/0x810 [ 517.487791][ T8805] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 517.494126][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 517.500023][ T8805] __msan_chain_origin+0xbd/0x140 [ 517.505125][ T8805] get_compat_msghdr+0x4fc/0x720 [ 517.510144][ T8805] ___sys_recvmsg+0x18c/0x840 [ 517.514892][ T8805] ? __stack_depot_save+0x21/0x4b0 [ 517.520089][ T8805] ? kmsan_internal_check_memory+0x94/0x530 [ 517.526103][ T8805] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 517.532060][ T8805] do_recvmmsg+0x682/0x1180 [ 517.536651][ T8805] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 517.543145][ T8805] __sys_recvmmsg+0x113/0x450 [ 517.547889][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 517.554213][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 517.559418][ T8805] ? exit_to_user_mode_prepare+0x119/0x220 [ 517.565309][ T8805] do_fast_syscall_32+0x33/0x70 [ 517.570221][ T8805] do_SYSENTER_32+0x1b/0x20 [ 517.574806][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 517.581314][ T8805] RIP: 0023:0xf7f84549 [ 517.585462][ T8805] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 517.605195][ T8805] RSP: 002b:00000000f7f5e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 517.613679][ T8805] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 517.621716][ T8805] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 517.629785][ T8805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.637854][ T8805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.645922][ T8805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.653998][ T8805] [ 517.657603][ T8805] Uninit was stored to memory at: [ 517.662912][ T8805] get_compat_msghdr+0x4fc/0x720 [ 517.667973][ T8805] ___sys_recvmsg+0x18c/0x840 [ 517.672887][ T8805] do_recvmmsg+0x682/0x1180 [ 517.677527][ T8805] __sys_recvmmsg+0x113/0x450 [ 517.682468][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 517.688865][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 517.694271][ T8805] do_fast_syscall_32+0x33/0x70 [ 517.699241][ T8805] do_SYSENTER_32+0x1b/0x20 [ 517.703950][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 517.710448][ T8805] [ 517.713022][ T8805] Uninit was stored to memory at: [ 517.718168][ T8805] get_compat_msghdr+0x4fc/0x720 [ 517.723360][ T8805] ___sys_recvmsg+0x18c/0x840 [ 517.728143][ T8805] do_recvmmsg+0x682/0x1180 [ 517.732844][ T8805] __sys_recvmmsg+0x113/0x450 [ 517.737620][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 517.744090][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 517.749319][ T8805] do_fast_syscall_32+0x33/0x70 [ 517.754414][ T8805] do_SYSENTER_32+0x1b/0x20 [ 517.759011][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 517.765594][ T8805] [ 517.767974][ T8805] Uninit was stored to memory at: [ 517.773289][ T8805] get_compat_msghdr+0x4fc/0x720 [ 517.778339][ T8805] ___sys_recvmsg+0x18c/0x840 [ 517.783264][ T8805] do_recvmmsg+0x682/0x1180 [ 517.787900][ T8805] __sys_recvmmsg+0x113/0x450 [ 517.792858][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 517.799228][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 517.804517][ T8805] do_fast_syscall_32+0x33/0x70 [ 517.809470][ T8805] do_SYSENTER_32+0x1b/0x20 [ 517.814224][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 517.820740][ T8805] [ 517.823219][ T8805] Uninit was stored to memory at: [ 517.828379][ T8805] get_compat_msghdr+0x4fc/0x720 [ 517.833557][ T8805] ___sys_recvmsg+0x18c/0x840 [ 517.838341][ T8805] do_recvmmsg+0x682/0x1180 [ 517.843111][ T8805] __sys_recvmmsg+0x113/0x450 [ 517.847907][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 517.854431][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 517.859660][ T8805] do_fast_syscall_32+0x33/0x70 [ 517.864775][ T8805] do_SYSENTER_32+0x1b/0x20 [ 517.869410][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 517.876119][ T8805] [ 517.878508][ T8805] Uninit was stored to memory at: [ 517.883818][ T8805] get_compat_msghdr+0x4fc/0x720 [ 517.888867][ T8805] ___sys_recvmsg+0x18c/0x840 [ 517.893826][ T8805] do_recvmmsg+0x682/0x1180 [ 517.898435][ T8805] __sys_recvmmsg+0x113/0x450 [ 517.903346][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 517.909734][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 517.915083][ T8805] do_fast_syscall_32+0x33/0x70 [ 517.920041][ T8805] do_SYSENTER_32+0x1b/0x20 [ 517.924711][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 517.931206][ T8805] [ 517.933721][ T8805] Uninit was stored to memory at: [ 517.938911][ T8805] get_compat_msghdr+0x4fc/0x720 [ 517.944064][ T8805] ___sys_recvmsg+0x18c/0x840 [ 517.948848][ T8805] do_recvmmsg+0x682/0x1180 [ 517.953602][ T8805] __sys_recvmmsg+0x113/0x450 [ 517.958387][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 517.964893][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 517.970113][ T8805] do_fast_syscall_32+0x33/0x70 [ 517.975153][ T8805] do_SYSENTER_32+0x1b/0x20 [ 517.979755][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 517.986382][ T8805] [ 517.988762][ T8805] Uninit was stored to memory at: [ 517.994075][ T8805] get_compat_msghdr+0x4fc/0x720 [ 517.999133][ T8805] ___sys_recvmsg+0x18c/0x840 [ 518.004008][ T8805] do_recvmmsg+0x682/0x1180 [ 518.008621][ T8805] __sys_recvmmsg+0x113/0x450 [ 518.013606][ T8805] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 518.019979][ T8805] __do_fast_syscall_32+0xa2/0x100 [ 518.025312][ T8805] do_fast_syscall_32+0x33/0x70 [ 518.030288][ T8805] do_SYSENTER_32+0x1b/0x20 [ 518.035067][ T8805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 518.041557][ T8805] [ 518.044008][ T8805] Local variable msg_sys created at: [ 518.049353][ T8805] do_recvmmsg+0x5c/0x1180 [ 518.053995][ T8805] __sys_recvmmsg+0x113/0x450 07:17:38 executing program 0: r0 = semget$private(0x0, 0x1, 0x0) semctl$GETZCNT(r0, 0x1, 0xf, 0x0) 07:17:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000100)={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @random="8264adb4f276"}, 0x14) 07:17:38 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:38 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000000940)=[{0x0, 0x0, 0x5f6}, {&(0x7f0000001500)="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", 0x1eb}]) 07:17:38 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x5421, 0x2000ff00) 07:17:38 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1842) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000040)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) 07:17:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 518.358080][ T8836] loop1: detected capacity change from 0 to 5 07:17:38 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 07:17:38 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000340), 0x0) 07:17:38 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) [ 518.460085][ T8836] Dev loop1: unable to read RDB block 5 [ 518.466027][ T8836] loop1: unable to read partition table [ 518.483091][ T8836] loop1: partition table beyond EOD, truncated [ 518.489598][ T8836] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 07:17:38 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f00000004c0)=0x9) 07:17:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$fb(r0, 0x0, 0x0) 07:17:38 executing program 3: mremap(&(0x7f00008ba000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f00008bc000/0x1000)=nil, 0x1000) 07:17:38 executing program 2: socket(0x15, 0x5, 0x4cdc) 07:17:39 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x5452, 0x20000000) 07:17:39 executing program 0: setpriority(0x0, 0x0, 0x9) 07:17:39 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000200)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x7a}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local={0xac, 0x14, 0x38}}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '\x00\x00\x00\x11\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}, 0x1, 0x3}, 0x0) 07:17:39 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r0, 0x20, 0x0, 0x1000) 07:17:39 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b586dd", 0x12, 0x0, 0x0, 0x0) 07:17:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x440, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x40086607, &(0x7f0000000040)=@v1={0x0, @aes256={0x0}, 0x0, @desc2}) 07:17:39 executing program 0: syz_mount_image$sysv(0x0, 0x0, 0x0, 0x2, &(0x7f0000000680), 0x0, 0x0) 07:17:39 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:39 executing program 1: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) [ 519.559983][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 07:17:39 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000080)=[0x0], &(0x7f00000000c0), &(0x7f0000000100), 0x0}) 07:17:40 executing program 0: socketpair(0x22, 0x0, 0x3ff, &(0x7f0000000080)) 07:17:40 executing program 1: syz_mount_image$sysv(0x0, 0x0, 0x0, 0xaaaaaaaaaaaac4a, &(0x7f0000000680)=[{&(0x7f00000000c0)='-', 0x1}, {&(0x7f0000000000)="7667dc173e4cf7460dbf20aeed8b08da9a7580024aadb6035429bcf3908ee75f00326c546db0cbb3a610cd2979226c09d1b4bd472402e84bf6617572eb86d71316e26ea2f02fda5d43b9270919eabf1f29c10468f9bf9d652c4920fed594cfd9d3eafdca92adc1cb718896b54aa9a7604f82fd2a94a58cda2fb5a160241bbf4429e912d11c3834", 0x1, 0x8000000000000000}], 0x1020000, 0x0) 07:17:40 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d900f) unlink(&(0x7f00000000c0)='./bus\x00') rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000240)='./file0\x00') 07:17:40 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:40 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000080)) [ 520.105216][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 520.111890][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 07:17:40 executing program 0: r0 = syz_clone(0x30a2100, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="ef194884477f37d0c63f186f01c8bde1b658aa826e770a004bd5073498c53a633247e0321bfe0efa0e2185d0880b24c7ce90b26d5ba675394f383ad19c8d91") sched_rr_get_interval(r0, &(0x7f0000000280)) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x5421, 0x0) 07:17:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000023c0), 0x10, 0x0) 07:17:40 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5f5) 07:17:40 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:41 executing program 2: syz_clone(0x8000700, 0x0, 0x0, 0x0, 0x0, 0x0) 07:17:41 executing program 0: syz_clone(0x8908000, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) 07:17:41 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:41 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}, @in6={0xa, 0x0, 0x0, @local}}}, 0x118) 07:17:41 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x4080, 0x20000000}, 0x1c) 07:17:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f00000013c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private0}}}], 0x28}}], 0x1, 0x0) 07:17:41 executing program 0: syz_mount_image$sysv(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x11f1, &(0x7f0000000780)) 07:17:41 executing program 2: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5) 07:17:41 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8914, &(0x7f0000000280)={'gretap0\x00', 0x0}) 07:17:41 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 07:17:42 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x40086602, 0x7fffffffefff) [ 521.933622][ T8920] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:42 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 07:17:42 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'virt_wifi0\x00', 0x17}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 07:17:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 07:17:42 executing program 0: syz_clone(0x30a2100, 0x0, 0x0, 0x0, 0x0, 0x0) 07:17:42 executing program 5: r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x80000001) 07:17:42 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001280)=""/242) [ 522.497430][ T8933] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:42 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "f932de", "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"}}, 0x110) 07:17:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x10}}, 0x1c}}, 0x0) 07:17:42 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) pipe2(0x0, 0x0) select(0x40, &(0x7f00000001c0)={0x8}, 0x0, 0x0, 0x0) 07:17:43 executing program 5: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003a40)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00'}, 0xffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 523.069032][ T8947] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:43 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@random="6dcd178f684c", @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @remote}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) 07:17:43 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:17:43 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:43 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) [ 523.259600][ T24] audit: type=1326 audit(1663053463.316:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f85549 code=0x0 07:17:43 executing program 5: r0 = socket(0x1, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 07:17:43 executing program 3: r0 = socket(0x18, 0x0, 0x2) accept4$x25(r0, 0x0, 0x0, 0x0) [ 523.651476][ T8964] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:43 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1}}) 07:17:43 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:17:43 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000300003800800010002000000140002007663616e380000000000000000000000080003"], 0x44}}, 0x0) 07:17:44 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x9, 0x0, 0x0, &(0x7f0000000580)) 07:17:44 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)={0x14, 0x15, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) [ 524.366250][ T8978] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 524.474622][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 524.484481][ T8981] IPVS: Unknown mcast interface: vcan8 07:17:44 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:17:44 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:44 executing program 2: accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x0, @fixed}, 0x0, 0x0) unshare(0x60000000) 07:17:44 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) 07:17:44 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) write$binfmt_elf64(r0, 0x0, 0x0) 07:17:45 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)=@rc={0x1f, @fixed}, 0x80) [ 524.988469][ T8990] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:45 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:17:45 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_delroute={0x40, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_FILTER={0xc}, @CGW_SRC_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "f900e3204627b847"}, 0x1}}]}, 0x40}}, 0x0) 07:17:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 07:17:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)='B', 0x7ffffffff000}], 0xb, &(0x7f0000000480)=[{0x10}], 0x10}}], 0x1, 0x0) 07:17:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x0, @fixed}, &(0x7f00000003c0)=0xe, 0x80800) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) unshare(0x60000000) pipe(0x0) 07:17:45 executing program 5: bpf$MAP_CREATE(0x2, &(0x7f0000000400)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 07:17:45 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 07:17:46 executing program 2: getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 07:17:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) 07:17:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={0x0}}, 0x0) 07:17:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:46 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000005dc0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 07:17:46 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 07:17:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14}, 0x14}}, 0x0) 07:17:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600e8ffffffffffffff000080", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 527.053665][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 07:17:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 07:17:47 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) 07:17:47 executing program 2: r0 = socket(0x1, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x181) 07:17:47 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:47 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 07:17:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000005c0)={'ip6erspan0\x00', &(0x7f00000004c0)=@ethtool_dump}) 07:17:47 executing program 3: r0 = socket(0x1, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:17:47 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r2, 0x50d, 0x0, 0x0, {0x2, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) [ 527.422671][ T9051] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:47 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:17:47 executing program 0: r0 = socket(0x1e, 0x2, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) 07:17:47 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:47 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x17) [ 527.870547][ T9063] smc: net device rose0 applied user defined pnetid SYZ0 07:17:48 executing program 2: bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) pipe(&(0x7f00000006c0)) 07:17:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, r2, 0x601}, 0x14}}, 0x0) [ 528.163786][ T9070] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:48 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:17:48 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0xffffffffffffffff, {0x0, 0xf0}}, 0x18) 07:17:48 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:48 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000007680)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}}, {{&(0x7f0000000a00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=[{0x18, 0x0, 0x0, '@'}, {0x88, 0x0, 0x0, "eaed1ecc4c19432ab81707299983dd1c19decf2f2db9004131ea3077eb01de955ea76b60f13dd8177c0d69e08852792a3671353effff7b3b962e0d7f2e8eccbe797c6c4f47b27d6e27adead9393d63ad6788db3411b8a0e455491f172e245226a10b4c65a3231d9311f35df797987b1713"}, {0x10}, {0xf0, 0x0, 0x0, "06a1eb755b159cd39ba58674b9d2f4f0fa82288b9cd3005fb67139d64e325223286330b5e45c2e85c4f8f0c5e99830769cd7a0e6f219c1d982e6698a3460ba0f2f55eb5d7aca80f3f02eb568ac43eaed07b1a77cbdebbc820b764b0b284a394c0359aaa62a8048946e0e6c13fb8c1030820615b301ca26807ec3bff1c35f039a3fbe621d32ff1120043f919899783a49042278a2a5ada2316746f0806a64be5c091de43556eff6ddef2ddbd08bbed7ed13ee1e799ba48b9a764bb1543337fc07cda67ba0241e9acb539d6505b97fea3aefba81af7909b8f988"}, {0x1010, 0x0, 0x0, "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"}, {0x48, 0x0, 0x0, "39d10b701b5592d086ddfa4291f0f7871318b2e5b5c03d7ca9249003f0b37d6f4c3bcf2e1005d964d242b76e5f20c1e8d2"}, {0xe0, 0x0, 0x0, "c4fcacb0cec55e2a2e5d734079900f4f23ad0974502c274a11dcee983635780bdb16d890a1d644635f40d6f960a1f4bca2806b3d7dd913ea2aea4b9ba0900e9f4cc13ceabbf7602cbab9fde4ff08418087332a7727a18f8986f8b372915abb6cce3f7d9f0b09aba57c582051cfe4a013fa1e39fea1b2266bf0a6d379b3bfa8f9af5a6ab7c15e3b8d5953f5c8f0861d4dfc4a640a58bcf3199779a6714cae3845a19cd4c699a5db9e97f7806d21e7fdeed4d5dc992f4ec8acd7867835dd9da601f78d07299352bdbaea"}, {0x38, 0x0, 0x0, "0982663cce9ec03129eb3365a7ebca50e12bb4250e97f23b75f42ee18206113049"}, {0xcf8, 0x0, 0x0, "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"}], 0x2008}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x20000040) 07:17:48 executing program 2: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) 07:17:48 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) [ 528.766248][ T9085] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) pipe(&(0x7f00000006c0)) 07:17:48 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:17:49 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 07:17:49 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)={0x14, 0x15, 0x1}, 0x14}}, 0x0) 07:17:49 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:17:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:17:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1dbe115819896e37, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 07:17:49 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) [ 529.426637][ T9098] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:49 executing program 0: sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x6d}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x4}]}, 0x34}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, 0x0, 0x40000) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x80, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x41000}, 0x4) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) 07:17:49 executing program 2: r0 = socket(0x1, 0x5, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 07:17:49 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:49 executing program 5: r0 = socket(0x18, 0x0, 0x0) getpeername$l2tp6(r0, 0x0, &(0x7f0000000080)) [ 529.898430][ T9113] nbd: must specify an index to disconnect 07:17:50 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2, 0x9}, 0x20) 07:17:50 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) 07:17:50 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r0, &(0x7f00000055c0)={{0x3, @bcast, 0x7}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) [ 530.229707][ T9117] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) 07:17:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 07:17:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$l2tp6(r0, 0x0, 0x0) 07:17:50 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:50 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) 07:17:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000005cc0)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)="8d", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 07:17:50 executing program 2: r0 = socket(0x18, 0x0, 0x0) bind$bt_rfcomm(r0, 0x0, 0x0) 07:17:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x14}, 0x14}}, 0x0) [ 531.092692][ T9139] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:51 executing program 3: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$unix(0xffffffffffffffff, &(0x7f00000007c0)=@abs, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x200000c4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) 07:17:51 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) 07:17:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x6}]}, 0x24}}, 0x0) 07:17:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000005cc0)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)="8d", 0x1}], 0x1, &(0x7f0000000b80)=[{0x10}, {0x10}], 0x20}}, {{&(0x7f00000005c0)=@l2tp6={0xa, 0x0, 0x0, @dev, 0xfff}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1}}], 0x2, 0x0) 07:17:51 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0x4a1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 07:17:51 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$netrom(r0, 0x0, 0x0, 0x80800) 07:17:51 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) 07:17:52 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000080)=@raw=[@map_fd], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:17:52 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r0, 0x0, 0x0) [ 532.091180][ T9159] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) 07:17:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000003c0)="aa", 0x1}], 0x1}, 0x8804) 07:17:52 executing program 0: r0 = socket(0x1, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 07:17:52 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:52 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) 07:17:52 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) pipe(0x0) socket(0x2b, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)) 07:17:52 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={0x0, 0x0, 0x18}, 0x10) 07:17:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) 07:17:52 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) [ 532.885885][ T9181] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:53 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000005640)={{0x3, @null}, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) 07:17:53 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) 07:17:53 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 07:17:53 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x7ffffffff000) 07:17:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000250001"], 0x1c}}, 0x0) 07:17:53 executing program 2: bpf$OBJ_GET_MAP(0x21, &(0x7f00000004c0)={0x0, 0x0, 0x18}, 0x10) [ 533.643616][ T9199] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:53 executing program 3: sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000140)) 07:17:53 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) 07:17:53 executing program 5: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 07:17:53 executing program 0: recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0xc9deb9d39dec29af) 07:17:54 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 07:17:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 07:17:54 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) 07:17:54 executing program 0: pipe(&(0x7f0000000180)) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff) 07:17:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) [ 534.485187][ T9219] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:54 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r2, 0x2376fc547edcb019}, 0x14}}, 0x0) 07:17:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000001ac0), 0x10) [ 534.783595][ T9226] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 07:17:54 executing program 5: sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004010}, 0x0) pipe(&(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:17:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:17:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) [ 535.032778][ T9231] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:55 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000005cc0)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote, 0x1}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)="8d6b12428060f0c6066ab15100bfe6e16b9b4fe8348123", 0x17}, {0x0}], 0x2, &(0x7f0000000b80)=[{0x10}, {0x10, 0x1, 0x1}], 0x20}}, {{&(0x7f00000005c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xfff}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) 07:17:55 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000005c0)={'ip6erspan0\x00', 0x0}) 07:17:55 executing program 5: bpf$MAP_CREATE(0xf, &(0x7f0000000400)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 535.401581][ T9241] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 07:17:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:17:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) [ 535.634543][ T9244] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:55 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:55 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000200)={0x2}, 0x18) 07:17:55 executing program 5: r0 = socket(0x18, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) [ 536.017476][ T9254] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 07:17:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) [ 536.273406][ T9260] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:56 executing program 2: r0 = socket(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:17:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:17:56 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r1, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:17:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x6e776a2124c75cb1) 07:17:56 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) [ 536.646853][ T9268] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 07:17:56 executing program 2: bpf$MAP_CREATE(0x8, 0x0, 0xb2) 07:17:57 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, 0x0, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) [ 536.910297][ T9274] smc: net device rose0 erased user defined pnetid SYZ0 07:17:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_delroute={0x14, 0x19, 0x1}, 0x14}}, 0x0) [ 537.005954][ T9278] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:57 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:17:57 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r1, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:17:57 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000007680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=[{0x18, 0x0, 0x0, '@'}, {0x88, 0x0, 0x0, "eaed1ecc4c19432ab81707299983dd1c19decf2f2db9004131ea3077eb01de955ea76b60f13dd8177c0d69e08852792a3671353effff7b3b962e0d7f2e8eccbe797c6c4f47b27d6e27adead9393d63ad6788db3411b8a0e455491f172e245226a10b4c65a3231d9311f35df797987b1713"}, {0x10}, {0xf0, 0x0, 0x0, "06a1eb755b159cd39ba58674b9d2f4f0fa82288b9cd3005fb67139d64e325223286330b5e45c2e85c4f8f0c5e99830769cd7a0e6f219c1d982e6698a3460ba0f2f55eb5d7aca80f3f02eb568ac43eaed07b1a77cbdebbc820b764b0b284a394c0359aaa62a8048946e0e6c13fb8c1030820615b301ca26807ec3bff1c35f039a3fbe621d32ff1120043f919899783a49042278a2a5ada2316746f0806a64be5c091de43556eff6ddef2ddbd08bbed7ed13ee1e799ba48b9a764bb1543337fc07cda67ba0241e9acb539d6505b97fea3aefba81af7909b8f988"}, {0x1010, 0x0, 0x0, "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"}, {0x48, 0x0, 0x0, "39d10b701b5592d086ddfa4291f0f7871318b2e5b5c03d7ca9249003f0b37d6f4c3bcf2e1005d964d242b76e5f20c1e8d2"}, {0xe0, 0x0, 0x0, "c4fcacb0cec55e2a2e5d734079900f4f23ad0974502c274a11dcee983635780bdb16d890a1d644635f40d6f960a1f4bca2806b3d7dd913ea2aea4b9ba0900e9f4cc13ceabbf7602cbab9fde4ff08418087332a7727a18f8986f8b372915abb6cce3f7d9f0b09aba57c582051cfe4a013fa1e39fea1b2266bf0a6d379b3bfa8f9af5a6ab7c15e3b8d5953f5c8f0861d4dfc4a640a58bcf3199779a6714cae3845a19cd4c699a5db9e97f7806d21e7fdeed4d5dc992f4ec8acd7867835dd9da601f78d07299352bdbaea"}, {0x38, 0x0, 0x0, "0982663cce9ec03129eb3365a7ebca50e12bb4250e97f23b75f42ee18206113049"}, {0xcf8, 0x0, 0x0, "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"}], 0x2008}}], 0x1, 0x0) 07:17:57 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, 0x0, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:17:57 executing program 0: pipe(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 07:17:57 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:57 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r1, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:17:57 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:17:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000001940)=0x11, 0x4) 07:17:58 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, 0x0, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) [ 538.095442][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:17:58 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r1, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:17:58 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) 07:17:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfff}]}, 0x40}}, 0x0) 07:17:58 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:17:58 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r1, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:17:58 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, 0x0, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:17:58 executing program 0: socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:17:59 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1}, 0x18) 07:17:59 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r1, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:17:59 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, 0x0, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:17:59 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:17:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600e8ffffffffffffff000080", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:17:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELSET={0x14}], {0x14}}, 0x3c}}, 0x0) 07:17:59 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:17:59 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, 0x0, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:17:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r1, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) [ 539.711653][ T9338] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 07:17:59 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:17:59 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:18:00 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, 0x12, 0x1}, 0x4c}}, 0x0) 07:18:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)={0x50, 0x3, 0x1, 0x5, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}]}, 0x50}}, 0x0) 07:18:00 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:00 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:18:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r1, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:18:00 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r1, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:18:00 executing program 0: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000640)=0xc5d) pipe(&(0x7f0000000680)={0xffffffffffffffff}) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xf, 0x1, 'NLBL_UNLBL\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) getsockname$unix(0xffffffffffffffff, &(0x7f00000007c0)=@abs, &(0x7f0000000840)=0x6e) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x200000c4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendto$unix(0xffffffffffffffff, &(0x7f0000000a80)="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", 0x800, 0x400400d, &(0x7f0000001a80)=@file={0x0, './file0\x00'}, 0x6e) 07:18:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) 07:18:00 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:00 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:18:00 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r1, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:18:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r1, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:18:00 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001600)=[{{&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000001580)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x3938700}) 07:18:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB], 0x20000600}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:18:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:01 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:18:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) 07:18:01 executing program 5: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r0, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:18:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r1, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:18:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8913, &(0x7f00000000c0)={'vxcan0\x00'}) 07:18:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:01 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:18:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5}]}, 0x24}}, 0x0) 07:18:01 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x20) 07:18:01 executing program 5: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r0, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:18:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) [ 541.833741][ T9394] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:02 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)={0x50, 0x3, 0x1, 0x5, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}]}, 0x50}}, 0x0) 07:18:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:18:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5}]}, 0x24}}, 0x0) 07:18:02 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:18:02 executing program 5: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r0, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:18:02 executing program 2: r0 = socket(0x2, 0x3, 0x40) recvmsg$can_j1939(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) [ 542.449154][ T9411] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:02 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r1, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:18:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:18:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x3, 0x4) 07:18:02 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:02 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:18:03 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x20) 07:18:03 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r1, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:18:03 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r1, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) [ 543.019343][ T9428] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:03 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) 07:18:03 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:03 executing program 0: socket(0x10, 0x3, 0x7f) 07:18:03 executing program 2: r0 = socket(0x1, 0x2, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000540)={&(0x7f00000002c0), 0xc, &(0x7f0000000500)={0x0}}, 0x4801) 07:18:03 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r1, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:18:03 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r1, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) [ 543.653032][ T9441] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:03 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) 07:18:03 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) 07:18:03 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r1, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:18:03 executing program 5: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r0, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:18:04 executing program 2: r0 = socket(0x1e, 0x2, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 544.119435][ T9453] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:04 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) 07:18:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) 07:18:04 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:04 executing program 5: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r0, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:18:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r1, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:18:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)={0x2c, 0x3, 0x1, 0x5, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @loopback}}}]}]}, 0x2c}}, 0x0) 07:18:04 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) 07:18:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) 07:18:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r1, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) [ 544.744563][ T9472] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:04 executing program 5: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r0, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:18:05 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:05 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) 07:18:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) 07:18:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r1, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:18:05 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, 0x0, 0x0) 07:18:05 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) [ 545.253165][ T9485] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:05 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) pipe(&(0x7f00000006c0)) 07:18:05 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, 0x0, 0x0) 07:18:05 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) 07:18:05 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, 0x0, 0x0) [ 545.767586][ T9499] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:05 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) 07:18:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x58, r2, 0x601, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'system_u:object_r:systemd_passwd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x58}}, 0x0) 07:18:06 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:06 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, 0x0, 0x0) 07:18:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, 0x0, 0x0) 07:18:06 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) 07:18:06 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) [ 546.350909][ T9513] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\'#(%@\x00'}]}, 0x20}}, 0x0) 07:18:06 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) 07:18:06 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x0) 07:18:06 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, 0x0, 0x0) 07:18:06 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) 07:18:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0xff4d}]}, 0x1c}}, 0x0) 07:18:06 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x0) 07:18:07 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) [ 546.988500][ T9532] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 07:18:07 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:07 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) [ 547.198290][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:18:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x0) 07:18:07 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000640), 0x20000, 0x0) 07:18:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 07:18:07 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541c, &(0x7f0000000000)) [ 547.500383][ T9546] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:07 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) 07:18:07 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:07 executing program 2: r0 = socket(0x1, 0x3, 0x0) getpeername$l2tp6(r0, 0x0, 0x0) 07:18:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x40030000000000}, 0x0) 07:18:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 07:18:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 07:18:08 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) [ 548.038376][ T9560] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:08 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)) 07:18:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x40030000000000}, 0x0) 07:18:08 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:18:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 07:18:08 executing program 2: r0 = socket(0x1e, 0x2, 0x0) recvfrom$l2tp6(r0, &(0x7f0000000000)=""/241, 0xf1, 0x0, 0x0, 0x0) 07:18:08 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) [ 548.624933][ T9577] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 07:18:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:18:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x40030000000000}, 0x0) 07:18:08 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:09 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:18:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 07:18:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:18:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, 0x0, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) [ 549.203085][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:09 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:09 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:18:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delrule={0x1b, 0x21, 0x1}, 0x1c}}, 0x0) 07:18:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 07:18:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, 0x0, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:18:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, 0x0, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) [ 549.873268][ T9605] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 07:18:10 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, 0x0, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:18:10 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:18:10 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 07:18:10 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) socketpair(0x9, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) 07:18:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, 0x0, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:18:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:18:10 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r1, 0x0, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) [ 550.471069][ T9623] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:10 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:18:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, 0x0, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:18:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@delnexthop={0x20, 0x69, 0x1, 0x0, 0x0, {}, [{0x8}]}, 0x20}}, 0x0) 07:18:10 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 07:18:10 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r1, 0x0, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:18:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:18:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r2, 0x0, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:18:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0xc9, 0x1f}, 0x48) 07:18:11 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) [ 551.146608][ T9640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:18:11 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 07:18:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x40082, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0x0, 0x1000000}) 07:18:11 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r1, 0x0, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 07:18:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r2, 0x0, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:18:11 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) [ 551.706247][ T9655] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delrule={0x24, 0x21, 0x0, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) 07:18:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r2, 0x0, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private1}]}, 0x58}}, 0x0) 07:18:12 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ftruncate(r0, 0x0) 07:18:12 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x20, r1, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) 07:18:12 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 07:18:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delrule={0x24, 0x21, 0x0, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) 07:18:12 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, &(0x7f0000000000)) 07:18:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0x60001) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, 0x0) [ 552.372645][ T9672] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}]}, 0x44}}, 0x0) 07:18:12 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r1, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 07:18:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delrule={0x24, 0x21, 0x0, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) 07:18:12 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 07:18:12 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 07:18:12 executing program 2: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x3, &(0x7f0000000100)='*\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) 07:18:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}]}, 0x44}}, 0x0) 07:18:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) close(r0) 07:18:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0) [ 553.151450][ T9692] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:13 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 07:18:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x19, &(0x7f0000000000)={r2, @broadcast, @loopback}, 0xc) 07:18:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f000000c6c0)=[{{&(0x7f0000000c40)={0x2, 0x4e24, @private}, 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) 07:18:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}]}, 0x44}}, 0x0) 07:18:13 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 07:18:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000440)="0f20e06635020000000f22e02e650f017c000f20d86635080000000f22d8360fa2360fe954360f01ca66b9970200000f320f0f9ffa780cba2100ed0f33", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:18:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x7fffffffffefffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xffffff97}) 07:18:13 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 07:18:13 executing program 5: pipe2(&(0x7f0000000580), 0x0) [ 553.886157][ T9713] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}}, &(0x7f0000000780)=""/154, 0x32, 0x9a, 0x1}, 0x20) 07:18:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x44}}, 0x0) 07:18:14 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0xa4000, 0x0) sendfile(r0, r1, 0x0, 0x1dd00) 07:18:14 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, 0x0) 07:18:14 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:18:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x440, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40086607, &(0x7f0000000040)=@v1={0x0, @aes256={0x0}, 0x0, @auto="0709f2c5e99fcbce"}) 07:18:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, &(0x7f0000000000)=@routing, 0x8) [ 554.413151][ T24] audit: type=1804 audit(1663053494.476:8): pid=9726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2339267737/syzkaller.0cZ04b/446/bus" dev="sda1" ino=1160 res=1 errno=0 [ 554.438725][ T24] audit: type=1800 audit(1663053494.476:9): pid=9726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1160 res=0 errno=0 07:18:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x44}}, 0x0) 07:18:14 executing program 2: mlock(&(0x7f0000952000/0x2000)=nil, 0x2000) msync(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) 07:18:14 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, 0x0) [ 554.702732][ T9731] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:14 executing program 5: syz_read_part_table(0xfffffffffffffffc, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)='\r', 0x1, 0xffffffffffff505a}]) 07:18:15 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:18:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x3, &(0x7f0000001280)=@framed, &(0x7f00000012c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree_skb\x00', r0}, 0x10) 07:18:15 executing program 2: setreuid(0xffffffffffffffff, 0xee01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 07:18:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x44}}, 0x0) [ 555.145151][ T9745] loop5: detected capacity change from 0 to 264192 [ 555.271309][ T9747] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:15 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r2, 0x541c, 0x0) 07:18:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 07:18:15 executing program 0: socketpair(0x9, 0x0, 0x0, &(0x7f0000000380)) 07:18:15 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1, 0x539}]}]}}, &(0x7f00000005c0)=""/159, 0x32, 0x9f, 0x1}, 0x20) 07:18:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x50, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x50}}, 0x0) 07:18:15 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:18:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x16, 0x0, 0x5, 0x97d, 0x880}, 0x48) 07:18:15 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000540)='ns/time_for_children\x00') [ 555.906929][ T9765] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:16 executing program 0: socketpair(0x10, 0x2, 0x100, &(0x7f0000000cc0)) 07:18:16 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, &(0x7f00000005c0)=""/159, 0x32, 0x9f, 0x1}, 0x20) 07:18:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x50, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x50}}, 0x0) 07:18:16 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:16 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x159240, 0x0) 07:18:16 executing program 5: unlink(&(0x7f0000000000)='./file0/file0/file0\x00') 07:18:16 executing program 0: bpf$OBJ_PIN_PROG(0x7, &(0x7f0000000300)={0x0}, 0xb5) 07:18:16 executing program 2: syz_clone(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) 07:18:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x50, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x50}}, 0x0) 07:18:16 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 556.644396][ T9781] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:16 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)) 07:18:16 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x8, 0xe207, 0x0, 0x1}, 0x48) 07:18:17 executing program 2: syz_clone(0x50a22080, 0x0, 0x0, 0x0, 0x0, 0x0) 07:18:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x44}}, 0x0) 07:18:17 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x11, 0x0, 0x0, 0x20, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) 07:18:17 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)) 07:18:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_macvtap\x00', 0x200}) [ 557.330096][ T9800] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x44}}, 0x0) 07:18:17 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{0x6, 0x0, 0xce5f}, {}, {}, {}, {}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000007c0)=""/214, 0x64, 0xd6, 0x1}, 0x20) 07:18:17 executing program 0: socketpair(0xa, 0x3, 0x100, &(0x7f0000000cc0)) 07:18:17 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:17 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)="87", 0x1}], 0x1}, 0x50) 07:18:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r2, 0x4a1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x44}}, 0x0) [ 557.944309][ T9818] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x8, 0xe207, 0x880, 0x1}, 0x48) 07:18:18 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000000c0)=""/146, 0x2c, 0x92, 0x1}, 0x20) 07:18:18 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file0\x00') 07:18:18 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:18 executing program 5: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001480)={@map=0x1, 0xffffffffffffffff, 0x7}, 0x10) 07:18:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x0) sendmsg(r1, &(0x7f00000020c0)={&(0x7f0000001c80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, &(0x7f0000002000)=[{0x10}], 0x10}, 0x4000040) 07:18:18 executing program 1: bpf$OBJ_PIN_PROG(0xc, &(0x7f0000001d00)={0x0}, 0x10) 07:18:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001440)=@base={0x16, 0x0, 0xffff, 0x5}, 0x48) [ 558.717131][ T9834] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:18 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x85, &(0x7f00000000c0)=""/133, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:18:18 executing program 5: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001d00)={0x0}, 0x10) 07:18:18 executing program 3: syz_emit_ethernet(0x16, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "c2dc44", 0x18, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x0, "857ea5bf85c5c1a510d7fba784f324cb878090097a84fa28c93f0530cd5c05857adf3b458be0bdf292d0f1ca99e07db309b74b2ea6d1d17f0690f4bedfd56e13e8b347dfdd55004bd6"}}}}}}}, 0x0) 07:18:19 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @multicast2, @multicast1}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "63bb40", 0x0, "2edf46"}}}}}}, 0x0) 07:18:19 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:19 executing program 1: bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 07:18:19 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 07:18:19 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000001c80), 0xc0801, 0x0) [ 559.366274][ T9853] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:19 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)='h', &(0x7f0000000280)}, 0x48) 07:18:19 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000140)={@multicast, @dev, @void, {@ipv4={0x800, @tcp={{0x10, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @broadcast, @empty, {[@generic={0x0, 0xf, "29f20789fdcf1b58fad094d78d"}, @rr={0x7, 0x13, 0x0, [@multicast1, @dev, @local, @multicast1]}, @rr={0x7, 0x7, 0x0, [@broadcast]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 07:18:19 executing program 1: syz_emit_ethernet(0xce, &(0x7f0000000140)={@remote, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "814e6e", 0x98, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@fragment={0x2c}, @hopopts={0x2b, 0x10, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @hao={0xc9, 0x10, @empty}, @generic={0x0, 0x5b, "4180532f74a1cdc67cbebf4f31f698b6d38873184682d92dc0dfad4d81df069b2a7195be16ce7100f38fb595905a9222a7b7627e00adfc5509b11f66794c87a73d68176864c5b291ba52770f6ff20f27be2934d6d39703c209824c"}]}]}}}}}, 0x0) 07:18:19 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:19 executing program 3: timer_create(0xf9f988dae79fb9d1, 0x0, 0x0) 07:18:19 executing program 5: syz_emit_ethernet(0x106, &(0x7f0000000080)={@remote, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "814e6e", 0xd0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x0, 0x18, '\x00', [@generic={0x0, 0xc0, "b4848c8a09dba84ded04b7ce3b5c0c6ad70c90464852f5497997f60b9a544042190e4da9cfd38d4d4c48ec5782b9c6d563cede6116b5f50e4417fd3c6e8cd3d3e0578d22498e9701f7ebd99342e412e7c2253067ae40b7e6ba11f4a43b32b1b9cddceca626d3d066f03cd49db6b7d3c3ff7b5a25492a8135b60ce5a35cbae663611790c588b863dc8c4b2e133a7c410bac0ad79e13336e5044b9a16abdcab9d36b4546c7a35f880fcd9129c1f9170a1154c1c6d8f9f108ecd774279df0a87fa8"}]}]}}}}}, 0x0) 07:18:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r0, &(0x7f0000000080)=@in={0x2, 0x0, @remote}, 0x80) sendmsg$sock(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="72e8cbfdf696506f", 0x8}], 0x1}, 0x0) 07:18:20 executing program 0: setuid(0xee00) creat(&(0x7f00000000c0)='./file0\x00', 0x0) [ 560.044026][ T9868] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:20 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@random="80a6be6cb9a9", @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2f408f", 0xc, 0x11, 0x0, @remote, @remote, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 07:18:20 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000080)={@remote, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "814e6e", 0x0, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local}}}}, 0x0) 07:18:20 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x103) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)) 07:18:20 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:20 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@remote, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "814e6e", 0x8, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x67}]}}}}}, 0x0) 07:18:20 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') fstat(r0, &(0x7f0000000080)) 07:18:20 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) setuid(0xee00) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) 07:18:20 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:18:20 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 560.706280][ T9885] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:21 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:18:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:21 executing program 1: ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0x5, 0x0, 0x1}, &(0x7f0000000040)=[{}]) ptrace$getsig(0x4202, 0xffffffffffffffff, 0x1, &(0x7f00000000c0)) ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x1}, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, 0x0) ptrace$getsig(0x4202, 0xffffffffffffffff, 0x3, &(0x7f00000003c0)) ptrace$getsig(0x4202, 0x0, 0x6, &(0x7f0000000440)) ptrace$getenv(0x4201, 0xffffffffffffffff, 0xffff, 0x0) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x3f, 0xab4) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000500)) rt_sigreturn() ptrace$peeksig(0x4209, 0x0, &(0x7f00000005c0)={0x8001, 0x1, 0x7}, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}]) syz_clone(0x40080000, 0x0, 0x0, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)="23cd0878e221f1bda5abd1454e3e7c1057dc67f3db01f6") 07:18:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f00000077c0)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @broadcast}, 0x80, 0x0, 0x0, &(0x7f00000014c0)=[{0x10}], 0x10}}], 0x1, 0x0) 07:18:21 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:21 executing program 1: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x0, 0x4]}, &(0x7f0000000040)=0x54) 07:18:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 561.452568][ T3572] usb 6-1: new high-speed USB device number 8 using dummy_hcd 07:18:21 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000032fe2a08cd0caf10ae9b0000000109021b0001000000000904000001dcd95600090584"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 561.591644][ T9906] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 561.622149][ T124] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 561.702071][ T3572] usb 6-1: Using ep0 maxpacket: 8 [ 561.892059][ T124] usb 3-1: Using ep0 maxpacket: 8 [ 561.930629][ T3572] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 561.941935][ T3572] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 561.950129][ T3572] usb 6-1: Product: syz 07:18:22 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) [ 562.059610][ T3572] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 562.122816][ T124] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 562.132489][ T124] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 562.140680][ T124] usb 3-1: Product: syz 07:18:22 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 562.253074][ T3557] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 562.284558][ T124] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 562.380375][ T9919] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 562.492612][ T3557] usb 4-1: Using ep0 maxpacket: 8 07:18:22 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 562.612735][ T3557] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 562.623812][ T3557] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=9b.ae [ 562.633325][ T3557] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.813877][ T3557] usb 4-1: config 0 descriptor?? [ 562.866431][ T3557] em28xx 4-1:0.0: New device @ 480 Mbps (0ccd:10af, interface 0, class 0) [ 562.875507][ T3557] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 563.492338][ T3557] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 563.643662][ T3557] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 563.652087][ T3557] em28xx 4-1:0.0: board has no eeprom [ 563.822891][ T3557] em28xx 4-1:0.0: Identified as Terratec Grabby (card=67) [ 563.830264][ T3557] em28xx 4-1:0.0: dvb set to bulk mode. [ 563.838603][ T25] em28xx 4-1:0.0: Registering snapshot button... [ 563.847181][ T25] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 563.908865][ T25] em28xx 4-1:0.0: Remote control support is not available for this card. [ 563.921297][ T3557] usb 4-1: USB disconnect, device number 3 [ 563.943078][ T3557] em28xx 4-1:0.0: Disconnecting em28xx [ 563.948779][ T3557] em28xx 4-1:0.0: Closing input extension [ 563.954856][ T3557] em28xx 4-1:0.0: Deregistering snapshot button [ 564.075872][ T3557] em28xx 4-1:0.0: Freeing device [ 564.680522][ T3572] gspca_stk1135: reg_w 0x300 err -71 [ 564.688355][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 564.695157][ T3572] gspca_stk1135: Sensor write failed [ 564.700632][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 564.707315][ T3572] gspca_stk1135: Sensor write failed [ 564.712929][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 564.719407][ T3572] gspca_stk1135: Sensor read failed [ 564.724896][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 564.731369][ T3572] gspca_stk1135: Sensor read failed [ 564.736842][ T3572] gspca_stk1135: Detected sensor type unknown (0x0) [ 564.743713][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 564.750185][ T3572] gspca_stk1135: Sensor read failed [ 564.755667][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 564.762207][ T3572] gspca_stk1135: Sensor read failed [ 564.767634][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 564.774172][ T3572] gspca_stk1135: Sensor write failed [ 564.779656][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 564.787320][ T3572] gspca_stk1135: Sensor write failed [ 564.793001][ T3572] stk1135: probe of 6-1:25.0 failed with error -71 [ 564.896019][ T3572] usb 6-1: USB disconnect, device number 8 [ 564.952393][ T124] gspca_stk1135: reg_w 0x300 err -71 [ 564.958922][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 564.966109][ T124] gspca_stk1135: Sensor write failed [ 564.971588][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 564.978108][ T124] gspca_stk1135: Sensor write failed [ 564.983742][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 564.990209][ T124] gspca_stk1135: Sensor read failed [ 564.995718][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 565.002295][ T124] gspca_stk1135: Sensor read failed [ 565.007630][ T124] gspca_stk1135: Detected sensor type unknown (0x0) [ 565.014601][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 565.021080][ T124] gspca_stk1135: Sensor read failed [ 565.026613][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 565.033180][ T124] gspca_stk1135: Sensor read failed [ 565.038575][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 565.045147][ T124] gspca_stk1135: Sensor write failed [ 565.050621][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 565.057230][ T124] gspca_stk1135: Sensor write failed [ 565.062876][ T124] stk1135: probe of 3-1:25.0 failed with error -71 [ 565.167506][ T124] usb 3-1: USB disconnect, device number 7 07:18:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:25 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:18:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1007], 0x10000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:18:25 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:25 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000140)=@framed={{}, [@func]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:18:25 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:18:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 565.925016][ T9942] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 07:18:26 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) [ 566.462735][ T124] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 566.493605][ T3572] usb 3-1: new high-speed USB device number 8 using dummy_hcd 07:18:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 566.706923][ T24] audit: type=1804 audit(1663053506.766:10): pid=9955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir827392565/syzkaller.Vkdm2T/445/cgroup.controllers" dev="sda1" ino=1151 res=1 errno=0 [ 566.753934][ T124] usb 6-1: Using ep0 maxpacket: 8 [ 566.772452][ T3572] usb 3-1: Using ep0 maxpacket: 8 [ 566.883958][ T24] audit: type=1804 audit(1663053506.826:11): pid=9952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir827392565/syzkaller.Vkdm2T/445/cgroup.controllers" dev="sda1" ino=1151 res=1 errno=0 [ 566.962765][ T124] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 566.973518][ T124] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 566.981807][ T124] usb 6-1: Product: syz 07:18:27 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:18:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1007], 0x10000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) [ 567.012234][ T3572] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 567.021530][ T3572] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 567.029884][ T3572] usb 3-1: Product: syz [ 567.151162][ T9959] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 567.207823][ T124] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 567.229148][ T3572] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 567.792936][ T3557] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 568.031922][ T3557] usb 2-1: Using ep0 maxpacket: 8 [ 568.232286][ T3557] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 568.241862][ T3557] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 568.250065][ T3557] usb 2-1: Product: syz [ 568.298220][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 569.802411][ T124] gspca_stk1135: reg_w 0x300 err -71 [ 569.808952][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 569.815580][ T124] gspca_stk1135: Sensor write failed [ 569.821035][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 569.827773][ T124] gspca_stk1135: Sensor write failed [ 569.833334][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 569.839804][ T124] gspca_stk1135: Sensor read failed [ 569.845482][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 569.852124][ T124] gspca_stk1135: Sensor read failed [ 569.857457][ T124] gspca_stk1135: Detected sensor type unknown (0x0) [ 569.864344][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 569.870817][ T124] gspca_stk1135: Sensor read failed [ 569.876348][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 569.882987][ T124] gspca_stk1135: Sensor read failed [ 569.888360][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 569.894959][ T124] gspca_stk1135: Sensor write failed [ 569.900507][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 569.907092][ T124] gspca_stk1135: Sensor write failed [ 569.912765][ T124] stk1135: probe of 6-1:25.0 failed with error -71 [ 569.922601][ T3572] gspca_stk1135: reg_w 0x300 err -71 [ 569.929124][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 569.936468][ T3572] gspca_stk1135: Sensor write failed [ 569.942252][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 569.948722][ T3572] gspca_stk1135: Sensor write failed [ 569.954300][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 569.960768][ T3572] gspca_stk1135: Sensor read failed [ 569.966285][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 569.973041][ T3572] gspca_stk1135: Sensor read failed [ 569.978368][ T3572] gspca_stk1135: Detected sensor type unknown (0x0) [ 569.985217][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 569.991810][ T3572] gspca_stk1135: Sensor read failed [ 569.997186][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 570.003988][ T3572] gspca_stk1135: Sensor read failed [ 570.009389][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 570.015960][ T3572] gspca_stk1135: Sensor write failed [ 570.021423][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 570.028007][ T3572] gspca_stk1135: Sensor write failed [ 570.033750][ T3572] stk1135: probe of 3-1:25.0 failed with error -71 [ 570.045640][ T124] usb 6-1: USB disconnect, device number 9 [ 570.083154][ T3572] usb 3-1: USB disconnect, device number 8 07:18:30 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 07:18:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:30 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x3000015, 0x10, r0, 0x0) 07:18:30 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:18:30 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 570.549277][ T9976] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:30 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) process_vm_readv(r0, &(0x7f0000002680)=[{0x0}], 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) fcntl$dupfd(r2, 0x406, r2) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 07:18:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:30 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 570.863056][ T3572] usb 6-1: new high-speed USB device number 10 using dummy_hcd 07:18:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 570.991929][ T124] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 571.135493][ T3557] gspca_stk1135: reg_w 0x350 err -71 [ 571.142418][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 571.148900][ T3557] gspca_stk1135: Sensor write failed [ 571.154507][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 571.155214][ T3572] usb 6-1: Using ep0 maxpacket: 8 [ 571.160903][ T3557] gspca_stk1135: Sensor write failed [ 571.160986][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 571.178058][ T3557] gspca_stk1135: Sensor read failed [ 571.183553][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 571.190022][ T3557] gspca_stk1135: Sensor read failed [ 571.195464][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 571.202704][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 571.209180][ T3557] gspca_stk1135: Sensor read failed [ 571.214719][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 571.221270][ T3557] gspca_stk1135: Sensor read failed [ 571.226748][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 571.233660][ T3557] gspca_stk1135: Sensor write failed [ 571.239124][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 571.245707][ T3557] gspca_stk1135: Sensor write failed [ 571.251303][ T3557] stk1135: probe of 2-1:25.0 failed with error -71 [ 571.262053][ T124] usb 3-1: Using ep0 maxpacket: 8 [ 571.424291][ T3572] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 571.434233][ T3572] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 571.437655][ T9987] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 571.442470][ T3572] usb 6-1: Product: syz [ 571.496336][ T124] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 571.505674][ T124] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 571.513975][ T124] usb 3-1: Product: syz [ 571.580260][ T3572] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 571.596102][ T124] gspca_main: stk1135-2.14.0 probing 174f:6a31 07:18:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 571.620934][ T3557] usb 2-1: USB disconnect, device number 8 07:18:31 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:18:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 07:18:31 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) process_vm_readv(r0, &(0x7f0000002680)=[{0x0}], 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) fcntl$dupfd(r2, 0x406, r2) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 07:18:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 572.032455][ T9994] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 572.481987][ T9922] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 572.552054][T10003] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 572.752720][ T9922] usb 2-1: Using ep0 maxpacket: 8 [ 572.982905][ T9922] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 572.992314][ T9922] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 573.000509][ T9922] usb 2-1: Product: syz [ 573.090364][ T9922] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 574.162912][ T3572] gspca_stk1135: reg_w 0x300 err -71 [ 574.169442][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 574.176065][ T3572] gspca_stk1135: Sensor write failed [ 574.181561][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 574.188205][ T3572] gspca_stk1135: Sensor write failed [ 574.193767][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 574.200266][ T3572] gspca_stk1135: Sensor read failed [ 574.205704][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 574.212230][ T3572] gspca_stk1135: Sensor read failed [ 574.217572][ T3572] gspca_stk1135: Detected sensor type unknown (0x0) [ 574.224462][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 574.230924][ T3572] gspca_stk1135: Sensor read failed [ 574.236405][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 574.243164][ T3572] gspca_stk1135: Sensor read failed [ 574.248525][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 574.255181][ T3572] gspca_stk1135: Sensor write failed [ 574.260722][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 574.267274][ T3572] gspca_stk1135: Sensor write failed [ 574.273051][ T3572] stk1135: probe of 6-1:25.0 failed with error -71 [ 574.282826][ T124] gspca_stk1135: reg_w 0x300 err -71 [ 574.289325][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 574.296027][ T124] gspca_stk1135: Sensor write failed [ 574.301556][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 574.308532][ T124] gspca_stk1135: Sensor write failed [ 574.314136][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 574.320607][ T124] gspca_stk1135: Sensor read failed [ 574.326170][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 574.332754][ T124] gspca_stk1135: Sensor read failed [ 574.338081][ T124] gspca_stk1135: Detected sensor type unknown (0x0) [ 574.345016][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 574.351485][ T124] gspca_stk1135: Sensor read failed [ 574.357001][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 574.363529][ T124] gspca_stk1135: Sensor read failed [ 574.368926][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 574.375539][ T124] gspca_stk1135: Sensor write failed [ 574.381040][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 574.387662][ T124] gspca_stk1135: Sensor write failed [ 574.393368][ T124] stk1135: probe of 3-1:25.0 failed with error -71 [ 574.416273][ T3572] usb 6-1: USB disconnect, device number 10 [ 574.454074][ T124] usb 3-1: USB disconnect, device number 9 07:18:34 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:18:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:34 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) 07:18:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000013c0), 0x18043, &(0x7f0000001680)=ANY=[@ANYBLOB='dos1xfloppy,shortname=win95']) 07:18:34 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:18:35 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB='dos1xfloppy,shortname=win95']) [ 575.232256][ T3557] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 575.442600][ T25] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 575.472170][ T3557] usb 3-1: Using ep0 maxpacket: 8 [ 575.650692][T10018] FAT-fs (loop4): bogus number of reserved sectors [ 575.657865][T10018] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 575.667354][T10018] FAT-fs (loop4): Can't find a valid FAT filesystem [ 575.696225][ T3557] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 575.705639][ T3557] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 575.714299][ T3557] usb 3-1: Product: syz [ 575.719861][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 575.859868][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 575.932777][ T25] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 575.942753][ T25] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 575.950953][ T25] usb 6-1: Product: syz [ 575.982785][ T9922] gspca_stk1135: reg_w 0x350 err -71 [ 575.989316][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 575.995979][ T9922] gspca_stk1135: Sensor write failed [ 576.001462][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 576.008142][ T9922] gspca_stk1135: Sensor write failed [ 576.013819][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 576.020285][ T9922] gspca_stk1135: Sensor read failed [ 576.025733][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 576.032386][ T9922] gspca_stk1135: Sensor read failed [ 576.037707][ T9922] gspca_stk1135: Detected sensor type unknown (0x0) [ 576.043317][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 576.044497][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 576.057161][ T9922] gspca_stk1135: Sensor read failed [ 576.063013][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 576.069502][ T9922] gspca_stk1135: Sensor read failed [ 576.075012][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 576.081490][ T9922] gspca_stk1135: Sensor write failed [ 576.087062][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 576.093881][ T9922] gspca_stk1135: Sensor write failed [ 576.099478][ T9922] stk1135: probe of 2-1:25.0 failed with error -71 [ 576.128549][ T9922] usb 2-1: USB disconnect, device number 9 07:18:36 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:18:36 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:36 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000002840)={0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002800)={0x0, 0x0, '\x00', @p_u8=0x0}}) 07:18:36 executing program 4: syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) 07:18:36 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0, 0x0) [ 577.002051][ T9920] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 577.242110][ T9920] usb 2-1: Using ep0 maxpacket: 8 [ 577.442233][ T9920] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 577.451581][ T9920] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 577.460051][ T9920] usb 2-1: Product: syz [ 577.509563][ T9920] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 578.502127][ T3557] gspca_stk1135: reg_w 0x300 err -71 [ 578.508681][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 578.515401][ T3557] gspca_stk1135: Sensor write failed [ 578.520834][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 578.527412][ T3557] gspca_stk1135: Sensor write failed [ 578.533003][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 578.539472][ T3557] gspca_stk1135: Sensor read failed [ 578.544967][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 578.551445][ T3557] gspca_stk1135: Sensor read failed [ 578.556931][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 578.563997][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 578.570467][ T3557] gspca_stk1135: Sensor read failed [ 578.576133][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 578.582712][ T3557] gspca_stk1135: Sensor read failed [ 578.588085][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 578.595103][ T3557] gspca_stk1135: Sensor write failed [ 578.600568][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 578.607183][ T3557] gspca_stk1135: Sensor write failed [ 578.612953][ T3557] stk1135: probe of 3-1:25.0 failed with error -71 [ 578.641485][ T3557] usb 3-1: USB disconnect, device number 10 [ 578.665653][ T25] gspca_stk1135: reg_w 0x300 err -71 [ 578.672178][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 578.678653][ T25] gspca_stk1135: Sensor write failed [ 578.684293][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 578.690765][ T25] gspca_stk1135: Sensor write failed [ 578.696358][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 578.702938][ T25] gspca_stk1135: Sensor read failed [ 578.708313][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 578.714888][ T25] gspca_stk1135: Sensor read failed [ 578.720210][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 578.727121][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 578.740394][ T25] gspca_stk1135: Sensor read failed [ 578.745890][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 578.752430][ T25] gspca_stk1135: Sensor read failed [ 578.757761][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 578.764333][ T25] gspca_stk1135: Sensor write failed [ 578.769781][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 578.776287][ T25] gspca_stk1135: Sensor write failed [ 578.781958][ T25] stk1135: probe of 6-1:25.0 failed with error -71 [ 578.815134][ T25] usb 6-1: USB disconnect, device number 11 07:18:39 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:18:39 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x13fd, r2}, 0x38) 07:18:39 executing program 4: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0\x00', 0x7ffffffffffff, 0x1, &(0x7f0000000cc0)=[{&(0x7f0000000300)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}], 0x0, &(0x7f0000000000)={[{@iocharset={'iocharset', 0x3d, 'cp874'}}]}) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 07:18:39 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:39 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 579.333369][T10033] loop4: detected capacity change from 0 to 264192 07:18:39 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x10123, 0x0, 0x0) [ 579.632988][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 579.872141][ T25] usb 3-1: Using ep0 maxpacket: 8 07:18:39 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 580.033969][ T3557] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 580.073681][ T25] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 580.083063][ T25] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 580.091256][ T25] usb 3-1: Product: syz [ 580.279187][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 580.292789][ T3557] usb 6-1: Using ep0 maxpacket: 8 [ 580.353581][ T9920] gspca_stk1135: reg_w 0x350 err -71 [ 580.360240][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 580.366948][ T9920] gspca_stk1135: Sensor write failed [ 580.372879][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 580.379370][ T9920] gspca_stk1135: Sensor write failed [ 580.384966][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 580.391452][ T9920] gspca_stk1135: Sensor read failed [ 580.396926][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 580.403647][ T9920] gspca_stk1135: Sensor read failed [ 580.408977][ T9920] gspca_stk1135: Detected sensor type unknown (0x0) [ 580.415952][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 580.422474][ T9920] gspca_stk1135: Sensor read failed [ 580.427769][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 580.434478][ T9920] gspca_stk1135: Sensor read failed [ 580.439770][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 580.446272][ T9920] gspca_stk1135: Sensor write failed [ 580.451656][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 580.458188][ T9920] gspca_stk1135: Sensor write failed [ 580.463786][ T9920] stk1135: probe of 2-1:25.0 failed with error -71 [ 580.594717][ T3557] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 580.604119][ T3557] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 580.612468][ T3557] usb 6-1: Product: syz [ 580.719987][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 580.801627][ T9920] usb 2-1: USB disconnect, device number 10 07:18:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:18:41 executing program 4: r0 = socket(0x1, 0x3, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) 07:18:41 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:41 executing program 3: r0 = socket(0x1, 0x3, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 07:18:41 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x20044049, 0x0, 0x2b) [ 581.547884][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 581.554937][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 [ 581.582202][ T3564] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 581.831958][ T3564] usb 2-1: Using ep0 maxpacket: 8 [ 582.042287][ T3564] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 582.051661][ T3564] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 582.059968][ T3564] usb 2-1: Product: syz [ 582.121338][ T3564] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 582.682967][ T25] gspca_stk1135: reg_w 0x2ff err -71 [ 582.689514][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 582.696215][ T25] gspca_stk1135: Sensor write failed [ 582.701925][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 582.708396][ T25] gspca_stk1135: Sensor write failed [ 582.714036][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 582.720439][ T25] gspca_stk1135: Sensor read failed [ 582.725955][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 582.732574][ T25] gspca_stk1135: Sensor read failed [ 582.737902][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 582.744992][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 582.751459][ T25] gspca_stk1135: Sensor read failed [ 582.756971][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 582.763613][ T25] gspca_stk1135: Sensor read failed [ 582.769003][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 582.775617][ T25] gspca_stk1135: Sensor write failed [ 582.781061][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 582.787674][ T25] gspca_stk1135: Sensor write failed [ 582.793354][ T25] stk1135: probe of 3-1:25.0 failed with error -71 [ 582.808481][ T25] usb 3-1: USB disconnect, device number 11 [ 583.122148][ T3557] gspca_stk1135: reg_w 0x2ff err -71 [ 583.128678][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 583.136122][ T3557] gspca_stk1135: Sensor write failed [ 583.141596][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 583.148253][ T3557] gspca_stk1135: Sensor write failed [ 583.153841][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 583.160314][ T3557] gspca_stk1135: Sensor read failed [ 583.165824][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 583.172384][ T3557] gspca_stk1135: Sensor read failed [ 583.177797][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 583.184837][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 583.191311][ T3557] gspca_stk1135: Sensor read failed [ 583.196824][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 583.203390][ T3557] gspca_stk1135: Sensor read failed [ 583.208801][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 583.215443][ T3557] gspca_stk1135: Sensor write failed [ 583.220905][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 583.227463][ T3557] gspca_stk1135: Sensor write failed [ 583.233193][ T3557] stk1135: probe of 6-1:25.0 failed with error -71 [ 583.265036][ T3557] usb 6-1: USB disconnect, device number 12 07:18:43 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:18:43 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_LK(r0, 0x0, 0x0) 07:18:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:43 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$netlink(r0, 0x0, &(0x7f0000000100)) 07:18:43 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:18:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:43 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x4000080, 0x0, 0xfffffdd8) [ 584.016229][ T3557] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 584.212646][ T9922] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 584.272156][ T3557] usb 3-1: Using ep0 maxpacket: 8 [ 584.471965][ T9922] usb 6-1: Using ep0 maxpacket: 8 [ 584.472229][ T3557] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 584.486590][ T3557] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 584.494917][ T3557] usb 3-1: Product: syz [ 584.549501][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 584.702211][ T9922] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 584.711555][ T9922] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 584.719795][ T9922] usb 6-1: Product: syz [ 584.768997][ T9922] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 585.002331][ T3564] gspca_stk1135: reg_w 0x350 err -71 [ 585.008873][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 585.015634][ T3564] gspca_stk1135: Sensor write failed [ 585.021107][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 585.027754][ T3564] gspca_stk1135: Sensor write failed [ 585.033272][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 585.039741][ T3564] gspca_stk1135: Sensor read failed [ 585.045252][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 585.051756][ T3564] gspca_stk1135: Sensor read failed [ 585.057079][ T3564] gspca_stk1135: Detected sensor type unknown (0x0) [ 585.064046][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 585.070516][ T3564] gspca_stk1135: Sensor read failed [ 585.076042][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 585.082622][ T3564] gspca_stk1135: Sensor read failed [ 585.087995][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 585.094558][ T3564] gspca_stk1135: Sensor write failed [ 585.099980][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 585.106596][ T3564] gspca_stk1135: Sensor write failed [ 585.112255][ T3564] stk1135: probe of 2-1:25.0 failed with error -71 [ 585.143725][ T3564] usb 2-1: USB disconnect, device number 11 07:18:45 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:18:45 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x40, 0x0) read$FUSE(r0, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(0x0, r1, 0x0) 07:18:45 executing program 3: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x80, &(0x7f00000001c0)) 07:18:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 586.131942][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 586.375272][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 586.572443][ T25] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 586.581908][ T25] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 586.590110][ T25] usb 2-1: Product: syz [ 586.639084][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 586.952230][ T3557] gspca_stk1135: reg_w 0x2ff err -71 [ 586.958772][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 586.965424][ T3557] gspca_stk1135: Sensor write failed [ 586.970884][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 586.978425][ T3557] gspca_stk1135: Sensor write failed [ 586.984031][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 586.990504][ T3557] gspca_stk1135: Sensor read failed [ 586.996071][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 587.002661][ T3557] gspca_stk1135: Sensor read failed [ 587.007989][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 587.015137][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 587.021609][ T3557] gspca_stk1135: Sensor read failed [ 587.027104][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 587.033696][ T3557] gspca_stk1135: Sensor read failed [ 587.039109][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 587.045862][ T3557] gspca_stk1135: Sensor write failed [ 587.051293][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 587.063594][ T3557] gspca_stk1135: Sensor write failed [ 587.069205][ T3557] stk1135: probe of 3-1:25.0 failed with error -71 [ 587.084482][ T3557] usb 3-1: USB disconnect, device number 12 [ 587.132184][ T9922] gspca_stk1135: reg_w 0x2ff err -71 [ 587.138717][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 587.145374][ T9922] gspca_stk1135: Sensor write failed [ 587.150840][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 587.157508][ T9922] gspca_stk1135: Sensor write failed [ 587.163053][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 587.169523][ T9922] gspca_stk1135: Sensor read failed [ 587.176052][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 587.182577][ T9922] gspca_stk1135: Sensor read failed [ 587.187897][ T9922] gspca_stk1135: Detected sensor type unknown (0x0) [ 587.194828][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 587.201264][ T9922] gspca_stk1135: Sensor read failed [ 587.206707][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 587.213227][ T9922] gspca_stk1135: Sensor read failed [ 587.218591][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 587.225119][ T9922] gspca_stk1135: Sensor write failed [ 587.230538][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 587.237027][ T9922] gspca_stk1135: Sensor write failed [ 587.242693][ T9922] stk1135: probe of 6-1:25.0 failed with error -71 [ 587.287225][ T9922] usb 6-1: USB disconnect, device number 13 07:18:47 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:18:47 executing program 4: r0 = socket(0x1, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 07:18:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:47 executing program 3: setresuid(0x0, 0xee00, 0xffffffffffffffff) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00') 07:18:47 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:18:47 executing program 4: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) setresuid(0x0, 0xee00, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 07:18:47 executing program 3: setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r0, 0x29, 0x45, &(0x7f0000000080)=""/164, &(0x7f0000000140)=0xa4) [ 587.992424][ T3557] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 588.241938][ T3557] usb 3-1: Using ep0 maxpacket: 8 [ 588.253252][ T9920] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 588.442954][ T3557] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 588.452462][ T3557] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 588.460667][ T3557] usb 3-1: Product: syz [ 588.511946][ T9920] usb 6-1: Using ep0 maxpacket: 8 [ 588.529474][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 588.712637][ T9920] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 588.722181][ T9920] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 588.730470][ T9920] usb 6-1: Product: syz [ 588.809954][ T9920] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 589.242217][ T25] gspca_stk1135: reg_w 0x300 err -71 [ 589.248799][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 589.255727][ T25] gspca_stk1135: Sensor write failed [ 589.261222][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 589.268865][ T25] gspca_stk1135: Sensor write failed [ 589.274525][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 589.280965][ T25] gspca_stk1135: Sensor read failed [ 589.286512][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 589.293221][ T25] gspca_stk1135: Sensor read failed [ 589.298542][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 589.305511][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 589.312327][ T25] gspca_stk1135: Sensor read failed [ 589.317668][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 589.324295][ T25] gspca_stk1135: Sensor read failed [ 589.329766][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 589.336437][ T25] gspca_stk1135: Sensor write failed [ 589.342286][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 589.348770][ T25] gspca_stk1135: Sensor write failed [ 589.354509][ T25] stk1135: probe of 2-1:25.0 failed with error -71 [ 589.376753][ T25] usb 2-1: USB disconnect, device number 12 07:18:49 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:18:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:49 executing program 4: socketpair(0x11, 0x3, 0x401, &(0x7f0000000040)) 07:18:49 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0xa) 07:18:49 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) mkdir(&(0x7f0000000080)='./file0/control\x00', 0x0) [ 590.341958][ T3564] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 590.611965][ T3564] usb 2-1: Using ep0 maxpacket: 8 [ 590.828212][ T3564] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 590.837644][ T3564] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 590.846027][ T3564] usb 2-1: Product: syz [ 590.899378][ T3564] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 590.952967][ T3557] gspca_stk1135: reg_w 0x2ff err -71 [ 590.959459][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 590.967377][ T3557] gspca_stk1135: Sensor write failed [ 590.973038][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 590.979509][ T3557] gspca_stk1135: Sensor write failed [ 590.985103][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 590.991576][ T3557] gspca_stk1135: Sensor read failed [ 590.997319][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 591.003897][ T3557] gspca_stk1135: Sensor read failed [ 591.009226][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 591.016119][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 591.023028][ T3557] gspca_stk1135: Sensor read failed [ 591.028406][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 591.035004][ T3557] gspca_stk1135: Sensor read failed [ 591.040401][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 591.046986][ T3557] gspca_stk1135: Sensor write failed [ 591.052721][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 591.059193][ T3557] gspca_stk1135: Sensor write failed [ 591.064965][ T3557] stk1135: probe of 3-1:25.0 failed with error -71 [ 591.081600][ T3557] usb 3-1: USB disconnect, device number 13 [ 591.216036][ T9920] gspca_stk1135: reg_w 0x2ff err -71 [ 591.222607][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 591.229069][ T9920] gspca_stk1135: Sensor write failed [ 591.234632][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 591.241112][ T9920] gspca_stk1135: Sensor write failed [ 591.246730][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 591.253340][ T9920] gspca_stk1135: Sensor read failed [ 591.258724][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 591.265330][ T9920] gspca_stk1135: Sensor read failed [ 591.270659][ T9920] gspca_stk1135: Detected sensor type unknown (0x0) [ 591.277521][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 591.284037][ T9920] gspca_stk1135: Sensor read failed [ 591.289413][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 591.296025][ T9920] gspca_stk1135: Sensor read failed [ 591.301364][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 591.307962][ T9920] gspca_stk1135: Sensor write failed [ 591.313505][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 591.319958][ T9920] gspca_stk1135: Sensor write failed [ 591.325692][ T9920] stk1135: probe of 6-1:25.0 failed with error -71 [ 591.352121][ T9920] usb 6-1: USB disconnect, device number 14 07:18:51 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:18:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:51 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0) dup(0xffffffffffffffff) 07:18:51 executing program 3: faccessat(0xffffffffffffffff, 0x0, 0x2c) 07:18:51 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:18:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:51 executing program 3: faccessat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0) [ 592.152763][ T3572] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 592.372322][ T3557] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 592.402060][ T3572] usb 3-1: Using ep0 maxpacket: 8 [ 592.612071][ T3557] usb 6-1: Using ep0 maxpacket: 8 [ 592.622952][ T3572] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 592.632584][ T3572] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 592.640843][ T3572] usb 3-1: Product: syz [ 592.708922][ T3572] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 592.812331][ T3557] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 592.821869][ T3557] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 592.830041][ T3557] usb 6-1: Product: syz [ 592.879209][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 593.532186][ T3564] gspca_stk1135: reg_w 0x300 err -71 [ 593.538796][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 593.545467][ T3564] gspca_stk1135: Sensor write failed [ 593.550938][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 593.558000][ T3564] gspca_stk1135: Sensor write failed [ 593.563621][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 593.570087][ T3564] gspca_stk1135: Sensor read failed [ 593.575592][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 593.582115][ T3564] gspca_stk1135: Sensor read failed [ 593.587435][ T3564] gspca_stk1135: Detected sensor type unknown (0x0) [ 593.594351][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 593.600817][ T3564] gspca_stk1135: Sensor read failed [ 593.606292][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 593.612814][ T3564] gspca_stk1135: Sensor read failed [ 593.618186][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 593.624852][ T3564] gspca_stk1135: Sensor write failed [ 593.630326][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 593.636922][ T3564] gspca_stk1135: Sensor write failed [ 593.642627][ T3564] stk1135: probe of 2-1:25.0 failed with error -71 [ 593.664146][ T3564] usb 2-1: USB disconnect, device number 13 07:18:54 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:18:54 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0) readlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 07:18:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:54 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000002ac0), 0x8) 07:18:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 594.669440][ T3564] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 594.931921][ T3564] usb 2-1: Using ep0 maxpacket: 8 [ 595.102466][ T3572] gspca_stk1135: reg_w 0x2ff err -71 [ 595.108958][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 595.115700][ T3572] gspca_stk1135: Sensor write failed [ 595.121165][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 595.128292][ T3572] gspca_stk1135: Sensor write failed [ 595.133884][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 595.140352][ T3572] gspca_stk1135: Sensor read failed [ 595.145784][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 595.152367][ T3572] gspca_stk1135: Sensor read failed [ 595.157681][ T3572] gspca_stk1135: Detected sensor type unknown (0x0) [ 595.164727][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 595.171170][ T3572] gspca_stk1135: Sensor read failed [ 595.176634][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 595.183192][ T3572] gspca_stk1135: Sensor read failed [ 595.188687][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 595.195388][ T3572] gspca_stk1135: Sensor write failed [ 595.200839][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 595.207437][ T3572] gspca_stk1135: Sensor write failed [ 595.215116][ T3572] stk1135: probe of 3-1:25.0 failed with error -71 [ 595.243057][ T3572] usb 3-1: USB disconnect, device number 14 [ 595.274663][ T3564] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 595.282823][ T3557] gspca_stk1135: reg_w 0x2ff err -71 [ 595.283940][ T3564] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 595.290340][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 595.297706][ T3564] usb 2-1: Product: syz [ 595.304239][ T3557] gspca_stk1135: Sensor write failed [ 595.314923][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 595.321403][ T3557] gspca_stk1135: Sensor write failed [ 595.326952][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 595.333494][ T3557] gspca_stk1135: Sensor read failed [ 595.338872][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 595.345426][ T3557] gspca_stk1135: Sensor read failed [ 595.350743][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 595.357630][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 595.364168][ T3557] gspca_stk1135: Sensor read failed [ 595.369544][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 595.376108][ T3557] gspca_stk1135: Sensor read failed [ 595.381555][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 595.388156][ T3557] gspca_stk1135: Sensor write failed [ 595.393763][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 595.400230][ T3557] gspca_stk1135: Sensor write failed [ 595.405958][ T3557] stk1135: probe of 6-1:25.0 failed with error -71 [ 595.430154][ T3564] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 595.433077][ T3557] usb 6-1: USB disconnect, device number 15 07:18:55 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:18:55 executing program 4: setgroups(0x3, &(0x7f0000000340)=[0x0, 0x0, 0xee00]) 07:18:55 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000200)="eaff125c00000400", 0x8) 07:18:55 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:55 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:18:56 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) mkdir(&(0x7f0000000080)='./file0/control\x00', 0x0) rename(&(0x7f0000000140)='./file0/control\x00', &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 07:18:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 596.272107][ T3572] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 596.402205][ T9922] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 596.532633][ T3572] usb 3-1: Using ep0 maxpacket: 8 [ 596.662587][ T9922] usb 6-1: Using ep0 maxpacket: 8 [ 596.753752][ T3572] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 596.763259][ T3572] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 596.771433][ T3572] usb 3-1: Product: syz [ 596.842260][ T3572] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 596.892383][ T9922] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 596.901917][ T9922] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 596.910123][ T9922] usb 6-1: Product: syz [ 596.970280][ T9922] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 598.036015][ T3564] gspca_stk1135: reg_w 0x300 err -71 [ 598.042555][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 598.049061][ T3564] gspca_stk1135: Sensor write failed [ 598.054886][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 598.061360][ T3564] gspca_stk1135: Sensor write failed [ 598.067822][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 598.074378][ T3564] gspca_stk1135: Sensor read failed [ 598.079791][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 598.086348][ T3564] gspca_stk1135: Sensor read failed [ 598.091809][ T3564] gspca_stk1135: Detected sensor type unknown (0x0) [ 598.098568][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 598.105159][ T3564] gspca_stk1135: Sensor read failed [ 598.110502][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 598.117072][ T3564] gspca_stk1135: Sensor read failed [ 598.122547][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 598.129028][ T3564] gspca_stk1135: Sensor write failed [ 598.134635][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 598.141118][ T3564] gspca_stk1135: Sensor write failed [ 598.146837][ T3564] stk1135: probe of 2-1:25.0 failed with error -71 [ 598.192439][ T3564] usb 2-1: USB disconnect, device number 14 07:18:58 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:18:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 07:18:58 executing program 3: r0 = socket(0x18, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0xc) 07:18:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 599.102021][ T3557] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 599.232550][ T3572] gspca_stk1135: reg_w 0x2ff err -71 [ 599.239087][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 599.245712][ T3572] gspca_stk1135: Sensor write failed [ 599.251173][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 599.257778][ T3572] gspca_stk1135: Sensor write failed [ 599.263315][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 599.269791][ T3572] gspca_stk1135: Sensor read failed [ 599.275323][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 599.281924][ T3572] gspca_stk1135: Sensor read failed [ 599.287260][ T3572] gspca_stk1135: Detected sensor type unknown (0x0) [ 599.294293][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 599.300764][ T3572] gspca_stk1135: Sensor read failed [ 599.306195][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 599.312826][ T3572] gspca_stk1135: Sensor read failed [ 599.318165][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 599.324796][ T3572] gspca_stk1135: Sensor write failed [ 599.330340][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 599.337087][ T3572] gspca_stk1135: Sensor write failed [ 599.342832][ T3572] stk1135: probe of 3-1:25.0 failed with error -71 [ 599.349677][ T3557] usb 2-1: Using ep0 maxpacket: 8 [ 599.352870][ T9922] gspca_stk1135: reg_w 0x2ff err -71 [ 599.361299][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 599.369174][ T9922] gspca_stk1135: Sensor write failed [ 599.374703][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 599.381180][ T9922] gspca_stk1135: Sensor write failed [ 599.386766][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 599.393300][ T9922] gspca_stk1135: Sensor read failed [ 599.398704][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 599.405268][ T9922] gspca_stk1135: Sensor read failed [ 599.410597][ T9922] gspca_stk1135: Detected sensor type unknown (0x0) [ 599.417630][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 599.424158][ T9922] gspca_stk1135: Sensor read failed [ 599.429562][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 599.436089][ T9922] gspca_stk1135: Sensor read failed [ 599.441564][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 599.448164][ T9922] gspca_stk1135: Sensor write failed [ 599.453742][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 599.460272][ T9922] gspca_stk1135: Sensor write failed [ 599.465991][ T9922] stk1135: probe of 6-1:25.0 failed with error -71 [ 599.477970][ T3572] usb 3-1: USB disconnect, device number 15 [ 599.504012][ T9922] usb 6-1: USB disconnect, device number 16 [ 599.592250][ T3557] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 599.601620][ T3557] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 599.610290][ T3557] usb 2-1: Product: syz [ 599.669566][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 07:18:59 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 07:18:59 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:18:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:18:59 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:18:59 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400000806c1, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) [ 599.923846][ T24] audit: type=1804 audit(1663053539.986:12): pid=10167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1210446116/syzkaller.8hLaj2/426/file0" dev="sda1" ino=1173 res=1 errno=0 07:19:00 executing program 4: r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000300)="b100050460000000000008000501000000000000ce24fea7fef96eefc73fd3357ae26caa0416fa76d06336acf00b148ea2a2efb01e31c8df5f882b2b7be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27ecb5d602000d7d026ba8af63ff37282921e4fd89720fd3872babfbb770bcabda71601a8baff5a8", 0x78, 0x0, 0x0, 0x0) 07:19:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 600.262029][ T3572] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 600.411995][ T9920] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 600.501903][ T3572] usb 3-1: Using ep0 maxpacket: 8 [ 600.651922][ T9920] usb 6-1: Using ep0 maxpacket: 8 [ 600.742312][ T3572] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 600.751822][ T3572] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 600.759984][ T3572] usb 3-1: Product: syz [ 600.829167][ T3572] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 600.852394][ T9920] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 600.861989][ T9920] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 600.870187][ T9920] usb 6-1: Product: syz [ 600.918131][ T9920] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 602.342246][ T3557] gspca_stk1135: reg_w 0x300 err -71 [ 602.348845][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 602.356252][ T3557] gspca_stk1135: Sensor write failed [ 602.362004][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 602.368480][ T3557] gspca_stk1135: Sensor write failed [ 602.374052][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 602.380568][ T3557] gspca_stk1135: Sensor read failed [ 602.386081][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 602.392656][ T3557] gspca_stk1135: Sensor read failed [ 602.397988][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 602.405082][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 602.411559][ T3557] gspca_stk1135: Sensor read failed [ 602.417119][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 602.423712][ T3557] gspca_stk1135: Sensor read failed [ 602.429096][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 602.435756][ T3557] gspca_stk1135: Sensor write failed [ 602.441232][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 602.448095][ T3557] gspca_stk1135: Sensor write failed [ 602.453822][ T3557] stk1135: probe of 2-1:25.0 failed with error -71 [ 602.495936][ T3557] usb 2-1: USB disconnect, device number 15 07:19:02 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:02 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400000806c1, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) truncate(0x0, 0x0) truncate(&(0x7f00000009c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) 07:19:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:19:02 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket(0x18, 0x1, 0x0) fcntl$dupfd(r1, 0xa, 0xffffffffffffffff) [ 602.928721][ T24] audit: type=1804 audit(1663053542.986:13): pid=10183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir827392565/syzkaller.Vkdm2T/467/file0" dev="sda1" ino=1176 res=1 errno=0 07:19:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:19:03 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x9, &(0x7f0000000000)=@raw=[@initr0, @generic, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @jmp], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 603.222542][ T3572] gspca_stk1135: reg_w 0x2ff err -71 [ 603.229086][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 603.235773][ T3572] gspca_stk1135: Sensor write failed [ 603.241252][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 603.247995][ T3572] gspca_stk1135: Sensor write failed [ 603.253657][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 603.260159][ T3572] gspca_stk1135: Sensor read failed [ 603.265712][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 603.272339][ T3572] gspca_stk1135: Sensor read failed [ 603.277676][ T3572] gspca_stk1135: Detected sensor type unknown (0x0) [ 603.284632][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 603.291114][ T3572] gspca_stk1135: Sensor read failed [ 603.296679][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 603.303224][ T3572] gspca_stk1135: Sensor read failed [ 603.308617][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 603.315335][ T3572] gspca_stk1135: Sensor write failed [ 603.320887][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 603.327419][ T3572] gspca_stk1135: Sensor write failed [ 603.333157][ T3572] stk1135: probe of 3-1:25.0 failed with error -71 [ 603.342543][ T9920] gspca_stk1135: reg_w 0x2ff err -71 [ 603.349056][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 603.354045][ T3572] usb 3-1: USB disconnect, device number 16 [ 603.355619][ T9920] gspca_stk1135: Sensor write failed [ 603.367056][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 603.373782][ T9920] gspca_stk1135: Sensor write failed [ 603.379255][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 603.385832][ T9920] gspca_stk1135: Sensor read failed [ 603.391218][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 603.397774][ T9920] gspca_stk1135: Sensor read failed [ 603.403211][ T9920] gspca_stk1135: Detected sensor type unknown (0x0) [ 603.410017][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 603.416655][ T9920] gspca_stk1135: Sensor read failed [ 603.422148][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 603.428616][ T9920] gspca_stk1135: Sensor read failed [ 603.434379][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 603.440928][ T9920] gspca_stk1135: Sensor write failed [ 603.446571][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 603.454503][ T9920] gspca_stk1135: Sensor write failed [ 603.459803][ T8970] udevd[8970]: setting owner of /dev/bus/usb/003/016 to uid=0, gid=0 failed: No such file or directory [ 603.471295][ T9920] stk1135: probe of 6-1:25.0 failed with error -71 [ 603.670198][ T9920] usb 6-1: USB disconnect, device number 17 [ 603.812318][ T3557] usb 2-1: new high-speed USB device number 16 using dummy_hcd 07:19:04 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:19:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x1}]}, {0x0, [0x61, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/166, 0x2a, 0xa6, 0x1}, 0x20) 07:19:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:19:04 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$netlink(r1, &(0x7f0000007200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002f80)={0xdc, 0x0, 0x0, 0x0, 0x0, "", [@generic="1d0ff6b14adb2375bf75a3df973833747eadeaea2415c9b2766e1e80785745188e5a5521e8754f3392a1252c718954c325ee10cc7d732bbf2f16a89c5f35aff91ca2a259781bb20d8703127fb1b33184d7ae1cbc3dde8160e2819837120154e9f949e011ae1fda7abd333745f34b725b6aea64394221108f3cd75bfc7d8f49de7ae3a000224b46ec981160557805fa234dbb3bd9baf90b417b988ac4bfa43149cca892a3401fefab87cdd06359d43182025bef5c504c7ed905de93fbba2fba57d28186bffb1914f3ea"]}, 0xdc}], 0x1}, 0x0) read$alg(r0, &(0x7f00000002c0)=""/220, 0xdc) 07:19:04 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 604.052152][ T3557] usb 2-1: Using ep0 maxpacket: 8 07:19:04 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002240)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x3}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r2}}}], 0x28}}], 0x2, 0x0) [ 604.253559][ T3557] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 604.263110][ T3557] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 604.271383][ T3557] usb 2-1: Product: syz [ 604.412069][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 604.414188][ T3572] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 604.502595][ T9922] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 604.662108][ T3572] usb 3-1: Using ep0 maxpacket: 8 [ 604.762560][ T9922] usb 6-1: Using ep0 maxpacket: 8 [ 604.892609][ T3572] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 604.902032][ T3572] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 604.910267][ T3572] usb 3-1: Product: syz [ 604.969296][ T3572] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 605.022474][ T9922] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 605.032001][ T9922] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 605.040223][ T9922] usb 6-1: Product: syz [ 605.115495][ T9922] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 607.022346][ T3557] gspca_stk1135: reg_w 0x300 err -71 [ 607.028870][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 607.036599][ T3557] gspca_stk1135: Sensor write failed [ 607.042257][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 607.048736][ T3557] gspca_stk1135: Sensor write failed [ 607.054385][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 607.060859][ T3557] gspca_stk1135: Sensor read failed [ 607.066385][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 607.072989][ T3557] gspca_stk1135: Sensor read failed [ 607.078331][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 607.085397][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 607.091992][ T3557] gspca_stk1135: Sensor read failed [ 607.097382][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 607.104067][ T3557] gspca_stk1135: Sensor read failed [ 607.109544][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 607.116236][ T3557] gspca_stk1135: Sensor write failed [ 607.121882][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 607.128466][ T3557] gspca_stk1135: Sensor write failed [ 607.135014][ T3557] stk1135: probe of 2-1:25.0 failed with error -71 [ 607.162277][ T3557] usb 2-1: USB disconnect, device number 16 [ 607.362399][ T3572] gspca_stk1135: reg_w 0x2ff err -71 [ 607.368974][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 607.375794][ T3572] gspca_stk1135: Sensor write failed [ 607.381251][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 607.388360][ T3572] gspca_stk1135: Sensor write failed [ 607.393960][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 607.400420][ T3572] gspca_stk1135: Sensor read failed [ 607.405940][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 607.412568][ T3572] gspca_stk1135: Sensor read failed [ 607.417909][ T3572] gspca_stk1135: Detected sensor type unknown (0x0) [ 607.425053][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 607.431516][ T3572] gspca_stk1135: Sensor read failed [ 607.437010][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 607.443617][ T3572] gspca_stk1135: Sensor read failed [ 607.449022][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 607.455942][ T3572] gspca_stk1135: Sensor write failed [ 607.461443][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 607.468272][ T3572] gspca_stk1135: Sensor write failed [ 607.473966][ T3572] stk1135: probe of 3-1:25.0 failed with error -71 [ 607.483554][ T9922] gspca_stk1135: reg_w 0x2ff err -71 [ 607.490115][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 607.497461][ T9922] gspca_stk1135: Sensor write failed [ 607.503099][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 607.509611][ T9922] gspca_stk1135: Sensor write failed [ 607.515318][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 607.521913][ T9922] gspca_stk1135: Sensor read failed [ 607.527308][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 607.533898][ T9922] gspca_stk1135: Sensor read failed [ 607.539258][ T9922] gspca_stk1135: Detected sensor type unknown (0x0) [ 607.546166][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 607.552751][ T9922] gspca_stk1135: Sensor read failed 07:19:07 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:19:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @remote}}}}) 07:19:07 executing program 3: bpf$MAP_CREATE(0xf, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 607.558141][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 607.564777][ T9922] gspca_stk1135: Sensor read failed [ 607.570209][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 607.576864][ T9922] gspca_stk1135: Sensor write failed [ 607.582479][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 607.588972][ T9922] gspca_stk1135: Sensor write failed [ 607.594752][ T9922] stk1135: probe of 6-1:25.0 failed with error -71 [ 607.658979][ T9922] usb 6-1: USB disconnect, device number 18 [ 607.684334][ T3572] usb 3-1: USB disconnect, device number 17 07:19:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x38, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 07:19:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0xd04, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xcf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x5d, 0x3, "524e66301ced781fb6403310db65dc35d9e7e8c188e24b581f812e4a507cfb1bee6f79fedd36f729fa1970fa973ecc5fb41da0e113d38abad357ad0737de1bae7c15774f23863432e078f7c7cfd38897a3829e427212ba33fb"}, @TIPC_NLA_NODE_ID={0xc6d, 0x3, "5f652667ea371522a8a842f84328dd6a103a96c25c49efbb4f29f9aacaf6c5bc016bcfa9cf6eea0ca654e43a2a9cdaccbbba0b0ede57ae344fbf33e11618a35380af9df3c060ec06cfb4f25dc255412d60053cbd44a195819355cc82302d3c8f7685cb9f67e28e1aa0d947f153eb4a4679832207000a067742d4a2fbf70e5d91c682c8fee12b948bc4ba67d97b1263d75e8e09ed77ac6c7ee9675d63f9154b4264f8bf86e8438d9334ea115f4a302668ecbb09d052cd518d6ac4564b12b2af3cdba7c02d5ac7cb565d6445bcc66ffe9d9439659322c5e44dac1a846203d460be8e8f43d6d2ec48f00887d2c1471e572208eb0bde333f9073ebff4ea83b0a04d74617b1d210bf1af9c6715b397afd768a03df52a31763785c57b11513535ce93d0b6ad85298d3586cc64bb4262e3c19d1008a7aa5e37a8866b360e7255853d9078ad7aea4d46f03e3172a4f5685ddff0d8d8eee0f8b55032ebc92e5d63f6cca060ac1ba82af526675df65d4a3cbf738f42db0e7750ccb9c27c763d25cbb850fdc34ebffb753090928357a10ea3864a71dc6d611e300b4422c3d73dd189c6ba84815c7b3e5f77e8d672bb63c5d9d9106967890ed939253949719c2cec6673d3ac4f9443cdecf09303a8fc4ac3dfea98dc692a3a3995cb731adeacfde8d36697d0ca12500af2b7be5bceb91bcd570e8d11e6c06655e7c69c69f739df605bba370a5883808f85653f6d0a7fbdab48570e4ecc007a0941e68df9c2711c1d73496ece60301bd899a405d92cc514953dfb31106deec7dacdc52a6b01ace839342ddb82f494fad00da155a015d7b30bbaeeff75ca5cc49c05f076ba35563996f6c28315f72b3f5d846a178abd7ff8b29fe1dd6db41a18417cc9f0db59fd90f9e9a90b43a60fd59b6e3f6d8427cab9efcf99551cb9640f9de0f023d58e8695b2602dbb727cd64cad144edbb11e12fd0a06ddd98094d5284f8868c0021bcf7386c8bd9207d1c43305476206d357061b321b1b183b4471b4b3de8d680720e32bfa44c5c3a53485aa184c5f142f66751a859a09a41db9aab12775c98f9ce2448f4b6ebbc2b35162b8d4ea109fdfa8a84fc4035e20b5c6091085ac6a7e16194fd46ec6635adbf938035fa5ce9be3d006dce8847333481206995e04e7f8e0aad50b34c2740719f9521c34f992543af38ec8fcbb199ffc11a552ee1406a894500ab246bc5b2c73e74579f5a8079003114b19d146de3b3343fc5570d3cbffdcf5dec13de86e85ae14619f41cea240bd40153ff3edbb362b4c4daa23d316c5c8ba364d1f650d39cdba244e4cd4d13e5558237bfe00402e945b6bb735626471b77a4c706100c37e4a3ca08d4344aec02e086909b0464c4ce4e2d03b93c1f1248359842bd6fa7c08eb89f47d29f46f2ffb5ec1f1df708f479012a593ea239071e7f6a446a45c448e257a34e900af6eaff258460a69147f153a3c503bf1fa136a117bd594a637d6fa604a09d6fd863f6e27125413b4596f3fb3f62371991b18e97a90cdefb05f1c53fd5a62018c15b333b799c69262435f95edea6fb7f3fb95fc5b64c2ef14b6e213f87f9224d8435373a3140db5fa9dca99f874614ecbec360162843d589d2ab59cab736fd4ef24e9952ca21a640f29297ef38cdc3c5d16f91d525a285e6421b94e3ab0472da7c528b6dba06d31f7fe5482f42a8ec0544d5b8b63bb91ca62b0936625cf9ab94baf79ef3f3772ff0052de31226444f1fa1d357a2a1b9962f359418fe2e4b87ba9d33f754c5e0363fb704f88b24f89925e1a1844ae71e484620d3c01b4665f52b8290f419ffaf3ae5d7235d5230a928461696f60bbc1dbdcd316b686f6fe7f558353f0f6b1178707bfb150124ee1febdb58afe369f1a3e4e587a1d147449a04bcde83f484fefbb5389c9f33a1da81b9987559550160c2901f11e1602e750a33492149b75a4f3b496f272d7a7d9f19027d142c1698cf2e87c7c6de896833077b0f48a8829e1796115ed005dfdaea20cbdd9d71dca4ff1bd5f368320436855990135ef6b3400d12325097db1a55fd0032531be6dcd16e652a3fe432ad86a39a484686bed6eacbec5631130fbc6aa22150b9d07af56e50df8a0e76ed87c4583f386b0ac5de2ca4f4b8d40ae9f7ccc208edc4eb098f83f829b22d908aa1d32d69dd6673f586dacd1fde284a22bc06d202d94c51c9ac6cbdc7b64bf10f08001c387e5c900399d6924db8c131f539b69c72a13278478844045436df22bba3bac335f28a214aae995610c1dcee7c1bd3729ed8a7f5e6a174ef4365fbfce4828a442811c38e5f587a86c0682267033504f479c952eb57eace17a885aded97d47f1d3d88dbe00b0e87be106acc5ebadac9cb6a210dc1d63f2babf691164f9644b5810b398d38d0ad55406941fa286191e2dc80d9d0cdbebb6a8d3c047dbfb81aa24e204eb68952210d1249c5d41b8ed134cdb8860609e6d4fe2da17528dd6dd973a19f70430769ccc090f7207ca10edcc0921c040adb9c9a04cf29dbfaef9ecca2d034e36a1777774a89cc483112d8b9e47c1a6e213c2cabc293eac50932808519ff7e969344f0bd9fe3edb7bb78d5222e456b581f2fe8a53a8f287cee5649f36701242d3e65709c4d253a94ede41a47c8b35c5bd42ba69595b89e56e1afae97623868c95a37ea00a0242a293c1f5a37b3336d6e285a846b1497438d998ecf72a4ecead1fe92fac2fc46882380c3efbbc29e0918e18ac475ff2ba3f5f26e30021e63d0260090b65b3d26602e2db682371e373ba3aee68dd20d17d18953dc899006ed10cafa1984180ba5d6ab2bab3935babb519d63e29febf03c99118cb2a5f6053c49c8ceae8b85eb943fff462dbd48c4936d7c0db5e30eccdb66eb88afa544621a233063008fdca816017a72d60af4caa20388ff50f448e5afb40b2d64bf5f5d7ec560f5df121677aee91cd919eeeb273b5037660e395f0d7f6dfc2ea8ff997b6e7ed762e40e14492f48fc87d84d16b670eee91847f5f39476d767247786ee753290c3cfc9b28063b496c7a1046cb46a6412b41b24e457be67db751a4c275a53ebb1caff2bf35bfd614f05bf8fc7860f178d1c49461a3ec7507d67453c66a97ff891943a2c395dcb0fec7fe36e890374bc3b771ce6312b4a818c5c2b12390d7b4749ff320d3e0759ce80f4f057118e857fb762b552045330b42a8499c37fb853f8442c7e6ff127aa00a7666f468c6ec26f5d5789a4edb730e126554fdc7272cad0ccfab5de62394e361d6014e9418821e2f3f3fe21bcf96ae41b7e392bf1ad43ebf1b9115172015b2e758827bb36f42d1604cb6adcb41144182412f946f3628dc7ab933ed0daf9f0059fea9d3d85c02b987388b3fe7f12e3730a43ec26a5f0e6eb53580190bf3f7d60bf097afd316a6a8fa1b200fb7574134e7aa0f9218985b4e8faa6f80ce1833aab1f96edef6e56a0bf44d1fae7d12eea26de3e5b08832e873444cc82b9e2676401e56a4c5f842f5cdb5366c0e0c1cf156966ce2e9206eb3bdd8695af07e6d25074aac97b8549ec41e9b6715ab679539e9c5c1a82c0c9b67a6f50b6f4af150099b8d8ab47887e41575d1026b742e4f0524df699d49f48abd292965de73fff2bde9010530cd21491aa05737be042b16f501fbf703d9d7a477532aced0d833ac89e408f47297360ac699488549cb13d623ef43f013bcdb23b3076ded37af5619fa583186b40b68eb7f5fa43b94822dea6d556f0279a4282e7da4fc8d68942db2829e4ed7d19f71a6f93ea7452a9f5d8a4ee326cec6d3a5d8fe92ff096921212ec23fd6a54b9e70db1c0041f61b4326cef02a8a74e3fed89eac41e97a6b608fb1b5e32236517a91e399f761d5d1477ad77de3c6909e2d24ef961ed9f222f72602584ac3107d29a4770504d91a1ba935ea43a2be9c515a3e09dd8f3b3b59d4d1176b5eea21ba94946d9cd088c9afc0feedc5117201de7ae31fe39e9f14b52f0a0af003fccda075da2bd680d0ab244196b49ad6aed3b6545df8fd9f305a5891f4a0a3ed013b0c74e2bffc72d94623f11d66a7cc9c4290aa92cb4a4aec107c38dd8e763e55aaf47c83b75ab8ecd677767ad9181ccd96748b2295988c2f5f998aa5b2cddf2b70411dccba4cacd42c7f8453b450c446327a80ba55d5b84a385a41bf733d364ba93a8a32e8aa5edfb5a7246235605470f649aac499a786c975e318e2c5cf4a193458cc4adb58237a64aa5351bdf8f6975108bbc990525f2cf1eedd3b62ad89d45e306133db889029f9f1ea5e77473fe4c2a295c1ffb584af48aae9b1699505ac2d6b584f9805c1cc4ae9c6f7cfc9d932dfd242d78ce0d12d40e54df7653dd36816c7d6cdd8eda8d4fb12b13bfb619670dfa6d0e49de9aeea3baba2aecbbbe573368c0af3120798f655f5c0273e9a79aeb96709105a56e18e389125512702354740cb189ea8411b5d47849a87e2b355a7e2f4e90730e0841ebb5a777938b22911f"}]}]}, 0xd04}}, 0x0) 07:19:08 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:19:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:19:08 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x5}]}]}}, &(0x7f0000000200)=""/166, 0x36, 0xa6, 0x1}, 0x20) 07:19:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb}, {}]}]}}, &(0x7f0000000200)=""/166, 0x36, 0xa6, 0x1}, 0x20) 07:19:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 608.382164][ T9922] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 608.552403][ T3572] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 608.625382][ T9922] usb 2-1: Using ep0 maxpacket: 8 [ 608.702859][ T3564] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 608.793276][ T3572] usb 3-1: Using ep0 maxpacket: 8 [ 608.833100][ T9922] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 608.842610][ T9922] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 608.850827][ T9922] usb 2-1: Product: syz [ 608.969938][ T9922] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 608.978341][ T3564] usb 6-1: Using ep0 maxpacket: 8 [ 609.032935][ T3572] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 609.042690][ T3572] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 609.050872][ T3572] usb 3-1: Product: syz [ 609.105727][ T3572] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 609.222386][ T3564] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 609.231914][ T3564] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 609.240141][ T3564] usb 6-1: Product: syz [ 609.299931][ T3564] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 611.522137][ T3572] gspca_stk1135: reg_w 0x2ff err -71 [ 611.528734][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 611.535539][ T3572] gspca_stk1135: Sensor write failed [ 611.541030][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 611.547834][ T3572] gspca_stk1135: Sensor write failed [ 611.553440][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 611.559894][ T3572] gspca_stk1135: Sensor read failed [ 611.565453][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 611.572083][ T3572] gspca_stk1135: Sensor read failed [ 611.577388][ T3572] gspca_stk1135: Detected sensor type unknown (0x0) [ 611.584619][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 611.591114][ T3572] gspca_stk1135: Sensor read failed [ 611.596638][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 611.603280][ T3572] gspca_stk1135: Sensor read failed [ 611.608755][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 611.615538][ T3572] gspca_stk1135: Sensor write failed [ 611.621026][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 611.627696][ T3572] gspca_stk1135: Sensor write failed [ 611.633360][ T3572] stk1135: probe of 3-1:25.0 failed with error -71 [ 611.643477][ T9922] gspca_stk1135: reg_w 0x300 err -71 [ 611.649993][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 611.657276][ T9922] gspca_stk1135: Sensor write failed [ 611.662947][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 611.669437][ T9922] gspca_stk1135: Sensor write failed [ 611.675301][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 611.681889][ T9922] gspca_stk1135: Sensor read failed [ 611.687359][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 611.693990][ T9922] gspca_stk1135: Sensor read failed [ 611.699330][ T9922] gspca_stk1135: Detected sensor type unknown (0x0) [ 611.706819][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 611.713407][ T9922] gspca_stk1135: Sensor read failed [ 611.718793][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 611.725663][ T9922] gspca_stk1135: Sensor read failed [ 611.731058][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 611.737892][ T9922] gspca_stk1135: Sensor write failed [ 611.743488][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 611.749988][ T9922] gspca_stk1135: Sensor write failed [ 611.755731][ T9922] stk1135: probe of 2-1:25.0 failed with error -71 [ 611.766091][ T3564] gspca_stk1135: reg_w 0x2ff err -71 [ 611.772617][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 611.779109][ T3564] gspca_stk1135: Sensor write failed [ 611.784739][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 611.791220][ T3564] gspca_stk1135: Sensor write failed [ 611.796990][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 611.803592][ T3564] gspca_stk1135: Sensor read failed [ 611.808984][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 611.815615][ T3564] gspca_stk1135: Sensor read failed [ 611.820955][ T3564] gspca_stk1135: Detected sensor type unknown (0x0) [ 611.828193][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 611.834771][ T3564] gspca_stk1135: Sensor read failed [ 611.840167][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 611.846770][ T3564] gspca_stk1135: Sensor read failed [ 611.852337][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 611.858820][ T3564] gspca_stk1135: Sensor write failed [ 611.864404][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 611.870852][ T3564] gspca_stk1135: Sensor write failed [ 611.876557][ T3564] stk1135: probe of 6-1:25.0 failed with error -71 [ 611.887271][ T3572] usb 3-1: USB disconnect, device number 18 [ 611.901111][ T9922] usb 2-1: USB disconnect, device number 17 [ 611.952499][ T3564] usb 6-1: USB disconnect, device number 19 07:19:12 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:12 executing program 3: bpf$BPF_PROG_ATTACH(0x13, 0x0, 0x0) 07:19:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006780)=[{&(0x7f0000002a80)={0x17, 0x6a, 0x201, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x18}], 0x1}, 0x0) 07:19:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:19:12 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000ac0)="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", 0x20001ac0}, {0x0}, {&(0x7f0000000400)="d2", 0x1}], 0x3, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x1, 0x5fffd540) 07:19:12 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:19:12 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(r0, 0x0, 0x0, 0x0) 07:19:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 612.612494][ T3564] usb 3-1: new high-speed USB device number 19 using dummy_hcd 07:19:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0xe}]}]}}, &(0x7f0000000300)=""/182, 0x32, 0xb6, 0x1}, 0x20) 07:19:12 executing program 3: bpf$BPF_PROG_ATTACH(0x22, &(0x7f0000000080)={@map}, 0x14) [ 612.742609][ T3557] usb 2-1: new high-speed USB device number 18 using dummy_hcd 07:19:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 612.852044][ T3564] usb 3-1: Using ep0 maxpacket: 8 [ 612.912284][ T9922] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 613.012511][ T3557] usb 2-1: Using ep0 maxpacket: 8 [ 613.052662][ T3564] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 613.062057][ T3564] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 613.070260][ T3564] usb 3-1: Product: syz [ 613.152473][ T9922] usb 6-1: Using ep0 maxpacket: 8 [ 613.190859][ T3564] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 613.243093][ T3557] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 613.252568][ T3557] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 613.260769][ T3557] usb 2-1: Product: syz [ 613.362860][ T9922] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 613.372756][ T9922] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 613.380976][ T9922] usb 6-1: Product: syz [ 613.439900][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 613.469894][ T9922] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 615.612336][ T3564] gspca_stk1135: reg_w 0x2ff err -71 [ 615.618872][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 615.625619][ T3564] gspca_stk1135: Sensor write failed [ 615.631107][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 615.638372][ T3564] gspca_stk1135: Sensor write failed [ 615.643917][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 615.650331][ T3564] gspca_stk1135: Sensor read failed [ 615.655834][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 615.662427][ T3564] gspca_stk1135: Sensor read failed [ 615.667765][ T3564] gspca_stk1135: Detected sensor type unknown (0x0) [ 615.674806][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 615.681274][ T3564] gspca_stk1135: Sensor read failed [ 615.686793][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 615.693515][ T3564] gspca_stk1135: Sensor read failed [ 615.698863][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 615.705700][ T3564] gspca_stk1135: Sensor write failed [ 615.711176][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 615.717789][ T3564] gspca_stk1135: Sensor write failed [ 615.723511][ T3564] stk1135: probe of 3-1:25.0 failed with error -71 [ 615.744954][ T3564] usb 3-1: USB disconnect, device number 19 [ 615.852362][ T9922] gspca_stk1135: reg_w 0x2ff err -71 [ 615.858908][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 615.865660][ T9922] gspca_stk1135: Sensor write failed [ 615.871127][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 615.877710][ T9922] gspca_stk1135: Sensor write failed [ 615.883273][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 615.889752][ T9922] gspca_stk1135: Sensor read failed [ 615.895325][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 615.901892][ T9922] gspca_stk1135: Sensor read failed [ 615.907223][ T9922] gspca_stk1135: Detected sensor type unknown (0x0) [ 615.914176][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 615.920627][ T9922] gspca_stk1135: Sensor read failed [ 615.926130][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 615.932722][ T9922] gspca_stk1135: Sensor read failed [ 615.938108][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 615.944735][ T9922] gspca_stk1135: Sensor write failed [ 615.950179][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 615.956824][ T9922] gspca_stk1135: Sensor write failed [ 615.962580][ T9922] stk1135: probe of 6-1:25.0 failed with error -71 [ 615.996423][ T9922] usb 6-1: USB disconnect, device number 20 [ 616.002110][ T3557] gspca_stk1135: reg_w 0x300 err -71 [ 616.008963][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 616.016299][ T3557] gspca_stk1135: Sensor write failed [ 616.021894][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 616.028374][ T3557] gspca_stk1135: Sensor write failed [ 616.034014][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 616.040498][ T3557] gspca_stk1135: Sensor read failed [ 616.046021][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 616.052640][ T3557] gspca_stk1135: Sensor read failed [ 616.058062][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 616.064980][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 616.071469][ T3557] gspca_stk1135: Sensor read failed [ 616.077216][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 616.083780][ T3557] gspca_stk1135: Sensor read failed [ 616.089178][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 616.095803][ T3557] gspca_stk1135: Sensor write failed [ 616.101273][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 616.108154][ T3557] gspca_stk1135: Sensor write failed [ 616.113848][ T3557] stk1135: probe of 2-1:25.0 failed with error -71 [ 616.158891][ T3557] usb 2-1: USB disconnect, device number 18 07:19:16 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0xa0) 07:19:16 executing program 4: socketpair(0xa, 0x2, 0x0, &(0x7f0000000180)) 07:19:16 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:19:16 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:16 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:19:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) 07:19:16 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:19:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) [ 616.893854][ T9922] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 616.909281][ T3557] usb 6-1: new high-speed USB device number 21 using dummy_hcd 07:19:17 executing program 3: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x460, 0xffffffff, 0x0, 0x260, 0x148, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48}}, @common=@frag={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @REJECT={0x28}}, {{@ipv6={@local, @private1, [], [], 'veth1\x00', 'veth0_to_bond\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffc40) 07:19:17 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x1}]}, {0x0, [0x61, 0x30, 0x5f]}}, &(0x7f0000000200)=""/166, 0x29, 0xa6, 0x1}, 0x20) [ 617.142630][ T9922] usb 3-1: Using ep0 maxpacket: 8 [ 617.168061][ T3557] usb 6-1: Using ep0 maxpacket: 8 [ 617.171939][ T3564] usb 2-1: new high-speed USB device number 19 using dummy_hcd 07:19:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 617.353103][ T9922] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 617.362766][ T9922] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 617.371006][ T9922] usb 3-1: Product: syz [ 617.407392][ T3557] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 617.417313][ T3557] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 617.422265][ T3564] usb 2-1: Using ep0 maxpacket: 8 [ 617.425629][ T3557] usb 6-1: Product: syz [ 617.490971][ T9922] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 617.560042][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 617.624195][ T3564] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 617.633836][ T3564] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 617.642291][ T3564] usb 2-1: Product: syz [ 617.776283][ T3564] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 619.892346][ T9922] gspca_stk1135: reg_w 0x2ff err -71 [ 619.899057][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 619.902681][ T3557] gspca_stk1135: reg_w 0x2ff err -71 [ 619.905813][ T9922] gspca_stk1135: Sensor write failed [ 619.911877][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 619.916289][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 619.922621][ T3557] gspca_stk1135: Sensor write failed [ 619.928932][ T9922] gspca_stk1135: Sensor write failed [ 619.929024][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 619.934372][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 619.934421][ T3557] gspca_stk1135: Sensor write failed [ 619.934508][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 619.939716][ T9922] gspca_stk1135: Sensor read failed [ 619.939802][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 619.946294][ T3557] gspca_stk1135: Sensor read failed [ 619.952681][ T9922] gspca_stk1135: Sensor read failed [ 619.952719][ T9922] gspca_stk1135: Detected sensor type unknown (0x0) [ 619.958041][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 619.964554][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 619.964603][ T9922] gspca_stk1135: Sensor read failed [ 619.964684][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 619.964728][ T9922] gspca_stk1135: Sensor read failed [ 619.964810][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 619.964855][ T9922] gspca_stk1135: Sensor write failed [ 619.970056][ T3557] gspca_stk1135: Sensor read failed [ 619.970094][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 619.976625][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 619.981912][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 619.987101][ T9922] gspca_stk1135: Sensor write failed [ 619.987322][ T9922] stk1135: probe of 3-1:25.0 failed with error -71 [ 619.993971][ T3557] gspca_stk1135: Sensor read failed [ 620.045235][ T9922] usb 3-1: USB disconnect, device number 20 [ 620.048185][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 620.092428][ T3557] gspca_stk1135: Sensor read failed [ 620.097838][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 620.104447][ T3557] gspca_stk1135: Sensor write failed [ 620.109938][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 620.116577][ T3557] gspca_stk1135: Sensor write failed [ 620.122279][ T3557] stk1135: probe of 6-1:25.0 failed with error -71 [ 620.168848][ T3557] usb 6-1: USB disconnect, device number 21 [ 620.587350][ T3564] gspca_stk1135: reg_w 0x300 err -71 [ 620.595834][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 620.602734][ T3564] gspca_stk1135: Sensor write failed [ 620.608222][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 620.614926][ T3564] gspca_stk1135: Sensor write failed [ 620.620418][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 620.627033][ T3564] gspca_stk1135: Sensor read failed [ 620.632670][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 620.639132][ T3564] gspca_stk1135: Sensor read failed [ 620.644630][ T3564] gspca_stk1135: Detected sensor type unknown (0x0) [ 620.651429][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 620.658015][ T3564] gspca_stk1135: Sensor read failed [ 620.663563][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 620.670019][ T3564] gspca_stk1135: Sensor read failed [ 620.675549][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 620.682165][ T3564] gspca_stk1135: Sensor write failed [ 620.687597][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 620.694210][ T3564] gspca_stk1135: Sensor write failed [ 620.699758][ T3564] stk1135: probe of 2-1:25.0 failed with error -71 [ 620.735002][ T3564] usb 2-1: USB disconnect, device number 19 07:19:21 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:21 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$netlink(r1, &(0x7f0000007200)={0x0, 0x0, 0x0}, 0x0) read$alg(r0, &(0x7f00000002c0)=""/220, 0xdc) 07:19:21 executing program 3: bpf$MAP_CREATE(0x5, &(0x7f0000000680), 0x48) 07:19:21 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:19:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:19:21 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x701, 0x0, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) 07:19:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, &(0x7f00000002c0)) 07:19:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 621.432343][ T9922] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 621.473404][ T3557] usb 6-1: new high-speed USB device number 22 using dummy_hcd 07:19:21 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000200)=""/166, 0x32, 0xa6, 0x1}, 0x20) 07:19:21 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x3}}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0}}], 0x2, 0x0) 07:19:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) [ 621.681077][ T9922] usb 3-1: Using ep0 maxpacket: 8 [ 621.693823][ T9920] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 621.755880][ T3557] usb 6-1: Using ep0 maxpacket: 8 [ 621.882623][ T9922] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 621.892186][ T9922] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 621.900425][ T9922] usb 3-1: Product: syz [ 621.959911][ T9920] usb 2-1: Using ep0 maxpacket: 8 [ 621.974820][ T3557] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 621.984506][ T3557] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 621.992889][ T3557] usb 6-1: Product: syz [ 622.039735][ T9922] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 622.151159][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 622.213279][ T9920] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 622.222679][ T9920] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 622.230891][ T9920] usb 2-1: Product: syz [ 622.309529][ T9920] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 624.442367][ T9922] gspca_stk1135: reg_w 0x2ff err -71 [ 624.448946][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 624.455748][ T9922] gspca_stk1135: Sensor write failed [ 624.461248][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 624.468300][ T9922] gspca_stk1135: Sensor write failed [ 624.473927][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 624.480407][ T9922] gspca_stk1135: Sensor read failed [ 624.485922][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 624.492668][ T9922] gspca_stk1135: Sensor read failed [ 624.498008][ T9922] gspca_stk1135: Detected sensor type unknown (0x0) [ 624.505052][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 624.511561][ T9922] gspca_stk1135: Sensor read failed [ 624.517118][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 624.523746][ T9922] gspca_stk1135: Sensor read failed [ 624.529143][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 624.532340][ T3557] gspca_stk1135: reg_w 0x2ff err -71 [ 624.535776][ T9922] gspca_stk1135: Sensor write failed [ 624.542030][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 624.546335][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 624.552751][ T3557] gspca_stk1135: Sensor write failed [ 624.558988][ T9922] gspca_stk1135: Sensor write failed [ 624.559221][ T9922] stk1135: probe of 3-1:25.0 failed with error -71 [ 624.564535][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 624.583453][ T3557] gspca_stk1135: Sensor write failed [ 624.584144][ T9922] usb 3-1: USB disconnect, device number 21 [ 624.588850][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 624.601420][ T3557] gspca_stk1135: Sensor read failed [ 624.606893][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 624.613526][ T3557] gspca_stk1135: Sensor read failed [ 624.618859][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 624.626021][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 624.632627][ T3557] gspca_stk1135: Sensor read failed [ 624.638051][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 624.645926][ T3557] gspca_stk1135: Sensor read failed [ 624.651334][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 624.657940][ T3557] gspca_stk1135: Sensor write failed [ 624.663490][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 624.669979][ T3557] gspca_stk1135: Sensor write failed [ 624.675675][ T3557] stk1135: probe of 6-1:25.0 failed with error -71 [ 624.759399][ T3557] usb 6-1: USB disconnect, device number 22 [ 624.922274][ T9920] gspca_stk1135: reg_w 0x300 err -71 [ 624.929121][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 624.936739][ T9920] gspca_stk1135: Sensor write failed [ 624.942348][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 624.948845][ T9920] gspca_stk1135: Sensor write failed [ 624.954461][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 624.960927][ T9920] gspca_stk1135: Sensor read failed [ 624.966397][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 624.972971][ T9920] gspca_stk1135: Sensor read failed [ 624.978288][ T9920] gspca_stk1135: Detected sensor type unknown (0x0) [ 624.985172][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 624.991636][ T9920] gspca_stk1135: Sensor read failed [ 624.997111][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 625.003705][ T9920] gspca_stk1135: Sensor read failed [ 625.009056][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 625.015677][ T9920] gspca_stk1135: Sensor write failed [ 625.021174][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 625.027779][ T9920] gspca_stk1135: Sensor write failed [ 625.033473][ T9920] stk1135: probe of 2-1:25.0 failed with error -71 [ 625.050498][ T9920] usb 2-1: USB disconnect, device number 20 07:19:25 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x38}}, 0x0) 07:19:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffffd) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x14, 0x0, 0x5, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 07:19:25 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:19:25 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:19:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x2707, 0x4) 07:19:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 07:19:25 executing program 4: unshare(0x400) pipe(&(0x7f0000000640)={0xffffffffffffffff}) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) [ 625.802493][ T9922] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 625.832470][ T9920] usb 6-1: new high-speed USB device number 23 using dummy_hcd 07:19:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x7, 0x8, 0x860, 0x1}, 0x48) [ 626.022205][ T3557] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 626.042798][ T9922] usb 3-1: Using ep0 maxpacket: 8 [ 626.072663][ T9920] usb 6-1: Using ep0 maxpacket: 8 07:19:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0, 0x0) 07:19:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x0, 0x0, 0x3}, 0x48) [ 626.243957][ T9922] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 626.253838][ T9922] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 626.262345][ T9922] usb 3-1: Product: syz [ 626.272728][ T3557] usb 2-1: Using ep0 maxpacket: 8 [ 626.293198][ T9920] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 626.302865][ T9920] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 626.311083][ T9920] usb 6-1: Product: syz [ 626.379522][ T9922] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 626.437801][ T9920] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 626.523865][ T3557] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 626.533300][ T3557] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 626.541507][ T3557] usb 2-1: Product: syz [ 626.668137][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 628.782205][ T9922] gspca_stk1135: reg_w 0x2ff err -71 [ 628.788746][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 628.795437][ T9922] gspca_stk1135: Sensor write failed [ 628.800931][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 628.802999][ T9920] gspca_stk1135: reg_w 0x2ff err -71 [ 628.807456][ T9922] gspca_stk1135: Sensor write failed [ 628.813901][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 628.818368][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 628.824746][ T9920] gspca_stk1135: Sensor write failed [ 628.824837][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 628.831154][ T9922] gspca_stk1135: Sensor read failed [ 628.831244][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 628.836596][ T9920] gspca_stk1135: Sensor write failed [ 628.836689][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 628.843319][ T9922] gspca_stk1135: Sensor read failed [ 628.848269][ T9920] gspca_stk1135: Sensor read failed [ 628.848354][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 628.854751][ T9922] gspca_stk1135: Detected sensor type unknown (0x0) [ 628.854860][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 628.854906][ T9922] gspca_stk1135: Sensor read failed [ 628.854984][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 628.855028][ T9922] gspca_stk1135: Sensor read failed [ 628.855115][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 628.860403][ T9920] gspca_stk1135: Sensor read failed [ 628.860438][ T9920] gspca_stk1135: Detected sensor type unknown (0x0) [ 628.866863][ T9922] gspca_stk1135: Sensor write failed [ 628.866949][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 628.872288][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 628.872335][ T9920] gspca_stk1135: Sensor read failed [ 628.872412][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 628.872455][ T9920] gspca_stk1135: Sensor read failed [ 628.872535][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 628.872576][ T9920] gspca_stk1135: Sensor write failed [ 628.872658][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 628.872703][ T9920] gspca_stk1135: Sensor write failed [ 628.877891][ T9922] gspca_stk1135: Sensor write failed [ 628.878116][ T9922] stk1135: probe of 3-1:25.0 failed with error -71 [ 628.884479][ T9920] stk1135: probe of 6-1:25.0 failed with error -71 [ 628.965443][ T9922] usb 3-1: USB disconnect, device number 22 [ 629.056257][ T9920] usb 6-1: USB disconnect, device number 23 [ 629.365332][ T3557] gspca_stk1135: reg_w 0x300 err -71 [ 629.371898][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 629.378393][ T3557] gspca_stk1135: Sensor write failed [ 629.384181][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 629.390660][ T3557] gspca_stk1135: Sensor write failed [ 629.396306][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 629.402883][ T3557] gspca_stk1135: Sensor read failed [ 629.408271][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 629.415038][ T3557] gspca_stk1135: Sensor read failed [ 629.420424][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 629.427417][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 629.433977][ T3557] gspca_stk1135: Sensor read failed [ 629.439359][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 629.446118][ T3557] gspca_stk1135: Sensor read failed [ 629.451513][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 629.458162][ T3557] gspca_stk1135: Sensor write failed [ 629.463795][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 629.470282][ T3557] gspca_stk1135: Sensor write failed [ 629.476027][ T3557] stk1135: probe of 2-1:25.0 failed with error -71 [ 629.596602][ T3557] usb 2-1: USB disconnect, device number 21 07:19:29 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/236, 0x2d, 0xec, 0x1}, 0x20) 07:19:29 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x3}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffffc}}], 0x40}}], 0x2, 0x0) 07:19:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0, 0x0) 07:19:29 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:19:29 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) 07:19:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0, 0x0) 07:19:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0x52, &(0x7f0000000140)={&(0x7f0000000440)={0x20, 0x7, 0x6, 0x5}, 0x20}}, 0x0) [ 630.282206][ T3557] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 630.303144][ T25] usb 6-1: new high-speed USB device number 24 using dummy_hcd 07:19:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x2c, 0x1, 0x2, 0x801, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x3, @multicast1}, {0x8, 0x2, @remote}}}]}]}, 0x2c}}, 0x0) [ 630.493335][ T9922] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 630.533174][ T3557] usb 3-1: Using ep0 maxpacket: 8 07:19:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 630.562622][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 630.581200][T10343] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:19:30 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x3}}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0}}], 0x2, 0x0) [ 630.731966][ T9922] usb 2-1: Using ep0 maxpacket: 8 [ 630.753124][ T3557] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 630.762974][ T3557] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 630.771217][ T3557] usb 3-1: Product: syz [ 630.813131][ T25] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 630.822705][ T25] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 630.830928][ T25] usb 6-1: Product: syz [ 630.900621][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 630.916104][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 630.943130][ T9922] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 630.952742][ T9922] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 630.960953][ T9922] usb 2-1: Product: syz [ 631.100014][ T9922] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 633.314132][ T3557] gspca_stk1135: reg_w 0x2ff err -71 [ 633.320693][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 633.327529][ T3557] gspca_stk1135: Sensor write failed [ 633.333138][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 633.339624][ T3557] gspca_stk1135: Sensor write failed [ 633.346303][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 633.352958][ T3557] gspca_stk1135: Sensor read failed [ 633.358321][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 633.364910][ T3557] gspca_stk1135: Sensor read failed [ 633.370258][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 633.377267][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 633.383852][ T3557] gspca_stk1135: Sensor read failed [ 633.389239][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 633.395887][ T3557] gspca_stk1135: Sensor read failed [ 633.401281][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 633.407919][ T3557] gspca_stk1135: Sensor write failed [ 633.413535][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 633.420018][ T3557] gspca_stk1135: Sensor write failed [ 633.425848][ T3557] stk1135: probe of 3-1:25.0 failed with error -71 [ 633.435813][ T25] gspca_stk1135: reg_w 0x2ff err -71 [ 633.442345][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 633.448867][ T25] gspca_stk1135: Sensor write failed [ 633.454940][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 633.461426][ T25] gspca_stk1135: Sensor write failed [ 633.467193][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 633.473829][ T25] gspca_stk1135: Sensor read failed [ 633.479231][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 633.485936][ T25] gspca_stk1135: Sensor read failed [ 633.491285][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 633.498305][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 633.504904][ T25] gspca_stk1135: Sensor read failed [ 633.510318][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 633.516942][ T25] gspca_stk1135: Sensor read failed [ 633.522494][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 633.528992][ T25] gspca_stk1135: Sensor write failed [ 633.534631][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 633.541115][ T25] gspca_stk1135: Sensor write failed [ 633.546832][ T25] stk1135: probe of 6-1:25.0 failed with error -71 [ 633.573262][ T3557] usb 3-1: USB disconnect, device number 23 [ 633.591447][ T25] usb 6-1: USB disconnect, device number 24 [ 633.802377][ T9922] gspca_stk1135: reg_w 0x300 err -71 [ 633.808958][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 633.815749][ T9922] gspca_stk1135: Sensor write failed [ 633.821241][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 633.828748][ T9922] gspca_stk1135: Sensor write failed [ 633.834328][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 633.840824][ T9922] gspca_stk1135: Sensor read failed [ 633.846309][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 633.852882][ T9922] gspca_stk1135: Sensor read failed [ 633.858225][ T9922] gspca_stk1135: Detected sensor type unknown (0x0) [ 633.865109][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 633.871605][ T9922] gspca_stk1135: Sensor read failed [ 633.877084][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 633.883637][ T9922] gspca_stk1135: Sensor read failed [ 633.889027][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 633.895576][ T9922] gspca_stk1135: Sensor write failed [ 633.901062][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 633.907628][ T9922] gspca_stk1135: Sensor write failed [ 633.913279][ T9922] stk1135: probe of 2-1:25.0 failed with error -71 [ 633.995463][ T9922] usb 2-1: USB disconnect, device number 22 07:19:34 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:19:34 executing program 3: bpf$MAP_CREATE(0xa, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 07:19:34 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:19:34 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:34 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:19:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) 07:19:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:19:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)={0x14, r1, 0x5, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) [ 634.682585][ T9922] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 634.752156][ T3572] usb 3-1: new high-speed USB device number 24 using dummy_hcd 07:19:35 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 634.925609][ T9922] usb 6-1: Using ep0 maxpacket: 8 07:19:35 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f00000000c0)) 07:19:35 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x2, 0x0) [ 635.007685][ T3564] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 635.023700][ T3572] usb 3-1: Using ep0 maxpacket: 8 [ 635.179199][ T9922] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 635.188773][ T9922] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 635.197490][ T9922] usb 6-1: Product: syz [ 635.254364][ T3572] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 635.263764][ T3572] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 635.272217][ T3572] usb 3-1: Product: syz [ 635.282701][ T3564] usb 2-1: Using ep0 maxpacket: 8 [ 635.370583][ T9922] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 635.391242][ T3572] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 635.496857][ T3564] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 635.506464][ T3564] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 635.514907][ T3564] usb 2-1: Product: syz [ 635.620988][ T3564] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 637.742248][ T9922] gspca_stk1135: reg_w 0x2ff err -71 [ 637.748979][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 637.755785][ T9922] gspca_stk1135: Sensor write failed [ 637.761278][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 637.768229][ T9922] gspca_stk1135: Sensor write failed [ 637.773786][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 637.780271][ T9922] gspca_stk1135: Sensor read failed [ 637.785880][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 637.792669][ T9922] gspca_stk1135: Sensor read failed [ 637.798006][ T9922] gspca_stk1135: Detected sensor type unknown (0x0) [ 637.804954][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 637.811456][ T9922] gspca_stk1135: Sensor read failed [ 637.816964][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 637.824049][ T9922] gspca_stk1135: Sensor read failed [ 637.829429][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 637.836013][ T9922] gspca_stk1135: Sensor write failed [ 637.841522][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 637.848161][ T9922] gspca_stk1135: Sensor write failed [ 637.854031][ T9922] stk1135: probe of 6-1:25.0 failed with error -71 [ 637.863986][ T3572] gspca_stk1135: reg_w 0x2ff err -71 [ 637.870545][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 637.877703][ T3572] gspca_stk1135: Sensor write failed [ 637.883354][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 637.889855][ T3572] gspca_stk1135: Sensor write failed [ 637.895494][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 637.902084][ T3572] gspca_stk1135: Sensor read failed [ 637.907477][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 637.914108][ T3572] gspca_stk1135: Sensor read failed [ 637.919454][ T3572] gspca_stk1135: Detected sensor type unknown (0x0) [ 637.926340][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 637.932950][ T3572] gspca_stk1135: Sensor read failed [ 637.938365][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 637.944952][ T3572] gspca_stk1135: Sensor read failed [ 637.950355][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 637.956965][ T3572] gspca_stk1135: Sensor write failed [ 637.962543][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 637.969043][ T3572] gspca_stk1135: Sensor write failed [ 637.974837][ T3572] stk1135: probe of 3-1:25.0 failed with error -71 [ 637.995839][ T9922] usb 6-1: USB disconnect, device number 25 [ 638.024864][ T3572] usb 3-1: USB disconnect, device number 24 [ 638.262600][ T3564] gspca_stk1135: reg_w 0x300 err -71 [ 638.269238][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 638.275839][ T3564] gspca_stk1135: Sensor write failed [ 638.281317][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 638.287912][ T3564] gspca_stk1135: Sensor write failed [ 638.293788][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 638.300302][ T3564] gspca_stk1135: Sensor read failed [ 638.305776][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 638.312363][ T3564] gspca_stk1135: Sensor read failed [ 638.317723][ T3564] gspca_stk1135: Detected sensor type unknown (0x0) [ 638.324704][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 638.331203][ T3564] gspca_stk1135: Sensor read failed [ 638.336736][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 638.343355][ T3564] gspca_stk1135: Sensor read failed [ 638.348744][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 638.355412][ T3564] gspca_stk1135: Sensor write failed [ 638.360904][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 638.367468][ T3564] gspca_stk1135: Sensor write failed [ 638.373223][ T3564] stk1135: probe of 2-1:25.0 failed with error -71 [ 638.423428][ T3564] usb 2-1: USB disconnect, device number 23 07:19:38 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:38 executing program 0: bpf$MAP_CREATE(0x4, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 07:19:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x14, 0x3c, 0xa19}, 0x14}}, 0x0) 07:19:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x0, 0x0, 0x3195}, 0x48) 07:19:38 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:19:38 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x24, 0x6a, 0x201, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, 0x24}], 0x1}, 0x0) 07:19:39 executing program 3: bpf$BPF_PROG_ATTACH(0x6, &(0x7f0000000080)={@map}, 0x14) 07:19:39 executing program 0: bpf$BPF_PROG_ATTACH(0x11, &(0x7f0000000080)={@map}, 0x14) [ 639.101950][ T25] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 639.132495][ T9920] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 639.205158][T10387] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:19:39 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'ip6tnl0\x00'}) 07:19:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0189436, &(0x7f0000000100)={'wlan1\x00'}) [ 639.342194][ T25] usb 6-1: Using ep0 maxpacket: 8 07:19:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x401c5820, &(0x7f0000000100)={'wlan1\x00'}) [ 639.362573][ T3557] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 639.375117][ T9920] usb 3-1: Using ep0 maxpacket: 8 [ 639.543519][ T25] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 639.553224][ T25] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 639.561436][ T25] usb 6-1: Product: syz [ 639.593696][ T9920] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 639.603468][ T9920] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 639.611906][ T9920] usb 3-1: Product: syz [ 639.628987][ T3557] usb 2-1: Using ep0 maxpacket: 8 [ 639.668491][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 639.759867][ T9920] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 639.843215][ T3557] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 639.853496][ T3557] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 639.861885][ T3557] usb 2-1: Product: syz [ 639.987628][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 642.072683][ T25] gspca_stk1135: reg_w 0x2ff err -71 [ 642.079236][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 642.086725][ T25] gspca_stk1135: Sensor write failed [ 642.092450][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 642.098948][ T25] gspca_stk1135: Sensor write failed [ 642.104627][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 642.111110][ T25] gspca_stk1135: Sensor read failed [ 642.116803][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 642.123457][ T25] gspca_stk1135: Sensor read failed [ 642.128799][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 642.135780][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 642.142377][ T25] gspca_stk1135: Sensor read failed [ 642.147758][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 642.154533][ T25] gspca_stk1135: Sensor read failed [ 642.159934][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 642.166589][ T25] gspca_stk1135: Sensor write failed [ 642.172486][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 642.178961][ T25] gspca_stk1135: Sensor write failed [ 642.184692][ T25] stk1135: probe of 6-1:25.0 failed with error -71 [ 642.200502][ T9920] gspca_stk1135: reg_w 0x2ff err -71 [ 642.208378][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 642.215289][ T9920] gspca_stk1135: Sensor write failed [ 642.220785][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 642.227460][ T9920] gspca_stk1135: Sensor write failed [ 642.233195][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 642.239676][ T9920] gspca_stk1135: Sensor read failed [ 642.245219][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 642.251836][ T9920] gspca_stk1135: Sensor read failed [ 642.257197][ T9920] gspca_stk1135: Detected sensor type unknown (0x0) [ 642.264375][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 642.270943][ T9920] gspca_stk1135: Sensor read failed [ 642.276518][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 642.283133][ T9920] gspca_stk1135: Sensor read failed [ 642.288555][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 642.295355][ T9920] gspca_stk1135: Sensor write failed [ 642.300856][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 642.307506][ T9920] gspca_stk1135: Sensor write failed [ 642.313253][ T9920] stk1135: probe of 3-1:25.0 failed with error -71 [ 642.331299][ T25] usb 6-1: USB disconnect, device number 26 [ 642.385944][ T9920] usb 3-1: USB disconnect, device number 25 [ 642.662271][ T3557] gspca_stk1135: reg_w 0x300 err -71 [ 642.668844][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 642.676855][ T3557] gspca_stk1135: Sensor write failed [ 642.682507][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 642.689004][ T3557] gspca_stk1135: Sensor write failed [ 642.694594][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 642.701094][ T3557] gspca_stk1135: Sensor read failed [ 642.706600][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 642.713160][ T3557] gspca_stk1135: Sensor read failed [ 642.718486][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 642.725386][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 642.731964][ T3557] gspca_stk1135: Sensor read failed [ 642.737364][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 642.743943][ T3557] gspca_stk1135: Sensor read failed [ 642.749321][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 642.755898][ T3557] gspca_stk1135: Sensor write failed [ 642.761388][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 642.767971][ T3557] gspca_stk1135: Sensor write failed [ 642.773668][ T3557] stk1135: probe of 2-1:25.0 failed with error -71 [ 642.807501][ T3557] usb 2-1: USB disconnect, device number 24 [ 642.982203][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 642.988798][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 07:19:43 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'wlan1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) 07:19:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)) 07:19:43 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x0) 07:19:43 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:19:43 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_pressure(r0, &(0x7f0000000080)={'some'}, 0x2f) 07:19:43 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000004d00)='devices.deny\x00', 0x2, 0x0) 07:19:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x40) [ 643.542076][ T3564] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 643.542291][ T3557] usb 6-1: new high-speed USB device number 27 using dummy_hcd 07:19:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'wlan1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x401c5820, &(0x7f0000000000)) 07:19:43 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x8}]}]}}, &(0x7f0000000240)=""/158, 0x32, 0x9e, 0x1}, 0x20) [ 643.786526][ T3564] usb 3-1: Using ep0 maxpacket: 8 [ 643.803129][ T3572] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 643.822852][ T3557] usb 6-1: Using ep0 maxpacket: 8 07:19:44 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="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", 0xec1}], 0x2}, 0x0) [ 644.003470][ T3564] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 644.013249][ T3564] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 644.021466][ T3564] usb 3-1: Product: syz [ 644.043167][ T3557] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 644.052618][ T3557] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 644.060825][ T3557] usb 6-1: Product: syz [ 644.072514][ T3572] usb 2-1: Using ep0 maxpacket: 8 [ 644.104561][ T3564] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 644.185722][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 644.292613][ T3572] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 644.302288][ T3572] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 644.310525][ T3572] usb 2-1: Product: syz [ 644.450002][ T3572] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 646.532372][ T3564] gspca_stk1135: reg_w 0x2ff err -71 [ 646.538942][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 646.545741][ T3564] gspca_stk1135: Sensor write failed [ 646.551196][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 646.557970][ T3564] gspca_stk1135: Sensor write failed [ 646.563526][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 646.569962][ T3564] gspca_stk1135: Sensor read failed [ 646.575531][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 646.582127][ T3564] gspca_stk1135: Sensor read failed [ 646.587470][ T3564] gspca_stk1135: Detected sensor type unknown (0x0) [ 646.593107][ T3557] gspca_stk1135: reg_w 0x2ff err -71 [ 646.594546][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 646.600650][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 646.606056][ T3564] gspca_stk1135: Sensor read failed [ 646.606146][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 646.606193][ T3564] gspca_stk1135: Sensor read failed [ 646.606278][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 646.612735][ T3557] gspca_stk1135: Sensor write failed [ 646.617848][ T3564] gspca_stk1135: Sensor write failed [ 646.617938][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 646.617987][ T3564] gspca_stk1135: Sensor write failed [ 646.624453][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 646.624503][ T3557] gspca_stk1135: Sensor write failed [ 646.624590][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 646.624634][ T3557] gspca_stk1135: Sensor read failed [ 646.624717][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 646.624762][ T3557] gspca_stk1135: Sensor read failed [ 646.624794][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 646.624898][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 646.630246][ T3564] stk1135: probe of 3-1:25.0 failed with error -71 [ 646.636532][ T3557] gspca_stk1135: Sensor read failed [ 646.689744][ T3564] usb 3-1: USB disconnect, device number 26 [ 646.690798][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 646.734397][ T3557] gspca_stk1135: Sensor read failed [ 646.739800][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 646.746445][ T3557] gspca_stk1135: Sensor write failed [ 646.752093][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 646.758582][ T3557] gspca_stk1135: Sensor write failed [ 646.764338][ T3557] stk1135: probe of 6-1:25.0 failed with error -71 [ 646.778847][ T3557] usb 6-1: USB disconnect, device number 27 [ 647.232811][ T3572] gspca_stk1135: reg_w 0x300 err -71 [ 647.239385][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 647.246030][ T3572] gspca_stk1135: Sensor write failed [ 647.251515][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 647.258095][ T3572] gspca_stk1135: Sensor write failed [ 647.263649][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 647.270202][ T3572] gspca_stk1135: Sensor read failed [ 647.275661][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 647.282246][ T3572] gspca_stk1135: Sensor read failed [ 647.287591][ T3572] gspca_stk1135: Detected sensor type unknown (0x0) [ 647.294459][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 647.300952][ T3572] gspca_stk1135: Sensor read failed [ 647.306474][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 647.313052][ T3572] gspca_stk1135: Sensor read failed [ 647.318452][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 647.325010][ T3572] gspca_stk1135: Sensor write failed [ 647.330598][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 647.337137][ T3572] gspca_stk1135: Sensor write failed [ 647.342809][ T3572] stk1135: probe of 2-1:25.0 failed with error -71 [ 647.372631][ T3572] usb 2-1: USB disconnect, device number 25 07:19:47 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4020940d, &(0x7f0000000100)={'wlan1\x00'}) 07:19:47 executing program 4: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) 07:19:47 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086602, &(0x7f0000000100)={'wlan1\x00'}) 07:19:47 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:19:48 executing program 4: socketpair(0x2b, 0x1, 0x5, &(0x7f0000000100)) 07:19:48 executing program 0: syz_clone(0x0, &(0x7f00000000c0)="d0453431baff910415290b1181aeb27c056bd986bdaad8e48dfe2122b65099c9101d01a0e4a578abe3f06b26fcf454cfb07fae14d25ef0", 0x37, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) 07:19:48 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x8}, {}]}]}}, &(0x7f0000000240)=""/158, 0x3e, 0x9e, 0x1}, 0x20) [ 648.172229][ T3572] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 648.180300][ T3564] usb 6-1: new high-speed USB device number 28 using dummy_hcd 07:19:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'wlan1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454df, &(0x7f0000000000)) 07:19:48 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'wlan1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x401054d6, 0x0) 07:19:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'wlan1\x00', 0x2}) [ 648.423208][ T3557] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 648.431871][ T3572] usb 3-1: Using ep0 maxpacket: 8 [ 648.437367][ T3564] usb 6-1: Using ep0 maxpacket: 8 [ 648.653158][ T3564] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 648.662664][ T3564] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 648.666438][ T3557] usb 2-1: Using ep0 maxpacket: 8 [ 648.670796][ T3564] usb 6-1: Product: syz [ 648.682665][ T3572] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 648.692346][ T3572] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 648.700563][ T3572] usb 3-1: Product: syz [ 648.809737][ T3572] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 648.827793][ T3564] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 648.872774][ T3557] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 648.882854][ T3557] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 648.891072][ T3557] usb 2-1: Product: syz [ 648.980845][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 651.162724][ T3572] gspca_stk1135: reg_w 0x2ff err -71 [ 651.169296][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 651.175964][ T3572] gspca_stk1135: Sensor write failed [ 651.181458][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 651.188169][ T3572] gspca_stk1135: Sensor write failed [ 651.193728][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 651.200212][ T3572] gspca_stk1135: Sensor read failed [ 651.205811][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 651.212390][ T3572] gspca_stk1135: Sensor read failed [ 651.217729][ T3572] gspca_stk1135: Detected sensor type unknown (0x0) [ 651.224852][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 651.231397][ T3572] gspca_stk1135: Sensor read failed [ 651.236910][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 651.243756][ T3572] gspca_stk1135: Sensor read failed [ 651.249149][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 651.255693][ T3572] gspca_stk1135: Sensor write failed [ 651.261172][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 651.267791][ T3572] gspca_stk1135: Sensor write failed [ 651.273682][ T3572] stk1135: probe of 3-1:25.0 failed with error -71 [ 651.283749][ T3564] gspca_stk1135: reg_w 0x2ff err -71 [ 651.290293][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 651.297685][ T3564] gspca_stk1135: Sensor write failed [ 651.303446][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 651.309946][ T3564] gspca_stk1135: Sensor write failed [ 651.315510][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 651.322098][ T3564] gspca_stk1135: Sensor read failed [ 651.327516][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 651.334193][ T3564] gspca_stk1135: Sensor read failed [ 651.339545][ T3564] gspca_stk1135: Detected sensor type unknown (0x0) [ 651.346495][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 651.353107][ T3564] gspca_stk1135: Sensor read failed [ 651.358529][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 651.365225][ T3564] gspca_stk1135: Sensor read failed [ 651.370627][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 651.377289][ T3564] gspca_stk1135: Sensor write failed [ 651.382845][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 651.389330][ T3564] gspca_stk1135: Sensor write failed [ 651.395255][ T3564] stk1135: probe of 6-1:25.0 failed with error -71 [ 651.412691][ T3572] usb 3-1: USB disconnect, device number 27 [ 651.435328][ T3564] usb 6-1: USB disconnect, device number 28 [ 651.602148][ T3557] gspca_stk1135: reg_w 0x300 err -71 [ 651.608779][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 651.615543][ T3557] gspca_stk1135: Sensor write failed [ 651.621025][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 651.628610][ T3557] gspca_stk1135: Sensor write failed [ 651.634298][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 651.640773][ T3557] gspca_stk1135: Sensor read failed [ 651.646232][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 651.652884][ T3557] gspca_stk1135: Sensor read failed [ 651.658266][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 651.665324][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 651.671917][ T3557] gspca_stk1135: Sensor read failed [ 651.677322][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 651.683951][ T3557] gspca_stk1135: Sensor read failed [ 651.689357][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 651.696069][ T3557] gspca_stk1135: Sensor write failed [ 651.701546][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 651.708190][ T3557] gspca_stk1135: Sensor write failed [ 651.713887][ T3557] stk1135: probe of 2-1:25.0 failed with error -71 [ 651.745639][ T3557] usb 2-1: USB disconnect, device number 26 07:19:52 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x2}) 07:19:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'wlan1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d7, &(0x7f0000000000)) 07:19:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'wlan1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454dd, 0x0) 07:19:52 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:52 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:19:52 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='freezer.self_freezing\x00', 0x0, 0x0) write$cgroup_devices(r1, 0x0, 0x8) 07:19:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) fchmodat(r0, &(0x7f0000000080)='./file0\x00', 0x0) 07:19:52 executing program 3: r0 = socket(0x2, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0x18, 0x2}, 0xc) [ 652.522313][ T3557] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 652.522959][ T3572] usb 3-1: new high-speed USB device number 28 using dummy_hcd 07:19:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440), 0x10, 0x0, 0x0) execve(0x0, 0x0, 0x0) [ 652.692435][ T3564] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 652.772683][ T3557] usb 6-1: Using ep0 maxpacket: 8 [ 652.792265][ T3572] usb 3-1: Using ep0 maxpacket: 8 07:19:52 executing program 3: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) chdir(&(0x7f0000000040)='./file0\x00') 07:19:52 executing program 4: select(0x40, &(0x7f0000000080)={0x2}, &(0x7f00000000c0)={0x7}, 0x0, 0x0) [ 652.952682][ T3564] usb 2-1: Using ep0 maxpacket: 8 [ 652.973282][ T3557] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 652.982859][ T3557] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 652.991107][ T3557] usb 6-1: Product: syz [ 653.023793][ T3572] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 653.033195][ T3572] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 653.041416][ T3572] usb 3-1: Product: syz [ 653.169661][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 653.190222][ T3572] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 653.198307][ T3564] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 653.207806][ T3564] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 653.216656][ T3564] usb 2-1: Product: syz [ 653.364443][ T3564] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 655.572196][ T3557] gspca_stk1135: reg_w 0x2ff err -71 [ 655.578731][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 655.586289][ T3557] gspca_stk1135: Sensor write failed [ 655.591918][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 655.598420][ T3557] gspca_stk1135: Sensor write failed [ 655.604130][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 655.610626][ T3557] gspca_stk1135: Sensor read failed [ 655.616202][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 655.622804][ T3557] gspca_stk1135: Sensor read failed [ 655.624195][ T3572] gspca_stk1135: reg_w 0x2ff err -71 [ 655.628070][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 655.634536][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 655.640475][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 655.646861][ T3572] gspca_stk1135: Sensor write failed [ 655.646951][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 655.653416][ T3557] gspca_stk1135: Sensor read failed [ 655.658793][ T3572] gspca_stk1135: Sensor write failed [ 655.665319][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 655.670383][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 655.675715][ T3557] gspca_stk1135: Sensor read failed [ 655.675807][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 655.682107][ T3572] gspca_stk1135: Sensor read failed [ 655.682192][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 655.688524][ T3557] gspca_stk1135: Sensor write failed [ 655.688609][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 655.693797][ T3572] gspca_stk1135: Sensor read failed [ 655.693829][ T3572] gspca_stk1135: Detected sensor type unknown (0x0) [ 655.693933][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 655.693976][ T3572] gspca_stk1135: Sensor read failed [ 655.694060][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 655.694104][ T3572] gspca_stk1135: Sensor read failed [ 655.694186][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 655.694231][ T3572] gspca_stk1135: Sensor write failed [ 655.694313][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 655.694356][ T3572] gspca_stk1135: Sensor write failed [ 655.694578][ T3572] stk1135: probe of 3-1:25.0 failed with error -71 [ 655.747088][ T3572] usb 3-1: USB disconnect, device number 28 [ 655.748750][ T3557] gspca_stk1135: Sensor write failed [ 655.748979][ T3557] stk1135: probe of 6-1:25.0 failed with error -71 [ 655.840246][ T3557] usb 6-1: USB disconnect, device number 29 [ 656.052400][ T3564] gspca_stk1135: reg_w 0x300 err -71 [ 656.058958][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 656.065716][ T3564] gspca_stk1135: Sensor write failed [ 656.071207][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 656.078785][ T3564] gspca_stk1135: Sensor write failed [ 656.084420][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 656.090886][ T3564] gspca_stk1135: Sensor read failed [ 656.096482][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 656.103040][ T3564] gspca_stk1135: Sensor read failed [ 656.108391][ T3564] gspca_stk1135: Detected sensor type unknown (0x0) [ 656.115407][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 656.121983][ T3564] gspca_stk1135: Sensor read failed [ 656.127455][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 656.134050][ T3564] gspca_stk1135: Sensor read failed [ 656.139452][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 656.146082][ T3564] gspca_stk1135: Sensor write failed [ 656.151585][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 656.158231][ T3564] gspca_stk1135: Sensor write failed [ 656.163991][ T3564] stk1135: probe of 2-1:25.0 failed with error -71 [ 656.223581][ T3564] usb 2-1: USB disconnect, device number 27 07:19:56 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:56 executing program 3: getegid() getegid() setregid(0x0, 0x0) semget$private(0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 07:19:56 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = geteuid() lchown(&(0x7f0000000100)='.\x00', r0, 0x0) 07:19:56 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:19:56 executing program 0: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) preadv(r0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0) 07:19:56 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:19:56 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$sock_cred(r1, 0xffff, 0x1022, 0x0, 0x0) 07:19:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) 07:19:56 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fcntl$setown(r0, 0x6, 0xffffffffffffffff) [ 656.906057][ T3564] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 656.954969][ T9920] usb 6-1: new high-speed USB device number 30 using dummy_hcd 07:19:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)=@un=@abs, 0x8, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000440), 0x10, 0x0, 0x0) [ 657.153382][ T3557] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 657.182734][ T3564] usb 3-1: Using ep0 maxpacket: 8 07:19:57 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000a00), &(0x7f0000000a40)=0x10) [ 657.212560][ T9920] usb 6-1: Using ep0 maxpacket: 8 07:19:57 executing program 3: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) [ 657.393684][ T3557] usb 2-1: Using ep0 maxpacket: 8 [ 657.412557][ T3564] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 657.414757][ T9920] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 657.421858][ T3564] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 657.421974][ T3564] usb 3-1: Product: syz [ 657.444121][ T9920] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 657.452520][ T9920] usb 6-1: Product: syz [ 657.530099][ T3564] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 657.614104][ T3557] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 657.623799][ T3557] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 657.632645][ T3557] usb 2-1: Product: syz [ 657.646105][ T9920] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 657.726552][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 659.942483][ T3564] gspca_stk1135: reg_w 0x2ff err -71 [ 659.949118][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 659.955854][ T3564] gspca_stk1135: Sensor write failed [ 659.961375][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 659.968597][ T3564] gspca_stk1135: Sensor write failed [ 659.974238][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 659.980740][ T3564] gspca_stk1135: Sensor read failed [ 659.986305][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 659.992904][ T3564] gspca_stk1135: Sensor read failed [ 659.998216][ T3564] gspca_stk1135: Detected sensor type unknown (0x0) [ 660.005130][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 660.011601][ T3564] gspca_stk1135: Sensor read failed [ 660.017273][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 660.023830][ T3564] gspca_stk1135: Sensor read failed [ 660.029216][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 660.035855][ T3564] gspca_stk1135: Sensor write failed [ 660.041341][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 660.048026][ T3564] gspca_stk1135: Sensor write failed [ 660.053203][ T9920] gspca_stk1135: reg_w 0x2ff err -71 [ 660.053711][ T3564] stk1135: probe of 3-1:25.0 failed with error -71 [ 660.059758][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 660.072365][ T9920] gspca_stk1135: Sensor write failed [ 660.077855][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 660.084517][ T9920] gspca_stk1135: Sensor write failed [ 660.089998][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 660.097232][ T9920] gspca_stk1135: Sensor read failed [ 660.099150][ T3564] usb 3-1: USB disconnect, device number 29 [ 660.102779][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 660.102828][ T9920] gspca_stk1135: Sensor read failed [ 660.102861][ T9920] gspca_stk1135: Detected sensor type unknown (0x0) [ 660.102966][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 660.103012][ T9920] gspca_stk1135: Sensor read failed [ 660.103097][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 660.103141][ T9920] gspca_stk1135: Sensor read failed [ 660.103224][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 660.103268][ T9920] gspca_stk1135: Sensor write failed [ 660.164312][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 660.170804][ T9920] gspca_stk1135: Sensor write failed [ 660.176690][ T9920] stk1135: probe of 6-1:25.0 failed with error -71 [ 660.196862][ T9920] usb 6-1: USB disconnect, device number 30 [ 660.432164][ T3557] gspca_stk1135: reg_w 0x300 err -71 [ 660.438871][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 660.445840][ T3557] gspca_stk1135: Sensor write failed [ 660.451348][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 660.457974][ T3557] gspca_stk1135: Sensor write failed [ 660.463570][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 660.470053][ T3557] gspca_stk1135: Sensor read failed [ 660.475872][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 660.482508][ T3557] gspca_stk1135: Sensor read failed [ 660.487859][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 660.494882][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 660.501375][ T3557] gspca_stk1135: Sensor read failed [ 660.507174][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 660.513794][ T3557] gspca_stk1135: Sensor read failed [ 660.519200][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 660.525879][ T3557] gspca_stk1135: Sensor write failed [ 660.531376][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 660.538299][ T3557] gspca_stk1135: Sensor write failed [ 660.544084][ T3557] stk1135: probe of 2-1:25.0 failed with error -71 [ 660.577096][ T3557] usb 2-1: USB disconnect, device number 28 07:20:01 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:20:01 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) select(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000200)={0x7f}, 0x0) 07:20:01 executing program 4: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) rename(&(0x7f0000000200)='./file0\x00', 0x0) 07:20:01 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 07:20:01 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:20:01 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:20:01 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00') 07:20:01 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) symlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./file1\x00') chdir(&(0x7f00000000c0)='./file1\x00') 07:20:01 executing program 0: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file1\x00') [ 661.322157][ T3557] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 661.342939][ T3564] usb 6-1: new high-speed USB device number 31 using dummy_hcd 07:20:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f00000004c0), &(0x7f0000000500)=0x10) 07:20:01 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) select(0x40, &(0x7f0000000180)={0xffff}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000080)={0x315b}, 0x0, 0x0, 0x0) [ 661.553517][ T9920] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 661.582232][ T3557] usb 3-1: Using ep0 maxpacket: 8 [ 661.593938][ T3564] usb 6-1: Using ep0 maxpacket: 8 07:20:01 executing program 0: r0 = socket(0x11, 0x4003, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18, 0x2}, 0xc) [ 661.783620][ T3557] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 661.793144][ T3557] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 661.801355][ T3557] usb 3-1: Product: syz [ 661.803045][ T3564] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 661.811291][ T9920] usb 2-1: Using ep0 maxpacket: 8 [ 661.815217][ T3564] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 661.815338][ T3564] usb 6-1: Product: syz [ 661.925119][ T3564] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 661.952314][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 662.062787][ T9920] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 662.072577][ T9920] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 662.080808][ T9920] usb 2-1: Product: syz [ 662.190386][ T9920] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 664.328225][ T3564] gspca_stk1135: reg_w 0x2ff err -71 [ 664.333144][ T3557] gspca_stk1135: reg_w 0x2ff err -71 [ 664.334820][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 664.340047][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 664.345551][ T3564] gspca_stk1135: Sensor write failed [ 664.345640][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 664.345687][ T3564] gspca_stk1135: Sensor write failed [ 664.345769][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 664.345812][ T3564] gspca_stk1135: Sensor read failed [ 664.345897][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 664.345941][ T3564] gspca_stk1135: Sensor read failed [ 664.345974][ T3564] gspca_stk1135: Detected sensor type unknown (0x0) [ 664.346084][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 664.352598][ T3557] gspca_stk1135: Sensor write failed [ 664.357819][ T3564] gspca_stk1135: Sensor read failed [ 664.357906][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 664.357951][ T3564] gspca_stk1135: Sensor read failed [ 664.364389][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 664.364441][ T3557] gspca_stk1135: Sensor write failed [ 664.364540][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 664.364590][ T3557] gspca_stk1135: Sensor read failed [ 664.364671][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 664.364712][ T3557] gspca_stk1135: Sensor read failed [ 664.364743][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 664.364852][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 664.364897][ T3557] gspca_stk1135: Sensor read failed [ 664.364979][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 664.370312][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 664.377099][ T3557] gspca_stk1135: Sensor read failed [ 664.382027][ T3564] gspca_stk1135: Sensor write failed [ 664.382118][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 664.388452][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 664.393759][ T3564] gspca_stk1135: Sensor write failed [ 664.393985][ T3564] stk1135: probe of 6-1:25.0 failed with error -71 [ 664.400394][ T3557] gspca_stk1135: Sensor write failed [ 664.400480][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 664.478892][ T3564] usb 6-1: USB disconnect, device number 31 [ 664.479296][ T3557] gspca_stk1135: Sensor write failed [ 664.479518][ T3557] stk1135: probe of 3-1:25.0 failed with error -71 [ 664.491470][ T8970] udevd[8970]: setting owner of /dev/bus/usb/006/031 to uid=0, gid=0 failed: No such file or directory [ 664.550687][ T3557] usb 3-1: USB disconnect, device number 30 [ 664.964923][ T9920] gspca_stk1135: reg_w 0x300 err -71 [ 664.971495][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 664.978477][ T9920] gspca_stk1135: Sensor write failed [ 664.984139][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 664.990632][ T9920] gspca_stk1135: Sensor write failed [ 664.996235][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 665.002824][ T9920] gspca_stk1135: Sensor read failed [ 665.008223][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 665.014831][ T9920] gspca_stk1135: Sensor read failed [ 665.020172][ T9920] gspca_stk1135: Detected sensor type unknown (0x0) [ 665.027146][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 665.033826][ T9920] gspca_stk1135: Sensor read failed [ 665.039296][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 665.045892][ T9920] gspca_stk1135: Sensor read failed [ 665.051287][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 665.057977][ T9920] gspca_stk1135: Sensor write failed [ 665.063587][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 665.070092][ T9920] gspca_stk1135: Sensor write failed [ 665.075841][ T9920] stk1135: probe of 2-1:25.0 failed with error -71 [ 665.159618][ T9920] usb 2-1: USB disconnect, device number 29 07:20:05 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:20:05 executing program 4: r0 = socket(0x11, 0x4003, 0x0) bind(r0, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x1}, 0x8) 07:20:05 executing program 3: syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 07:20:05 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind(r1, &(0x7f0000000100)=@in6={0x18, 0x2}, 0xc) 07:20:05 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:20:05 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:20:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="346cd317e4eeec46b55ee91311e4f5d41a5b663646eb2051ad78271f23dcd766f8751301d34c520c999746b0165d11ed7a68d3086b54eb037d73e01431ca30f47da62af995177aab2ea032f8083e72f3c962372c2ee746b909dae4358d3bd2b21021ad42cdbd5c71232d01258137ec0cc2d128dc360c156a41e3d2a18ae7960b1dba3a458ecbb40b5583f108a2be07e9c1d028bbeb36f06f17bb84ed8af9ad059142a859d2525e0c81198c0edd8a925d83f3d7898ed56cd37a1a7ab95c33e8e89025978f787648b933357a89b45a93064e52f593c5176b04f91c25def2622f325768866d15431c1f778999", 0xeb}, {&(0x7f0000000580)="5d17198d1895967200aec23d78685c5694e625ed21d4427f257c5348ac9883768c0a37028b7c366a643d1ca24b8cce78510e369f25669db982e4849ec6e6205926630301af4981f938aad49248b73cdc7659e88371338d6b629f3ab5fc8f8e731c11c53f049b1775c461784000031eb32c7ed81fa29f21804b17c9dd37b1cfe3863364370579", 0x86}], 0x2}, 0x0) 07:20:05 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) readlink(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 07:20:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0xffff, 0x0, 0x0, 0x0) [ 665.878173][ T9920] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 665.912637][ T3557] usb 6-1: new high-speed USB device number 32 using dummy_hcd 07:20:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="33c6dce138799cd4c246e440ebdccd999491ce75b800ec4c915ae64199323ee2065ee4ce92329adc85fb0375ebaa7a27732a48aca1666cca6bf43bd755434591f8ff8d06164524b150c524f309d5ed1fac92bacdd5d991c8139cdc51a277ae7a5e6e52698f7506f24d852ac69701e44f89cb299654cc63596db22bf6efcd4fb8e8b5f54de567a413f33afd6b2c43bf830b0f9dc7fa83cda04b1e01168e7b383823df6445bdfa1d3a45a3597b2be61b3487538a3a90ddf86c4edd462ed631b86d1d33b9d4970780f0e28d680ea0783062794ea4bc1bf2009d4fb73967013ac9163dd059378600", 0xe6}, {&(0x7f0000000180)="2fea90145dccde811a50cae2ee0ef8722b4caf3fb59c573e916687f79ff605d5e508aea1b7a9a26e1de808bbbcd257cbbb7882c4a8da588c7d240296128b0b497efa3b19100e9ca6a89e0ec848b2ad583b74febe29a2f984", 0x58}, {&(0x7f0000000280)="4c2abf1ca2f4662087185d4e021935b6ebd70dd301a1b3919a87992e9568dc430e8cc568b3025399c4c9234db1e073e99905", 0x32}, {0x0}, {&(0x7f0000000380)="dc", 0x1}], 0x5}, 0x0) [ 666.062824][ T3564] usb 2-1: new high-speed USB device number 30 using dummy_hcd 07:20:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_cred(r0, 0xffff, 0x1022, 0xffffffffffffffff, 0x0) [ 666.122671][ T9920] usb 3-1: Using ep0 maxpacket: 8 [ 666.152357][ T3557] usb 6-1: Using ep0 maxpacket: 8 07:20:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, 0x0, 0x17) [ 666.322893][ T3564] usb 2-1: Using ep0 maxpacket: 8 [ 666.322938][ T9920] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 666.338276][ T9920] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 666.346751][ T9920] usb 3-1: Product: syz [ 666.352949][ T3557] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 666.362481][ T3557] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 666.370717][ T3557] usb 6-1: Product: syz [ 666.479688][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 666.502246][ T9920] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 666.579746][ T3564] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 666.589162][ T3564] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 666.597658][ T3564] usb 2-1: Product: syz [ 666.693826][ T3564] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 668.882191][ T3557] gspca_stk1135: reg_w 0x2ff err -71 [ 668.888795][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 668.895743][ T3557] gspca_stk1135: Sensor write failed [ 668.901250][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 668.908153][ T3557] gspca_stk1135: Sensor write failed [ 668.913799][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 668.920280][ T3557] gspca_stk1135: Sensor read failed [ 668.925854][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 668.932537][ T3557] gspca_stk1135: Sensor read failed [ 668.937893][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 668.945147][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 668.951643][ T3557] gspca_stk1135: Sensor read failed [ 668.957270][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 668.963903][ T3557] gspca_stk1135: Sensor read failed [ 668.969353][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 668.977606][ T3557] gspca_stk1135: Sensor write failed [ 668.983252][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 668.989751][ T3557] gspca_stk1135: Sensor write failed [ 668.995566][ T3557] stk1135: probe of 6-1:25.0 failed with error -71 [ 669.005936][ T9920] gspca_stk1135: reg_w 0x2ff err -71 [ 669.012464][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 669.018977][ T9920] gspca_stk1135: Sensor write failed [ 669.024612][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 669.031128][ T9920] gspca_stk1135: Sensor write failed [ 669.036836][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 669.043423][ T9920] gspca_stk1135: Sensor read failed [ 669.048819][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 669.055498][ T9920] gspca_stk1135: Sensor read failed [ 669.060846][ T9920] gspca_stk1135: Detected sensor type unknown (0x0) [ 669.067779][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 669.074479][ T9920] gspca_stk1135: Sensor read failed [ 669.079877][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 669.086535][ T9920] gspca_stk1135: Sensor read failed [ 669.092344][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 669.098851][ T9920] gspca_stk1135: Sensor write failed [ 669.104524][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 669.111011][ T9920] gspca_stk1135: Sensor write failed [ 669.116766][ T9920] stk1135: probe of 3-1:25.0 failed with error -71 [ 669.139412][ T3557] usb 6-1: USB disconnect, device number 32 [ 669.180630][ T9920] usb 3-1: USB disconnect, device number 31 [ 669.282313][ T3564] gspca_stk1135: reg_w 0x300 err -71 [ 669.288935][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 669.295702][ T3564] gspca_stk1135: Sensor write failed [ 669.301205][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 669.308549][ T3564] gspca_stk1135: Sensor write failed [ 669.314118][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 669.320669][ T3564] gspca_stk1135: Sensor read failed [ 669.326260][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 669.332846][ T3564] gspca_stk1135: Sensor read failed [ 669.338186][ T3564] gspca_stk1135: Detected sensor type unknown (0x0) [ 669.345133][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 669.351634][ T3564] gspca_stk1135: Sensor read failed [ 669.357140][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 669.363695][ T3564] gspca_stk1135: Sensor read failed [ 669.369096][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 669.375736][ T3564] gspca_stk1135: Sensor write failed [ 669.381324][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 669.387916][ T3564] gspca_stk1135: Sensor write failed [ 669.393612][ T3564] stk1135: probe of 2-1:25.0 failed with error -71 [ 669.454052][ T3564] usb 2-1: USB disconnect, device number 30 07:20:09 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:20:09 executing program 0: select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x7}, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0x4}, 0x0, 0x0, 0x0) 07:20:09 executing program 4: select(0x40, &(0x7f0000000100), &(0x7f0000000140), 0xfffffffffffffffe, 0x0) 07:20:09 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) link(&(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='./file0\x00') 07:20:09 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:20:09 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:20:10 executing program 3: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @remote, @val, {@ipv6}}, 0x0) 07:20:10 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$snddsp(r0, &(0x7f00000007c0)="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", 0x1000) 07:20:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001280), 0x10, 0x0) [ 670.162110][ T3572] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 670.172382][ T9920] usb 6-1: new high-speed USB device number 33 using dummy_hcd 07:20:10 executing program 0: r0 = socket$inet6(0x18, 0x2, 0x0) r1 = dup(r0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x18, 0x2}, 0xc) 07:20:10 executing program 3: r0 = socket$inet6(0x18, 0x2, 0x0) read(r0, 0x0, 0x0) 07:20:10 executing program 4: socket(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000400), &(0x7f0000000440)={0x8}, 0x0, 0x0) [ 670.417099][ T9920] usb 6-1: Using ep0 maxpacket: 8 [ 670.432555][ T3557] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 670.433778][ T3572] usb 3-1: Using ep0 maxpacket: 8 [ 670.623081][ T9920] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 670.632732][ T9920] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 670.640944][ T9920] usb 6-1: Product: syz [ 670.672994][ T3572] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 670.683131][ T3572] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 670.691350][ T3572] usb 3-1: Product: syz [ 670.697523][ T3557] usb 2-1: Using ep0 maxpacket: 8 [ 670.789951][ T9920] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 670.833641][ T3572] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 670.913333][ T3557] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 670.922850][ T3557] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 670.931078][ T3557] usb 2-1: Product: syz [ 671.016786][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 673.192284][ T3572] gspca_stk1135: reg_w 0x2ff err -71 [ 673.192374][ T9920] gspca_stk1135: reg_w 0x2ff err -71 [ 673.198767][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 673.204416][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 673.209584][ T3572] gspca_stk1135: Sensor write failed [ 673.209674][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 673.216092][ T9920] gspca_stk1135: Sensor write failed [ 673.216189][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 673.221414][ T3572] gspca_stk1135: Sensor write failed [ 673.221508][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 673.227923][ T9920] gspca_stk1135: Sensor write failed [ 673.233373][ T3572] gspca_stk1135: Sensor read failed [ 673.233453][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 673.233500][ T3572] gspca_stk1135: Sensor read failed [ 673.233531][ T3572] gspca_stk1135: Detected sensor type unknown (0x0) [ 673.233634][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 673.239997][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 673.245342][ T3572] gspca_stk1135: Sensor read failed [ 673.245425][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 673.251827][ T9920] gspca_stk1135: Sensor read failed [ 673.251913][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 673.257135][ T3572] gspca_stk1135: Sensor read failed [ 673.257223][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 673.262571][ T9920] gspca_stk1135: Sensor read failed [ 673.268816][ T3572] gspca_stk1135: Sensor write failed [ 673.268909][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 673.268956][ T3572] gspca_stk1135: Sensor write failed [ 673.274248][ T9920] gspca_stk1135: Detected sensor type unknown (0x0) [ 673.281018][ T3572] stk1135: probe of 3-1:25.0 failed with error -71 [ 673.287414][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 673.333585][ T3572] usb 3-1: USB disconnect, device number 32 [ 673.335331][ T9920] gspca_stk1135: Sensor read failed [ 673.335416][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 673.391847][ T9920] gspca_stk1135: Sensor read failed [ 673.397251][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 673.403982][ T9920] gspca_stk1135: Sensor write failed [ 673.409479][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 673.416409][ T9920] gspca_stk1135: Sensor write failed [ 673.422220][ T9920] stk1135: probe of 6-1:25.0 failed with error -71 [ 673.467758][ T9920] usb 6-1: USB disconnect, device number 33 [ 673.662371][ T3557] gspca_stk1135: reg_w 0x300 err -71 [ 673.668967][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 673.675811][ T3557] gspca_stk1135: Sensor write failed [ 673.681309][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 673.688411][ T3557] gspca_stk1135: Sensor write failed [ 673.694061][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 673.700548][ T3557] gspca_stk1135: Sensor read failed [ 673.706261][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 673.712886][ T3557] gspca_stk1135: Sensor read failed [ 673.718206][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 673.725174][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 673.731982][ T3557] gspca_stk1135: Sensor read failed [ 673.737477][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 673.744147][ T3557] gspca_stk1135: Sensor read failed [ 673.749627][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 673.756385][ T3557] gspca_stk1135: Sensor write failed [ 673.762051][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 673.768532][ T3557] gspca_stk1135: Sensor write failed [ 673.774385][ T3557] stk1135: probe of 2-1:25.0 failed with error -71 [ 673.804805][ T3557] usb 2-1: USB disconnect, device number 31 07:20:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="18"], 0x58}, 0x0) recvmmsg(r0, &(0x7f0000000440), 0x10, 0x0, 0x0) 07:20:14 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) r0 = geteuid() chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) 07:20:14 executing program 4: symlink(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file0\x00') linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 07:20:14 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:20:14 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:20:14 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:20:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) select(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x81}, 0x0, 0x0) 07:20:14 executing program 4: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 674.552507][ T3564] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 674.560583][ T3572] usb 3-1: new high-speed USB device number 33 using dummy_hcd 07:20:14 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x140) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00') 07:20:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000000)="11", 0x1, 0x0, 0x0, 0x0) 07:20:14 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x7}) [ 674.812683][ T3564] usb 6-1: Using ep0 maxpacket: 8 [ 674.818226][ T9922] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 674.826547][ T3572] usb 3-1: Using ep0 maxpacket: 8 07:20:15 executing program 4: r0 = socket(0x11, 0x4003, 0x0) connect$unix(r0, &(0x7f0000000080)=ANY=[], 0xa) connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x1}, 0x8) [ 675.064166][ T3572] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 675.073664][ T3572] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 675.082021][ T3572] usb 3-1: Product: syz [ 675.088564][ T3564] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 675.098114][ T3564] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 675.106545][ T3564] usb 6-1: Product: syz [ 675.122426][ T9922] usb 2-1: Using ep0 maxpacket: 8 [ 675.170904][ T3572] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 675.185809][ T3564] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 675.343852][ T9922] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 675.353427][ T9922] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 675.361651][ T9922] usb 2-1: Product: syz [ 675.459851][ T9922] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 677.555435][ T3572] gspca_stk1135: reg_w 0x2ff err -71 [ 677.561988][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 677.568503][ T3572] gspca_stk1135: Sensor write failed [ 677.574189][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 677.580676][ T3572] gspca_stk1135: Sensor write failed [ 677.586227][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 677.592839][ T3572] gspca_stk1135: Sensor read failed [ 677.598232][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 677.604869][ T3572] gspca_stk1135: Sensor read failed [ 677.610277][ T3572] gspca_stk1135: Detected sensor type unknown (0x0) [ 677.617601][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 677.624237][ T3572] gspca_stk1135: Sensor read failed [ 677.629596][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 677.636161][ T3572] gspca_stk1135: Sensor read failed [ 677.641530][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 677.648129][ T3572] gspca_stk1135: Sensor write failed [ 677.653925][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 677.660414][ T3572] gspca_stk1135: Sensor write failed [ 677.666227][ T3572] stk1135: probe of 3-1:25.0 failed with error -71 [ 677.676308][ T3564] gspca_stk1135: reg_w 0x2ff err -71 [ 677.683043][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 677.689541][ T3564] gspca_stk1135: Sensor write failed [ 677.695726][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 677.702311][ T3564] gspca_stk1135: Sensor write failed [ 677.707788][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 677.714389][ T3564] gspca_stk1135: Sensor read failed [ 677.719786][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 677.726336][ T3564] gspca_stk1135: Sensor read failed [ 677.731754][ T3564] gspca_stk1135: Detected sensor type unknown (0x0) [ 677.738559][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 677.745273][ T3564] gspca_stk1135: Sensor read failed [ 677.750732][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 677.757400][ T3564] gspca_stk1135: Sensor read failed [ 677.762899][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 677.769392][ T3564] gspca_stk1135: Sensor write failed [ 677.775115][ T3564] gspca_stk1135: serial bus timeout: status=0x00 [ 677.781604][ T3564] gspca_stk1135: Sensor write failed [ 677.787299][ T3564] stk1135: probe of 6-1:25.0 failed with error -71 [ 677.810401][ T3572] usb 3-1: USB disconnect, device number 33 [ 677.834916][ T3564] usb 6-1: USB disconnect, device number 34 [ 678.062786][ T9922] gspca_stk1135: reg_w 0x300 err -71 [ 678.069344][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 678.076443][ T9922] gspca_stk1135: Sensor write failed [ 678.082342][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 678.088849][ T9922] gspca_stk1135: Sensor write failed [ 678.094547][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 678.101079][ T9922] gspca_stk1135: Sensor read failed [ 678.106900][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 678.113517][ T9922] gspca_stk1135: Sensor read failed [ 678.118866][ T9922] gspca_stk1135: Detected sensor type unknown (0x0) [ 678.125806][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 678.132405][ T9922] gspca_stk1135: Sensor read failed [ 678.137807][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 678.144368][ T9922] gspca_stk1135: Sensor read failed [ 678.149761][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 678.156371][ T9922] gspca_stk1135: Sensor write failed [ 678.162145][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 678.168633][ T9922] gspca_stk1135: Sensor write failed [ 678.174367][ T9922] stk1135: probe of 2-1:25.0 failed with error -71 [ 678.314610][ T9922] usb 2-1: USB disconnect, device number 32 07:20:18 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:20:18 executing program 0: r0 = socket(0x11, 0x4003, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x18, 0x1}, 0xfffffffffffffef0) 07:20:18 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x505d}, 0x0) 07:20:18 executing program 4: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000580)=0xc) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) lchown(&(0x7f0000000240)='./file0\x00', r2, r3) 07:20:18 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:20:18 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:20:18 executing program 0: r0 = socket(0x11, 0x4003, 0x0) getpeername$unix(r0, &(0x7f0000000000), &(0x7f0000001000)=0xffc) 07:20:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8901, &(0x7f0000000440)={'macvtap0\x00', {0x2, 0x0, @broadcast}}) 07:20:18 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000300)=@netrom={'nr', 0x0}, 0x10) [ 678.912460][ T3557] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 679.012034][ T9922] usb 6-1: new high-speed USB device number 35 using dummy_hcd 07:20:19 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000000)=""/74, &(0x7f0000000140)=0x4a) 07:20:19 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x8907, 0x0) [ 679.162395][ T3557] usb 3-1: Using ep0 maxpacket: 8 [ 679.167944][ T9920] usb 2-1: new high-speed USB device number 33 using dummy_hcd 07:20:19 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0x10, r0, 0x0, 0x0, 0x0) [ 679.278058][ T9922] usb 6-1: Using ep0 maxpacket: 8 [ 679.363054][ T3557] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 679.373008][ T3557] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 679.381235][ T3557] usb 3-1: Product: syz [ 679.432246][ T9920] usb 2-1: Using ep0 maxpacket: 8 [ 679.502887][ T9922] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 679.512829][ T9922] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 679.521043][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 679.521055][ T9922] usb 6-1: Product: syz [ 679.633209][ T9920] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 679.643425][ T9920] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 679.649831][ T9922] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 679.651573][ T9920] usb 2-1: Product: syz [ 679.792863][ T9920] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 681.922391][ T3557] gspca_stk1135: reg_w 0x2ff err -71 [ 681.929028][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 681.935935][ T3557] gspca_stk1135: Sensor write failed [ 681.941427][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 681.948483][ T3557] gspca_stk1135: Sensor write failed [ 681.954117][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 681.960583][ T3557] gspca_stk1135: Sensor read failed [ 681.966412][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 681.973305][ T3557] gspca_stk1135: Sensor read failed [ 681.978636][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 681.985633][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 681.992365][ T3557] gspca_stk1135: Sensor read failed [ 681.997755][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 682.004788][ T3557] gspca_stk1135: Sensor read failed [ 682.010184][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 682.016981][ T3557] gspca_stk1135: Sensor write failed [ 682.022811][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 682.028116][ T9922] gspca_stk1135: reg_w 0x2ff err -71 [ 682.029213][ T3557] gspca_stk1135: Sensor write failed [ 682.029432][ T3557] stk1135: probe of 3-1:25.0 failed with error -71 [ 682.035841][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 682.054428][ T9922] gspca_stk1135: Sensor write failed [ 682.058210][ T3557] usb 3-1: USB disconnect, device number 34 [ 682.059831][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 682.059882][ T9922] gspca_stk1135: Sensor write failed [ 682.077942][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 682.084568][ T9922] gspca_stk1135: Sensor read failed [ 682.089970][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 682.096540][ T9922] gspca_stk1135: Sensor read failed [ 682.101953][ T9922] gspca_stk1135: Detected sensor type unknown (0x0) [ 682.108854][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 682.115419][ T9922] gspca_stk1135: Sensor read failed [ 682.120911][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 682.127502][ T9922] gspca_stk1135: Sensor read failed [ 682.132984][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 682.139480][ T9922] gspca_stk1135: Sensor write failed [ 682.145113][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 682.151607][ T9922] gspca_stk1135: Sensor write failed [ 682.157323][ T9922] stk1135: probe of 6-1:25.0 failed with error -71 [ 682.199577][ T9922] usb 6-1: USB disconnect, device number 35 [ 682.422313][ T9920] gspca_stk1135: reg_w 0x300 err -71 [ 682.428897][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 682.435696][ T9920] gspca_stk1135: Sensor write failed [ 682.441170][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 682.447791][ T9920] gspca_stk1135: Sensor write failed [ 682.453401][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 682.459883][ T9920] gspca_stk1135: Sensor read failed [ 682.465528][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 682.472138][ T9920] gspca_stk1135: Sensor read failed [ 682.477457][ T9920] gspca_stk1135: Detected sensor type unknown (0x0) [ 682.484455][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 682.490948][ T9920] gspca_stk1135: Sensor read failed [ 682.496539][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 682.503146][ T9920] gspca_stk1135: Sensor read failed [ 682.508536][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 682.515209][ T9920] gspca_stk1135: Sensor write failed [ 682.520708][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 682.527594][ T9920] gspca_stk1135: Sensor write failed [ 682.533317][ T9920] stk1135: probe of 2-1:25.0 failed with error -71 [ 682.553974][ T9920] usb 2-1: USB disconnect, device number 33 07:20:23 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:20:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth0_to_team\x00', &(0x7f0000000140)=@ethtool_cmd={0x1d}}) 07:20:23 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f0000000100)) 07:20:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r1, 0x38911e81154a11a3, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 07:20:23 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:20:23 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:20:23 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x5421, &(0x7f00000003c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, 0x0, 0x0, [@null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 07:20:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x7, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x98, 0x2e0, 0x2e0, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'syzkaller0\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'veth0_macvtap\x00', 'macvtap0\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "b0e8cd4ff374c19d78d60338b79602b7bf5eece4f973fba29ab7b93ff6c0"}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'xfrm0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 07:20:23 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(r0, 0x0, 0x30, 0x0, &(0x7f0000000000)) [ 683.303342][ T9920] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 683.323750][ T3557] usb 3-1: new high-speed USB device number 35 using dummy_hcd 07:20:23 executing program 4: sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xe2be275a8fe38002) 07:20:23 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 07:20:23 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0x0, r1) [ 683.572857][ T3557] usb 3-1: Using ep0 maxpacket: 8 [ 683.578412][ T9920] usb 6-1: Using ep0 maxpacket: 8 [ 683.603075][ T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 683.773147][ T3557] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 683.782782][ T3557] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 683.791002][ T3557] usb 3-1: Product: syz [ 683.799984][ T9920] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 683.810392][ T9920] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 683.818823][ T9920] usb 6-1: Product: syz [ 683.880128][ T3557] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 683.899123][ T9920] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 683.906772][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 684.112732][ T25] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 684.122890][ T25] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 684.131103][ T25] usb 2-1: Product: syz [ 684.209690][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 686.285177][ T9920] gspca_stk1135: reg_w 0x2ff err -71 [ 686.292007][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 686.298519][ T9920] gspca_stk1135: Sensor write failed [ 686.304442][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 686.310901][ T9920] gspca_stk1135: Sensor write failed [ 686.316546][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 686.323198][ T9920] gspca_stk1135: Sensor read failed [ 686.328595][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 686.335270][ T9920] gspca_stk1135: Sensor read failed [ 686.340614][ T9920] gspca_stk1135: Detected sensor type unknown (0x0) [ 686.347576][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 686.354289][ T9920] gspca_stk1135: Sensor read failed [ 686.359667][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 686.366305][ T9920] gspca_stk1135: Sensor read failed [ 686.371913][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 686.378517][ T9920] gspca_stk1135: Sensor write failed [ 686.384196][ T9920] gspca_stk1135: serial bus timeout: status=0x00 [ 686.390689][ T9920] gspca_stk1135: Sensor write failed [ 686.396724][ T9920] stk1135: probe of 6-1:25.0 failed with error -71 [ 686.407037][ T3557] gspca_stk1135: reg_w 0x2ff err -71 [ 686.413860][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 686.420362][ T3557] gspca_stk1135: Sensor write failed [ 686.427016][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 686.433604][ T3557] gspca_stk1135: Sensor write failed [ 686.439084][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 686.445695][ T3557] gspca_stk1135: Sensor read failed [ 686.451103][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 686.457695][ T3557] gspca_stk1135: Sensor read failed [ 686.463136][ T3557] gspca_stk1135: Detected sensor type unknown (0x0) [ 686.469927][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 686.476511][ T3557] gspca_stk1135: Sensor read failed [ 686.481998][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 686.488475][ T3557] gspca_stk1135: Sensor read failed [ 686.493967][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 686.500452][ T3557] gspca_stk1135: Sensor write failed [ 686.506076][ T3557] gspca_stk1135: serial bus timeout: status=0x00 [ 686.512671][ T3557] gspca_stk1135: Sensor write failed [ 686.518283][ T3557] stk1135: probe of 3-1:25.0 failed with error -71 [ 686.567804][ T9920] usb 6-1: USB disconnect, device number 36 [ 686.587381][ T3557] usb 3-1: USB disconnect, device number 35 [ 686.822849][ T25] gspca_stk1135: reg_w 0x300 err -71 [ 686.829406][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 686.836107][ T25] gspca_stk1135: Sensor write failed [ 686.841835][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 686.848330][ T25] gspca_stk1135: Sensor write failed [ 686.853989][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 686.860483][ T25] gspca_stk1135: Sensor read failed [ 686.866085][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 686.872909][ T25] gspca_stk1135: Sensor read failed [ 686.878247][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 686.885890][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 686.898787][ T25] gspca_stk1135: Sensor read failed [ 686.904299][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 686.910786][ T25] gspca_stk1135: Sensor read failed [ 686.916317][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 686.922893][ T25] gspca_stk1135: Sensor write failed [ 686.928364][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 686.935001][ T25] gspca_stk1135: Sensor write failed [ 686.940639][ T25] stk1135: probe of 2-1:25.0 failed with error -71 [ 686.958922][ T25] usb 2-1: USB disconnect, device number 34 07:20:27 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:20:27 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 07:20:27 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(r0, 0x0, 0x21, 0x0, &(0x7f0000000000)) 07:20:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) 07:20:27 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:20:27 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:20:27 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x0, 0xe00b, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}}, 0x0) pipe(0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket(0x2b, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x8c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x1000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 07:20:27 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x11}]}}, &(0x7f0000000740)=""/218, 0x32, 0xda, 0x1}, 0x20) 07:20:27 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000740)=""/218, 0x1a, 0xda, 0x1}, 0x20) [ 687.692187][ T9922] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 687.722320][ T3572] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 687.846139][T10664] device gre0 entered promiscuous mode [ 687.852646][T10664] device vlan2 entered promiscuous mode [ 687.902342][T10664] device gre0 left promiscuous mode 07:20:28 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x4, 0xbf4}]}]}}, &(0x7f0000000200)=""/190, 0x32, 0xbe, 0x1}, 0x20) [ 687.974651][ T9922] usb 3-1: Using ep0 maxpacket: 8 [ 687.983069][ T3572] usb 6-1: Using ep0 maxpacket: 8 [ 687.992661][ T25] usb 2-1: new high-speed USB device number 35 using dummy_hcd 07:20:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0189436, &(0x7f00000000c0)={'rose0\x00', 0x1003}) [ 688.203282][ T9922] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 688.212884][ T9922] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 688.221130][ T9922] usb 3-1: Product: syz [ 688.227619][ T3572] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 688.232959][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 688.237080][ T3572] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 07:20:28 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x0, 0xe00b, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}}, 0x0) pipe(0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket(0x2b, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x8c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x1000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 688.250174][ T3572] usb 6-1: Product: syz [ 688.340950][ T9922] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 688.399919][ T3572] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 688.443658][ T25] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 688.453080][ T25] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 688.461292][ T25] usb 2-1: Product: syz [ 688.540155][T10676] device gre0 entered promiscuous mode [ 688.546117][T10676] device vlan2 entered promiscuous mode [ 688.584650][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 688.593672][T10676] device gre0 left promiscuous mode [ 690.772123][ T9922] gspca_stk1135: reg_w 0x2ff err -71 [ 690.778744][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 690.785565][ T9922] gspca_stk1135: Sensor write failed [ 690.791112][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 690.798078][ T9922] gspca_stk1135: Sensor write failed [ 690.803674][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 690.810142][ T9922] gspca_stk1135: Sensor read failed [ 690.815884][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 690.822515][ T9922] gspca_stk1135: Sensor read failed [ 690.827863][ T9922] gspca_stk1135: Detected sensor type unknown (0x0) [ 690.835232][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 690.841845][ T9922] gspca_stk1135: Sensor read failed [ 690.847236][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 690.853909][ T9922] gspca_stk1135: Sensor read failed [ 690.859309][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 690.866060][ T9922] gspca_stk1135: Sensor write failed [ 690.871563][ T9922] gspca_stk1135: serial bus timeout: status=0x00 [ 690.878237][ T9922] gspca_stk1135: Sensor write failed [ 690.883871][ T9922] stk1135: probe of 3-1:25.0 failed with error -71 [ 690.894101][ T3572] gspca_stk1135: reg_w 0x2ff err -71 [ 690.900637][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 690.907228][ T3572] gspca_stk1135: Sensor write failed [ 690.912824][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 690.919314][ T3572] gspca_stk1135: Sensor write failed [ 690.925006][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 690.931497][ T3572] gspca_stk1135: Sensor read failed [ 690.936989][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 690.944700][ T3572] gspca_stk1135: Sensor read failed [ 690.950053][ T3572] gspca_stk1135: Detected sensor type unknown (0x0) [ 690.956959][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 690.963557][ T3572] gspca_stk1135: Sensor read failed [ 690.968933][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 690.975610][ T3572] gspca_stk1135: Sensor read failed [ 690.981066][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 690.987650][ T3572] gspca_stk1135: Sensor write failed [ 690.993234][ T3572] gspca_stk1135: serial bus timeout: status=0x00 [ 690.999719][ T3572] gspca_stk1135: Sensor write failed [ 691.005442][ T3572] stk1135: probe of 6-1:25.0 failed with error -71 [ 691.017792][ T9922] usb 3-1: USB disconnect, device number 36 [ 691.051491][ T3572] usb 6-1: USB disconnect, device number 37 [ 691.182292][ T25] gspca_stk1135: reg_w 0x300 err -71 [ 691.188843][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 691.196442][ T25] gspca_stk1135: Sensor write failed [ 691.202036][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 691.208527][ T25] gspca_stk1135: Sensor write failed [ 691.214160][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 691.220659][ T25] gspca_stk1135: Sensor read failed [ 691.226178][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 691.232782][ T25] gspca_stk1135: Sensor read failed [ 691.238168][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 691.245125][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 691.251580][ T25] gspca_stk1135: Sensor read failed [ 691.257069][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 691.263670][ T25] gspca_stk1135: Sensor read failed [ 691.269156][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 691.275739][ T25] gspca_stk1135: Sensor write failed [ 691.281225][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 691.287852][ T25] gspca_stk1135: Sensor write failed [ 691.293547][ T25] stk1135: probe of 2-1:25.0 failed with error -71 [ 691.322751][ T25] usb 2-1: USB disconnect, device number 35 07:20:31 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:20:31 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0xd}]}}, &(0x7f0000000740)=""/218, 0x32, 0xda, 0x1}, 0x20) 07:20:31 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x1b}, 0x10) 07:20:31 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x0, 0xe00b, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}}, 0x0) pipe(0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket(0x2b, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x8c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x1000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 07:20:31 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:20:31 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:20:31 executing program 4: r0 = socket(0x2, 0x1, 0x0) getsockopt$MRT(r0, 0x0, 0x16, 0x0, &(0x7f00000000c0)) 07:20:31 executing program 3: clock_adjtime(0x0, &(0x7f00000000c0)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf423f}) [ 691.836088][T10686] device gre0 entered promiscuous mode [ 691.842248][T10686] device vlan2 entered promiscuous mode [ 691.986549][T10686] device gre0 left promiscuous mode [ 692.052231][ T3572] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 692.072071][ T25] usb 6-1: new high-speed USB device number 38 using dummy_hcd 07:20:33 executing program 4: r0 = socket(0x2, 0x1, 0x0) getsockopt$MRT(r0, 0x0, 0x2, 0x0, &(0x7f00000000c0)) [ 692.292480][ T3572] usb 3-1: Using ep0 maxpacket: 8 [ 692.332508][ T25] usb 6-1: Using ep0 maxpacket: 8 07:20:33 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x0, 0xe00b, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}}, 0x0) pipe(0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket(0x2b, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x8c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x1000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 07:20:33 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) [ 692.433990][T10054] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 692.493263][ T3572] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 692.502930][ T3572] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 692.511153][ T3572] usb 3-1: Product: syz [ 692.542596][ T25] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 692.552554][ T25] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 692.560788][ T25] usb 6-1: Product: syz 07:20:33 executing program 4: r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000340)) [ 692.639552][ T3572] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 692.682201][T10054] usb 2-1: Using ep0 maxpacket: 8 [ 692.740238][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 692.796836][T10698] device gre0 entered promiscuous mode [ 692.802937][T10698] device vlan2 entered promiscuous mode [ 692.812518][ C1] ===================================================== [ 692.819821][ C1] BUG: KMSAN: uninit-value in ip_tunnel_xmit+0x8fa/0x4230 [ 692.827208][ C1] ip_tunnel_xmit+0x8fa/0x4230 [ 692.832238][ C1] ipgre_xmit+0xd62/0xe70 [ 692.836922][ C1] xmit_one+0x14e/0x5f0 [ 692.841263][ C1] dev_hard_start_xmit+0xe5/0x370 [ 692.846580][ C1] __dev_queue_xmit+0x1dec/0x31f0 [ 692.851849][ C1] garp_join_timer+0x18a/0x2e0 [ 692.856835][ C1] call_timer_fn+0x43/0x480 [ 692.861503][ C1] expire_timers+0x272/0x610 [ 692.866386][ C1] __run_timers+0x5bd/0x8c0 [ 692.871048][ C1] run_timer_softirq+0x64/0xe0 [ 692.876126][ C1] __do_softirq+0x1cc/0x7fb [ 692.880781][ C1] do_softirq+0x13d/0x1e0 [ 692.885462][ C1] __local_bh_enable_ip+0x93/0xa0 [ 692.890646][ C1] _raw_spin_unlock_bh+0x29/0x30 [ 692.895916][ C1] ip6_route_add+0x15f/0x300 [ 692.900774][ C1] addrconf_add_linklocal+0x8bd/0xb40 [ 692.904231][T10054] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 692.906414][ C1] addrconf_addr_gen+0xb39/0xd20 [ 692.915568][T10054] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 692.920329][ C1] addrconf_dev_config+0x455/0x580 [ 692.928483][T10054] usb 2-1: Product: syz [ 692.933606][ C1] addrconf_notify+0xe62/0x1d30 [ 692.943096][ C1] raw_notifier_call_chain+0xbc/0x240 [ 692.948740][ C1] __dev_notify_flags+0x4d5/0xa20 [ 692.954068][ C1] rtnl_newlink+0x35be/0x40e0 [ 692.958976][ C1] rtnetlink_rcv_msg+0x16c9/0x1860 [ 692.964402][ C1] netlink_rcv_skb+0x3a5/0x6c0 [ 692.969407][ C1] rtnetlink_rcv+0x30/0x40 [ 692.974168][ C1] netlink_unicast+0xf3b/0x1270 [ 692.979172][ C1] netlink_sendmsg+0x1288/0x1440 [ 692.984391][ C1] ____sys_sendmsg+0xabc/0xe90 [ 692.989315][ C1] ___sys_sendmsg+0x2a1/0x3f0 [ 692.994269][ C1] __sys_sendmsg+0x258/0x440 [ 692.998997][ C1] __ia32_compat_sys_sendmsg+0x99/0xe0 [ 693.004745][ C1] __do_fast_syscall_32+0xa2/0x100 [ 693.010019][ C1] do_fast_syscall_32+0x33/0x70 [ 693.015147][ C1] do_SYSENTER_32+0x1b/0x20 [ 693.019802][ C1] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 693.026519][ C1] [ 693.028924][ C1] Uninit was created at: [ 693.033706][ C1] __kmalloc_node_track_caller+0x814/0x1250 [ 693.039763][ C1] __alloc_skb+0x346/0xcf0 [ 693.044500][ C1] garp_pdu_append_attr+0x299/0x11c0 [ 693.049945][ C1] garp_attr_event+0x146/0x280 [ 693.055049][ C1] garp_join_timer+0xc1/0x2e0 [ 693.059891][ C1] call_timer_fn+0x43/0x480 [ 693.064694][ C1] expire_timers+0x272/0x610 [ 693.069451][ C1] __run_timers+0x5bd/0x8c0 [ 693.074254][ C1] run_timer_softirq+0x64/0xe0 [ 693.079177][ C1] __do_softirq+0x1cc/0x7fb [ 693.083969][ C1] [ 693.086363][ C1] CPU: 1 PID: 10698 Comm: syz-executor.0 Not tainted 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 693.097074][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 693.107357][ C1] ===================================================== [ 693.114525][ C1] Disabling lock debugging due to kernel taint [ 693.120784][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 693.127313][ C1] CPU: 1 PID: 10698 Comm: syz-executor.0 Tainted: G B 6.0.0-rc4-syzkaller-48205-g4367d178d9eb #0 [ 693.139357][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 693.149542][ C1] Call Trace: [ 693.152906][ C1] [ 693.155829][ C1] dump_stack_lvl+0x1c8/0x256 [ 693.160700][ C1] dump_stack+0x1a/0x1c [ 693.165028][ C1] panic+0x4d3/0xc69 [ 693.169093][ C1] kmsan_report+0x2cc/0x2d0 [ 693.173772][ C1] ? preempt_count_sub+0x7d/0x280 [ 693.179038][ C1] ? __msan_warning+0x92/0x110 [ 693.183977][ C1] ? ip_tunnel_xmit+0x8fa/0x4230 [ 693.189099][ C1] ? ipgre_xmit+0xd62/0xe70 [ 693.189594][T10054] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 693.199949][ C1] ? xmit_one+0x14e/0x5f0 [ 693.204428][ C1] ? dev_hard_start_xmit+0xe5/0x370 [ 693.209788][ C1] ? __dev_queue_xmit+0x1dec/0x31f0 [ 693.215148][ C1] ? garp_join_timer+0x18a/0x2e0 [ 693.220259][ C1] ? call_timer_fn+0x43/0x480 [ 693.225108][ C1] ? expire_timers+0x272/0x610 [ 693.230057][ C1] ? __run_timers+0x5bd/0x8c0 [ 693.234916][ C1] ? run_timer_softirq+0x64/0xe0 [ 693.240042][ C1] ? __do_softirq+0x1cc/0x7fb [ 693.244863][ C1] ? do_softirq+0x13d/0x1e0 [ 693.249526][ C1] ? __local_bh_enable_ip+0x93/0xa0 [ 693.254886][ C1] ? _raw_spin_unlock_bh+0x29/0x30 [ 693.260168][ C1] ? ip6_route_add+0x15f/0x300 [ 693.265102][ C1] ? addrconf_add_linklocal+0x8bd/0xb40 [ 693.270846][ C1] ? addrconf_addr_gen+0xb39/0xd20 [ 693.276105][ C1] ? addrconf_dev_config+0x455/0x580 [ 693.281516][ C1] ? addrconf_notify+0xe62/0x1d30 [ 693.286662][ C1] ? raw_notifier_call_chain+0xbc/0x240 [ 693.292352][ C1] ? __dev_notify_flags+0x4d5/0xa20 [ 693.297683][ C1] ? rtnl_newlink+0x35be/0x40e0 [ 693.302674][ C1] ? rtnetlink_rcv_msg+0x16c9/0x1860 [ 693.308103][ C1] ? netlink_rcv_skb+0x3a5/0x6c0 [ 693.313156][ C1] ? rtnetlink_rcv+0x30/0x40 [ 693.317880][ C1] ? netlink_unicast+0xf3b/0x1270 [ 693.323017][ C1] ? netlink_sendmsg+0x1288/0x1440 [ 693.328248][ C1] ? ____sys_sendmsg+0xabc/0xe90 [ 693.333328][ C1] ? ___sys_sendmsg+0x2a1/0x3f0 [ 693.338314][ C1] ? __sys_sendmsg+0x258/0x440 [ 693.343201][ C1] ? __ia32_compat_sys_sendmsg+0x99/0xe0 [ 693.348959][ C1] ? __do_fast_syscall_32+0xa2/0x100 [ 693.354365][ C1] ? do_fast_syscall_32+0x33/0x70 [ 693.359501][ C1] ? do_SYSENTER_32+0x1b/0x20 [ 693.364291][ C1] ? entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 693.370968][ C1] ? filter_irq_stacks+0x5c/0x1a0 [ 693.376139][ C1] ? __stack_depot_save+0x21/0x4b0 [ 693.381427][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 693.387385][ C1] __msan_warning+0x92/0x110 [ 693.392106][ C1] ip_tunnel_xmit+0x8fa/0x4230 [ 693.397028][ C1] ? garp_attr_event+0x146/0x280 [ 693.402095][ C1] ? garp_join_timer+0xc1/0x2e0 [ 693.407067][ C1] ? call_timer_fn+0x43/0x480 [ 693.411871][ C1] ? expire_timers+0x272/0x610 [ 693.416759][ C1] ? __run_timers+0x5bd/0x8c0 [ 693.421561][ C1] ? __do_softirq+0x1cc/0x7fb [ 693.426343][ C1] ? do_softirq+0x13d/0x1e0 [ 693.430967][ C1] ? __local_bh_enable_ip+0x93/0xa0 [ 693.436313][ C1] ? _raw_spin_unlock_bh+0x29/0x30 [ 693.441570][ C1] ? ip6_route_add+0x15f/0x300 [ 693.446476][ C1] ? addrconf_add_linklocal+0x8bd/0xb40 [ 693.452193][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 693.458175][ C1] ? gre_build_header+0x2a8/0x7d0 [ 693.463336][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 693.469301][ C1] ipgre_xmit+0xd62/0xe70 [ 693.473772][ C1] ? ipgre_close+0x240/0x240 [ 693.478482][ C1] xmit_one+0x14e/0x5f0 [ 693.482755][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 693.488717][ C1] dev_hard_start_xmit+0xe5/0x370 [ 693.493874][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 693.499847][ C1] __dev_queue_xmit+0x1dec/0x31f0 [ 693.505059][ C1] garp_join_timer+0x18a/0x2e0 [ 693.509961][ C1] ? garp_init_applicant+0x800/0x800 [ 693.515381][ C1] ? garp_init_applicant+0x800/0x800 [ 693.520799][ C1] call_timer_fn+0x43/0x480 [ 693.525475][ C1] ? garp_init_applicant+0x800/0x800 [ 693.530912][ C1] expire_timers+0x272/0x610 [ 693.535654][ C1] __run_timers+0x5bd/0x8c0 [ 693.540302][ C1] ? migrate_timer_list+0x5d0/0x5d0 [ 693.545629][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 693.551602][ C1] ? migrate_timer_list+0x5d0/0x5d0 [ 693.556939][ C1] run_timer_softirq+0x64/0xe0 [ 693.561836][ C1] __do_softirq+0x1cc/0x7fb [ 693.566471][ C1] do_softirq+0x13d/0x1e0 [ 693.570923][ C1] [ 693.573917][ C1] [ 693.576929][ C1] __local_bh_enable_ip+0x93/0xa0 [ 693.582082][ C1] _raw_spin_unlock_bh+0x29/0x30 [ 693.587185][ C1] ip6_route_add+0x15f/0x300 [ 693.591931][ C1] addrconf_add_linklocal+0x8bd/0xb40 [ 693.597505][ C1] addrconf_addr_gen+0xb39/0xd20 [ 693.602593][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 693.608569][ C1] addrconf_dev_config+0x455/0x580 [ 693.613809][ C1] ? kmsan_report+0x290/0x2d0 [ 693.618631][ C1] addrconf_notify+0xe62/0x1d30 [ 693.623612][ C1] ? dev_forward_change+0x1120/0x1120 [ 693.629110][ C1] raw_notifier_call_chain+0xbc/0x240 [ 693.634648][ C1] __dev_notify_flags+0x4d5/0xa20 [ 693.639812][ C1] ? __dev_change_flags+0x876/0x960 [ 693.645182][ C1] rtnl_newlink+0x35be/0x40e0 [ 693.650030][ C1] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 693.656253][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 693.662216][ C1] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 693.668610][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 693.674566][ C1] ? rtnl_setlink+0x760/0x760 [ 693.679380][ C1] rtnetlink_rcv_msg+0x16c9/0x1860 [ 693.684676][ C1] ? swake_up_one+0x14c/0x330 [ 693.689546][ C1] ? __rcu_report_exp_rnp+0x388/0x3b0 [ 693.695132][ C1] ? rtnetlink_rcv+0x30/0x40 [ 693.699872][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 693.705836][ C1] ? filter_irq_stacks+0x160/0x1a0 [ 693.711070][ C1] ? __stack_depot_save+0x21/0x4b0 [ 693.716350][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 693.722305][ C1] netlink_rcv_skb+0x3a5/0x6c0 [ 693.727185][ C1] ? rtnetlink_bind+0xf0/0xf0 [ 693.732016][ C1] ? rtnetlink_net_exit+0x60/0x60 [ 693.737188][ C1] rtnetlink_rcv+0x30/0x40 [ 693.741745][ C1] netlink_unicast+0xf3b/0x1270 [ 693.746731][ C1] netlink_sendmsg+0x1288/0x1440 [ 693.751810][ C1] ? netlink_getsockopt+0x13b0/0x13b0 [ 693.757301][ C1] ____sys_sendmsg+0xabc/0xe90 [ 693.762208][ C1] ___sys_sendmsg+0x2a1/0x3f0 [ 693.767016][ C1] ? __fget_files+0x4a8/0x510 [ 693.771882][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 693.777851][ C1] __sys_sendmsg+0x258/0x440 [ 693.782583][ C1] __ia32_compat_sys_sendmsg+0x99/0xe0 [ 693.788195][ C1] __do_fast_syscall_32+0xa2/0x100 [ 693.793466][ C1] do_fast_syscall_32+0x33/0x70 [ 693.798435][ C1] do_SYSENTER_32+0x1b/0x20 [ 693.803047][ C1] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 693.809544][ C1] RIP: 0023:0xf7f84549 [ 693.813700][ C1] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 693.833459][ C1] RSP: 002b:00000000f7f7f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 693.841991][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 693.850064][ C1] RDX: 00000000040408c4 RSI: 0000000000000000 RDI: 0000000000000000 [ 693.858169][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 693.866250][ C1] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 693.874322][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 693.882421][ C1] [ 693.885708][ C1] Kernel Offset: disabled [ 693.890083][ C1] Rebooting in 86400 seconds..