7] __sys_recvmmsg+0x51c/0x6f0 [ 702.856910][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 702.863378][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 702.868455][ T7327] do_fast_syscall_32+0x34/0x70 [ 702.873459][ T7327] do_SYSENTER_32+0x1b/0x20 [ 702.878104][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 702.884578][ T7327] [ 702.886916][ T7327] Local variable msg_sys created at: [ 702.892296][ T7327] do_recvmmsg+0xbb/0x2120 [ 702.896850][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 703.007915][ T7327] not chained 3710000 origins [ 703.015380][ T7327] CPU: 1 PID: 7327 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 703.024105][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 703.034188][ T7327] Call Trace: [ 703.037484][ T7327] [ 703.040432][ T7327] dump_stack_lvl+0x1ff/0x28e [ 703.045170][ T7327] dump_stack+0x25/0x28 [ 703.049370][ T7327] kmsan_internal_chain_origin+0x78/0x110 [ 703.055153][ T7327] ? preempt_count_sub+0xf8/0x330 [ 703.060235][ T7327] ? __local_bh_enable_ip+0xa4/0xe0 [ 703.065485][ T7327] ? _raw_spin_unlock_bh+0x4b/0x60 [ 703.070641][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 703.075813][ T7327] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 703.081689][ T7327] ? should_fail+0x75/0x9c0 [ 703.086244][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 703.091419][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 703.097710][ T7327] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 703.103836][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 703.109002][ T7327] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 703.109064][ T7327] __msan_chain_origin+0xbf/0x140 [ 703.109122][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 703.109190][ T7327] get_compat_msghdr+0x108/0x2c0 [ 703.109245][ T7327] ? __sys_recvmmsg+0x51c/0x6f0 [ 703.109311][ T7327] do_recvmmsg+0xd77/0x2120 [ 703.109387][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 703.144671][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 703.150983][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 703.156148][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 703.162454][ T7327] ? fput+0x82/0x320 [ 703.166405][ T7327] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 703.172962][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 703.177715][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 703.184122][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 703.189211][ T7327] do_fast_syscall_32+0x34/0x70 [ 703.194113][ T7327] do_SYSENTER_32+0x1b/0x20 [ 703.198761][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 703.205152][ T7327] RIP: 0023:0xf6f49549 [ 703.209249][ T7327] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 703.228900][ T7327] RSP: 002b:00000000f59225bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 703.237449][ T7327] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 703.245483][ T7327] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 703.253496][ T7327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 703.261497][ T7327] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 703.269497][ T7327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 703.277515][ T7327] [ 703.281089][ T7327] Uninit was stored to memory at: [ 703.286272][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 703.291417][ T7327] get_compat_msghdr+0x108/0x2c0 [ 703.296513][ T7327] do_recvmmsg+0xd77/0x2120 [ 703.301072][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 703.305900][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 703.312373][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 703.317463][ T7327] do_fast_syscall_32+0x34/0x70 [ 703.322549][ T7327] do_SYSENTER_32+0x1b/0x20 [ 703.327113][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 703.333584][ T7327] [ 703.335918][ T7327] Uninit was stored to memory at: [ 703.340998][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 703.346243][ T7327] get_compat_msghdr+0x108/0x2c0 [ 703.351224][ T7327] do_recvmmsg+0xd77/0x2120 [ 703.355962][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 703.360686][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 703.367148][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 703.372305][ T7327] do_fast_syscall_32+0x34/0x70 [ 703.377200][ T7327] do_SYSENTER_32+0x1b/0x20 [ 703.381836][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 703.388221][ T7327] [ 703.390557][ T7327] Uninit was stored to memory at: [ 703.395737][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 703.400884][ T7327] get_compat_msghdr+0x108/0x2c0 [ 703.405962][ T7327] do_recvmmsg+0xd77/0x2120 [ 703.410514][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 703.415329][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 703.421711][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 703.427020][ T7327] do_fast_syscall_32+0x34/0x70 [ 703.432029][ T7327] do_SYSENTER_32+0x1b/0x20 [ 703.436596][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 703.443081][ T7327] [ 703.445418][ T7327] Uninit was stored to memory at: [ 703.450498][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 703.455741][ T7327] get_compat_msghdr+0x108/0x2c0 [ 703.460718][ T7327] do_recvmmsg+0xd77/0x2120 [ 703.465378][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 703.470114][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 703.476588][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 703.481661][ T7327] do_fast_syscall_32+0x34/0x70 [ 703.486665][ T7327] do_SYSENTER_32+0x1b/0x20 [ 703.491218][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 703.497907][ T7327] [ 703.500239][ T7327] Uninit was stored to memory at: [ 703.505931][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 703.511083][ T7327] get_compat_msghdr+0x108/0x2c0 [ 703.516220][ T7327] do_recvmmsg+0xd77/0x2120 [ 703.520777][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 703.525669][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 703.532143][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 703.537221][ T7327] do_fast_syscall_32+0x34/0x70 [ 703.542267][ T7327] do_SYSENTER_32+0x1b/0x20 [ 703.546826][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 703.553377][ T7327] [ 703.555715][ T7327] Uninit was stored to memory at: [ 703.560796][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 703.566232][ T7327] get_compat_msghdr+0x108/0x2c0 [ 703.571215][ T7327] do_recvmmsg+0xd77/0x2120 [ 703.575948][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 703.580690][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 703.587228][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 703.592494][ T7327] do_fast_syscall_32+0x34/0x70 [ 703.597401][ T7327] do_SYSENTER_32+0x1b/0x20 [ 703.602098][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 703.608488][ T7327] [ 703.610822][ T7327] Uninit was stored to memory at: [ 703.616069][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 703.621221][ T7327] get_compat_msghdr+0x108/0x2c0 [ 703.626372][ T7327] do_recvmmsg+0xd77/0x2120 [ 703.630933][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 703.635830][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 703.642301][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 703.647388][ T7327] do_fast_syscall_32+0x34/0x70 [ 703.652440][ T7327] do_SYSENTER_32+0x1b/0x20 [ 703.656989][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 703.663626][ T7327] [ 703.665961][ T7327] Local variable msg_sys created at: [ 703.671252][ T7327] do_recvmmsg+0xbb/0x2120 [ 703.675894][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 703.988412][ T7327] not chained 3720000 origins [ 703.993452][ T7327] CPU: 1 PID: 7327 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 704.002178][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 704.012357][ T7327] Call Trace: [ 704.015658][ T7327] [ 704.018615][ T7327] dump_stack_lvl+0x1ff/0x28e [ 704.023357][ T7327] dump_stack+0x25/0x28 [ 704.027560][ T7327] kmsan_internal_chain_origin+0x78/0x110 [ 704.033348][ T7327] ? preempt_count_sub+0xf8/0x330 [ 704.038438][ T7327] ? __local_bh_enable_ip+0xa4/0xe0 [ 704.043696][ T7327] ? _raw_spin_unlock_bh+0x4b/0x60 [ 704.048849][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 704.054015][ T7327] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 704.059970][ T7327] ? should_fail+0x75/0x9c0 [ 704.064523][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 704.069689][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 704.075994][ T7327] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 704.082120][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 704.087279][ T7327] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 704.093154][ T7327] __msan_chain_origin+0xbf/0x140 [ 704.098230][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 704.103409][ T7327] get_compat_msghdr+0x108/0x2c0 [ 704.108393][ T7327] ? __sys_recvmmsg+0x51c/0x6f0 [ 704.113300][ T7327] do_recvmmsg+0xd77/0x2120 [ 704.117884][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 704.123149][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 704.129451][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 704.134615][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 704.140914][ T7327] ? fput+0x82/0x320 [ 704.144859][ T7327] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 704.151421][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 704.156167][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 704.162555][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 704.167646][ T7327] do_fast_syscall_32+0x34/0x70 [ 704.172544][ T7327] do_SYSENTER_32+0x1b/0x20 [ 704.177107][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 704.183496][ T7327] RIP: 0023:0xf6f49549 [ 704.187594][ T7327] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 704.207253][ T7327] RSP: 002b:00000000f59225bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 704.215718][ T7327] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 704.223732][ T7327] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 704.231737][ T7327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 704.239740][ T7327] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 704.247759][ T7327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 704.255783][ T7327] [ 704.259004][ T7327] Uninit was stored to memory at: [ 704.264193][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 704.269355][ T7327] get_compat_msghdr+0x108/0x2c0 [ 704.274431][ T7327] do_recvmmsg+0xd77/0x2120 [ 704.278989][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 704.283823][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 704.290200][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 704.295392][ T7327] do_fast_syscall_32+0x34/0x70 [ 704.300293][ T7327] do_SYSENTER_32+0x1b/0x20 [ 704.304966][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 704.311367][ T7327] [ 704.313797][ T7327] Uninit was stored to memory at: [ 704.318896][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 704.324157][ T7327] get_compat_msghdr+0x108/0x2c0 [ 704.329147][ T7327] do_recvmmsg+0xd77/0x2120 [ 704.333786][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 704.338518][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 704.344984][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 704.350158][ T7327] do_fast_syscall_32+0x34/0x70 [ 704.355167][ T7327] do_SYSENTER_32+0x1b/0x20 [ 704.359731][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 704.366420][ T7327] [ 704.368754][ T7327] Uninit was stored to memory at: [ 704.373932][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 704.379086][ T7327] get_compat_msghdr+0x108/0x2c0 [ 704.384166][ T7327] do_recvmmsg+0xd77/0x2120 [ 704.388736][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 704.393571][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 704.399956][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 704.405137][ T7327] do_fast_syscall_32+0x34/0x70 [ 704.410046][ T7327] do_SYSENTER_32+0x1b/0x20 [ 704.414685][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 704.421076][ T7327] [ 704.423492][ T7327] Uninit was stored to memory at: [ 704.428580][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 704.433815][ T7327] get_compat_msghdr+0x108/0x2c0 [ 704.438792][ T7327] do_recvmmsg+0xd77/0x2120 [ 704.443443][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 704.448190][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 704.455205][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 704.460287][ T7327] do_fast_syscall_32+0x34/0x70 [ 704.465387][ T7327] do_SYSENTER_32+0x1b/0x20 [ 704.469950][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 704.476443][ T7327] [ 704.478797][ T7327] Uninit was stored to memory at: [ 704.483984][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 704.489141][ T7327] get_compat_msghdr+0x108/0x2c0 [ 704.494211][ T7327] do_recvmmsg+0xd77/0x2120 [ 704.498771][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 704.503600][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 704.509984][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 704.515166][ T7327] do_fast_syscall_32+0x34/0x70 [ 704.520076][ T7327] do_SYSENTER_32+0x1b/0x20 [ 704.524727][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 704.531117][ T7327] [ 704.533542][ T7327] Uninit was stored to memory at: [ 704.538622][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 704.543858][ T7327] get_compat_msghdr+0x108/0x2c0 [ 704.548839][ T7327] do_recvmmsg+0xd77/0x2120 [ 704.553477][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 704.558206][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 704.564821][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 704.569933][ T7327] do_fast_syscall_32+0x34/0x70 [ 704.574985][ T7327] do_SYSENTER_32+0x1b/0x20 [ 704.576432][ T24] audit: type=1800 audit(1641745685.628:55): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1193 res=0 errno=0 [ 704.579531][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 704.579597][ T7327] [ 704.579606][ T7327] Uninit was stored to memory at: [ 704.579670][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 704.619371][ T7327] get_compat_msghdr+0x108/0x2c0 [ 704.624500][ T7327] do_recvmmsg+0xd77/0x2120 [ 704.629061][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 704.633934][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 16:28:05 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000000a00)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000009ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103", 0x783, 0x880}, {0x0, 0x0, 0x11000}], 0x0, &(0x7f0000000040)=ANY=[]) syz_mount_image$minix(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0/../file0\x00', 0x419302, 0x0) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000780)="c3", 0x47fffe0}], 0x1, 0x400fa7f, 0x0) 16:28:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_fuse_handle_req(r1, &(0x7f0000000580)="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", 0x2000, &(0x7f00000052c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004c00)={0x10}, 0x0, 0x0}) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000180)=""/209, 0xd1}], 0x1, 0x5e, 0x0) 16:28:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 16:28:05 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xc140, 0x0) 16:28:05 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffc6553532}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'veth0_virt_wifi\x00', @random}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000780)={'syzkaller1\x00', @link_local}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1f, 0x3, 0x2, 0x6, 0x0, 0x4, 0x5e001, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x40000, 0xffffffff80000001, 0x16994342, 0x9, 0x2, 0x5, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x2, 0xa, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) [ 704.640327][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 704.645556][ T7327] do_fast_syscall_32+0x34/0x70 [ 704.650455][ T7327] do_SYSENTER_32+0x1b/0x20 [ 704.655151][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 704.661538][ T7327] [ 704.663963][ T7327] Local variable msg_sys created at: [ 704.669267][ T7327] do_recvmmsg+0xbb/0x2120 [ 704.673887][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 704.745612][ T7533] loop1: detected capacity change from 0 to 272 [ 705.965847][ T7327] not chained 3730000 origins [ 705.970605][ T7327] CPU: 1 PID: 7327 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 705.979327][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 705.989416][ T7327] Call Trace: [ 705.992717][ T7327] [ 705.995671][ T7327] dump_stack_lvl+0x1ff/0x28e [ 706.000418][ T7327] dump_stack+0x25/0x28 [ 706.004628][ T7327] kmsan_internal_chain_origin+0x78/0x110 [ 706.010500][ T7327] ? preempt_count_sub+0xf8/0x330 [ 706.015592][ T7327] ? __local_bh_enable_ip+0xa4/0xe0 [ 706.020848][ T7327] ? _raw_spin_unlock_bh+0x4b/0x60 [ 706.026008][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 706.031169][ T7327] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 706.037041][ T7327] ? should_fail+0x75/0x9c0 [ 706.041596][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 706.046750][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 706.053042][ T7327] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 706.059160][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 706.064311][ T7327] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 706.070168][ T7327] __msan_chain_origin+0xbf/0x140 [ 706.075233][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 706.080398][ T7327] get_compat_msghdr+0x108/0x2c0 [ 706.085373][ T7327] ? __sys_recvmmsg+0x51c/0x6f0 [ 706.090268][ T7327] do_recvmmsg+0xd77/0x2120 [ 706.094836][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 706.100003][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 706.106290][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 706.111448][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 706.117736][ T7327] ? fput+0x82/0x320 [ 706.121668][ T7327] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 706.128215][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 706.133475][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 706.139852][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 706.144925][ T7327] do_fast_syscall_32+0x34/0x70 [ 706.149820][ T7327] do_SYSENTER_32+0x1b/0x20 [ 706.154365][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 706.160745][ T7327] RIP: 0023:0xf6f49549 [ 706.164833][ T7327] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 706.184481][ T7327] RSP: 002b:00000000f59225bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 706.192926][ T7327] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 706.200924][ T7327] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 706.208914][ T7327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 706.216906][ T7327] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 706.224894][ T7327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 706.232899][ T7327] [ 706.238481][ T7327] Uninit was stored to memory at: [ 706.243915][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 706.249065][ T7327] get_compat_msghdr+0x108/0x2c0 [ 706.254139][ T7327] do_recvmmsg+0xd77/0x2120 [ 706.258694][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 706.263517][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 706.269898][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 706.275062][ T7327] do_fast_syscall_32+0x34/0x70 [ 706.279966][ T7327] do_SYSENTER_32+0x1b/0x20 [ 706.284618][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 706.291023][ T7327] [ 706.293448][ T7327] Uninit was stored to memory at: [ 706.298530][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 706.303784][ T7327] get_compat_msghdr+0x108/0x2c0 [ 706.308786][ T7327] do_recvmmsg+0xd77/0x2120 [ 706.313444][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 706.318173][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 706.324801][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 706.329885][ T7327] do_fast_syscall_32+0x34/0x70 [ 706.334886][ T7327] do_SYSENTER_32+0x1b/0x20 [ 706.339439][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 706.345984][ T7327] [ 706.348318][ T7327] Uninit was stored to memory at: [ 706.353494][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 706.358646][ T7327] get_compat_msghdr+0x108/0x2c0 [ 706.363722][ T7327] do_recvmmsg+0xd77/0x2120 [ 706.368292][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 706.373104][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 706.379478][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 706.384642][ T7327] do_fast_syscall_32+0x34/0x70 [ 706.389548][ T7327] do_SYSENTER_32+0x1b/0x20 [ 706.394195][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 706.400589][ T7327] [ 706.403020][ T7327] Uninit was stored to memory at: [ 706.408107][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 706.413443][ T7327] get_compat_msghdr+0x108/0x2c0 [ 706.418429][ T7327] do_recvmmsg+0xd77/0x2120 [ 706.423080][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 706.427810][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 706.434287][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 706.439366][ T7327] do_fast_syscall_32+0x34/0x70 [ 706.444450][ T7327] do_SYSENTER_32+0x1b/0x20 [ 706.449003][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 706.455689][ T7327] [ 706.458020][ T7327] Uninit was stored to memory at: [ 706.463184][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 706.468332][ T7327] get_compat_msghdr+0x108/0x2c0 [ 706.473403][ T7327] do_recvmmsg+0xd77/0x2120 [ 706.477971][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 706.482782][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 706.489165][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 706.494336][ T7327] do_fast_syscall_32+0x34/0x70 [ 706.499241][ T7327] do_SYSENTER_32+0x1b/0x20 [ 706.503896][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 706.510283][ T7327] [ 706.512707][ T7327] Uninit was stored to memory at: [ 706.517822][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 706.523078][ T7327] get_compat_msghdr+0x108/0x2c0 [ 706.528058][ T7327] do_recvmmsg+0xd77/0x2120 [ 706.532708][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 706.537440][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 706.543917][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 706.548992][ T7327] do_fast_syscall_32+0x34/0x70 [ 706.553985][ T7327] do_SYSENTER_32+0x1b/0x20 [ 706.558536][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 706.565014][ T7327] [ 706.567342][ T7327] Uninit was stored to memory at: [ 706.572701][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 706.577940][ T7327] get_compat_msghdr+0x108/0x2c0 [ 706.583021][ T7327] do_recvmmsg+0xd77/0x2120 [ 706.587578][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 706.592441][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 706.598832][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 706.603992][ T7327] do_fast_syscall_32+0x34/0x70 [ 706.608892][ T7327] do_SYSENTER_32+0x1b/0x20 [ 706.613529][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 706.619909][ T7327] [ 706.622332][ T7327] Local variable msg_sys created at: [ 706.627621][ T7327] do_recvmmsg+0xbb/0x2120 [ 706.632171][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 706.904960][ T965] device hsr_slave_0 left promiscuous mode [ 706.916245][ T965] device hsr_slave_1 left promiscuous mode [ 706.931347][ T965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.939101][ T965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.950393][ T7327] not chained 3740000 origins [ 706.955189][ T7327] CPU: 0 PID: 7327 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 706.963878][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 706.974635][ T7327] Call Trace: [ 706.977913][ T7327] [ 706.980879][ T7327] dump_stack_lvl+0x1ff/0x28e [ 706.985585][ T7327] dump_stack+0x25/0x28 [ 706.989760][ T7327] kmsan_internal_chain_origin+0x78/0x110 [ 706.995508][ T7327] ? preempt_count_sub+0xf8/0x330 [ 707.000561][ T7327] ? __local_bh_enable_ip+0xa4/0xe0 [ 707.005793][ T7327] ? _raw_spin_unlock_bh+0x4b/0x60 [ 707.010947][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 707.016106][ T7327] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 707.021940][ T7327] ? should_fail+0x75/0x9c0 [ 707.026460][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 707.031591][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 707.037862][ T7327] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 707.043954][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 707.049083][ T7327] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 707.054920][ T7327] __msan_chain_origin+0xbf/0x140 [ 707.060323][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 707.065477][ T7327] get_compat_msghdr+0x108/0x2c0 [ 707.070439][ T7327] ? __sys_recvmmsg+0x51c/0x6f0 [ 707.075329][ T7327] do_recvmmsg+0xd77/0x2120 [ 707.079876][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 707.085022][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 707.091291][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 707.096428][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 707.102698][ T7327] ? fput+0x82/0x320 [ 707.106614][ T7327] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 707.113143][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 707.117860][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 707.124218][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 707.129357][ T7327] do_fast_syscall_32+0x34/0x70 [ 707.134321][ T7327] do_SYSENTER_32+0x1b/0x20 [ 707.138847][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.145204][ T7327] RIP: 0023:0xf6f49549 [ 707.149273][ T7327] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 707.168904][ T7327] RSP: 002b:00000000f59225bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 707.177334][ T7327] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 707.185314][ T7327] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 707.193292][ T7327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 707.201273][ T7327] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 707.209250][ T7327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 707.217245][ T7327] [ 707.220966][ T7327] Uninit was stored to memory at: [ 707.226150][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 707.231303][ T7327] get_compat_msghdr+0x108/0x2c0 [ 707.236410][ T7327] do_recvmmsg+0xd77/0x2120 [ 707.241140][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 707.246008][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 707.252497][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 707.257749][ T7327] do_fast_syscall_32+0x34/0x70 [ 707.259744][ T965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.262815][ T7327] do_SYSENTER_32+0x1b/0x20 [ 707.262873][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.270343][ T965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.275031][ T7327] [ 707.290685][ T7327] Uninit was stored to memory at: [ 707.296041][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 707.301192][ T7327] get_compat_msghdr+0x108/0x2c0 [ 707.306402][ T7327] do_recvmmsg+0xd77/0x2120 [ 707.310955][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 707.315797][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 707.322406][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 707.327479][ T7327] do_fast_syscall_32+0x34/0x70 [ 707.332710][ T7327] do_SYSENTER_32+0x1b/0x20 [ 707.337284][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.343838][ T7327] [ 707.346178][ T7327] Uninit was stored to memory at: [ 707.351250][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 707.356546][ T7327] get_compat_msghdr+0x108/0x2c0 [ 707.361617][ T7327] do_recvmmsg+0xd77/0x2120 [ 707.366281][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 707.371090][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 707.377695][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 707.382910][ T7327] do_fast_syscall_32+0x34/0x70 [ 707.387813][ T7327] do_SYSENTER_32+0x1b/0x20 [ 707.392602][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.398990][ T7327] [ 707.401396][ T7327] Uninit was stored to memory at: [ 707.406695][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 707.411970][ T7327] get_compat_msghdr+0x108/0x2c0 [ 707.416953][ T7327] do_recvmmsg+0xd77/0x2120 [ 707.421574][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 707.426477][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 707.432936][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 707.438078][ T7327] do_fast_syscall_32+0x34/0x70 [ 707.443150][ T7327] do_SYSENTER_32+0x1b/0x20 [ 707.447790][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.454880][ T7327] [ 707.457218][ T7327] Uninit was stored to memory at: [ 707.462472][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 707.467623][ T7327] get_compat_msghdr+0x108/0x2c0 [ 707.472711][ T7327] do_recvmmsg+0xd77/0x2120 [ 707.477354][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 707.482235][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 707.488737][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 707.493923][ T7327] do_fast_syscall_32+0x34/0x70 [ 707.498818][ T7327] do_SYSENTER_32+0x1b/0x20 [ 707.503519][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.509923][ T7327] [ 707.512440][ T7327] Uninit was stored to memory at: [ 707.517525][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 707.522854][ T7327] get_compat_msghdr+0x108/0x2c0 [ 707.527838][ T7327] do_recvmmsg+0xd77/0x2120 [ 707.532563][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 707.537297][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 707.543805][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 707.548988][ T7327] do_fast_syscall_32+0x34/0x70 [ 707.554009][ T7327] do_SYSENTER_32+0x1b/0x20 [ 707.558568][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.565110][ T7327] [ 707.567448][ T7327] Uninit was stored to memory at: [ 707.572776][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 707.577923][ T7327] get_compat_msghdr+0x108/0x2c0 [ 707.583055][ T7327] do_recvmmsg+0xd77/0x2120 [ 707.587609][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 707.592533][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 707.598905][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 707.604081][ T7327] do_fast_syscall_32+0x34/0x70 [ 707.609108][ T7327] do_SYSENTER_32+0x1b/0x20 [ 707.613807][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.620188][ T7327] [ 707.622697][ T7327] Local variable msg_sys created at: [ 707.627989][ T7327] do_recvmmsg+0xbb/0x2120 [ 707.632665][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 707.640430][ T965] device bridge_slave_1 left promiscuous mode [ 707.647399][ T965] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.667667][ T965] device bridge_slave_0 left promiscuous mode [ 707.674508][ T965] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.718073][ T965] device veth1_macvtap left promiscuous mode [ 707.725691][ T965] device veth0_macvtap left promiscuous mode [ 707.732018][ T965] device veth1_vlan left promiscuous mode [ 707.737924][ T965] device veth0_vlan left promiscuous mode [ 707.837841][ T7327] not chained 3750000 origins [ 707.843378][ T7327] CPU: 1 PID: 7327 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 707.852108][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 707.862185][ T7327] Call Trace: [ 707.865478][ T7327] [ 707.868422][ T7327] dump_stack_lvl+0x1ff/0x28e [ 707.873161][ T7327] dump_stack+0x25/0x28 [ 707.877362][ T7327] kmsan_internal_chain_origin+0x78/0x110 [ 707.883138][ T7327] ? preempt_count_sub+0xf8/0x330 [ 707.888232][ T7327] ? __local_bh_enable_ip+0xa4/0xe0 [ 707.893485][ T7327] ? _raw_spin_unlock_bh+0x4b/0x60 [ 707.898640][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 707.903797][ T7327] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 707.909661][ T7327] ? should_fail+0x75/0x9c0 [ 707.914204][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 707.919363][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 707.925658][ T7327] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 707.931781][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 707.936951][ T7327] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 707.942810][ T7327] __msan_chain_origin+0xbf/0x140 [ 707.947970][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 707.953140][ T7327] get_compat_msghdr+0x108/0x2c0 [ 707.958121][ T7327] ? __sys_recvmmsg+0x51c/0x6f0 [ 707.963025][ T7327] do_recvmmsg+0xd77/0x2120 [ 707.967593][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 707.972762][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 707.979060][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 707.984218][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 707.990513][ T7327] ? fput+0x82/0x320 [ 707.994453][ T7327] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 708.001009][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 708.005746][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 708.012134][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 708.017212][ T7327] do_fast_syscall_32+0x34/0x70 [ 708.022110][ T7327] do_SYSENTER_32+0x1b/0x20 [ 708.026659][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 708.033039][ T7327] RIP: 0023:0xf6f49549 [ 708.037129][ T7327] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 708.056782][ T7327] RSP: 002b:00000000f59225bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 708.065241][ T7327] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 708.073243][ T7327] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 708.081343][ T7327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 708.089338][ T7327] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 708.097336][ T7327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 708.105359][ T7327] [ 708.108551][ T7327] Uninit was stored to memory at: [ 708.113715][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 708.118867][ T7327] get_compat_msghdr+0x108/0x2c0 [ 708.123926][ T7327] do_recvmmsg+0xd77/0x2120 [ 708.128561][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 708.133364][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 708.139814][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 708.144977][ T7327] do_fast_syscall_32+0x34/0x70 [ 708.149875][ T7327] do_SYSENTER_32+0x1b/0x20 [ 708.154495][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 708.160875][ T7327] [ 708.163273][ T7327] Uninit was stored to memory at: [ 708.168354][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 708.173578][ T7327] get_compat_msghdr+0x108/0x2c0 [ 708.178547][ T7327] do_recvmmsg+0xd77/0x2120 [ 708.183168][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 708.187887][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 708.194341][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 708.199415][ T7327] do_fast_syscall_32+0x34/0x70 [ 708.204379][ T7327] do_SYSENTER_32+0x1b/0x20 [ 708.208924][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 708.215381][ T7327] [ 708.217710][ T7327] Uninit was stored to memory at: [ 708.222875][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 708.228025][ T7327] get_compat_msghdr+0x108/0x2c0 [ 708.233071][ T7327] do_recvmmsg+0xd77/0x2120 [ 708.237620][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 708.242419][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 708.248888][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 708.254052][ T7327] do_fast_syscall_32+0x34/0x70 [ 708.258947][ T7327] do_SYSENTER_32+0x1b/0x20 [ 708.263575][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 708.269954][ T7327] [ 708.272370][ T7327] Uninit was stored to memory at: [ 708.277448][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 708.282670][ T7327] get_compat_msghdr+0x108/0x2c0 [ 708.287647][ T7327] do_recvmmsg+0xd77/0x2120 [ 708.292299][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 708.297034][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 708.303495][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 708.308577][ T7327] do_fast_syscall_32+0x34/0x70 [ 708.313550][ T7327] do_SYSENTER_32+0x1b/0x20 [ 708.318097][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 708.324555][ T7327] [ 708.326884][ T7327] Uninit was stored to memory at: [ 708.332037][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 708.337192][ T7327] get_compat_msghdr+0x108/0x2c0 [ 708.342273][ T7327] do_recvmmsg+0xd77/0x2120 [ 708.346827][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 708.351550][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 708.358035][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 708.363283][ T7327] do_fast_syscall_32+0x34/0x70 [ 708.368228][ T7327] do_SYSENTER_32+0x1b/0x20 [ 708.372887][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 708.379271][ T7327] [ 708.381628][ T7327] Uninit was stored to memory at: [ 708.386801][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 708.392044][ T7327] get_compat_msghdr+0x108/0x2c0 [ 708.397023][ T7327] do_recvmmsg+0xd77/0x2120 [ 708.401579][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 708.406764][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 708.413239][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 708.418312][ T7327] do_fast_syscall_32+0x34/0x70 [ 708.423299][ T7327] do_SYSENTER_32+0x1b/0x20 [ 708.427864][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 708.434336][ T7327] [ 708.436672][ T7327] Uninit was stored to memory at: [ 708.441914][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 708.447064][ T7327] get_compat_msghdr+0x108/0x2c0 [ 708.452213][ T7327] do_recvmmsg+0xd77/0x2120 [ 708.456858][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 708.461723][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 708.468201][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 708.473356][ T7327] do_fast_syscall_32+0x34/0x70 [ 708.478255][ T7327] do_SYSENTER_32+0x1b/0x20 [ 708.482899][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 708.489287][ T7327] [ 708.491629][ T7327] Local variable msg_sys created at: [ 708.497052][ T7327] do_recvmmsg+0xbb/0x2120 [ 708.501613][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 708.741116][ T7327] not chained 3760000 origins [ 708.746843][ T7327] CPU: 1 PID: 7327 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 708.755582][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 708.765672][ T7327] Call Trace: [ 708.768979][ T7327] [ 708.771913][ T7327] dump_stack_lvl+0x1ff/0x28e [ 708.776643][ T7327] dump_stack+0x25/0x28 [ 708.780937][ T7327] kmsan_internal_chain_origin+0x78/0x110 [ 708.786687][ T7327] ? preempt_count_sub+0xf8/0x330 [ 708.791746][ T7327] ? __local_bh_enable_ip+0xa4/0xe0 [ 708.797000][ T7327] ? _raw_spin_unlock_bh+0x4b/0x60 [ 708.802153][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 708.807317][ T7327] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 708.813186][ T7327] ? should_fail+0x75/0x9c0 [ 708.817731][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 708.822899][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 708.829189][ T7327] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 708.835294][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 708.840451][ T7327] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 708.846290][ T7327] __msan_chain_origin+0xbf/0x140 [ 708.851364][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 708.856509][ T7327] get_compat_msghdr+0x108/0x2c0 [ 708.861471][ T7327] ? __sys_recvmmsg+0x51c/0x6f0 [ 708.866893][ T7327] do_recvmmsg+0xd77/0x2120 [ 708.871437][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 708.876584][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 708.882858][ T7327] ? kmsan_get_metadata+0x33/0x220 [ 708.888016][ T7327] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 708.894289][ T7327] ? fput+0x82/0x320 [ 708.898223][ T7327] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 708.904759][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 708.909496][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 708.915868][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 708.920987][ T7327] do_fast_syscall_32+0x34/0x70 [ 708.925878][ T7327] do_SYSENTER_32+0x1b/0x20 [ 708.930433][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 708.936822][ T7327] RIP: 0023:0xf6f49549 [ 708.940901][ T7327] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 708.960535][ T7327] RSP: 002b:00000000f59225bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 708.968972][ T7327] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 708.976962][ T7327] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 708.984950][ T7327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 708.992947][ T7327] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 709.000940][ T7327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 709.008930][ T7327] [ 709.013398][ T7327] Uninit was stored to memory at: [ 709.018617][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 709.023866][ T7327] get_compat_msghdr+0x108/0x2c0 [ 709.028843][ T7327] do_recvmmsg+0xd77/0x2120 [ 709.033551][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 709.038279][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 709.044741][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 709.049823][ T7327] do_fast_syscall_32+0x34/0x70 [ 709.054806][ T7327] do_SYSENTER_32+0x1b/0x20 [ 709.059364][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 709.065846][ T7327] [ 709.068177][ T7327] Uninit was stored to memory at: [ 709.073466][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 709.078614][ T7327] get_compat_msghdr+0x108/0x2c0 [ 709.083721][ T7327] do_recvmmsg+0xd77/0x2120 [ 709.088277][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 709.093108][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 709.099569][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 709.104769][ T7327] do_fast_syscall_32+0x34/0x70 [ 709.109676][ T7327] do_SYSENTER_32+0x1b/0x20 [ 709.114334][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 709.120711][ T7327] [ 709.123168][ T7327] Uninit was stored to memory at: [ 709.128251][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 709.133543][ T7327] get_compat_msghdr+0x108/0x2c0 [ 709.138516][ T7327] do_recvmmsg+0xd77/0x2120 [ 709.143198][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 709.147926][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 709.154418][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 709.159533][ T7327] do_fast_syscall_32+0x34/0x70 [ 709.164638][ T7327] do_SYSENTER_32+0x1b/0x20 [ 709.169187][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 709.175677][ T7327] [ 709.178012][ T7327] Uninit was stored to memory at: [ 709.183230][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 709.188386][ T7327] get_compat_msghdr+0x108/0x2c0 [ 709.193466][ T7327] do_recvmmsg+0xd77/0x2120 [ 709.198020][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 709.202876][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 709.209248][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 709.214413][ T7327] do_fast_syscall_32+0x34/0x70 [ 709.219309][ T7327] do_SYSENTER_32+0x1b/0x20 [ 709.223992][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 709.230373][ T7327] [ 709.232840][ T7327] Uninit was stored to memory at: [ 709.237910][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 709.243185][ T7327] get_compat_msghdr+0x108/0x2c0 [ 709.248159][ T7327] do_recvmmsg+0xd77/0x2120 [ 709.252851][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 709.257575][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 709.264085][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 709.269161][ T7327] do_fast_syscall_32+0x34/0x70 [ 709.274193][ T7327] do_SYSENTER_32+0x1b/0x20 [ 709.278743][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 709.285258][ T7327] [ 709.287593][ T7327] Uninit was stored to memory at: [ 709.292820][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 709.297968][ T7327] get_compat_msghdr+0x108/0x2c0 [ 709.303083][ T7327] do_recvmmsg+0xd77/0x2120 [ 709.307635][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 709.312514][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 709.318895][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 709.324107][ T7327] do_fast_syscall_32+0x34/0x70 [ 709.329073][ T7327] do_SYSENTER_32+0x1b/0x20 [ 709.333716][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 709.340103][ T7327] [ 709.342563][ T7327] Uninit was stored to memory at: [ 709.347651][ T7327] __get_compat_msghdr+0x6e1/0x9d0 [ 709.352948][ T7327] get_compat_msghdr+0x108/0x2c0 [ 709.357988][ T7327] do_recvmmsg+0xd77/0x2120 [ 709.362662][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 709.367389][ T7327] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 709.373880][ T7327] __do_fast_syscall_32+0x96/0xf0 [ 709.378952][ T7327] do_fast_syscall_32+0x34/0x70 [ 709.383974][ T7327] do_SYSENTER_32+0x1b/0x20 [ 709.388531][ T7327] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 709.395023][ T7327] [ 709.397357][ T7327] Local variable msg_sys created at: [ 709.402789][ T7327] do_recvmmsg+0xbb/0x2120 [ 709.407264][ T7327] __sys_recvmmsg+0x51c/0x6f0 [ 709.862993][ T965] team0 (unregistering): Port device team_slave_1 removed [ 709.890528][ T965] team0 (unregistering): Port device team_slave_0 removed [ 709.919302][ T965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.950007][ T965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.081673][ T965] bond0 (unregistering): Released all slaves 16:28:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='c', 0xfffff, r0) 16:28:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x80000000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000140)="290000001400031c00000000000000eb0100100006a40e07089100007f25ffffff0100002a00f3ff09", 0x29) 16:28:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 16:28:11 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0xfdfd, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:28:11 executing program 2: syz_mount_image$qnx6(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x7fffffff}], 0x0, &(0x7f0000000640)={[], [{@appraise_type}]}) 16:28:11 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="2321202e2f66696c6530204767cc5244e2c8be00001a105d72b9e241ffb699c22341a5f7b5b16b4317803180a7a210dfb3ebd3ce31f826de64c0ab2b417713f032100e2efa8d"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) getpgid(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@remote, @in6=@private1}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xfffffffffffffceb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24049890) socket(0x80000000000000a, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:28:11 executing program 1: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) open(0x0, 0x8002, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x550000, 0x0, 0x10, r1, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) write$binfmt_aout(r0, &(0x7f0000000700)=ANY=[], 0x5) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x3e, r2, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000000)='./bus\x00', 0x0) 16:28:11 executing program 4: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="400000000100010008000000ffffff7f7824", 0x12, 0x400}, {0x0, 0x0, 0x2000}], 0x8004, &(0x7f0000000040)) [ 711.282648][ T7541] chnl_net:caif_netlink_parms(): no params data found [ 711.410306][ T7566] loop4: detected capacity change from 0 to 32 [ 711.468537][ T24] audit: type=1804 audit(1641745692.518:56): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir103439809/syzkaller.TmA8U3/168/bus" dev="sda1" ino=1189 res=1 errno=0 [ 711.586254][ T7566] MINIX-fs: deleted inode referenced: 1 16:28:12 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x825f6034e6719b1c}) [ 711.670978][ T24] audit: type=1804 audit(1641745692.648:57): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir103439809/syzkaller.TmA8U3/168/bus" dev="sda1" ino=1189 res=1 errno=0 [ 711.719068][ T3561] Bluetooth: hci5: command 0x0409 tx timeout 16:28:12 executing program 4: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="400000000100010008000000ffffff7f7824", 0x12, 0x400}, {0x0, 0x0, 0x2000}], 0x8004, &(0x7f0000000040)) 16:28:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) [ 712.343803][ T7581] loop4: detected capacity change from 0 to 32 [ 712.512123][ T7581] MINIX-fs: deleted inode referenced: 1 [ 712.946797][ T7541] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.954405][ T7541] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.964181][ T7541] device bridge_slave_0 entered promiscuous mode [ 713.083610][ T7541] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.091008][ T7541] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.101157][ T7541] device bridge_slave_1 entered promiscuous mode [ 713.385056][ T7541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.423966][ T7541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.561600][ T7541] team0: Port device team_slave_0 added [ 713.598039][ T7541] team0: Port device team_slave_1 added [ 713.767122][ T7541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.774402][ T7541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.800605][ T7541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.813435][ T3561] Bluetooth: hci5: command 0x041b tx timeout [ 713.874879][ T7541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.882205][ T7541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.908489][ T7541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.172704][ T7541] device hsr_slave_0 entered promiscuous mode [ 714.203053][ T7541] device hsr_slave_1 entered promiscuous mode [ 714.218906][ T7541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 714.226734][ T7541] Cannot create hsr debugfs directory [ 715.140507][ T7541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.196317][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 715.205722][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 715.222723][ T7541] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.263249][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 715.273901][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 715.283476][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.290797][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.300012][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 715.310127][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 715.319354][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.326765][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.340429][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 715.373173][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 715.396326][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 715.417939][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 715.428401][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 715.481455][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 715.491534][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 715.502563][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 715.513948][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 715.523880][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 715.560458][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 715.571437][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 715.589275][ T7541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 715.660685][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 715.668807][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 715.724292][ T7541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.862059][ T34] Bluetooth: hci5: command 0x040f tx timeout [ 715.992322][ T965] device hsr_slave_0 left promiscuous mode [ 716.000370][ T965] device hsr_slave_1 left promiscuous mode [ 716.025232][ T965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.033088][ T965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.053886][ T965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.061467][ T965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.073777][ T965] device bridge_slave_1 left promiscuous mode [ 716.080451][ T965] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.091485][ T965] device bridge_slave_0 left promiscuous mode [ 716.098311][ T965] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.141305][ T965] device veth1_macvtap left promiscuous mode [ 716.147826][ T965] device veth0_macvtap left promiscuous mode [ 716.154188][ T965] device veth1_vlan left promiscuous mode [ 716.160111][ T965] device veth0_vlan left promiscuous mode [ 716.609575][ T965] team0 (unregistering): Port device team_slave_1 removed [ 716.637932][ T965] team0 (unregistering): Port device team_slave_0 removed [ 716.659377][ T965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.684137][ T965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.816819][ T965] bond0 (unregistering): Released all slaves [ 716.989309][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 716.999746][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 717.147092][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 717.157869][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 717.188608][ T7541] device veth0_vlan entered promiscuous mode [ 717.281042][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 717.290701][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 717.322845][ T7541] device veth1_vlan entered promiscuous mode [ 717.469179][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 717.479546][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 717.489499][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 717.499845][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 717.532405][ T7541] device veth0_macvtap entered promiscuous mode [ 717.556810][ T7541] device veth1_macvtap entered promiscuous mode [ 717.566384][ T7598] chnl_net:caif_netlink_parms(): no params data found [ 717.679881][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 717.691176][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.701319][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 717.711941][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.721910][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 717.732512][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.746792][ T7541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.755777][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 717.765838][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 717.775822][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 717.786303][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 717.818325][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 717.829473][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.839529][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 717.850319][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.860298][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 717.870918][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.880897][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 717.891579][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.905859][ T7541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.916131][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 717.926790][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 717.943646][ T6587] Bluetooth: hci5: command 0x0419 tx timeout [ 718.172496][ T34] Bluetooth: hci3: command 0x0409 tx timeout [ 718.198746][ T7598] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.206440][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.216281][ T7598] device bridge_slave_0 entered promiscuous mode [ 718.240102][ T7598] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.247748][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.257666][ T7598] device bridge_slave_1 entered promiscuous mode [ 718.399821][ T7598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.417188][ T7598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.534708][ T7598] team0: Port device team_slave_0 added [ 718.555864][ T7598] team0: Port device team_slave_1 added [ 718.648974][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.656376][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.682609][ T7598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.706435][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.713733][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.739953][ T7598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.857867][ T7598] device hsr_slave_0 entered promiscuous mode [ 718.879605][ T7598] device hsr_slave_1 entered promiscuous mode [ 718.898147][ T7598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.905988][ T7598] Cannot create hsr debugfs directory [ 719.578270][ T7598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.654039][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 719.663611][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 719.676588][ T7571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.684704][ T7571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.704847][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 719.743413][ T7598] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.768572][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 719.769634][ T7571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.779456][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 719.785871][ T7571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.803019][ T6587] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.810452][ T6587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.895178][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 719.905478][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 719.916528][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 719.926887][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 719.936440][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.943843][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.952853][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 719.964335][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 719.975109][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 719.986132][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 719.996655][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 720.007201][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 720.017871][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 720.027737][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 720.039268][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 720.074409][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 720.084862][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 720.102509][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 720.199140][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 720.207397][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 720.236313][ T7598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.263401][ T6587] Bluetooth: hci3: command 0x041b tx timeout [ 720.308708][ T7634] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 720.327778][ T7634] device syzkaller1 entered promiscuous mode 16:28:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$afs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@source={'source', 0x3d, '%^]$[+.](%{:\x0f\x80[)-:'}}]}) 16:28:21 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x380) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0xfffffffffffffffd, 0x0, 0x9, 0x2f, 0x6f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x7], 0x2, 0x2080}) tkill(0x0, 0x0) 16:28:21 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x825f6034e6719b1c}) 16:28:21 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x460, 0x218, 0x218, 0x330, 0x218, 0x218, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6erspan0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x10001}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team0\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'macvtap0\x00', 'bond0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}, @common=@addrtype={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) 16:28:21 executing program 4: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="400000000100010008000000ffffff7f7824", 0x12, 0x400}, {0x0, 0x0, 0x2000}], 0x8004, &(0x7f0000000040)) [ 720.674854][ T7647] loop4: detected capacity change from 0 to 32 [ 720.722983][ T7647] MINIX-fs: deleted inode referenced: 1 [ 721.044246][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 721.054909][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 721.192738][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 721.203632][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 721.248899][ T7598] device veth0_vlan entered promiscuous mode [ 721.295295][ T7598] device veth1_vlan entered promiscuous mode [ 721.313243][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 721.323667][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 721.384746][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 721.395250][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 721.415726][ T7598] device veth0_macvtap entered promiscuous mode [ 721.434477][ T7598] device veth1_macvtap entered promiscuous mode [ 721.484742][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 721.495361][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.505334][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 721.515948][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.525991][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 721.536567][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.546618][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 721.557224][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.570815][ T7598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.580078][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 721.590321][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 721.599798][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 721.610043][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 721.628554][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 721.639144][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.649108][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 721.659674][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.669608][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 721.680160][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.690108][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 721.700653][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.710659][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 721.721312][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.735727][ T7598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.752974][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 721.763885][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 722.342741][ T6587] Bluetooth: hci3: command 0x040f tx timeout [ 722.540385][ T965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.548518][ T965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.569141][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 722.613211][ T965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.621233][ T965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.630386][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:28:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) shutdown(r0, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 16:28:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='[d::]:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000580), 0x10000005c) 16:28:23 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 16:28:23 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x825f6034e6719b1c}) 16:28:23 executing program 4: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="400000000100010008000000ffffff7f7824", 0x12, 0x400}, {0x0, 0x0, 0x2000}], 0x8004, &(0x7f0000000040)) 16:28:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x0) [ 722.740815][ T7675] loop2: detected capacity change from 0 to 264192 [ 722.763914][ T7675] qnx6: invalid mount options. [ 722.938122][ T7684] loop4: detected capacity change from 0 to 32 [ 722.981683][ T24] audit: type=1804 audit(1641745704.028:58): pid=7685 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815177627/syzkaller.5E1UFU/173/bus" dev="sda1" ino=1198 res=1 errno=0 [ 723.095501][ T7683] ceph: No path or : separator in source [ 723.098885][ T7684] MINIX-fs: deleted inode referenced: 1 16:28:24 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x825f6034e6719b1c}) [ 723.280413][ T24] audit: type=1804 audit(1641745704.138:59): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815177627/syzkaller.5E1UFU/173/bus" dev="sda1" ino=1198 res=1 errno=0 [ 723.306384][ T24] audit: type=1804 audit(1641745704.208:60): pid=7685 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815177627/syzkaller.5E1UFU/173/bus" dev="sda1" ino=1198 res=1 errno=0 16:28:24 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=""/161, 0xa1}], 0x1}, 0x0) r2 = dup3(r0, r1, 0x0) write$snapshot(r2, 0x0, 0x0) write$snapshot(r2, &(0x7f00000004c0)="0c24340a8e50c0f6f9e52895a048db20be1eccd27446b1ab1c6147749dbd945f18000769717f091f8421c414172ed025d82c068c50a524855d300315623d296fe5f0d4a1f431cc14aa5b68e5f5c86de80d3680f83a944028b4aa5d1ef5e4ddd99ebe0b53a7ba0dccbf2f36fc87da924ed34e714b60259a1819fda4eb15def273ade3bc325d569ba021fa7abe8b9ed8d1320415e65e99483dbe0dccd3bf17305935e0", 0xa2) 16:28:24 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x20}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) [ 723.791535][ T24] audit: type=1804 audit(1641745704.838:61): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815177627/syzkaller.5E1UFU/173/bus" dev="sda1" ino=1198 res=1 errno=0 16:28:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c00600005030e2cfff57b016d2763bd5637892f398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000003d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) socket$packet(0x11, 0x0, 0x300) 16:28:25 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7cb, &(0x7f0000000000)={{@hyper}, @host}) 16:28:25 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b8931820d118af1e017b010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x2, "fa63"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:28:25 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 16:28:25 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) [ 724.414563][ T34] Bluetooth: hci3: command 0x0419 tx timeout [ 724.441985][ T6587] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 724.822200][ T6587] usb 6-1: Using ep0 maxpacket: 32 [ 724.833141][ T24] audit: type=1804 audit(1641745705.528:62): pid=7707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815177627/syzkaller.5E1UFU/174/bus" dev="sda1" ino=1187 res=1 errno=0 16:28:25 executing program 4: ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/164, 0xa4}], 0x1) dup3(r3, r2, 0x0) 16:28:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) [ 724.858703][ T24] audit: type=1804 audit(1641745705.798:63): pid=7707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815177627/syzkaller.5E1UFU/174/bus" dev="sda1" ino=1187 res=1 errno=0 [ 725.191194][ T24] audit: type=1804 audit(1641745706.058:64): pid=7707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815177627/syzkaller.5E1UFU/174/bus" dev="sda1" ino=1187 res=1 errno=0 [ 725.217522][ T24] audit: type=1804 audit(1641745706.148:65): pid=7711 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815177627/syzkaller.5E1UFU/174/bus" dev="sda1" ino=1187 res=1 errno=0 16:28:26 executing program 2: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_coalesce={0x11}}) [ 725.294275][ T6587] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=7b.01 [ 725.303668][ T6587] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.311940][ T6587] usb 6-1: Product: syz [ 725.316240][ T6587] usb 6-1: Manufacturer: syz [ 725.320966][ T6587] usb 6-1: SerialNumber: syz [ 725.414373][ T6587] usb 6-1: config 0 descriptor?? [ 725.427989][ T24] audit: type=1804 audit(1641745706.368:66): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir103439809/syzkaller.TmA8U3/173/bus" dev="sda1" ino=1188 res=1 errno=0 [ 725.454420][ T24] audit: type=1804 audit(1641745706.448:67): pid=7717 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir103439809/syzkaller.TmA8U3/173/bus" dev="sda1" ino=1188 res=1 errno=0 16:28:26 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) [ 725.618661][ T7720] serio: Serial port pts0 [ 725.702453][ T6587] usb 6-1: Limiting number of CPorts to U8_MAX [ 725.709594][ T6587] usb 6-1: Not enough endpoints found in device, aborting! 16:28:26 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0xac, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) dup3(r1, r0, 0x0) [ 725.907117][ T6587] usb 6-1: USB disconnect, device number 11 16:28:27 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x4}]}}, &(0x7f0000000200)=""/214, 0x32, 0xd6, 0x8}, 0x20) 16:28:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000480), &(0x7f0000000280), &(0x7f00000006c0)="080000000000000037595409d020ee89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec", 0x79, r0) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) 16:28:28 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0xac, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) dup3(r1, r0, 0x0) 16:28:28 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 16:28:28 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 16:28:28 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)={[], [{@subj_user={'subj_user', 0x3d, '/proc/sysvipc/msg\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) preadv(r0, &(0x7f0000001a40), 0x0, 0x0, 0x4) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = memfd_create(&(0x7f0000000200)='\x15\xf7^\xf9\x12\x0f\xbd+\xa7\xce\xfa%\x98\xc6\x1e\x1e\xf8\x0213\xce\x89x\xb6\x9b\xfbp\x9f\xd5\x9d\b\xb7\x1b\xcc\x91\xc9\x12\xb01\xa8\x1e\xdb\xea+\xfd\x8d\xe7\xdc\x90\x90\xa8\x1a\xa6%\xc2\x85d?\x15W\xc0\xb9\xfb\x01&\xbb\xce6\xe7\x96\xf2\xf5\n!\xc5\xe2\xef\xce\xff\xec\xac9\x98\xb4<\xc5|\x0e\xae', 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.max\x00', 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) ftruncate(r2, 0x8007999) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000280)="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") openat$kvm(0xffffffffffffff9c, 0x0, 0x240, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) [ 727.152815][ T7735] BPF:[1] ARRAY (anon) [ 727.157200][ T7735] BPF:type_id=0 index_type_id=0 nr_elems=0 [ 727.163577][ T7735] BPF: [ 727.166417][ T7735] BPF:size != 0 [ 727.169945][ T7735] BPF: [ 727.169945][ T7735] 16:28:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003c00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x10}}], 0x60}}], 0x1, 0x10) 16:28:28 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000480), &(0x7f0000000280), &(0x7f00000006c0)="080000000000000037595409d020ee89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec", 0x79, r0) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) 16:28:28 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0xac, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) dup3(r1, r0, 0x0) 16:28:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/50, 0x32}], 0x1) [ 728.085029][ T24] kauditd_printk_skb: 11 callbacks suppressed [ 728.085087][ T24] audit: type=1804 audit(1641745709.138:79): pid=7754 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir103439809/syzkaller.TmA8U3/174/bus" dev="sda1" ino=1180 res=1 errno=0 16:28:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000480), &(0x7f0000000280), &(0x7f00000006c0)="080000000000000037595409d020ee89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec", 0x79, r0) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) [ 728.381459][ T24] audit: type=1804 audit(1641745709.348:80): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir103439809/syzkaller.TmA8U3/174/bus" dev="sda1" ino=1180 res=1 errno=0 [ 728.406684][ T24] audit: type=1804 audit(1641745709.408:81): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir103439809/syzkaller.TmA8U3/174/bus" dev="sda1" ino=1180 res=1 errno=0 16:28:29 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x1494c3, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x33, 0x2, 0x3f, 0x0, 0x8, 0x10, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x140e, 0x1, 0x0, 0x1022, 0x1, 0x4, 0x6, 0x80000000, 0x2, 0x38}, 0xffffffffffffffff, 0x8, r2, 0xa) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000500)={0x0, 0x8}) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="240000002e0007031dfffd946fa2830020200a0009000000281d8568081ba3a20400ff7e280000005e00ffffba16a0aa1c8653b1cc7eae6a7702cdc70e5953308ecd9a649c8363975c0ac47b", 0x4c}], 0x1}, 0x0) 16:28:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000002c0)) 16:28:30 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 16:28:30 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0xac, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) dup3(r1, r0, 0x0) 16:28:30 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, 0x0, 0x0) 16:28:30 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x1494c3, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x33, 0x2, 0x3f, 0x0, 0x8, 0x10, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x140e, 0x1, 0x0, 0x1022, 0x1, 0x4, 0x6, 0x80000000, 0x2, 0x38}, 0xffffffffffffffff, 0x8, r2, 0xa) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000500)={0x0, 0x8}) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="240000002e0007031dfffd946fa2830020200a0009000000281d8568081ba3a20400ff7e280000005e00ffffba16a0aa1c8653b1cc7eae6a7702cdc70e5953308ecd9a649c8363975c0ac47b", 0x4c}], 0x1}, 0x0) [ 730.003374][ T24] audit: type=1804 audit(1641745711.028:82): pid=7771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir103439809/syzkaller.TmA8U3/175/bus" dev="sda1" ino=1191 res=1 errno=0 [ 730.678323][ T24] audit: type=1804 audit(1641745711.388:83): pid=7775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir103439809/syzkaller.TmA8U3/175/bus" dev="sda1" ino=1191 res=1 errno=0 [ 730.703275][ T24] audit: type=1804 audit(1641745711.538:84): pid=7771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir103439809/syzkaller.TmA8U3/175/bus" dev="sda1" ino=1191 res=1 errno=0 [ 730.728096][ T24] audit: type=1804 audit(1641745711.718:85): pid=7775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir103439809/syzkaller.TmA8U3/175/bus" dev="sda1" ino=1191 res=1 errno=0 16:28:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x64, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) write$9p(r0, &(0x7f0000000000)="0600000000000000c9b90003050000002a1ff7adf576f3790f68bc2c197cbf8d63735a09ab8383afd2de1a5587fe067fde18fa64249e1dabdd9514480a16f3733d18f833b3aacfcf04f7b0bdd78687423a6bff51b9f9218a249e3d00"/104, 0x68) 16:28:33 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x1494c3, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x33, 0x2, 0x3f, 0x0, 0x8, 0x10, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x140e, 0x1, 0x0, 0x1022, 0x1, 0x4, 0x6, 0x80000000, 0x2, 0x38}, 0xffffffffffffffff, 0x8, r2, 0xa) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000500)={0x0, 0x8}) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="240000002e0007031dfffd946fa2830020200a0009000000281d8568081ba3a20400ff7e280000005e00ffffba16a0aa1c8653b1cc7eae6a7702cdc70e5953308ecd9a649c8363975c0ac47b", 0x4c}], 0x1}, 0x0) 16:28:33 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x8) clock_adjtime(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb6da, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6fec, 0x0, 0x0, 0x200, 0x2, 0x0, 0x8, 0x3f, 0x7d1, 0x0, 0x6, 0x0, 0x9, 0x1f, 0xffffffff, 0x40}) flistxattr(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0xfffffffffffffffe, 0x1100000, &(0x7f0000002580)={[{@nojournal_checksum}, {@journal_async_commit}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota_path={'usrjquota', 0x3d, './bus/file0'}}, {@init_itable}, {@data_writeback}], [{@appraise_type}, {@dont_measure}, {@measure}, {@audit}, {@audit}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@permit_directio}, {@fowner_lt}, {@euid_lt}]}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x43, 0x0, &(0x7f0000000040)) dup2(r0, r1) r2 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f00000001c0)) getdents64(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 16:28:33 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000480), &(0x7f0000000280), &(0x7f00000006c0)="080000000000000037595409d020ee89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec", 0x79, r0) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) 16:28:33 executing program 3: setrlimit(0x7, &(0x7f0000000080)={0x4, 0x8f2}) r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb}) 16:28:33 executing program 1: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)='JFS1', 0x4, 0x8000}], 0x0, &(0x7f0000064f00)) [ 732.565004][ T7788] loop1: detected capacity change from 0 to 128 [ 732.768329][ T7788] Currently only 4K block size supported! [ 732.774586][ T7788] Mount JFS Failure: -22 [ 732.778902][ T7788] jfs_mount failed w/return code = -22 16:28:34 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0xf0ff7f, 0x0) 16:28:34 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000504f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) chdir(0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) 16:28:34 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x1494c3, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x33, 0x2, 0x3f, 0x0, 0x8, 0x10, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x140e, 0x1, 0x0, 0x1022, 0x1, 0x4, 0x6, 0x80000000, 0x2, 0x38}, 0xffffffffffffffff, 0x8, r2, 0xa) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000500)={0x0, 0x8}) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="240000002e0007031dfffd946fa2830020200a0009000000281d8568081ba3a20400ff7e280000005e00ffffba16a0aa1c8653b1cc7eae6a7702cdc70e5953308ecd9a649c8363975c0ac47b", 0x4c}], 0x1}, 0x0) 16:28:34 executing program 1: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)='JFS1', 0x4, 0x8000}], 0x0, &(0x7f0000064f00)) 16:28:34 executing program 4: openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x80) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1}, 0xc) [ 733.320188][ T7798] loop3: detected capacity change from 0 to 270 16:28:34 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x8) clock_adjtime(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb6da, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6fec, 0x0, 0x0, 0x200, 0x2, 0x0, 0x8, 0x3f, 0x7d1, 0x0, 0x6, 0x0, 0x9, 0x1f, 0xffffffff, 0x40}) flistxattr(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0xfffffffffffffffe, 0x1100000, &(0x7f0000002580)={[{@nojournal_checksum}, {@journal_async_commit}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota_path={'usrjquota', 0x3d, './bus/file0'}}, {@init_itable}, {@data_writeback}], [{@appraise_type}, {@dont_measure}, {@measure}, {@audit}, {@audit}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@permit_directio}, {@fowner_lt}, {@euid_lt}]}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x43, 0x0, &(0x7f0000000040)) dup2(r0, r1) r2 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f00000001c0)) getdents64(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 16:28:34 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xd7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000280)="0800000001007b", 0x7) 16:28:34 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) [ 733.635945][ T7805] loop1: detected capacity change from 0 to 128 16:28:34 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000504f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) chdir(0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) [ 733.742684][ T7805] Currently only 4K block size supported! [ 733.748612][ T7805] Mount JFS Failure: -22 [ 733.753220][ T7805] jfs_mount failed w/return code = -22 16:28:34 executing program 4: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000504f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) chdir(0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) [ 734.051236][ T7810] loop0: detected capacity change from 0 to 240 16:28:35 executing program 1: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)='JFS1', 0x4, 0x8000}], 0x0, &(0x7f0000064f00)) 16:28:35 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000700)=ANY=[], 0x5) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) fanotify_mark(r2, 0x1, 0x3e, r1, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x8, 0x0, 0x6, 0xfb, 0x0, 0x8, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x8, 0x3f, 0x3, 0x4, 0x0, 0x2}, 0x0, 0x0, r0, 0x8) creat(&(0x7f0000000000)='./bus\x00', 0x0) 16:28:35 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xd7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000280)="0800000001007b", 0x7) [ 734.332691][ T7815] loop4: detected capacity change from 0 to 270 [ 734.425383][ T7818] loop3: detected capacity change from 0 to 270 16:28:35 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x8) clock_adjtime(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb6da, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6fec, 0x0, 0x0, 0x200, 0x2, 0x0, 0x8, 0x3f, 0x7d1, 0x0, 0x6, 0x0, 0x9, 0x1f, 0xffffffff, 0x40}) flistxattr(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0xfffffffffffffffe, 0x1100000, &(0x7f0000002580)={[{@nojournal_checksum}, {@journal_async_commit}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota_path={'usrjquota', 0x3d, './bus/file0'}}, {@init_itable}, {@data_writeback}], [{@appraise_type}, {@dont_measure}, {@measure}, {@audit}, {@audit}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@permit_directio}, {@fowner_lt}, {@euid_lt}]}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x43, 0x0, &(0x7f0000000040)) dup2(r0, r1) r2 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f00000001c0)) getdents64(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 16:28:35 executing program 4: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000504f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) chdir(0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) [ 734.645659][ T7825] loop1: detected capacity change from 0 to 128 [ 734.667645][ T24] audit: type=1804 audit(1641745715.718:86): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir194126676/syzkaller.ZnDYnz/10/bus" dev="sda1" ino=1154 res=1 errno=0 16:28:35 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000504f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) chdir(0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) 16:28:35 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xd7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000280)="0800000001007b", 0x7) [ 734.768727][ T7825] Currently only 4K block size supported! [ 734.774704][ T7825] Mount JFS Failure: -22 [ 734.779120][ T7825] jfs_mount failed w/return code = -22 [ 734.862348][ T24] audit: type=1804 audit(1641745715.848:87): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir194126676/syzkaller.ZnDYnz/10/bus" dev="sda1" ino=1154 res=1 errno=0 [ 735.043210][ T7828] loop4: detected capacity change from 0 to 270 16:28:36 executing program 1: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)='JFS1', 0x4, 0x8000}], 0x0, &(0x7f0000064f00)) [ 735.268218][ T7834] loop0: detected capacity change from 0 to 240 16:28:36 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xd7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000280)="0800000001007b", 0x7) 16:28:36 executing program 4: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000504f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) chdir(0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) [ 735.464984][ T7836] loop3: detected capacity change from 0 to 270 16:28:36 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x8) clock_adjtime(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb6da, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6fec, 0x0, 0x0, 0x200, 0x2, 0x0, 0x8, 0x3f, 0x7d1, 0x0, 0x6, 0x0, 0x9, 0x1f, 0xffffffff, 0x40}) flistxattr(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0xfffffffffffffffe, 0x1100000, &(0x7f0000002580)={[{@nojournal_checksum}, {@journal_async_commit}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota_path={'usrjquota', 0x3d, './bus/file0'}}, {@init_itable}, {@data_writeback}], [{@appraise_type}, {@dont_measure}, {@measure}, {@audit}, {@audit}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@permit_directio}, {@fowner_lt}, {@euid_lt}]}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x43, 0x0, &(0x7f0000000040)) dup2(r0, r1) r2 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f00000001c0)) getdents64(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 16:28:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) [ 735.558349][ T7838] loop1: detected capacity change from 0 to 128 [ 735.591733][ T7838] Currently only 4K block size supported! [ 735.598572][ T7838] Mount JFS Failure: -22 [ 735.603070][ T7838] jfs_mount failed w/return code = -22 16:28:36 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000504f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) chdir(0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) [ 736.068062][ T7846] loop4: detected capacity change from 0 to 270 [ 736.350993][ T7850] loop3: detected capacity change from 0 to 270 16:28:37 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, "1e4a2d21de3b3efe07b4c310e04689216f4becf9", "63d327b40ae52e7d66e27c675333678c4973ad4a"}) 16:28:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 736.512392][ T6587] usb 3-1: new high-speed USB device number 10 using dummy_hcd 16:28:37 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8e}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x6, 0x5, 0x8, 0x3}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000100), 0x10) unshare(0x40000000) 16:28:37 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) r0 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) dup2(r1, r0) mq_unlink(&(0x7f0000000240)='eth0\x00\xe2\xdf\x9di\x04\x8e\x14(\x0e\xa2\x94c\xb6\x95\xdc\xf1i\xe7,c\xdbZ\xd2\xf4\xdd|*\x1d=\x9dT0\xcf$i\xcc!\xa0n\x9d\xa6,\xd4\xf4v\x1e\xed<\xd4\xd5\xf6\xa8\f\xe5\x9b=F\x03\x84\x9bz\x1fC\xa8+\x1cJ{\xc3\xba\x8e\n\x95\xea\x89\r7\x80\x01>\xeb\xb9\x16FK\xf2\xeaqN-\x1e\xa4a*\x8c\xf8\xbc+,%\xfc~E\'\x96\x1dw\x93\x1d\x00\x00\x00\x00\x00\x00j^\x8f\xb34s,\xbf\xb06\xdc\x82b\xeb\x10WI\x94\x9d\x1b\xdd\xc7\x89\x11\x84L\xce$1\v\xa6\x87O8\'\x8cP\xd7\"zL\x80\x98\xf31\x06Y\xe0\x03z\v] \xa9^$\x05i\xb7\x9a\xbe\x01\xc3}\xc7\xc8\x8d\x04\x0f/K7f\xab\x8af\xbcS\xa1\xfb\xe5\xfe\xa0\x89\x15W\xbe\xa7\xc0U\xd1\xdb\xd4\x9c\xc3\xd8\xae=\xe3\xf6\xfam\x1e\x1bI+\xba\xcd\x0eA6\x1b\xdfBiK\x8c\xf4\xf1\xa4\xfa\xd6\xf1\x91\xc6\xf2\xdf\xb3#\x8au\x1b.\x920\x8c\x00\x00\x00\x00\xea\x00;}\xf3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb3\xf8\xa79F\x19T\x91W\xd7O\xc5\"?\xe3w\x9e\xc3\xd3\x95\xa1[\xbdK\\\xe3Ca\xcca\x99\x1bmh\x1a4\x9f\xeb\x0f\x8d\x8d\xd0/\xa7\x19\xf1\xcf\x80\x12\xa5\f\xe4\xd7\x1d\xb5\x18,FJ\xd2\x91\xfd\x90\xc06\x06I3Js\xad\xd5qs\x0f\xcb\xbbQ!\x80\xbd\x0e\xa5c\x1b\xc7\x0e\xc5\xa2\xd0\xfdyj`\xe1\xee\xa8\xb3%\xae\xf3\xb9\xfaJ\xbd\xc8\xb1\xddB\x94x7\'\r\"\x7f\xd5\xe8\x1d\xd4\xf9\"\xb4B\\\xa9\xeeF\t\x9b\xd5^\x1d\xf5\xedN!T\xe0S\xc3~:\x94\xeb\xa9\xe2\x86\xffC6*\x9f8\xdfX\x18\x9f\xc1\x1c\xa6+P\xbe]\xb0\xf3\x95\xfe\x96d\xb0\xaepD\b\x9a\x8a\xa1\n\x06[\xd2\t\xd1\x00\xb8\x16cs\xb1\xf7\x01W\x80\\\x869\x89U\xb02\v\x84\xe9M\xa6\x10\x8e\x06\x06\xdc\x8ad\xd3x\x97\x1bP,\x10Q\a\xd3\x96\xb4\x85p\x0f\xf8\xcf\xba\x81\xb1\x00'/523) 16:28:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) clock_nanosleep(0x4, 0x1, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0x1) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(0x0, &(0x7f0000008000/0x4000)=nil, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) 16:28:37 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) dup2(r0, r1) [ 736.895461][ T6587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.907554][ T6587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.918464][ T6587] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 736.927742][ T6587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.100038][ T6587] usb 3-1: config 0 descriptor?? 16:28:38 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = io_uring_setup(0x3b39, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = gettid() tkill(r3, 0x40) 16:28:38 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}}, 0x0) [ 737.606252][ T6587] cm6533_jd 0003:0D8C:0022.0003: No inputs registered, leaving [ 737.784124][ T6587] cm6533_jd 0003:0D8C:0022.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 737.876295][ T3554] usb 3-1: USB disconnect, device number 10 16:28:39 executing program 3: bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9c047, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getpid() perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280), 0x2c) 16:28:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x69) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) [ 738.297026][ T7859] not chained 3770000 origins [ 738.302089][ T7859] CPU: 1 PID: 7859 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0 [ 738.310825][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 738.320908][ T7859] Call Trace: [ 738.324204][ T7859] [ 738.327150][ T7859] dump_stack_lvl+0x1ff/0x28e [ 738.331882][ T7859] dump_stack+0x25/0x28 [ 738.336081][ T7859] kmsan_internal_chain_origin+0x78/0x110 [ 738.341849][ T7859] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 738.347968][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 738.353479][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 738.359353][ T7859] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 738.364947][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 738.370115][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 738.375982][ T7859] ? should_fail+0x75/0x9c0 [ 738.380533][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 738.385698][ T7859] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 738.392001][ T7859] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 738.398215][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 738.403380][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 738.409246][ T7859] __msan_chain_origin+0xbf/0x140 [ 738.414335][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 738.419512][ T7859] get_compat_msghdr+0x108/0x2c0 [ 738.424526][ T7859] ? __sys_recvmmsg+0x51c/0x6f0 [ 738.429433][ T7859] do_recvmmsg+0xd77/0x2120 [ 738.433988][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 738.439870][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 738.445934][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 738.451103][ T7859] ? cgroup_bpf_attach+0xe0/0x2640 [ 738.456274][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 738.461442][ T7859] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 738.467749][ T7859] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 738.474312][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 738.479064][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 738.485459][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 738.490543][ T7859] do_fast_syscall_32+0x34/0x70 [ 738.495481][ T7859] do_SYSENTER_32+0x1b/0x20 [ 738.500041][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 738.506429][ T7859] RIP: 0023:0xf6e87549 [ 738.510521][ T7859] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 738.530174][ T7859] RSP: 002b:00000000f58605bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 738.538626][ T7859] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 738.546636][ T7859] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 738.554633][ T7859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 738.562624][ T7859] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 738.570623][ T7859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 738.578633][ T7859] [ 738.583424][ T7859] Uninit was stored to memory at: [ 738.588511][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 738.593882][ T7859] get_compat_msghdr+0x108/0x2c0 [ 738.598851][ T7859] do_recvmmsg+0xd77/0x2120 [ 738.603485][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 738.608203][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 738.614652][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 738.619718][ T7859] do_fast_syscall_32+0x34/0x70 [ 738.624691][ T7859] do_SYSENTER_32+0x1b/0x20 [ 738.629325][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 738.635779][ T7859] [ 738.638105][ T7859] Uninit was stored to memory at: [ 738.643257][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 738.648427][ T7859] get_compat_msghdr+0x108/0x2c0 [ 738.653482][ T7859] do_recvmmsg+0xd77/0x2120 [ 738.658027][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 738.662829][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 738.669193][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 738.674339][ T7859] do_fast_syscall_32+0x34/0x70 [ 738.679228][ T7859] do_SYSENTER_32+0x1b/0x20 [ 738.683847][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 738.690215][ T7859] [ 738.692617][ T7859] Uninit was stored to memory at: [ 738.697694][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 738.702913][ T7859] get_compat_msghdr+0x108/0x2c0 [ 738.704580][ T7872] infiniband syz2: set active [ 738.707878][ T7859] do_recvmmsg+0xd77/0x2120 [ 738.712704][ T7872] infiniband syz2: added syz_tun [ 738.717147][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 738.726842][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 738.733296][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 738.738377][ T7859] do_fast_syscall_32+0x34/0x70 [ 738.743385][ T7859] do_SYSENTER_32+0x1b/0x20 [ 738.747941][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 738.754941][ T7859] [ 738.757272][ T7859] Uninit was stored to memory at: [ 738.762451][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 738.767599][ T7859] get_compat_msghdr+0x108/0x2c0 [ 738.772672][ T7859] do_recvmmsg+0xd77/0x2120 [ 738.777224][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 738.782048][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 738.788426][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 738.793599][ T7859] do_fast_syscall_32+0x34/0x70 [ 738.798503][ T7859] do_SYSENTER_32+0x1b/0x20 [ 738.803154][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 738.809623][ T7859] [ 738.812039][ T7859] Uninit was stored to memory at: [ 738.817120][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 738.822360][ T7859] get_compat_msghdr+0x108/0x2c0 [ 738.827336][ T7859] do_recvmmsg+0xd77/0x2120 [ 738.831970][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 738.836695][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 738.843157][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 738.848234][ T7859] do_fast_syscall_32+0x34/0x70 [ 738.853230][ T7859] do_SYSENTER_32+0x1b/0x20 [ 738.857787][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 738.864327][ T7859] [ 738.866659][ T7859] Uninit was stored to memory at: [ 738.871739][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 738.876970][ T7859] get_compat_msghdr+0x108/0x2c0 [ 738.882035][ T7859] do_recvmmsg+0xd77/0x2120 [ 738.886585][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 738.891310][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 738.897839][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 738.903013][ T7859] do_fast_syscall_32+0x34/0x70 [ 738.907916][ T7859] do_SYSENTER_32+0x1b/0x20 [ 738.912606][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 738.918991][ T7859] [ 738.921368][ T7859] Uninit was stored to memory at: [ 738.926588][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 738.931739][ T7859] get_compat_msghdr+0x108/0x2c0 [ 738.936858][ T7859] do_recvmmsg+0xd77/0x2120 [ 738.941408][ T7859] __sys_recvmmsg+0x51c/0x6f0 16:28:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) 16:28:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}}, 0x0) [ 738.946296][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 738.952773][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 738.957864][ T7859] do_fast_syscall_32+0x34/0x70 [ 738.962908][ T7859] do_SYSENTER_32+0x1b/0x20 [ 738.967462][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 738.973981][ T7859] [ 738.976314][ T7859] Local variable msg_sys created at: [ 738.981613][ T7859] do_recvmmsg+0xbb/0x2120 [ 738.986307][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 739.067765][ T7872] infiniband syz2: Couldn't open port 1 [ 739.389368][ T7872] RDS/IB: syz2: added [ 739.393667][ T7872] smc: adding ib device syz2 with port count 1 [ 739.399928][ T7872] smc: ib device syz2 port 1 has pnetid 16:28:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x69) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) [ 739.809142][ T6587] usb 3-1: new high-speed USB device number 11 using dummy_hcd 16:28:40 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) [ 740.222827][ T6587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.234059][ T6587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.244099][ T6587] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 740.254356][ T6587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.599498][ T7859] not chained 3780000 origins [ 740.604875][ T7859] CPU: 0 PID: 7859 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0 [ 740.613603][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.623690][ T7859] Call Trace: [ 740.626994][ T7859] [ 740.629948][ T7859] dump_stack_lvl+0x1ff/0x28e [ 740.634692][ T7859] dump_stack+0x25/0x28 [ 740.638900][ T7859] kmsan_internal_chain_origin+0x78/0x110 [ 740.644679][ T7859] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 740.650801][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 740.655965][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 740.661840][ T7859] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 740.667439][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 740.672604][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 740.678561][ T7859] ? should_fail+0x75/0x9c0 [ 740.683117][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 740.688301][ T7859] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 740.694608][ T7859] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 740.700732][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 740.705901][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 740.711765][ T7859] __msan_chain_origin+0xbf/0x140 [ 740.716843][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 740.722025][ T7859] get_compat_msghdr+0x108/0x2c0 [ 740.727034][ T7859] ? __sys_recvmmsg+0x51c/0x6f0 [ 740.731944][ T7859] do_recvmmsg+0xd77/0x2120 [ 740.736498][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 740.742367][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 740.748249][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 740.753414][ T7859] ? cgroup_bpf_attach+0xe0/0x2640 [ 740.758590][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 740.763757][ T7859] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 740.770058][ T7859] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 740.776618][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 740.781366][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 740.787764][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 740.792848][ T7859] do_fast_syscall_32+0x34/0x70 [ 740.797755][ T7859] do_SYSENTER_32+0x1b/0x20 [ 740.802315][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 740.808706][ T7859] RIP: 0023:0xf6e87549 [ 740.812805][ T7859] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 740.832550][ T7859] RSP: 002b:00000000f58605bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 740.841015][ T7859] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 740.849030][ T7859] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 740.857040][ T7859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 740.865046][ T7859] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 740.873048][ T7859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 740.881067][ T7859] [ 740.884307][ T7859] Uninit was stored to memory at: [ 740.889404][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 740.894673][ T7859] get_compat_msghdr+0x108/0x2c0 [ 740.899754][ T7859] do_recvmmsg+0xd77/0x2120 [ 740.904438][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 740.909166][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 740.915658][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 740.920734][ T7859] do_fast_syscall_32+0x34/0x70 [ 740.925745][ T7859] do_SYSENTER_32+0x1b/0x20 [ 740.930297][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 740.936803][ T7859] [ 740.939129][ T7859] Uninit was stored to memory at: [ 740.944305][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 740.949453][ T7859] get_compat_msghdr+0x108/0x2c0 [ 740.954523][ T7859] do_recvmmsg+0xd77/0x2120 [ 740.959074][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 740.963885][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 740.970253][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 740.975427][ T7859] do_fast_syscall_32+0x34/0x70 [ 740.980326][ T7859] do_SYSENTER_32+0x1b/0x20 [ 740.984973][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 740.991345][ T7859] [ 740.993778][ T7859] Uninit was stored to memory at: [ 740.998856][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 741.004100][ T7859] get_compat_msghdr+0x108/0x2c0 [ 741.009071][ T7859] do_recvmmsg+0xd77/0x2120 [ 741.013715][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 741.018431][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 741.024897][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 741.029967][ T7859] do_fast_syscall_32+0x34/0x70 [ 741.034956][ T7859] do_SYSENTER_32+0x1b/0x20 [ 741.039499][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 741.045969][ T7859] [ 741.048295][ T7859] Uninit was stored to memory at: [ 741.053989][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 741.059130][ T7859] get_compat_msghdr+0x108/0x2c0 [ 741.064196][ T7859] do_recvmmsg+0xd77/0x2120 [ 741.068744][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 741.073562][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 741.079932][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 741.085098][ T7859] do_fast_syscall_32+0x34/0x70 [ 741.089986][ T7859] do_SYSENTER_32+0x1b/0x20 [ 741.094713][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 741.101085][ T7859] [ 741.103506][ T7859] Uninit was stored to memory at: [ 741.108579][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 741.113823][ T7859] get_compat_msghdr+0x108/0x2c0 [ 741.118787][ T7859] do_recvmmsg+0xd77/0x2120 [ 741.123429][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 741.128148][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 741.134627][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 741.139695][ T7859] do_fast_syscall_32+0x34/0x70 [ 741.144798][ T7859] do_SYSENTER_32+0x1b/0x20 [ 741.149377][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 741.155936][ T7859] [ 741.158265][ T7859] Uninit was stored to memory at: [ 741.163436][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 741.168578][ T7859] get_compat_msghdr+0x108/0x2c0 [ 741.173648][ T7859] do_recvmmsg+0xd77/0x2120 [ 741.178191][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 741.183006][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 741.189379][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 741.194551][ T7859] do_fast_syscall_32+0x34/0x70 [ 741.199439][ T7859] do_SYSENTER_32+0x1b/0x20 [ 741.204080][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 741.210453][ T7859] [ 741.212874][ T7859] Uninit was stored to memory at: [ 741.217951][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 741.223187][ T7859] get_compat_msghdr+0x108/0x2c0 [ 741.228156][ T7859] do_recvmmsg+0xd77/0x2120 [ 741.232804][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 741.237552][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 741.244018][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 741.249093][ T7859] do_fast_syscall_32+0x34/0x70 [ 741.254117][ T7859] do_SYSENTER_32+0x1b/0x20 [ 741.258671][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 741.265153][ T7859] [ 741.267491][ T7859] Local variable msg_sys created at: [ 741.272904][ T7859] do_recvmmsg+0xbb/0x2120 [ 741.277371][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 741.865808][ T7859] not chained 3790000 origins [ 741.870528][ T7859] CPU: 1 PID: 7859 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0 [ 741.879249][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 741.889341][ T7859] Call Trace: [ 741.892637][ T7859] [ 741.895582][ T7859] dump_stack_lvl+0x1ff/0x28e [ 741.900325][ T7859] dump_stack+0x25/0x28 [ 741.904535][ T7859] kmsan_internal_chain_origin+0x78/0x110 [ 741.910311][ T7859] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 741.916431][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 741.921595][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 741.927460][ T7859] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 741.933052][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 741.938216][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 741.944087][ T7859] ? should_fail+0x75/0x9c0 [ 741.948638][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 741.954148][ T7859] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 741.960446][ T7859] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 741.966569][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 741.971730][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 741.977594][ T7859] __msan_chain_origin+0xbf/0x140 [ 741.982665][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 741.987923][ T7859] get_compat_msghdr+0x108/0x2c0 [ 741.992999][ T7859] ? __sys_recvmmsg+0x51c/0x6f0 [ 741.997908][ T7859] do_recvmmsg+0xd77/0x2120 [ 742.002465][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 742.008335][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 742.014210][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 742.019375][ T7859] ? cgroup_bpf_attach+0xe0/0x2640 [ 742.024541][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 742.029698][ T7859] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 742.035990][ T7859] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 742.042543][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 742.047290][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 742.053673][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 742.058745][ T7859] do_fast_syscall_32+0x34/0x70 [ 742.063638][ T7859] do_SYSENTER_32+0x1b/0x20 [ 742.068194][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 742.074570][ T7859] RIP: 0023:0xf6e87549 [ 742.078659][ T7859] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 742.098308][ T7859] RSP: 002b:00000000f58605bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 742.106761][ T7859] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 742.114787][ T7859] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 742.122781][ T7859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 742.130774][ T7859] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 742.138767][ T7859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 742.146774][ T7859] [ 742.151482][ T7859] Uninit was stored to memory at: [ 742.156784][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 742.162009][ T7859] get_compat_msghdr+0x108/0x2c0 [ 742.166979][ T7859] do_recvmmsg+0xd77/0x2120 [ 742.171520][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 742.176325][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 742.182765][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 742.187833][ T7859] do_fast_syscall_32+0x34/0x70 [ 742.192799][ T7859] do_SYSENTER_32+0x1b/0x20 [ 742.197343][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 742.203789][ T7859] [ 742.206119][ T7859] Uninit was stored to memory at: [ 742.211193][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 742.216441][ T7859] get_compat_msghdr+0x108/0x2c0 [ 742.221409][ T7859] do_recvmmsg+0xd77/0x2120 [ 742.226026][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 742.230762][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 742.237230][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 742.242375][ T7859] do_fast_syscall_32+0x34/0x70 [ 742.247268][ T7859] do_SYSENTER_32+0x1b/0x20 [ 742.251890][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 742.258262][ T7859] [ 742.260599][ T7859] Uninit was stored to memory at: [ 742.265750][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 742.270893][ T7859] get_compat_msghdr+0x108/0x2c0 [ 742.275934][ T7859] do_recvmmsg+0xd77/0x2120 [ 742.280481][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 742.285272][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 742.291645][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 742.296788][ T7859] do_fast_syscall_32+0x34/0x70 [ 742.301682][ T7859] do_SYSENTER_32+0x1b/0x20 [ 742.306297][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 742.312748][ T7859] [ 742.315078][ T7859] Uninit was stored to memory at: [ 742.320148][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 742.325370][ T7859] get_compat_msghdr+0x108/0x2c0 [ 742.330345][ T7859] do_recvmmsg+0xd77/0x2120 [ 742.335050][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 742.339859][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 742.346335][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 742.351413][ T7859] do_fast_syscall_32+0x34/0x70 [ 742.356390][ T7859] do_SYSENTER_32+0x1b/0x20 [ 742.360937][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 742.367505][ T7859] [ 742.369846][ T7859] Uninit was stored to memory at: [ 742.375039][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 742.380294][ T7859] get_compat_msghdr+0x108/0x2c0 [ 742.385359][ T7859] do_recvmmsg+0xd77/0x2120 [ 742.389908][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 742.394715][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 742.401083][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 742.406238][ T7859] do_fast_syscall_32+0x34/0x70 [ 742.411143][ T7859] do_SYSENTER_32+0x1b/0x20 [ 742.415771][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 742.422223][ T7859] [ 742.424591][ T7859] Uninit was stored to memory at: [ 742.429665][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 742.434885][ T7859] get_compat_msghdr+0x108/0x2c0 [ 742.439858][ T7859] do_recvmmsg+0xd77/0x2120 [ 742.444479][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 742.449200][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 742.455649][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 742.460717][ T7859] do_fast_syscall_32+0x34/0x70 [ 742.465713][ T7859] do_SYSENTER_32+0x1b/0x20 [ 742.470275][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 742.476746][ T7859] [ 742.479075][ T7859] Uninit was stored to memory at: [ 742.484227][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 742.489466][ T7859] get_compat_msghdr+0x108/0x2c0 [ 742.494538][ T7859] do_recvmmsg+0xd77/0x2120 [ 742.499092][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 742.503892][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 742.510271][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 742.515439][ T7859] do_fast_syscall_32+0x34/0x70 [ 742.520336][ T7859] do_SYSENTER_32+0x1b/0x20 [ 742.524959][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 742.531335][ T7859] [ 742.533745][ T7859] Local variable msg_sys created at: [ 742.539116][ T7859] do_recvmmsg+0xbb/0x2120 [ 742.543732][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 742.985665][ T7859] not chained 3800000 origins [ 742.990384][ T7859] CPU: 0 PID: 7859 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0 [ 742.999093][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 743.009169][ T7859] Call Trace: [ 743.012459][ T7859] [ 743.015401][ T7859] dump_stack_lvl+0x1ff/0x28e [ 743.020129][ T7859] dump_stack+0x25/0x28 [ 743.024322][ T7859] kmsan_internal_chain_origin+0x78/0x110 [ 743.030087][ T7859] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 743.036199][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 743.041357][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 743.047215][ T7859] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 743.052803][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 743.057961][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 743.063816][ T7859] ? should_fail+0x75/0x9c0 [ 743.068359][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 743.073511][ T7859] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 743.079804][ T7859] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 743.086011][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 743.091164][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 743.097027][ T7859] __msan_chain_origin+0xbf/0x140 [ 743.102122][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 743.107291][ T7859] get_compat_msghdr+0x108/0x2c0 [ 743.112274][ T7859] ? __sys_recvmmsg+0x51c/0x6f0 [ 743.117173][ T7859] do_recvmmsg+0xd77/0x2120 [ 743.121715][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 743.127576][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 743.133438][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 743.138592][ T7859] ? cgroup_bpf_attach+0xe0/0x2640 [ 743.143928][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 743.149082][ T7859] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 743.155382][ T7859] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 743.161936][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 743.166674][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 743.173052][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 743.178122][ T7859] do_fast_syscall_32+0x34/0x70 [ 743.183020][ T7859] do_SYSENTER_32+0x1b/0x20 [ 743.187565][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 743.193960][ T7859] RIP: 0023:0xf6e87549 [ 743.198076][ T7859] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 743.217721][ T7859] RSP: 002b:00000000f58605bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 743.226174][ T7859] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 743.234173][ T7859] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 743.242166][ T7859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 743.250161][ T7859] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 743.258161][ T7859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 743.266173][ T7859] [ 743.270916][ T7859] Uninit was stored to memory at: [ 743.276226][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 743.281374][ T7859] get_compat_msghdr+0x108/0x2c0 [ 743.286455][ T7859] do_recvmmsg+0xd77/0x2120 [ 743.291147][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 743.296009][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 743.302502][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 743.307588][ T7859] do_fast_syscall_32+0x34/0x70 [ 743.312598][ T7859] do_SYSENTER_32+0x1b/0x20 [ 743.317148][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 743.323674][ T7859] [ 743.326008][ T7859] Uninit was stored to memory at: [ 743.331086][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 743.336344][ T7859] get_compat_msghdr+0x108/0x2c0 [ 743.341318][ T7859] do_recvmmsg+0xd77/0x2120 [ 743.345968][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 743.350685][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 743.357159][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 743.362443][ T7859] do_fast_syscall_32+0x34/0x70 [ 743.367339][ T7859] do_SYSENTER_32+0x1b/0x20 [ 743.371980][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 743.378354][ T7859] [ 743.380684][ T7859] Uninit was stored to memory at: [ 743.385864][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 743.391005][ T7859] get_compat_msghdr+0x108/0x2c0 [ 743.396076][ T7859] do_recvmmsg+0xd77/0x2120 [ 743.400618][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 743.405430][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 743.411901][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 743.416970][ T7859] do_fast_syscall_32+0x34/0x70 [ 743.421970][ T7859] do_SYSENTER_32+0x1b/0x20 [ 743.426512][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 743.432984][ T7859] [ 743.435313][ T7859] Uninit was stored to memory at: [ 743.440393][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 743.445667][ T7859] get_compat_msghdr+0x108/0x2c0 [ 743.450644][ T7859] do_recvmmsg+0xd77/0x2120 [ 743.455315][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 743.460045][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 743.466538][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 743.471614][ T7859] do_fast_syscall_32+0x34/0x70 [ 743.476634][ T7859] do_SYSENTER_32+0x1b/0x20 [ 743.481185][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 743.487796][ T7859] [ 743.490309][ T7859] Uninit was stored to memory at: [ 743.495527][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 743.500675][ T7859] get_compat_msghdr+0x108/0x2c0 [ 743.505757][ T7859] do_recvmmsg+0xd77/0x2120 [ 743.510309][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 743.515146][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 743.521522][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 743.526698][ T7859] do_fast_syscall_32+0x34/0x70 [ 743.531592][ T7859] do_SYSENTER_32+0x1b/0x20 [ 743.536243][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 743.542720][ T7859] [ 743.545047][ T7859] Uninit was stored to memory at: [ 743.550119][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 743.555378][ T7859] get_compat_msghdr+0x108/0x2c0 [ 743.560351][ T7859] do_recvmmsg+0xd77/0x2120 [ 743.565083][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 743.569805][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 743.576302][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 743.581381][ T7859] do_fast_syscall_32+0x34/0x70 [ 743.586378][ T7859] do_SYSENTER_32+0x1b/0x20 [ 743.590922][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 743.597402][ T7859] [ 743.599730][ T7859] Uninit was stored to memory at: [ 743.604905][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 743.610047][ T7859] get_compat_msghdr+0x108/0x2c0 [ 743.615111][ T7859] do_recvmmsg+0xd77/0x2120 [ 743.619741][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 743.624554][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 743.630921][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 743.636083][ T7859] do_fast_syscall_32+0x34/0x70 [ 743.640971][ T7859] do_SYSENTER_32+0x1b/0x20 [ 743.645613][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 743.652083][ T7859] [ 743.654411][ T7859] Local variable msg_sys created at: [ 743.659691][ T7859] do_recvmmsg+0xbb/0x2120 [ 743.664274][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 743.827653][ T6587] usb 3-1: config 0 descriptor?? [ 743.852600][ T6587] usb 3-1: can't set config #0, error -71 [ 743.871417][ T6587] usb 3-1: USB disconnect, device number 11 [ 744.465803][ T7859] not chained 3810000 origins [ 744.470529][ T7859] CPU: 0 PID: 7859 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0 [ 744.479339][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 744.489421][ T7859] Call Trace: [ 744.492716][ T7859] [ 744.495668][ T7859] dump_stack_lvl+0x1ff/0x28e [ 744.500406][ T7859] dump_stack+0x25/0x28 [ 744.504609][ T7859] kmsan_internal_chain_origin+0x78/0x110 [ 744.510385][ T7859] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 744.516504][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 744.521665][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 744.527529][ T7859] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 744.533121][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 744.538289][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 744.544148][ T7859] ? should_fail+0x75/0x9c0 [ 744.548782][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 744.554120][ T7859] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 744.560417][ T7859] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 744.566538][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 744.571696][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 744.577558][ T7859] __msan_chain_origin+0xbf/0x140 [ 744.582628][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 744.587805][ T7859] get_compat_msghdr+0x108/0x2c0 [ 744.592793][ T7859] ? __sys_recvmmsg+0x51c/0x6f0 [ 744.597700][ T7859] do_recvmmsg+0xd77/0x2120 [ 744.602249][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 744.608111][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 744.614081][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 744.619242][ T7859] ? cgroup_bpf_attach+0xe0/0x2640 [ 744.624408][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 744.629567][ T7859] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 744.635865][ T7859] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 744.642428][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 744.647178][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 744.653561][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 744.658653][ T7859] do_fast_syscall_32+0x34/0x70 [ 744.663558][ T7859] do_SYSENTER_32+0x1b/0x20 [ 744.668111][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 744.674492][ T7859] RIP: 0023:0xf6e87549 [ 744.678586][ T7859] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 744.698235][ T7859] RSP: 002b:00000000f58605bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 744.706690][ T7859] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 744.714692][ T7859] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 744.722690][ T7859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 744.730775][ T7859] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 744.738867][ T7859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 744.746884][ T7859] [ 744.755297][ T7859] Uninit was stored to memory at: [ 744.760397][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 744.766716][ T7859] get_compat_msghdr+0x108/0x2c0 [ 744.771704][ T7859] do_recvmmsg+0xd77/0x2120 [ 744.776369][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 744.781094][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 744.787585][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 744.792778][ T7859] do_fast_syscall_32+0x34/0x70 [ 744.797678][ T7859] do_SYSENTER_32+0x1b/0x20 [ 744.802326][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 744.808708][ T7859] [ 744.811039][ T7859] Uninit was stored to memory at: [ 744.816240][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 744.821392][ T7859] get_compat_msghdr+0x108/0x2c0 [ 744.826484][ T7859] do_recvmmsg+0xd77/0x2120 [ 744.831038][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 744.835875][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 744.842366][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 744.847439][ T7859] do_fast_syscall_32+0x34/0x70 [ 744.852428][ T7859] do_SYSENTER_32+0x1b/0x20 [ 744.856972][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 744.863463][ T7859] [ 744.865792][ T7859] Uninit was stored to memory at: [ 744.870870][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 744.876135][ T7859] get_compat_msghdr+0x108/0x2c0 [ 744.881107][ T7859] do_recvmmsg+0xd77/0x2120 [ 744.885775][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 744.890506][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 744.896997][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 744.902221][ T7859] do_fast_syscall_32+0x34/0x70 [ 744.907117][ T7859] do_SYSENTER_32+0x1b/0x20 [ 744.911661][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 744.918255][ T7859] [ 744.920585][ T7859] Uninit was stored to memory at: [ 744.925830][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 744.930989][ T7859] get_compat_msghdr+0x108/0x2c0 [ 744.936134][ T7859] do_recvmmsg+0xd77/0x2120 [ 744.940683][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 744.945573][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 744.952063][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 744.957135][ T7859] do_fast_syscall_32+0x34/0x70 [ 744.962183][ T7859] do_SYSENTER_32+0x1b/0x20 [ 744.966724][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 744.973208][ T7859] [ 744.975542][ T7859] Uninit was stored to memory at: [ 744.980621][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 744.985937][ T7859] get_compat_msghdr+0x108/0x2c0 [ 744.990912][ T7859] do_recvmmsg+0xd77/0x2120 [ 744.995629][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 745.000349][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 745.006894][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 745.012079][ T7859] do_fast_syscall_32+0x34/0x70 [ 745.016975][ T7859] do_SYSENTER_32+0x1b/0x20 [ 745.021521][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 745.028057][ T7859] [ 745.030476][ T7859] Uninit was stored to memory at: [ 745.035719][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 745.040867][ T7859] get_compat_msghdr+0x108/0x2c0 [ 745.046099][ T7859] do_recvmmsg+0xd77/0x2120 [ 745.050649][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 745.055536][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 745.062016][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 745.067088][ T7859] do_fast_syscall_32+0x34/0x70 [ 745.072139][ T7859] do_SYSENTER_32+0x1b/0x20 [ 745.076689][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 745.083234][ T7859] [ 745.085566][ T7859] Uninit was stored to memory at: [ 745.090642][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 745.095958][ T7859] get_compat_msghdr+0x108/0x2c0 [ 745.100943][ T7859] do_recvmmsg+0xd77/0x2120 [ 745.105656][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 745.110378][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 745.116913][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 745.122094][ T7859] do_fast_syscall_32+0x34/0x70 [ 745.126992][ T7859] do_SYSENTER_32+0x1b/0x20 [ 745.131535][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 745.138074][ T7859] [ 745.140409][ T7859] Local variable msg_sys created at: [ 745.145948][ T7859] do_recvmmsg+0xbb/0x2120 [ 745.150407][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 745.349890][ T7859] not chained 3820000 origins [ 745.354712][ T7859] CPU: 0 PID: 7859 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0 [ 745.363423][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 745.373505][ T7859] Call Trace: [ 745.376795][ T7859] [ 745.379738][ T7859] dump_stack_lvl+0x1ff/0x28e [ 745.384471][ T7859] dump_stack+0x25/0x28 [ 745.388675][ T7859] kmsan_internal_chain_origin+0x78/0x110 [ 745.394449][ T7859] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 745.400559][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 745.405718][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 745.411582][ T7859] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 745.417171][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 745.422332][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 745.428191][ T7859] ? should_fail+0x75/0x9c0 [ 745.432737][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 745.437893][ T7859] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 745.444181][ T7859] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 745.450307][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 745.455461][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 745.461318][ T7859] __msan_chain_origin+0xbf/0x140 [ 745.466387][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 745.471568][ T7859] get_compat_msghdr+0x108/0x2c0 [ 745.476551][ T7859] ? __sys_recvmmsg+0x51c/0x6f0 [ 745.481465][ T7859] do_recvmmsg+0xd77/0x2120 [ 745.486012][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 745.491883][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 745.497758][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 745.502924][ T7859] ? cgroup_bpf_attach+0xe0/0x2640 [ 745.508093][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 745.513254][ T7859] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 745.519555][ T7859] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 745.526117][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 745.530856][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 745.537853][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 745.542937][ T7859] do_fast_syscall_32+0x34/0x70 [ 745.547834][ T7859] do_SYSENTER_32+0x1b/0x20 [ 745.552389][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 745.558769][ T7859] RIP: 0023:0xf6e87549 [ 745.562859][ T7859] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 745.582514][ T7859] RSP: 002b:00000000f58605bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 745.590968][ T7859] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 745.598969][ T7859] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 745.607138][ T7859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 745.615134][ T7859] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 745.623148][ T7859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 745.631156][ T7859] [ 745.637334][ T7859] Uninit was stored to memory at: [ 745.643062][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 745.648213][ T7859] get_compat_msghdr+0x108/0x2c0 [ 745.653302][ T7859] do_recvmmsg+0xd77/0x2120 [ 745.657853][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 745.662693][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 745.669064][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 745.674243][ T7859] do_fast_syscall_32+0x34/0x70 [ 745.679225][ T7859] do_SYSENTER_32+0x1b/0x20 [ 745.683881][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 745.690259][ T7859] [ 745.692685][ T7859] Uninit was stored to memory at: [ 745.697759][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 745.703104][ T7859] get_compat_msghdr+0x108/0x2c0 [ 745.708079][ T7859] do_recvmmsg+0xd77/0x2120 [ 745.712738][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 745.717462][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 745.723962][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 745.729038][ T7859] do_fast_syscall_32+0x34/0x70 [ 745.734042][ T7859] do_SYSENTER_32+0x1b/0x20 [ 745.738591][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 745.745082][ T7859] [ 745.747412][ T7859] Uninit was stored to memory at: [ 745.752638][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 745.757787][ T7859] get_compat_msghdr+0x108/0x2c0 [ 745.762905][ T7859] do_recvmmsg+0xd77/0x2120 [ 745.767449][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 745.772278][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 745.778649][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 745.783814][ T7859] do_fast_syscall_32+0x34/0x70 [ 745.788716][ T7859] do_SYSENTER_32+0x1b/0x20 [ 745.793408][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 745.799785][ T7859] [ 745.802260][ T7859] Uninit was stored to memory at: [ 745.807329][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 745.812612][ T7859] get_compat_msghdr+0x108/0x2c0 [ 745.817584][ T7859] do_recvmmsg+0xd77/0x2120 [ 745.822367][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 745.827091][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 745.833614][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 745.838684][ T7859] do_fast_syscall_32+0x34/0x70 [ 745.843674][ T7859] do_SYSENTER_32+0x1b/0x20 [ 745.848218][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 745.854742][ T7859] [ 745.857072][ T7859] Uninit was stored to memory at: [ 745.862285][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 745.867438][ T7859] get_compat_msghdr+0x108/0x2c0 [ 745.872636][ T7859] do_recvmmsg+0xd77/0x2120 [ 745.877185][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 745.882027][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 745.888405][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 745.893597][ T7859] do_fast_syscall_32+0x34/0x70 [ 745.898494][ T7859] do_SYSENTER_32+0x1b/0x20 [ 745.903185][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 745.909566][ T7859] [ 745.912030][ T7859] Uninit was stored to memory at: [ 745.917113][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 745.922379][ T7859] get_compat_msghdr+0x108/0x2c0 [ 745.927357][ T7859] do_recvmmsg+0xd77/0x2120 [ 745.932045][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 745.936766][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 745.943286][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 745.948361][ T7859] do_fast_syscall_32+0x34/0x70 [ 745.953427][ T7859] do_SYSENTER_32+0x1b/0x20 [ 745.957977][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 745.964526][ T7859] [ 745.966856][ T7859] Uninit was stored to memory at: [ 745.972071][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 745.977213][ T7859] get_compat_msghdr+0x108/0x2c0 [ 745.982326][ T7859] do_recvmmsg+0xd77/0x2120 [ 745.986877][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 745.991579][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 745.998051][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 746.003232][ T7859] do_fast_syscall_32+0x34/0x70 [ 746.008129][ T7859] do_SYSENTER_32+0x1b/0x20 [ 746.012819][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 746.019206][ T7859] [ 746.021542][ T7859] Local variable msg_sys created at: [ 746.027011][ T7859] do_recvmmsg+0xbb/0x2120 [ 746.031483][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 746.206452][ T7859] not chained 3830000 origins [ 746.211165][ T7859] CPU: 1 PID: 7859 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0 [ 746.219856][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.229922][ T7859] Call Trace: [ 746.233205][ T7859] [ 746.236149][ T7859] dump_stack_lvl+0x1ff/0x28e [ 746.240879][ T7859] dump_stack+0x25/0x28 [ 746.245055][ T7859] kmsan_internal_chain_origin+0x78/0x110 [ 746.250802][ T7859] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 746.256902][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 746.262063][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 746.267920][ T7859] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 746.273490][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 746.278649][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 746.284504][ T7859] ? should_fail+0x75/0x9c0 [ 746.289027][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 746.294168][ T7859] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 746.300459][ T7859] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 746.306588][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 746.311741][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 746.317617][ T7859] __msan_chain_origin+0xbf/0x140 [ 746.322677][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 746.327853][ T7859] get_compat_msghdr+0x108/0x2c0 [ 746.332842][ T7859] ? __sys_recvmmsg+0x51c/0x6f0 [ 746.337745][ T7859] do_recvmmsg+0xd77/0x2120 [ 746.342278][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 746.348143][ T7859] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 746.353991][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 746.359154][ T7859] ? cgroup_bpf_attach+0xe0/0x2640 [ 746.364301][ T7859] ? kmsan_get_metadata+0x33/0x220 [ 746.369462][ T7859] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 746.375739][ T7859] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 746.382299][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 746.387046][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 746.393437][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 746.398515][ T7859] do_fast_syscall_32+0x34/0x70 [ 746.403394][ T7859] do_SYSENTER_32+0x1b/0x20 [ 746.407940][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 746.414412][ T7859] RIP: 0023:0xf6e87549 [ 746.418500][ T7859] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 746.438216][ T7859] RSP: 002b:00000000f58605bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 746.446658][ T7859] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 746.454644][ T7859] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 746.462728][ T7859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 746.470720][ T7859] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 746.478703][ T7859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 746.486805][ T7859] [ 746.491685][ T7859] Uninit was stored to memory at: [ 746.497464][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 746.502809][ T7859] get_compat_msghdr+0x108/0x2c0 [ 746.507787][ T7859] do_recvmmsg+0xd77/0x2120 [ 746.512431][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 746.517247][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 746.523724][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 746.528801][ T7859] do_fast_syscall_32+0x34/0x70 [ 746.533797][ T7859] do_SYSENTER_32+0x1b/0x20 [ 746.538346][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 746.544854][ T7859] [ 746.547190][ T7859] Uninit was stored to memory at: [ 746.552412][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 746.557558][ T7859] get_compat_msghdr+0x108/0x2c0 [ 746.562673][ T7859] do_recvmmsg+0xd77/0x2120 [ 746.567229][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 746.572052][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 746.578426][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 746.583626][ T7859] do_fast_syscall_32+0x34/0x70 [ 746.588525][ T7859] do_SYSENTER_32+0x1b/0x20 [ 746.593216][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 746.599602][ T7859] [ 746.602046][ T7859] Uninit was stored to memory at: [ 746.607137][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 746.612378][ T7859] get_compat_msghdr+0x108/0x2c0 [ 746.617356][ T7859] do_recvmmsg+0xd77/0x2120 [ 746.622005][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 746.626727][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 746.633230][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 746.638310][ T7859] do_fast_syscall_32+0x34/0x70 [ 746.643370][ T7859] do_SYSENTER_32+0x1b/0x20 [ 746.648089][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 746.654612][ T7859] [ 746.656949][ T7859] Uninit was stored to memory at: [ 746.662157][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 746.667308][ T7859] get_compat_msghdr+0x108/0x2c0 [ 746.672520][ T7859] do_recvmmsg+0xd77/0x2120 [ 746.677073][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 746.681925][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 746.688393][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 746.693598][ T7859] do_fast_syscall_32+0x34/0x70 [ 746.698496][ T7859] do_SYSENTER_32+0x1b/0x20 [ 746.703188][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 746.709566][ T7859] [ 746.712026][ T7859] Uninit was stored to memory at: [ 746.717109][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 746.722400][ T7859] get_compat_msghdr+0x108/0x2c0 [ 746.727377][ T7859] do_recvmmsg+0xd77/0x2120 [ 746.732141][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 746.736869][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 746.743407][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 746.748481][ T7859] do_fast_syscall_32+0x34/0x70 [ 746.753511][ T7859] do_SYSENTER_32+0x1b/0x20 [ 746.758057][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 746.764567][ T7859] [ 746.766901][ T7859] Uninit was stored to memory at: [ 746.772097][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 746.777242][ T7859] get_compat_msghdr+0x108/0x2c0 [ 746.782345][ T7859] do_recvmmsg+0xd77/0x2120 [ 746.786894][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 746.791592][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 746.798064][ T7859] __do_fast_syscall_32+0x96/0xf0 [ 746.803225][ T7859] do_fast_syscall_32+0x34/0x70 [ 746.808126][ T7859] do_SYSENTER_32+0x1b/0x20 [ 746.812803][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 746.819184][ T7859] [ 746.821517][ T7859] Uninit was stored to memory at: [ 746.826744][ T7859] __get_compat_msghdr+0x6e1/0x9d0 [ 746.831980][ T7859] get_compat_msghdr+0x108/0x2c0 [ 746.836956][ T7859] do_recvmmsg+0xd77/0x2120 [ 746.841494][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 746.846404][ T7859] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 746.852868][ T7859] __do_fast_syscall_32+0x96/0xf0 16:28:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}}, 0x0) 16:28:47 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 16:28:47 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) chdir(0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x9000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}, 0x810, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x401ffc000) fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x4, 0x5}, {0x0, 0x6}]}, 0x14, 0x0) fallocate(r1, 0x100000011, 0x0, 0x80019e) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/210, 0xd2}], 0x1) 16:28:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x69) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 16:28:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) 16:28:47 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}}, 0x0) [ 746.857939][ T7859] do_fast_syscall_32+0x34/0x70 [ 746.862985][ T7859] do_SYSENTER_32+0x1b/0x20 [ 746.867534][ T7859] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 746.874039][ T7859] [ 746.876375][ T7859] Local variable msg_sys created at: [ 746.881659][ T7859] do_recvmmsg+0xbb/0x2120 [ 746.886207][ T7859] __sys_recvmmsg+0x51c/0x6f0 [ 747.055308][ T7900] rdma_rxe: already configured on syz_tun 16:28:48 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 16:28:48 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}}, 0x0) [ 747.422918][ T34] usb 3-1: new high-speed USB device number 12 using dummy_hcd 16:28:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x69) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) [ 747.774265][ T7911] rdma_rxe: already configured on syz_tun [ 747.822541][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.834146][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.844250][ T34] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 747.853503][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 16:28:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}}, 0x0) 16:28:49 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}}, 0x0) 16:28:49 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) [ 748.112269][ T34] usb 3-1: config 0 descriptor?? 16:28:49 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x401070ca, 0xffffffffffffffff) [ 748.746641][ T34] cm6533_jd 0003:0D8C:0022.0004: No inputs registered, leaving 16:28:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x1c, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '((\x00'}]}, 0x4c}}, 0x0) [ 748.821122][ T7921] rdma_rxe: already configured on syz_tun [ 748.851457][ T34] cm6533_jd 0003:0D8C:0022.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 749.079027][ T34] usb 3-1: USB disconnect, device number 12 16:28:50 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000002c0)={0x13, "4d4624818b0981229c0395a3bd4d9642f2dc85af2e45c96d8c3ba2f1a3d963bc"}) 16:28:50 executing program 4: r0 = syz_usb_connect(0x6, 0x1b, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x99, 0xb9, 0xf4, 0x0, 0xaf0, 0x7a01, 0xf9b2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, &(0x7f0000000940)={0x0, 0xf, 0x2, {0x2}}, 0x0, &(0x7f0000000a00)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x4}]}}, 0x0, 0x0}, &(0x7f00000010c0)={0x84, &(0x7f0000000bc0)={0x0, 0x1d}, 0x0, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000d80)={0x20, 0x0, 0x4}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0x8}, 0x0, &(0x7f0000000e40)={0x40, 0xb, 0x2, "7cb2"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x6b36}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0x7e}, &(0x7f0000001040)={0x40, 0x1e, 0x1}, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x46, 0xfd, 0x6a, 0x40, 0xb95, 0x1780, 0x6508, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xeb, 0x27, 0x70}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001540)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x40, 0x19, 0x2, "c305"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 16:28:50 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) 16:28:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}}, 0x0) 16:28:50 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000100), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 16:28:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) getpid() 16:28:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 749.852944][ T6648] usb 5-1: new high-speed USB device number 15 using dummy_hcd 16:28:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) 16:28:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) getpid() [ 750.254865][ T6648] usb 5-1: New USB device found, idVendor=0b95, idProduct=1780, bcdDevice=65.08 [ 750.264363][ T6648] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.335074][ T6648] usb 5-1: config 0 descriptor?? [ 750.362498][ T34] usb 3-1: new high-speed USB device number 13 using dummy_hcd 16:28:51 executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) [ 750.592719][ T6648] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random 16:28:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x6, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "bb"}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {0x9}, {}, {}]}, @func_proto, @restrict]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x8e, 0x0, 0x20000000}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 16:28:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) getpid() [ 750.753084][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.764438][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.774488][ T34] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 750.783755][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.022701][ T6648] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 751.033154][ T6648] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 751.060438][ T34] usb 3-1: config 0 descriptor?? 16:28:52 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1d3ede897ec9ad4635e4668fb2f30c852c4a29ba27e685cb21aca60af69f1fd133157b3a93374574537ccf957be79fda94e44a1111e71eea9178ada898359a22abba98979602e033417b6a33310c1de5c277af99794011f438a85331e0f25b5edbb20f0e6c8d548bdb94c2bf2079745bfb1e28751de0c8cd8ea226c3a1d3efcbfbc24df6a57e89e14d691df5d8e055fb79230eb3144952449c6619b7608ab31b", @ANYBLOB="000427bd7000ffdbdf251100", @ANYBLOB='\b', @ANYBLOB], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000804) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x54) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, 0x0, 0x400, 0x70bd28, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3bd}, {0x6, 0x11, 0x5670}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x40}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x8010) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, @dev, @private2}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00', @ANYRES16=0x0, @ANYBLOB="d0aa00bc13000000000000e47b000005000000080002000000000028000200000000"], 0x2c}}, 0x0) setsockopt$inet_buf(r3, 0x0, 0x40, &(0x7f0000000040), 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) clone(0x0, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1", 0x0, &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") [ 751.232531][ T6648] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 751.244240][ T6648] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 751.426262][ C1] sd 0:0:1:0: tag#2204 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 751.432070][ T6648] asix 5-1:0.0 eth9: register 'asix' at usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet, 3a:b8:af:c3:35:af [ 751.436475][ C1] sd 0:0:1:0: tag#2204 CDB: opcode=0xe5 (vendor) [ 751.454485][ C1] sd 0:0:1:0: tag#2204 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 751.463879][ C1] sd 0:0:1:0: tag#2204 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 751.473207][ C1] sd 0:0:1:0: tag#2204 CDB[20]: ba [ 751.564830][ T6648] usb 5-1: USB disconnect, device number 15 [ 751.572206][ T6648] asix 5-1:0.0 eth9: unregister 'asix' usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet 16:28:52 executing program 4: r0 = syz_usb_connect(0x6, 0x1b, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x99, 0xb9, 0xf4, 0x0, 0xaf0, 0x7a01, 0xf9b2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, &(0x7f0000000940)={0x0, 0xf, 0x2, {0x2}}, 0x0, &(0x7f0000000a00)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x4}]}}, 0x0, 0x0}, &(0x7f00000010c0)={0x84, &(0x7f0000000bc0)={0x0, 0x1d}, 0x0, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000d80)={0x20, 0x0, 0x4}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0x8}, 0x0, &(0x7f0000000e40)={0x40, 0xb, 0x2, "7cb2"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x6b36}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0x7e}, &(0x7f0000001040)={0x40, 0x1e, 0x1}, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x46, 0xfd, 0x6a, 0x40, 0xb95, 0x1780, 0x6508, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xeb, 0x27, 0x70}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001540)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x40, 0x19, 0x2, "c305"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 751.668042][ T34] cm6533_jd 0003:0D8C:0022.0005: No inputs registered, leaving [ 751.743320][ T34] cm6533_jd 0003:0D8C:0022.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 751.948922][ T5] usb 3-1: USB disconnect, device number 13 [ 752.332140][ T6648] usb 5-1: new high-speed USB device number 16 using dummy_hcd 16:28:53 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x2020) 16:28:53 executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 16:28:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) getpid() 16:28:53 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1d3ede897ec9ad4635e4668fb2f30c852c4a29ba27e685cb21aca60af69f1fd133157b3a93374574537ccf957be79fda94e44a1111e71eea9178ada898359a22abba98979602e033417b6a33310c1de5c277af99794011f438a85331e0f25b5edbb20f0e6c8d548bdb94c2bf2079745bfb1e28751de0c8cd8ea226c3a1d3efcbfbc24df6a57e89e14d691df5d8e055fb79230eb3144952449c6619b7608ab31b", @ANYBLOB="000427bd7000ffdbdf251100", @ANYBLOB='\b', @ANYBLOB], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000804) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x54) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, 0x0, 0x400, 0x70bd28, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3bd}, {0x6, 0x11, 0x5670}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x40}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x8010) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, @dev, @private2}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00', @ANYRES16=0x0, @ANYBLOB="d0aa00bc13000000000000e47b000005000000080002000000000028000200000000"], 0x2c}}, 0x0) setsockopt$inet_buf(r3, 0x0, 0x40, &(0x7f0000000040), 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) clone(0x0, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1", 0x0, &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") 16:28:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8ac396203784000400f573fbf000000000000000761f35e959f130dec95128ce7ec033dc0a380543bfc99320be1c1bb99bb063fb66f2d696569eada31b09fbd15f0332701d9d14a3f3109d666578cc0266bce7860eaaf305a0ee2af0f82dfefd5e00d421b000000000000000000000000000000730428fd", 0xef}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1000001bd) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 752.693991][ T6648] usb 5-1: New USB device found, idVendor=0b95, idProduct=1780, bcdDevice=65.08 [ 752.703364][ T6648] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.775230][ C0] sd 0:0:1:0: tag#2205 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 752.785447][ C0] sd 0:0:1:0: tag#2205 CDB: opcode=0xe5 (vendor) [ 752.792123][ C0] sd 0:0:1:0: tag#2205 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 752.801375][ C0] sd 0:0:1:0: tag#2205 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 752.810685][ C0] sd 0:0:1:0: tag#2205 CDB[20]: ba 16:28:53 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000000480)="ce75107330bbf4840476bf32298721b3d8e4d74234210cc2c14826c6a4b9cb6f22f31b290f922a591e3d1427f0f850af374b8fccb6732d1d5cfa44926e53099d4ea392ab15faf3c8f2fb37f6d2e6da06da752cc5a2fbdeef828de314095ed924fa56ce825c4f83f9935462f485fa8f7df2d4c924aa23383dcb800939823bce735d8e5c119aee0527a2fdb92cd468f2b91aa668d2bbb9783b2e80bdce2320b4b53db26a02b6a50977a38fc733d7b335315551162d39ba0778f1b354", 0xbb}, {&(0x7f0000000600)="bee99c0bd52c282aefbec01b6a9ef4bbcbc58cbb376d73fa7c81daaf8953549ed64b6501dd0196503c18e9bbdbc1e0d95c62f5d87463ef40c2b27958887418c0bea13656a05c8a1c637eff1e0de3f859ab7f3228d0b3206087344a613940134d2773be9cc99bb275c1d504d5bfe332103093e2508115e6056f0fd47b2873766f62394e543160", 0x86}, {&(0x7f00000006c0)}, {&(0x7f00000007c0)="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", 0xbfc}, {&(0x7f00000017c0)="6bc7c072bebdd3e926836e9b8e83da9fa6eac3c6034d3be702fff1f313dff5361d572518072f0fb155645849c2aab0d7a3f0093524468d3658e28bbf7ffde12cd542a142d77db27c8243199ae8e4a9007235701695e35291947674a6604f58a10bdc8f62e8efe7436dd47ed98375edeeae59ac2e3d40ba03b9221e368efd19d643ef523b27b0e97ea3194e4c07ac327c795f3aa99b4777047a60372ccafe9e003af1bf56fb99d7892573b41afaab3886a8a351f007084240fdcacda76323dcc28434939ee6dd49a75ec7097f8ddee6e2df35a95eb5b8a051a2e130697c7ec757354d6923d2d1e0", 0xe7}, {&(0x7f00000018c0)="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", 0xfb}, {&(0x7f00000019c0)="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"/3710, 0xe7e}, {0x0}], 0x8, &(0x7f00000013c0)=[{0x50, 0x88, 0x0, "19cff5a5c74926b23a915226a62c06e209c2ccfef6c1f16df375fdf896aceb070091c6e6e1f887f68f12cf0db6bea915a356e4eb5744d8f0afdb93bc772b"}, {0x10, 0xff, 0x3}, {0x10, 0x10d, 0xfffffffd}, {0x60, 0x10f, 0x0, "915a4a76cf7205851d6ebb8f83c59edb7ee30c4c4bfa40292435258ac259bd8cb8481fff0be8a0f1af33c673f25e25d596c8e8d456e423d7b7bf5631ffe6ddd3ba957d32b431fae6b5cfbaed9323b46b"}, {0x50, 0x1c, 0x0, "96403382aac9495de77891e7fa5c83a94eef769fcfefff081c62dc911e4997751c53b0677809428c84ad0faa3273d4ae0a31998f1a49b21314c36d06"}, {0xb0, 0x0, 0x9, "fbcb96037450eeb66530be261b981e4a3fe57e8d07262386d8bd415b1c005401e632f96d603e63f954d6c020acb713cb96e77616548bf53c0d3328676702abfd0457ae4294047f9769d6320f1db7a82380f9cb5dfc06b626323829266549b1e3ca18bd1ee01c67196f053519c431ce1ed9f1510047b07fd218b127f2164bb32cc6f611a3633adf0057e04dc9627a9a1c62c9ab4b6dfcbdb5a0f5601942df"}], 0x1d0}, 0x48000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000035) [ 752.887484][ T6648] usb 5-1: config 0 descriptor?? 16:28:54 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1d3ede897ec9ad4635e4668fb2f30c852c4a29ba27e685cb21aca60af69f1fd133157b3a93374574537ccf957be79fda94e44a1111e71eea9178ada898359a22abba98979602e033417b6a33310c1de5c277af99794011f438a85331e0f25b5edbb20f0e6c8d548bdb94c2bf2079745bfb1e28751de0c8cd8ea226c3a1d3efcbfbc24df6a57e89e14d691df5d8e055fb79230eb3144952449c6619b7608ab31b", @ANYBLOB="000427bd7000ffdbdf251100", @ANYBLOB='\b', @ANYBLOB], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000804) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x54) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, 0x0, 0x400, 0x70bd28, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3bd}, {0x6, 0x11, 0x5670}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x40}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x8010) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, @dev, @private2}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00', @ANYRES16=0x0, @ANYBLOB="d0aa00bc13000000000000e47b000005000000080002000000000028000200000000"], 0x2c}}, 0x0) setsockopt$inet_buf(r3, 0x0, 0x40, &(0x7f0000000040), 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) clone(0x0, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1", 0x0, &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") 16:28:54 executing program 3: syz_mount_image$qnx6(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000640)=ANY=[@ANYBLOB='f']) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000007c0)='./mnt\x00', 0x100000001, 0x0, 0x0, 0x10048, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xad3) [ 753.202565][ T6648] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random 16:28:54 executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 16:28:54 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f7de41aae91ec981b7b3bf9e8d"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}]}]}, 0x44}}, 0x0) [ 753.509253][ C1] sd 0:0:1:0: tag#2210 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 753.519468][ C1] sd 0:0:1:0: tag#2210 CDB: opcode=0xe5 (vendor) [ 753.526168][ C1] sd 0:0:1:0: tag#2210 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 753.535505][ C1] sd 0:0:1:0: tag#2210 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 753.544829][ C1] sd 0:0:1:0: tag#2210 CDB[20]: ba [ 753.624547][ T7985] loop3: detected capacity change from 0 to 65551 [ 753.652304][ T6648] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 753.662596][ T6648] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 16:28:54 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1d3ede897ec9ad4635e4668fb2f30c852c4a29ba27e685cb21aca60af69f1fd133157b3a93374574537ccf957be79fda94e44a1111e71eea9178ada898359a22abba98979602e033417b6a33310c1de5c277af99794011f438a85331e0f25b5edbb20f0e6c8d548bdb94c2bf2079745bfb1e28751de0c8cd8ea226c3a1d3efcbfbc24df6a57e89e14d691df5d8e055fb79230eb3144952449c6619b7608ab31b", @ANYBLOB="000427bd7000ffdbdf251100", @ANYBLOB='\b', @ANYBLOB], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000804) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x54) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, 0x0, 0x400, 0x70bd28, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3bd}, {0x6, 0x11, 0x5670}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x40}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x8010) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, @dev, @private2}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00', @ANYRES16=0x0, @ANYBLOB="d0aa00bc13000000000000e47b000005000000080002000000000028000200000000"], 0x2c}}, 0x0) setsockopt$inet_buf(r3, 0x0, 0x40, &(0x7f0000000040), 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) clone(0x0, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1", 0x0, &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") [ 753.764164][ T7985] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 753.772950][ T7985] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 753.863377][ T6648] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 753.874484][ T6648] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 753.960595][ T7985] F2FS-fs (loop3): invalid crc_offset: 0 [ 754.089933][ T6648] asix 5-1:0.0 eth9: register 'asix' at usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet, 52:7e:87:96:17:c9 16:28:55 executing program 4: r0 = syz_usb_connect(0x6, 0x1b, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x99, 0xb9, 0xf4, 0x0, 0xaf0, 0x7a01, 0xf9b2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, &(0x7f0000000940)={0x0, 0xf, 0x2, {0x2}}, 0x0, &(0x7f0000000a00)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x4}]}}, 0x0, 0x0}, &(0x7f00000010c0)={0x84, &(0x7f0000000bc0)={0x0, 0x1d}, 0x0, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000d80)={0x20, 0x0, 0x4}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0x8}, 0x0, &(0x7f0000000e40)={0x40, 0xb, 0x2, "7cb2"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x6b36}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0x7e}, &(0x7f0000001040)={0x40, 0x1e, 0x1}, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x46, 0xfd, 0x6a, 0x40, 0xb95, 0x1780, 0x6508, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xeb, 0x27, 0x70}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001540)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x40, 0x19, 0x2, "c305"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 754.221388][ T7985] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) 16:28:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) getpid() r1 = socket(0x11, 0x800000003, 0x81) bind(r1, &(0x7f00000000c0)=@generic={0x11, "00000100000000000800ff7f4eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x10001) r2 = open(&(0x7f0000000000)='./bus\x00', 0x44142, 0x0) ftruncate(r2, 0x2008000) sendfile(r0, r2, 0x0, 0x200fff) [ 754.280605][ T6648] usb 5-1: USB disconnect, device number 16 [ 754.287947][ T6648] asix 5-1:0.0 eth9: unregister 'asix' usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet 16:28:55 executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) [ 754.365761][ T7985] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 754.375706][ T7985] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 16:28:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x25, &(0x7f0000000000)=0x9, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x9, [{{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x510) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x0, 0x0) [ 754.493436][ C1] sd 0:0:1:0: tag#2227 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 754.503639][ C1] sd 0:0:1:0: tag#2227 CDB: opcode=0xe5 (vendor) [ 754.510201][ C1] sd 0:0:1:0: tag#2227 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 754.519594][ C1] sd 0:0:1:0: tag#2227 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 754.529020][ C1] sd 0:0:1:0: tag#2227 CDB[20]: ba [ 754.864799][ T24] audit: type=1800 audit(1641745735.918:88): pid=8012 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1163 res=0 errno=0 16:28:56 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:28:56 executing program 0: syz_mount_image$afs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@dyn}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}) [ 755.212873][ T6648] usb 5-1: new high-speed USB device number 17 using dummy_hcd 16:28:56 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 755.479126][ T8021] afs: Unknown parameter 'defcontext' [ 755.573477][ T6648] usb 5-1: New USB device found, idVendor=0b95, idProduct=1780, bcdDevice=65.08 [ 755.582899][ T6648] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 16:28:56 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) close(r0) [ 755.703494][ T6648] usb 5-1: config 0 descriptor?? [ 755.962961][ T6648] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 756.219322][ T8023] syz-executor.1 (8023): drop_caches: 2 16:28:57 executing program 3: syz_mount_image$qnx6(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000640)=ANY=[@ANYBLOB='f']) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000007c0)='./mnt\x00', 0x100000001, 0x0, 0x0, 0x10048, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xad3) 16:28:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc0d05605, &(0x7f0000000200)={0x2, 0x0, 0x0, {0x0, 0x32315559}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0x9d0000, 0x38d, 0x1, 0xffffffffffffffff, 0x0, 0x0}) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x210f40, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000140)={0x0, 0x9}) capget(0x0, 0x0) fanotify_init(0x20, 0x1000) 16:28:57 executing program 2: futex(0x0, 0x8b, 0x0, 0x0, &(0x7f00000002c0), 0x0) 16:28:57 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) close(r0) [ 756.432424][ T6648] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 756.442810][ T6648] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 756.642534][ T6648] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 756.652924][ T6648] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 756.806001][ T8035] loop3: detected capacity change from 0 to 65551 [ 756.851562][ T6648] asix 5-1:0.0 eth9: register 'asix' at usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet, 96:de:be:70:c3:40 [ 756.870774][ T8035] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 756.886614][ T8035] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 756.911300][ T6648] usb 5-1: USB disconnect, device number 17 [ 756.918828][ T6648] asix 5-1:0.0 eth9: unregister 'asix' usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet [ 756.963338][ T8035] F2FS-fs (loop3): invalid crc_offset: 0 16:28:58 executing program 4: r0 = syz_usb_connect(0x6, 0x1b, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x99, 0xb9, 0xf4, 0x0, 0xaf0, 0x7a01, 0xf9b2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, &(0x7f0000000940)={0x0, 0xf, 0x2, {0x2}}, 0x0, &(0x7f0000000a00)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x4}]}}, 0x0, 0x0}, &(0x7f00000010c0)={0x84, &(0x7f0000000bc0)={0x0, 0x1d}, 0x0, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000d80)={0x20, 0x0, 0x4}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0x8}, 0x0, &(0x7f0000000e40)={0x40, 0xb, 0x2, "7cb2"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x6b36}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0x7e}, &(0x7f0000001040)={0x40, 0x1e, 0x1}, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x46, 0xfd, 0x6a, 0x40, 0xb95, 0x1780, 0x6508, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xeb, 0x27, 0x70}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001540)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x40, 0x19, 0x2, "c305"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 16:28:58 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 16:28:58 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) close(r0) 16:28:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x20c49a, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11a1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}}, 0x0) 16:28:58 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000040)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0xee00, 0xffffffffffffffff}}, 0xa0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x1a0) fallocate(r0, 0x100000003, 0x0, 0x8001a0) [ 757.062528][ T8035] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 757.219497][ T8045] loop0: detected capacity change from 0 to 4096 [ 757.231755][ T8035] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 757.242522][ T8035] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 757.458790][ T8047] device bond1 entered promiscuous mode [ 757.468234][ T8047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 757.639661][ T8048] syz-executor.1 (8048): drop_caches: 2 16:28:58 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0) 16:28:58 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) close(r0) [ 757.832597][ T8045] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 16:28:58 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 16:28:59 executing program 3: syz_mount_image$qnx6(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000640)=ANY=[@ANYBLOB='f']) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000007c0)='./mnt\x00', 0x100000001, 0x0, 0x0, 0x10048, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xad3) 16:28:59 executing program 0: syz_open_pts(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000440)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000000c0)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="030000", 0x3, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f0000000000000400800000", 0x1f, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f01000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000000880)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}], 0x0, &(0x7f00000000c0)=ANY=[]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)) setxattr$trusted_overlay_upper(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0), &(0x7f00000013c0)=ANY=[], 0xd8, 0x1) chroot(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005c900)={0x0, [], 0x6, "8a5ce241f64c6c"}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_buf(r0, 0x1, 0xc, 0x0, &(0x7f0000000700)) 16:28:59 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb5, 0x7e, 0x91, 0x20, 0x2040, 0x4901, 0xd8c1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd6, 0x4, 0xb3, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) [ 758.062475][ T5] usb 5-1: new high-speed USB device number 18 using dummy_hcd 16:28:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x101) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {}, 0x0, 0x0, 0x0, 0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 758.435403][ T5] usb 5-1: New USB device found, idVendor=0b95, idProduct=1780, bcdDevice=65.08 [ 758.445457][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.495168][ T8069] loop0: detected capacity change from 0 to 4096 [ 758.573625][ T5] usb 5-1: config 0 descriptor?? [ 758.662627][ T6648] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 758.832900][ T5] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 758.902070][ T6648] usb 6-1: Using ep0 maxpacket: 32 [ 758.941354][ T8067] loop3: detected capacity change from 0 to 65551 [ 759.022553][ T6648] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 759.033458][ T6648] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 759.043814][ T6648] usb 6-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=d8.c1 [ 759.053112][ T6648] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.123168][ T6648] usb 6-1: config 0 descriptor?? [ 759.286925][ T5] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 759.297414][ T5] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 759.383915][ T6648] hdpvr 6-1:0.0: unexpected answer of status request, len -71 [ 759.391699][ T6648] hdpvr 6-1:0.0: device init failed [ 759.397227][ T6648] hdpvr: probe of 6-1:0.0 failed with error -12 [ 759.495083][ T5] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 759.505688][ T5] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 759.555693][ T6648] usb 6-1: USB disconnect, device number 12 [ 759.691047][ T5] asix 5-1:0.0 eth9: register 'asix' at usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet, 8a:16:9a:6a:65:9f [ 759.813561][ T5] usb 5-1: USB disconnect, device number 18 [ 759.834687][ T5] asix 5-1:0.0 eth9: unregister 'asix' usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet 16:29:01 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000280)=ANY=[]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="d39f4862fbb4be7695"], 0xfea7) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x0) 16:29:01 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb5, 0x7e, 0x91, 0x20, 0x2040, 0x4901, 0xd8c1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd6, 0x4, 0xb3, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) [ 760.127030][ T8075] loop2: detected capacity change from 0 to 264192 [ 760.335574][ T8067] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 760.343561][ T8067] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 760.376371][ T8067] F2FS-fs (loop3): invalid crc_offset: 0 [ 760.382515][ T8067] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 760.466446][ T8062] syz-executor.1 (8062): drop_caches: 2 [ 760.467219][ T8069] EXT4-fs: failed to create workqueue [ 760.477683][ T8069] EXT4-fs (loop0): mount failed 16:29:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, &(0x7f00000004c0)="9ad45e5164f97bd6730551a36494e85e1f605a520dc8933d6dafdf21ad1ff22933f782a915a84d6f5935b9e81dd999da6fabaa6263201ae07405ebfcf3f965a77343cd6d1c1dc5da0d10b35de227232631bae9c9876be712306bb703ce51ea141ad2c40dc2752cf705b400d64df1b3961f62d41f51bf7c7eb200bf01d3c525bcd53f9ce3085621eb7ea069a4d19824133d5329d7bf0867ca519f479ad4cd25a17b84f540196ea5c6ec9c32f8c93b9eb25769", 0xfffffffffffffedb, 0xc8c0, 0x0, 0x0) 16:29:01 executing program 0: writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000340)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000040)=""/211, 0x4a, 0xd3, 0x8}, 0x20) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x280c00, 0xb) [ 760.645043][ T5] usb 6-1: new high-speed USB device number 13 using dummy_hcd 16:29:01 executing program 3: syz_mount_image$qnx6(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000640)=ANY=[@ANYBLOB='f']) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000007c0)='./mnt\x00', 0x100000001, 0x0, 0x0, 0x10048, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xad3) 16:29:01 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 760.745554][ T1199] ieee802154 phy0 wpan0: encryption failed: -22 [ 760.752147][ T1199] ieee802154 phy1 wpan1: encryption failed: -22 16:29:01 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) shutdown(r0, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x4b1}}, 0x1006) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) [ 760.902873][ T5] usb 6-1: Using ep0 maxpacket: 32 16:29:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x0) [ 761.022785][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 761.033058][ T5] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 761.043230][ T5] usb 6-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=d8.c1 [ 761.053118][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.127548][ T8086] BPF: (anon) type_id=1 bits_offset=0 [ 761.140152][ T8086] BPF: [ 761.148499][ T8086] BPF:Member exceeds struct_size [ 761.156052][ T8086] BPF: [ 761.156052][ T8086] 16:29:02 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7fffffff, 0x84200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b74f36342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3164", 0xff7c}], 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x83\x00', 0x0, r2) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x141000, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000200)) write$binfmt_elf64(r3, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1f, 0x4, 0x3, 0x7, 0x2, 0x6, 0x5, 0x94, 0x40, 0x3d9, 0x1f, 0x0, 0x38, 0x1, 0x2, 0xdf40, 0x800}, [{0x7, 0x1, 0xf59, 0x200, 0x20, 0x16db, 0x7, 0x4}, {0x70000001, 0x6d3, 0x8, 0x7fff, 0x5, 0x6fef1845, 0x1ff, 0x2}], "1e5aaee9eef9a4dbf20c69231ca488c3a65faebf4ce31c7fa8a080c61a9143f698a0736d7c78c6b9c4fb642bd2e5edc08bcf797ffb341af71304", ['\x00', '\x00', '\x00']}, 0x3ea) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "e2ca20a0321333eb", "6ee7d8c956bde4b6e40b737ebcde62c4fc389875268b9fff7f8a2e0f1a5c65fd", "ff32a8e4", "0c3aa4471e2a34c1"}, 0x38) [ 761.235784][ T5] usb 6-1: config 0 descriptor?? [ 761.314613][ T8089] loop3: detected capacity change from 0 to 65551 [ 761.497094][ T5] hdpvr 6-1:0.0: unexpected answer of status request, len -71 [ 761.505120][ T5] hdpvr 6-1:0.0: device init failed [ 761.510644][ T5] hdpvr: probe of 6-1:0.0 failed with error -12 [ 761.696373][ T5] usb 6-1: USB disconnect, device number 13 16:29:02 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ebd340f80602a346dc0000000109022400010000000009040000022000a70009058113000000000009050e4f"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 16:29:02 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe}}]}}]}}, 0x0) [ 761.838968][ T8087] syz-executor.1 (8087): drop_caches: 2 [ 761.844032][ T8089] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 761.844248][ T8089] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 761.911171][ T8089] F2FS-fs (loop3): invalid crc_offset: 0 [ 761.919673][ T8089] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) 16:29:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x400000000000085, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0xff, 0x0, 0x4, 0x0, 0x0, 0x6, 0xe082, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x0, 0x8}, r3, 0x8, r2, 0x11) perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x7, 0x0, 0x9, 0x8, 0x0, 0x8, 0x100, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x40, 0x800, 0x1, 0x9, 0xffffffffffffffff, 0x40}, 0x0, 0x1, r2, 0x8) sendmsg$nl_netfilter(r2, 0x0, 0x8040) 16:29:03 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb5, 0x7e, 0x91, 0x20, 0x2040, 0x4901, 0xd8c1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd6, 0x4, 0xb3, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) [ 762.496231][ T34] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 762.523737][ T6587] usb 3-1: new high-speed USB device number 14 using dummy_hcd 16:29:03 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000466c0)) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x9100}], 0x92, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, 0x0) [ 762.833527][ T6587] usb 3-1: Using ep0 maxpacket: 8 16:29:03 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7fffffff, 0x84200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b74f36342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3164", 0xff7c}], 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x83\x00', 0x0, r2) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x141000, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000200)) write$binfmt_elf64(r3, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1f, 0x4, 0x3, 0x7, 0x2, 0x6, 0x5, 0x94, 0x40, 0x3d9, 0x1f, 0x0, 0x38, 0x1, 0x2, 0xdf40, 0x800}, [{0x7, 0x1, 0xf59, 0x200, 0x20, 0x16db, 0x7, 0x4}, {0x70000001, 0x6d3, 0x8, 0x7fff, 0x5, 0x6fef1845, 0x1ff, 0x2}], "1e5aaee9eef9a4dbf20c69231ca488c3a65faebf4ce31c7fa8a080c61a9143f698a0736d7c78c6b9c4fb642bd2e5edc08bcf797ffb341af71304", ['\x00', '\x00', '\x00']}, 0x3ea) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "e2ca20a0321333eb", "6ee7d8c956bde4b6e40b737ebcde62c4fc389875268b9fff7f8a2e0f1a5c65fd", "ff32a8e4", "0c3aa4471e2a34c1"}, 0x38) [ 763.003093][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.012472][ T3554] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 763.014299][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.033141][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 763.044216][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 763.054133][ T34] usb 5-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=dc.46 [ 763.063447][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.072029][ T6587] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 763.083076][ T6587] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 763.093004][ T6587] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 763.102905][ T6587] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 763.263679][ T3554] usb 6-1: Using ep0 maxpacket: 32 [ 763.340947][ T34] usb 5-1: config 0 descriptor?? [ 763.393975][ T3554] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 763.394189][ T3554] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 763.394356][ T3554] usb 6-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=d8.c1 [ 763.394478][ T3554] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.403545][ T3554] usb 6-1: config 0 descriptor?? [ 763.435736][ T6587] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 763.435869][ T6587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 16:29:04 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000466c0)) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x9100}], 0x92, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, 0x0) [ 763.435967][ T6587] usb 3-1: Product: syz [ 763.436044][ T6587] usb 3-1: Manufacturer: syz [ 763.436123][ T6587] usb 3-1: SerialNumber: syz [ 763.613039][ T34] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 763.672318][ T3554] hdpvr 6-1:0.0: unexpected answer of status request, len -71 [ 763.672390][ T3554] hdpvr 6-1:0.0: device init failed 16:29:04 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000466c0)) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x9100}], 0x92, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, 0x0) [ 763.672537][ T3554] hdpvr: probe of 6-1:0.0 failed with error -12 [ 763.681637][ T3554] usb 6-1: USB disconnect, device number 14 [ 763.685983][ T6587] usb 3-1: USB disconnect, device number 14 [ 763.892144][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 763.922443][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 763.942905][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 763.977306][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 764.002858][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 764.031604][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 764.064080][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 764.092118][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 764.137072][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 764.162272][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 764.185063][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 764.212487][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 764.255035][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 16:29:05 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7fffffff, 0x84200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b74f36342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3164", 0xff7c}], 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x83\x00', 0x0, r2) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x141000, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000200)) write$binfmt_elf64(r3, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1f, 0x4, 0x3, 0x7, 0x2, 0x6, 0x5, 0x94, 0x40, 0x3d9, 0x1f, 0x0, 0x38, 0x1, 0x2, 0xdf40, 0x800}, [{0x7, 0x1, 0xf59, 0x200, 0x20, 0x16db, 0x7, 0x4}, {0x70000001, 0x6d3, 0x8, 0x7fff, 0x5, 0x6fef1845, 0x1ff, 0x2}], "1e5aaee9eef9a4dbf20c69231ca488c3a65faebf4ce31c7fa8a080c61a9143f698a0736d7c78c6b9c4fb642bd2e5edc08bcf797ffb341af71304", ['\x00', '\x00', '\x00']}, 0x3ea) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "e2ca20a0321333eb", "6ee7d8c956bde4b6e40b737ebcde62c4fc389875268b9fff7f8a2e0f1a5c65fd", "ff32a8e4", "0c3aa4471e2a34c1"}, 0x38) [ 764.272176][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 16:29:05 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb5, 0x7e, 0x91, 0x20, 0x2040, 0x4901, 0xd8c1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd6, 0x4, 0xb3, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) [ 764.298755][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 764.312626][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 764.334580][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 764.352589][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 764.352735][ T34] input input10: Timeout waiting for response from device. 16:29:05 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ebd340f80602a346dc0000000109022400010000000009040000022000a70009058113000000000009050e4f"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) [ 764.359921][ T34] usb 5-1: USB disconnect, device number 19 16:29:06 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7fffffff, 0x84200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b74f36342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3164", 0xff7c}], 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x83\x00', 0x0, r2) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x141000, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000200)) write$binfmt_elf64(r3, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1f, 0x4, 0x3, 0x7, 0x2, 0x6, 0x5, 0x94, 0x40, 0x3d9, 0x1f, 0x0, 0x38, 0x1, 0x2, 0xdf40, 0x800}, [{0x7, 0x1, 0xf59, 0x200, 0x20, 0x16db, 0x7, 0x4}, {0x70000001, 0x6d3, 0x8, 0x7fff, 0x5, 0x6fef1845, 0x1ff, 0x2}], "1e5aaee9eef9a4dbf20c69231ca488c3a65faebf4ce31c7fa8a080c61a9143f698a0736d7c78c6b9c4fb642bd2e5edc08bcf797ffb341af71304", ['\x00', '\x00', '\x00']}, 0x3ea) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "e2ca20a0321333eb", "6ee7d8c956bde4b6e40b737ebcde62c4fc389875268b9fff7f8a2e0f1a5c65fd", "ff32a8e4", "0c3aa4471e2a34c1"}, 0x38) 16:29:06 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000466c0)) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x9100}], 0x92, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, 0x0) 16:29:06 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000466c0)) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x9100}], 0x92, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, 0x0) 16:29:06 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7fffffff, 0x84200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b74f36342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3164", 0xff7c}], 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x83\x00', 0x0, r2) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x141000, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000200)) write$binfmt_elf64(r3, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1f, 0x4, 0x3, 0x7, 0x2, 0x6, 0x5, 0x94, 0x40, 0x3d9, 0x1f, 0x0, 0x38, 0x1, 0x2, 0xdf40, 0x800}, [{0x7, 0x1, 0xf59, 0x200, 0x20, 0x16db, 0x7, 0x4}, {0x70000001, 0x6d3, 0x8, 0x7fff, 0x5, 0x6fef1845, 0x1ff, 0x2}], "1e5aaee9eef9a4dbf20c69231ca488c3a65faebf4ce31c7fa8a080c61a9143f698a0736d7c78c6b9c4fb642bd2e5edc08bcf797ffb341af71304", ['\x00', '\x00', '\x00']}, 0x3ea) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "e2ca20a0321333eb", "6ee7d8c956bde4b6e40b737ebcde62c4fc389875268b9fff7f8a2e0f1a5c65fd", "ff32a8e4", "0c3aa4471e2a34c1"}, 0x38) [ 765.508710][ T34] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 765.555988][ T5] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 765.779928][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 765.958636][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 765.958768][ T34] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 765.958928][ T34] usb 6-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=d8.c1 [ 765.959055][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.962790][ T34] usb 6-1: config 0 descriptor?? [ 765.973134][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.973277][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.973395][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 765.973528][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 765.973671][ T5] usb 5-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=dc.46 [ 765.973789][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.038347][ T5] usb 5-1: config 0 descriptor?? [ 766.233275][ T34] hdpvr 6-1:0.0: unexpected answer of status request, len -71 16:29:07 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000466c0)) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x9100}], 0x92, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, 0x0) [ 766.233350][ T34] hdpvr 6-1:0.0: device init failed [ 766.233497][ T34] hdpvr: probe of 6-1:0.0 failed with error -12 [ 766.238738][ T34] usb 6-1: USB disconnect, device number 15 16:29:07 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000466c0)) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x9100}], 0x92, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, 0x0) [ 766.305176][ T5] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 766.565910][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 766.582264][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 16:29:07 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7fffffff, 0x84200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b74f36342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3164", 0xff7c}], 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x83\x00', 0x0, r2) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x141000, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000200)) write$binfmt_elf64(r3, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1f, 0x4, 0x3, 0x7, 0x2, 0x6, 0x5, 0x94, 0x40, 0x3d9, 0x1f, 0x0, 0x38, 0x1, 0x2, 0xdf40, 0x800}, [{0x7, 0x1, 0xf59, 0x200, 0x20, 0x16db, 0x7, 0x4}, {0x70000001, 0x6d3, 0x8, 0x7fff, 0x5, 0x6fef1845, 0x1ff, 0x2}], "1e5aaee9eef9a4dbf20c69231ca488c3a65faebf4ce31c7fa8a080c61a9143f698a0736d7c78c6b9c4fb642bd2e5edc08bcf797ffb341af71304", ['\x00', '\x00', '\x00']}, 0x3ea) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "e2ca20a0321333eb", "6ee7d8c956bde4b6e40b737ebcde62c4fc389875268b9fff7f8a2e0f1a5c65fd", "ff32a8e4", "0c3aa4471e2a34c1"}, 0x38) [ 766.604079][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 766.622427][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 766.642433][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 766.666336][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 766.692433][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 766.712521][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 766.735285][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 766.755486][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 766.772290][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 766.792252][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 766.812641][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 766.832185][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 766.853679][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 766.872691][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 16:29:08 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ebd340f80602a346dc0000000109022400010000000009040000022000a70009058113000000000009050e4f"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) [ 766.893500][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 766.912408][ T5] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 766.912551][ T5] input input11: Timeout waiting for response from device. [ 766.930900][ T5] usb 5-1: USB disconnect, device number 20 16:29:08 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r1, 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x7f, 0x8, 0x6, 0x11, @private2, @private0, 0x20, 0x17, 0x5, 0x8}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={@local, 0x2f, r2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffc7b) socket$inet6(0xa, 0x800, 0x8) mmap(&(0x7f000017b000/0x3000)=nil, 0x3000, 0x1000008, 0x10010, 0xffffffffffffffff, 0x0) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000080), 0x4) unshare(0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write(r0, &(0x7f0000000000)="05", 0x20000001) 16:29:08 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7fffffff, 0x84200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b74f36342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3164", 0xff7c}], 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x83\x00', 0x0, r2) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x141000, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000200)) write$binfmt_elf64(r3, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1f, 0x4, 0x3, 0x7, 0x2, 0x6, 0x5, 0x94, 0x40, 0x3d9, 0x1f, 0x0, 0x38, 0x1, 0x2, 0xdf40, 0x800}, [{0x7, 0x1, 0xf59, 0x200, 0x20, 0x16db, 0x7, 0x4}, {0x70000001, 0x6d3, 0x8, 0x7fff, 0x5, 0x6fef1845, 0x1ff, 0x2}], "1e5aaee9eef9a4dbf20c69231ca488c3a65faebf4ce31c7fa8a080c61a9143f698a0736d7c78c6b9c4fb642bd2e5edc08bcf797ffb341af71304", ['\x00', '\x00', '\x00']}, 0x3ea) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "e2ca20a0321333eb", "6ee7d8c956bde4b6e40b737ebcde62c4fc389875268b9fff7f8a2e0f1a5c65fd", "ff32a8e4", "0c3aa4471e2a34c1"}, 0x38) 16:29:09 executing program 1: r0 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) 16:29:09 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x4000000000000081) 16:29:09 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000006, 0x400002172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000140)={0x0, 0x0, {0xfff, @struct={0x8}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x0, 0x0, 0x800, 0x3]}, {0x0, 0x0, 0x5ef3}}) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9281a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 768.202475][ T34] usb 5-1: new high-speed USB device number 21 using dummy_hcd 16:29:09 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xec, 0x2e, 0x1, 0x8, 0x1d19, 0x1104, 0x5ef7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf, 0xa5, 0x3c}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c80)={0x18, &(0x7f0000000a40), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 768.582535][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 16:29:09 executing program 0: r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat(r1, &(0x7f0000000040)='./file1\x00', 0x1000, 0x0) [ 768.582687][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.582808][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 768.582938][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 768.583086][ T34] usb 5-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=dc.46 [ 768.583218][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.588589][ T34] usb 5-1: config 0 descriptor?? 16:29:10 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000006, 0x400002172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000140)={0x0, 0x0, {0xfff, @struct={0x8}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x0, 0x0, 0x800, 0x3]}, {0x0, 0x0, 0x5ef3}}) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9281a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 768.853120][ T34] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 769.142604][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 16:29:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x280ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 769.173360][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 769.228860][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 769.327034][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 769.343522][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 769.372019][ T5] usb 2-1: new high-speed USB device number 7 using dummy_hcd 16:29:10 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ebd340f80602a346dc0000000109022400010000000009040000022000a70009058113000000000009050e4f"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) [ 769.374132][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 769.402703][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 769.422936][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 769.446186][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 769.462905][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 769.488265][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 769.503869][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 769.522841][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 769.543847][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 769.574764][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 769.597820][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 769.612263][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 769.623416][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 769.642249][ T34] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 769.642406][ T34] input input12: Timeout waiting for response from device. [ 769.671509][ T34] usb 5-1: USB disconnect, device number 21 [ 769.732581][ T5] usb 2-1: New USB device found, idVendor=1d19, idProduct=1104, bcdDevice=5e.f7 [ 769.732719][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.754487][ T5] usb 2-1: config 0 descriptor?? 16:29:11 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) vmsplice(r1, &(0x7f0000001600)=[{&(0x7f0000000440)='b', 0x1}], 0x1, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x1ea71, 0x0) [ 770.022393][ T5] usb 2-1: dvb_usb_v2: found a 'MSI DIGIVOX Micro HD' in warm state [ 770.562049][ T3554] usb 5-1: new high-speed USB device number 22 using dummy_hcd 16:29:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x280ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 770.922511][ T3554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.933773][ T3554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.943823][ T3554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 770.954907][ T3554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 770.964851][ T3554] usb 5-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=dc.46 [ 770.975310][ T3554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 16:29:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r1, 0x0, 0x15, &(0x7f0000000140)='\xc4obF\x03\xbe_!\xde]A?\xeb\x03cpu'}, 0x11) 16:29:12 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000006, 0x400002172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000140)={0x0, 0x0, {0xfff, @struct={0x8}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x0, 0x0, 0x800, 0x3]}, {0x0, 0x0, 0x5ef3}}) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9281a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 16:29:12 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0xff44, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) [ 771.187386][ T3554] usb 5-1: config 0 descriptor?? [ 771.232671][ T5] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 771.440941][ T34] usb 2-1: USB disconnect, device number 7 [ 771.457376][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 771.732582][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 771.768171][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 16:29:12 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/132, 0x84}], 0x1, 0xb94, 0x0) [ 771.796255][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 771.833576][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 771.864712][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 771.915083][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 771.948401][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 16:29:13 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xec, 0x2e, 0x1, 0x8, 0x1d19, 0x1104, 0x5ef7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf, 0xa5, 0x3c}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c80)={0x18, &(0x7f0000000a40), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 772.000486][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 772.032879][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 16:29:13 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000006, 0x400002172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000140)={0x0, 0x0, {0xfff, @struct={0x8}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x0, 0x0, 0x800, 0x3]}, {0x0, 0x0, 0x5ef3}}) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9281a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 772.062974][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 772.090132][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 16:29:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x280ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 772.142435][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 772.184688][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 772.225839][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 772.275006][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 772.325651][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 16:29:13 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000800)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='./file1\x00') [ 772.383602][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 772.408289][ T3554] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 772.414623][ T3554] input input13: Timeout waiting for response from device. [ 772.532729][ T3554] usb 5-1: USB disconnect, device number 22 16:29:13 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) pread64(r1, 0x0, 0xfeffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) dup2(r2, r1) 16:29:13 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@volatile]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040)) [ 772.844960][ T6648] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 773.141947][ T6648] usb 2-1: Using ep0 maxpacket: 8 16:29:14 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000080)="fc", 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x300, 0x0, 0x0, 0x0, 0x0) 16:29:14 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}}) [ 773.263367][ T6648] usb 2-1: New USB device found, idVendor=1d19, idProduct=1104, bcdDevice=5e.f7 [ 773.272752][ T6648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 16:29:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x280ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 773.345463][ T6648] usb 2-1: config 0 descriptor?? 16:29:14 executing program 5: syz_emit_ethernet(0x8a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback=0xac1414aa, @local, {[@generic={0x0, 0x2}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@local}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@loopback=0x7f00002f}, {@loopback}, {@empty}, {@dev}, {@multicast1}, {@private}, {@empty}]}]}}}}}}}, 0x0) [ 773.602333][ T6648] usb 2-1: dvb_usb_v2: found a 'MSI DIGIVOX Micro HD' in warm state [ 773.645592][ T8230] fuse: Invalid rootmode 16:29:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, {{0x8}, {0x8}, [@IFLA_GTP_PDP_HASHSIZE={0x8}]}}}}]}, 0x48}}, 0x0) 16:29:14 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="75f164782e866b6a43a1cfe164888975af0ee9926853ec513638cc0f1c96b6f7e6f8a7e16c25788f16d202c70858510d9fbe2c7649a61987bb91f8cb1aa0111792980b05494fbace08818cdeed89511573e5705bf3cf8bf376f09e0c9cd0f700f902ca6bec828d58ab0fb9c093779558b62b8ee81dd3504a94f0c50b2e6bf38af57600787161a44e504deffdf2ccdab2d8e479d7c377b4f997cde388f84c6fe491a81777df5b413ba28ec5d0d0773e9498cd15387156847aa253575b5a13250af64580aea9010be6aeb10b31ffae6fa7a4803f1f396e5ee63898fe3e513e093c9ab328f118939cbb2d3a2ad8ffc77105d0d909ff25253de03a1e644b895668b8f6e035cf05cdb55df89708ce85a6ed0c7d34d89ab6c5167a967c89f9667214d4f94e51891d7c02ce3e678716fbe25e8fd46e08abbad41fd51b6eb5adbf64cd57759f8ce23fe5550ca434557e8a00996b2b2e84c756e65522e4fc46d56b6c450a764ec8532459fab4301dc6f6ad6544296667517925fb65361135a381b3a2cdb28296d0327e3a7cf5999c9f79672bc4092128e2fe1ead842359c4b61866517e986a03155d404a9e909e9d3e912eaeab5ac99e334b4da79069fec6dbb3fb628fdd1f154c52792e53c057d633a9f90da8fac7788dce15af35f908a5d3eadb3c54c0a9cc01b12e627329e7f6a55e0db5bcb4edba81f977170b33b2210f6bb96b021eb69f1a7c0ae6bb713a96238639805a5c2f74d2e39d7bc90f8468b4c0baf072f04c4b4c1cabf42b940129f7a400a17d8b764b9e19ddac8825e45b5812135d3388389347ab1749db3532db7bcaa94b950f97d3f2bc596415530bfa9af6b1a75a0f5c90a7b24ec25099c4b3ddab5ef4e2f41960e131a711ab30ecfc2ce28c645c2a210d49bd9f9d8b7b0813fdabda05b06d70af0d19d998c138879167ba1a784356a22c2d2b4ed87b8ca5e6a2a4a2b766f27edb5f082dcc3d15803da9da6225aea55d940a20cedb003b79b7866f2b90bb4609adfe6926ca79e8b11de26214ed989e71c8f1fe2fbafe8546f8a3c5b7b5ef2ca422a3c529e25b0bf7ca7e9dab7c9a4d5d04326155b953aec177f2dfe3f7ff9aeccbd88cd28e605ec492f17d995f8b50a1b0227be5a96278c08f9ab46f2a9716718b6b858b0adb632c006749e209dd183f9e3db7ac7a67b5600f3457d98462046242926dd0542a15549627052112048bf0cda3f78a0ec10deb14c81f9d9fb4d743352a5e77643ce7154ead441e73c9db436aeafeadaae0ea97741328c5ebf331992ab90392be73a7e9bec1bc0fa75d250cfd914dff2ea5666ddc10f2bab4e46f8526f38312a3fb6088ecbb0e11e8c2dd40462f836227816d3247345740a64e140cae0d2f1c331111701c393a11f8433edcd9e07da4a3bf12845196498dd9f7b9c653c60facb4de5749fd110a17354e5a30b980e40fc773faa9355cac4b57d663ec91508008e52351749d2bee4272d51fb0381e51bb264fb735f83beb8a415a53c92e7e382a1aa26b1e947a75f0c3ea40e3733c99e7ff34c359d15f74ff9ebdcad3c098b5cfb7ad1ad76f7aedc3dba319a37dbe9c538cc665ab771d60857b6e3400c2b04073541d45769fd5830f0f8f00239051d653a2f93e100cf2ade59cfe3f26e284c7aa35cfc445f0862685f9742cc4e0d5d14d6df3a58265896a08a4b7f4f8febaeab11482b06007d3c29914c340ff2dd94246623cc01366971903f3dddb3d2277d6950d586e6a5e29c0bc9dd17022556caccda8ae1a256ec7133fc165b3edeaf3b91665db46a4ec0bb0c2d0309ae5f47f15e82740843eeca1b3c27d28cc358fc1adb14cdcf3375210bed2fafc34f7f6b11e5b08209c09fb0c567ffdb9dfccafa2441c340e01d5175a50d922dfcb1bba2caef228a0e963c25a312bdff08e638738667b430a2b8ed86f0af199ec1acf0521ed6f22656f92c94f5ee5c3768fe57b0a912bb4ea8bf79df4b7c011cc0fe4223d95ead5cdded5105445ada726008b8e15dce12f06253f7756d4b6c2b43dde639a304112eb2fd47a4860abe8fdd66e564ea6267783483ca96aaa7c0c30a7c19cf645f973216ec5292670614dec06752a8c50a68349520ec1abb68dccce21462720258175f7f0e37e86efacafce6a9adb59fe6b404f98d9e62bd6bb9de772b17e38f2e8bbcc4823b4dec565a63fb6c1d97891b9e387c970fafbb29c845a6913641323d532ba0e3a6baa5164200e08e20525ce526d1a91b942351e4fc23c95b9ad2c46e7dc4693526c60e829d1dba61ee2cad862d180eae675cc716779392048e36b472dee3db361ea85bb61c8fdd8ab1f8529d29273da0cbeb891d1bbe227c803cdc5b87a6c1f8333897ff91a64953d635a68b08c40ec734f86440897e70973c828fddb15f260f79eec5573748d87fd761969e8ef2cc29f4f670b3c4e02a1542df3a232ecdc2ebf590af026ea41306972dc699917b8970e9aac3680f04e1096c601dff39fc15a5f016e90528b0cf403caefca5b503a3de069a40ce821dc934b6fada66b5fe5d2fe6251337b7291e0706b69e9066b6b2c4ff67778da28e63fe39a1bbef4f6a39b300814fea5795f988b8b3aa8312ea1256d642c66ee3690305e4eb2f276018740ff805575e0b5762a80ac6642acc223ea7f5d1c22b8596bc19a9df7b300a355bfd687288eef90456eb009911d940ae2750672a857b55dfcf5cf5d3ee132f32f7cd61915378f8a9aaed66a47e9f9c67b4136de8362a1d9e57f506a114d915075a4aece81b124f9264b90ab2ea440e541803867a8deee5f8f5d8c1f64888c4e5fbf8beead4dceb3dee71d5ebf1e561c77d4ccb410ca01f2fa2553a708c63e67f58da862df59dda6f0d99faca3e20ff9c500d2b5d5255306c8eb589efb31dd46800eb729ca50f5e6f74aea9a15d31eeea7217b690dce40ac1a537c67b1625c28d931567667d8c6c72f5c6970eac2413e48b25cdbbea1cb739ba5c0abb0bc1d291e84a3f454d916bda02a0cb74d1d32c59a61272a571112c72728a9b89f4ffe780b469f5d2282c8f80f2c9b132fb096886cc5b9d13ac5124af959d3c32d66504f191de0b0c30d77c366defaf42b914e4c85e9bf0c3764facb20545c03b02ec54059cdad97c6ad347d7f04611b43741e113a5b197b40e82a5e1a6e2ffcf35c927e98a26bbe230aa6eb383b7d1248361bff296b7d447f7e09b0dba6eaea247799c33cfb07553309e565883888ae0fb8537f5469dd2ea7e8f1c5b064a2c7aa7ef80159bd9ebe0a499ae08dc5617107e3200a081f5d1f34079ff7884c78dd3c47c0fb1d677b865934b981dd84c559d04a7915c0e7cb02ace8c914d7c6236b50de620398a7b3cb6c102cd8689e6faf760b0c5866ffee48013cfaf251ec99ba5eb87d189798c3795ed384a4a7989412a2a6ba6aa55b3d16d6fdaaaf38f3c6b6d123a63a239ccecdd0df3f72e384e40e6b5f94f17486820d17b24308f4c52dade7a292d68d84691481171970f5a000c3465df1e82bd92bcab97f069f3f1aa259ce431774d011e3420a2f7870cdca77c019886675f39f151315d868a3e10798bbf37b2a4b7cff85927b0e08a45fb21031d41d3d150473da8bb8d5e2cae5d9a29afca109c92302385edfcbe21710400fd16beb6439829225479df9a9293d1ae4c5fa94327fc9940d0b6c03ba7ddea5aa37fc936438d0e91b8c515b26b3a6302bce200fb26fa26849ab5c898ebaed7672c64d5fd728036a5c89f0bf16f4c3c13d6be153528d661d28b999f723f23d3b86af8d7da7253a1301d1479e7f9ef824ff4575fece939bfbd1a4ef9cc4d90ca263b1791361efec80788c6f9b53da17a33094ca8988b375187bd6e62e70e432017c7acb1a682c37b4afc12694de40999e59a01244d5fd2fcb374e4c827816ccda2dd10a65cc84398ae31d071d7a71caa08ea52769d77f93d450d8218d9cce81dcfcc44d42c8af343b0bbcf676da29f8bcb5c1609a5e97e3b20aa038ec5362cf47f5e60e1bb244253d7e78460a29fc853f3c032dfe69fddcee50485143e5e164bb2c2dfc15935beb46d88d8a75b49624c890ceae9656a133d83f4e9636c0afeb2fdf3b86738e06d98096f0934d4e3e1e903e1d45456131e6a22967d28aa0a4ba2533454f015d5aadc43c5dc038eeab3eb518c3f74d78c58cb59a5b05001f5c22bd7dcf90ee138e7a66fe7d8cb8b09c9f2f0db38fdb16f996a04be49d9b73bc798753a6a0d7e1eeb264607d13e021c1d1ccbbdb334833ffc5fb2e0d94aa3886d92db1fb46cdaf7b586ce10d4bf632b0099290fef5b1a0ef200858b3fd468f5df6aeaefa05bc5b4b0615e1678b65959194af89e466df1855349e508dd310e7d0c9f87ffc1e528389710e7dc4203f8c927c71a1c329268f8356087f88a8bf7bf6c7fd00568b94735d9cf1026621bae6c6e9fd7620a92760105b71d8549c9219144834fa65ecebab5b140e63f8247901a6888ecadbdc903cb20911de76bc75645f7f2e61a909a97fe4c30beac6607cb4debe9feb2ed9818126eebbcfa9617bb6cc50e9ed15565b8649afa742ebb62cb4c68d4e8b9dde425eb6f7c4115a071b729d1212f65b1367031964f2293ca3b390377eb6f234faf264480cdb1df97436d25efc577c4958db6d6d13c6cd75ab144830aad87226fa14604a762910d0a910d03e536d440a1257a08d709994c74f5020a600274378848d6fd16382ecc795fb4ac892102a54ffcf0c500ae35f7622b251806f23999241f44fb254a85cc9479955586caa43ab29f6aac90e392587a52231459756a327c062140731ecca23f4bd8968a2e5c2c36271d6954c672dcfca76bc11d0fdf65aff4a838f0e1eaf9ce477dbd0ed7e74d8f68fd461ef87892581e572ea9fbc318fa873a65bd214543b09455d1999eacde8436cdd6d6dc748591e1511da95e1b79babadfdba21eef6d82176dca0f56c8a12116d4937368eb4a5a7555a912e502f3ca17498e9bc8d5afcc744574b5cb1fb4135584d120d4838dd3262e21114151a7396d1a0fa23ad21d276ca706bee28a702150ea3dbb174a79d8959ac6f6e6021d3e52851372dbc7d3162c20d992e53cee350667c2235c4ffffa8b7bd1b954dec5d9d32ced14b38f0f4205b392aad201edf5ff06fa81e36b6a8c079495febfda9385dcae5cbd166ed22ce357f28f44550a8e31bae1b1c125355898a4f1d182bca29a37bc70a339cf501dfb147850a50fa14ad82d4f49d8be3cfdb700958418e419efe85132b6a6f1032e5fddc3ae79f12bd241bd0424dd47b75f6f00b4617100b760fa47d39de451ce4ec3829590f8f46a487570911c884e61a52221d652fbf4766a24e1f52491505711b0cb5d9bf8ffa39e520585bf5a653ba787c2216ea47dfd4c3b77f3ccddcf19959e82f33fa012a71cf1d1a4fa16698d7ff2a90fdba7ac5864574c49b9fc2cfaeb8fcf7bf8165bc343ae942b52957f821e5f2f98b502087c8d6b5ae88fd53be74367b16b973119744380ba0e29718ae9c08698ce4021f4718f4c03ae5d12f0760b890b89dcd2f07bb8ffd575664662d3c73efdb804f37bed43653ed129d08dae951d353e12d4280c9f8afcbd1ee931317b43132b6a9a3e23b08fc35299dfa542a6831c97603853a6b94a94f216490f7b654164373908bc7d31f3823012f17f76f337f59ae2cd9d46de8e639c9a00c15e65ba84afa5705ea45ef0ae617307720cb912ef20be3a4983ef677af0fdad33b86568df65496f11fa2ac8c7b2a7049e25dffd695bc01b82f", 0xff1, r0) keyctl$update(0x2, r1, &(0x7f0000001200)='?', 0x1) [ 774.862517][ T6648] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 775.069602][ T6648] usb 2-1: USB disconnect, device number 8 16:29:16 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xec, 0x2e, 0x1, 0x8, 0x1d19, 0x1104, 0x5ef7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf, 0xa5, 0x3c}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c80)={0x18, &(0x7f0000000a40), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 16:29:16 executing program 5: syz_emit_ethernet(0x8a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback=0xac1414aa, @local, {[@generic={0x0, 0x2}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@local}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@loopback=0x7f00002f}, {@loopback}, {@empty}, {@dev}, {@multicast1}, {@private}, {@empty}]}]}}}}}}}, 0x0) 16:29:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff0700000400000000000000ff070000000000000000000000000000040402000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040403"], 0x88c}}, 0x0) 16:29:16 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000080)="fc", 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x300, 0x0, 0x0, 0x0, 0x0) 16:29:16 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) sendfile(r0, r1, 0x0, 0x11f08) 16:29:16 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000280)=@name={0x1e, 0x2, 0x3, {{0x40}}}, 0x10) bind(r0, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x48a02afb7101048d, {0x42}}, 0x80) [ 775.761680][ T8249] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 775.779100][ T8249] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 775.792733][ T24] audit: type=1800 audit(1641745756.818:89): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1209 res=0 errno=0 [ 775.814261][ T24] audit: type=1804 audit(1641745756.818:90): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir139965502/syzkaller.fXnv6Y/191/file0" dev="sda1" ino=1209 res=1 errno=0 16:29:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff0700000400000000000000ff070000000000000000000000000000040402000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040403"], 0x88c}}, 0x0) 16:29:17 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) dup3(r2, r1, 0x0) 16:29:17 executing program 5: syz_emit_ethernet(0x8a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback=0xac1414aa, @local, {[@generic={0x0, 0x2}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@local}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@loopback=0x7f00002f}, {@loopback}, {@empty}, {@dev}, {@multicast1}, {@private}, {@empty}]}]}}}}}}}, 0x0) [ 776.259349][ T8257] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 776.270062][ T8257] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 776.273185][ T34] usb 2-1: new high-speed USB device number 9 using dummy_hcd 16:29:17 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000080)="fc", 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x300, 0x0, 0x0, 0x0, 0x0) 16:29:17 executing program 5: syz_emit_ethernet(0x8a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback=0xac1414aa, @local, {[@generic={0x0, 0x2}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@local}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@loopback=0x7f00002f}, {@loopback}, {@empty}, {@dev}, {@multicast1}, {@private}, {@empty}]}]}}}}}}}, 0x0) [ 776.552495][ T34] usb 2-1: Using ep0 maxpacket: 8 16:29:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff0700000400000000000000ff070000000000000000000000000000040402000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040403"], 0x88c}}, 0x0) [ 776.733440][ T34] usb 2-1: New USB device found, idVendor=1d19, idProduct=1104, bcdDevice=5e.f7 [ 776.742755][ T34] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.784289][ T34] usb 2-1: config 0 descriptor?? [ 777.042643][ T34] usb 2-1: dvb_usb_v2: found a 'MSI DIGIVOX Micro HD' in warm state [ 777.120451][ T8266] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 777.131223][ T8266] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 778.257653][ T34] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 778.471155][ T6648] usb 2-1: USB disconnect, device number 9 16:29:20 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xec, 0x2e, 0x1, 0x8, 0x1d19, 0x1104, 0x5ef7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf, 0xa5, 0x3c}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c80)={0x18, &(0x7f0000000a40), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 16:29:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) dup3(r2, r1, 0x0) 16:29:20 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x7, 0x4) 16:29:20 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0xa04, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x27d, 0x33, @mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @device_a, @from_mac, {0x0, 0x79}}, 0x7eee, @default, 0x0, @void, @val={0x1, 0x7, [{0x3, 0x1}, {0x18}, {0x6c, 0x1}, {0x1}, {0x60}, {}, {0x5}]}, @val={0x3, 0x1, 0xb1}, @void, @void, @void, @void, @void, [{0xdd, 0x77, "6a63589ab99cc4e4b89cace53b2337864357bc25d981a702ae617950823521c1c3c434a3fe350155c57660ac5ccc41abece5b66ceb7a9b45179acdba1d69d77f4754c62ed9a055543f929ccf57e570fc4e515a08e468dfe298bf7f4f41279f18f30a7cab02d01908a9dceb10a207bb22aa920f40aa1517"}, {0xdd, 0xed, "cb0392bce984d68242f346f878bccd61f601f93a3caee228f35594a04de2fbc2c188dd6040aa7567bfcec1fba41d6a635655fb749066f35599cde86208f5c57fc325024e497b6d0eb9cf7105fc4e82f9cbb728f35e787d44b2f8f69026515badab309bec48935f04317d58e25034e8d9becdc02f3dfd7634da668d3a6221f137517b98d15f70ecc6135a73c151bb7d02b605c79b69cad70546658fe49985f67282c19e7212d76e1f36a423f6f1522b56b9c48c100cdc82b13b31910807a0a153c8982ae8e4d0794db8bb3cadffe675e67946c482a1404b771bc309610b1827c33fa31cc337536e4b9204008c41"}, {0xdd, 0xdf, "c11efd91bc7e89f3add4c48ca4decf2a12892d4a59da1d2464b9d96831a747406c653a4cf8251ca0284f8d2f6c94ed5c8204c6030788ec3c4b24d26f293f5db7029c7477857ae5477c4bcf82f115c2eb9c4651cb7c5928c8f5922706d80705e84da715a14f7a4dfd5deea92da4bb50d3d82e118d70e8cb3461e276cd607c70af4f5a7f2948bf3e76c568c6ce3f65070f113a41c0c271a63221e56759f8251ee24b3bc4005810d4dc4a8744fffee14ca59bcd13153cb01042b0043a4ea3ff32b39e967efcd38c95e907a1f6f959477df20e1d9c8eabaf8fe7015fc1f64323d9"}]}}, @NL80211_ATTR_FRAME={0x4b, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xa}, {0x20}, @broadcast, @device_b, @from_mac=@broadcast, {0xa, 0x9}}, {0x1, 0x0, 0x0, 0x0, 0x43}}, {@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @from_mac=@device_b, @initial, {0x0, 0x1}}, {0x0, 0x0, 0x3, 0x1, 0x6}}}, @random="5311bf89f582c3af5b3f31372cbabfd3bd27fe"}}, @NL80211_ATTR_FRAME={0x6fe, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xc}, {0x7f}, @broadcast, @device_a, @from_mac, {0xb, 0x3}}, {0x4, 0x1, 0x0, 0x0, 0x1}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x9}, @device_b, @from_mac=@broadcast, @from_mac=@broadcast, {0x0, 0x215}}, {0x7, 0x1, 0x0, 0x1, 0xff}}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa04}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000200)='./bus\x00', 0x1) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r3, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff61, 0x79000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) 16:29:20 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000080)="fc", 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x300, 0x0, 0x0, 0x0, 0x0) 16:29:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff0700000400000000000000ff070000000000000000000000000000040402000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040403"], 0x88c}}, 0x0) [ 779.134730][ T8274] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 779.146144][ T8274] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 16:29:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109841, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)) write$dsp(0xffffffffffffffff, &(0x7f00000002c0)="40388046e2f8e44fb7fb4aa8d43a66220e510141721862951256d3c6d873f1a06e7df3c311d03e0e8474d36bd3bc84d07da79eeafd45a1845f50a05455b60ed6cc8fda0b9ff9c2a333f02074277b9e709634f66eac2a239def0132b163f91c16aa43665d7d121eff3f8745b1a89e6f964e924c356a938d1ad4d30626fce9ca5430e5cb6960a3334b442ee840c6b40189ca432a1cb4e91f9961b73f4190ab2a15eb6c9315ee6853dcfe8856738a9e2840243d4ce5f442bf2c058125585050a21641eaf9795968630d3fec6a69cf201180b224e6b9a3791acf1a1141be5acfeb09f4c9b21627938af6dac7cafce243a7ddcd5bef405b6b54e3e2b187e12ea26d9e4e2d2ec992fee6b600918551baf4d243f10094f5a9d1d90ea424ad986161dab2c99c71fc3bbc577bdd32cc642909033b70e81bd0a5c9195b4a8e72000000000000", 0x141) 16:29:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) dup3(r2, r1, 0x0) [ 780.082153][ T3554] usb 2-1: new high-speed USB device number 10 using dummy_hcd 16:29:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x401, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) close(0xffffffffffffffff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280), 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)=""/239, 0xef}], 0x1, &(0x7f0000000480)=""/162, 0xa2}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x9, &(0x7f0000000580)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x81}, @alu={0x0, 0x0, 0x1, 0x2, 0x6, 0x50, 0x8}, @generic={0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x8e}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000680)='syzkaller\x00', 0x9, 0x33, &(0x7f00000006c0)=""/51, 0x40f00, 0xa, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000700)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x6, 0x7fff, 0x7fffffff}, 0x10}, 0x78) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 16:29:21 executing program 2: bind$netlink(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setregid(0xee01, 0xffffffffffffffff) memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5414, 0x0) close(r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x0) [ 780.321966][ T3554] usb 2-1: Using ep0 maxpacket: 8 16:29:21 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0xa04, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x27d, 0x33, @mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @device_a, @from_mac, {0x0, 0x79}}, 0x7eee, @default, 0x0, @void, @val={0x1, 0x7, [{0x3, 0x1}, {0x18}, {0x6c, 0x1}, {0x1}, {0x60}, {}, {0x5}]}, @val={0x3, 0x1, 0xb1}, @void, @void, @void, @void, @void, [{0xdd, 0x77, "6a63589ab99cc4e4b89cace53b2337864357bc25d981a702ae617950823521c1c3c434a3fe350155c57660ac5ccc41abece5b66ceb7a9b45179acdba1d69d77f4754c62ed9a055543f929ccf57e570fc4e515a08e468dfe298bf7f4f41279f18f30a7cab02d01908a9dceb10a207bb22aa920f40aa1517"}, {0xdd, 0xed, "cb0392bce984d68242f346f878bccd61f601f93a3caee228f35594a04de2fbc2c188dd6040aa7567bfcec1fba41d6a635655fb749066f35599cde86208f5c57fc325024e497b6d0eb9cf7105fc4e82f9cbb728f35e787d44b2f8f69026515badab309bec48935f04317d58e25034e8d9becdc02f3dfd7634da668d3a6221f137517b98d15f70ecc6135a73c151bb7d02b605c79b69cad70546658fe49985f67282c19e7212d76e1f36a423f6f1522b56b9c48c100cdc82b13b31910807a0a153c8982ae8e4d0794db8bb3cadffe675e67946c482a1404b771bc309610b1827c33fa31cc337536e4b9204008c41"}, {0xdd, 0xdf, "c11efd91bc7e89f3add4c48ca4decf2a12892d4a59da1d2464b9d96831a747406c653a4cf8251ca0284f8d2f6c94ed5c8204c6030788ec3c4b24d26f293f5db7029c7477857ae5477c4bcf82f115c2eb9c4651cb7c5928c8f5922706d80705e84da715a14f7a4dfd5deea92da4bb50d3d82e118d70e8cb3461e276cd607c70af4f5a7f2948bf3e76c568c6ce3f65070f113a41c0c271a63221e56759f8251ee24b3bc4005810d4dc4a8744fffee14ca59bcd13153cb01042b0043a4ea3ff32b39e967efcd38c95e907a1f6f959477df20e1d9c8eabaf8fe7015fc1f64323d9"}]}}, @NL80211_ATTR_FRAME={0x4b, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xa}, {0x20}, @broadcast, @device_b, @from_mac=@broadcast, {0xa, 0x9}}, {0x1, 0x0, 0x0, 0x0, 0x43}}, {@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @from_mac=@device_b, @initial, {0x0, 0x1}}, {0x0, 0x0, 0x3, 0x1, 0x6}}}, @random="5311bf89f582c3af5b3f31372cbabfd3bd27fe"}}, @NL80211_ATTR_FRAME={0x6fe, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xc}, {0x7f}, @broadcast, @device_a, @from_mac, {0xb, 0x3}}, {0x4, 0x1, 0x0, 0x0, 0x1}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x9}, @device_b, @from_mac=@broadcast, @from_mac=@broadcast, {0x0, 0x215}}, {0x7, 0x1, 0x0, 0x1, 0xff}}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa04}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000200)='./bus\x00', 0x1) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r3, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff61, 0x79000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) [ 780.462973][ T3554] usb 2-1: New USB device found, idVendor=1d19, idProduct=1104, bcdDevice=5e.f7 [ 780.472495][ T3554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.610371][ T3554] usb 2-1: config 0 descriptor?? 16:29:21 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVex:De', 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x15, &(0x7f00000000c0)) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x20) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) capset(&(0x7f0000000180)={0x19980330}, &(0x7f00000001c0)={0xed7d, 0x8, 0x0, 0x9, 0x6, 0x9}) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0x5, r3, 0x0, 0x0, 0x0) keyctl$clear(0xf, r3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000380)="dee70300b3fc52bafea12ebd22cf9e5e1dbac27b0426fc0291c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab41c3a4f51ab0124b50c3362201a307df03000", 0x80, r4) r5 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000380)="dee70300b3fc52bafea12ebd22cf9e5e1dbac27b0426fc0291c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab41c3a4f51ab0124b50c3362201a307df030", 0x7f, r5) [ 780.862795][ T3554] usb 2-1: dvb_usb_v2: found a 'MSI DIGIVOX Micro HD' in warm state [ 780.935563][ T8282] syz-executor.5: vmalloc error: size 688128, page order 0, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 780.954770][ T8282] CPU: 1 PID: 8282 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0 [ 780.963633][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.973815][ T8282] Call Trace: [ 780.977182][ T8282] [ 780.980203][ T8282] dump_stack_lvl+0x1ff/0x28e [ 780.985087][ T8282] dump_stack+0x25/0x28 [ 780.989414][ T8282] warn_alloc+0x4d9/0x690 [ 780.994048][ T8282] ? kmsan_get_metadata+0x33/0x220 [ 780.999367][ T8282] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 781.005372][ T8282] __vmalloc_node_range+0x1290/0x17b0 [ 781.010985][ T8282] __vmalloc+0xf8/0x110 [ 781.015321][ T8282] ? snd_dma_vmalloc_alloc+0xbc/0xe0 [ 781.020891][ T8282] ? snd_dma_vmalloc_alloc+0xbc/0xe0 [ 781.027076][ T8282] snd_dma_vmalloc_alloc+0xbc/0xe0 [ 781.032392][ T8282] ? snd_dma_iram_mmap+0x220/0x220 [ 781.037706][ T8282] snd_dma_alloc_dir_pages+0x29c/0x4f0 [ 781.043402][ T8282] snd_pcm_lib_malloc_pages+0x7b5/0xe00 [ 781.049173][ T8282] snd_pcm_hw_params+0xfd1/0x2870 [ 781.054340][ T8282] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 781.060357][ T8282] snd_pcm_kernel_ioctl+0x21a/0xfc0 [ 781.065773][ T8282] snd_pcm_oss_change_params_locked+0x4f12/0x74f0 [ 781.072442][ T8282] ? kmsan_get_metadata+0x164/0x220 [ 781.077917][ T8282] snd_pcm_oss_get_active_substream+0x4d4/0x630 [ 781.084367][ T8282] snd_pcm_oss_set_rate+0x4da/0xa10 [ 781.089766][ T8282] snd_pcm_oss_ioctl+0x9c1/0x1e40 [ 781.094985][ T8282] ? kmsan_get_metadata+0x1ab/0x220 [ 781.100463][ T8282] snd_pcm_oss_ioctl_compat+0x8e/0xa0 [ 781.106038][ T8282] ? snd_pcm_oss_ioctl+0x1e40/0x1e40 [ 781.111500][ T8282] __se_compat_sys_ioctl+0x876/0x1150 [ 781.117137][ T8282] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 781.123140][ T8282] __ia32_compat_sys_ioctl+0xd9/0x110 [ 781.128699][ T8282] __do_fast_syscall_32+0x96/0xf0 [ 781.133943][ T8282] do_fast_syscall_32+0x34/0x70 [ 781.138981][ T8282] do_SYSENTER_32+0x1b/0x20 [ 781.143669][ T8282] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 781.150201][ T8282] RIP: 0023:0xf6f04549 [ 781.154385][ T8282] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 781.174150][ T8282] RSP: 002b:00000000f58fe5bc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 781.182704][ T8282] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0045002 [ 781.190787][ T8282] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 781.199298][ T8282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 781.207364][ T8282] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 781.215432][ T8282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 781.224138][ T8282] [ 781.227677][ T8282] Mem-Info: [ 781.230867][ T8282] active_anon:1640 inactive_anon:135864 isolated_anon:0 [ 781.230867][ T8282] active_file:4279 inactive_file:62864 isolated_file:0 [ 781.230867][ T8282] unevictable:768 dirty:1 writeback:0 [ 781.230867][ T8282] slab_reclaimable:8102 slab_unreclaimable:21044 [ 781.230867][ T8282] mapped:27332 shmem:2637 pagetables:1676 bounce:0 [ 781.230867][ T8282] kernel_misc_reclaimable:0 [ 781.230867][ T8282] free:262291 free_pcp:17290 free_cma:0 [ 781.273299][ T8282] Node 0 active_anon:6528kB inactive_anon:542204kB active_file:16984kB inactive_file:251452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:109320kB dirty:4kB writeback:0kB shmem:8956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 331776kB writeback_tmp:0kB kernel_stack:5200kB pagetables:6276kB all_unreclaimable? no [ 781.305121][ T8282] Node 1 active_anon:36kB inactive_anon:1252kB active_file:132kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:240kB pagetables:440kB all_unreclaimable? no [ 781.335012][ T8282] Node 0 DMA free:4096kB boost:0kB min:156kB low:192kB high:228kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 781.362349][ T8282] lowmem_reserve[]: 0 905 1218 1218 1218 [ 781.368278][ T8282] Node 0 DMA32 free:42496kB boost:0kB min:36008kB low:45008kB high:54008kB reserved_highatomic:0KB active_anon:756kB inactive_anon:480884kB active_file:912kB inactive_file:222276kB unevictable:0kB writepending:4kB present:3129332kB managed:932648kB mlocked:0kB bounce:0kB free_pcp:44652kB local_pcp:22348kB free_cma:0kB [ 781.398732][ T8282] lowmem_reserve[]: 0 0 312 312 312 [ 781.404340][ T8282] Node 0 Normal free:25736kB boost:10240kB min:22688kB low:25800kB high:28912kB reserved_highatomic:0KB active_anon:5772kB inactive_anon:61280kB active_file:16072kB inactive_file:29176kB unevictable:1536kB writepending:0kB present:1048576kB managed:320500kB mlocked:0kB bounce:0kB free_pcp:14880kB local_pcp:7376kB free_cma:0kB [ 781.435577][ T8282] lowmem_reserve[]: 0 0 0 0 0 [ 781.440561][ T8282] Node 1 Normal free:976836kB boost:0kB min:41492kB low:51864kB high:62236kB reserved_highatomic:0KB active_anon:36kB inactive_anon:1252kB active_file:132kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194304kB managed:1067996kB mlocked:0kB bounce:0kB free_pcp:9832kB local_pcp:8268kB free_cma:0kB [ 781.470689][ T8282] lowmem_reserve[]: 0 0 0 0 0 [ 781.475735][ T8282] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 781.488317][ T8282] Node 0 DMA32: 344*4kB (UME) 92*8kB (UME) 320*16kB (UME) 196*32kB (UME) 103*64kB (UME) 13*128kB (UME) 9*256kB (ME) 10*512kB (UME) 13*1024kB (UME) 0*2048kB 0*4096kB = 42496kB [ 781.506818][ T8282] Node 0 Normal: 738*4kB (ME) 506*8kB (ME) 199*16kB (UME) 72*32kB (UME) 17*64kB (UME) 5*128kB (M) 17*256kB (UM) 8*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 25736kB [ 781.524558][ T8282] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (E) 1*32kB (U) 2*64kB (UE) 2*128kB (UE) 2*256kB (ME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (M) 237*4096kB (UM) = 976836kB [ 781.542209][ T8282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 781.552103][ T8282] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 781.561532][ T8282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 781.571419][ T8282] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 781.580971][ T8282] 14123 total pagecache pages [ 781.585862][ T8282] 0 pages in swap cache [ 781.590082][ T8282] Swap cache stats: add 0, delete 0, find 0/0 [ 781.596430][ T8282] Free swap = 0kB [ 781.600215][ T8282] Total swap = 0kB [ 781.604133][ T8282] 2097051 pages RAM [ 781.608026][ T8282] 0 pages HighMem/MovableOnly [ 781.612932][ T8282] 1515741 pages reserved [ 781.617262][ T8282] 0 pages cma reserved [ 781.801555][ T8303] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) [ 782.252477][ T3554] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 782.460755][ T34] usb 2-1: USB disconnect, device number 10 16:29:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) dup3(r2, r1, 0x0) 16:29:24 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000f000000daf73248289e2f729534b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000ec0)={0x3}) syz_mount_image$minix(0x0, 0x0, 0x381, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000d00)=ANY=[]) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000ed0802088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "7ec70f8f"}]}}, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x441, &(0x7f00000000c0)=ANY=[]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000a40)={0x1, 0x1, 0x400, 0x3, 0x101, 0xfffffff7, 0xfff, 0x1, 0x0, 0x8000, 0x7, 0x0, 0x81, 0x2}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x3, 0x4, 0x4, 0xc, "b731e9ab57aa9c45632dd46a27b2b4f1e01b5649bab9144a966ce384ee5cbe243e6915753542dfde37a2f91a9f8b463fd7f5741e32d9a4a15868bfdb41da18b7", "a794de9607bec1c04f6343152e3053b8945dfeba2b440c69f575a64ad23611ba", [0x7]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x40) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000006c0)={r4, 0x0, 0x0}, 0x20) r5 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x9, &(0x7f0000001640)=[{&(0x7f0000000200)="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", 0x1000, 0x100}, {&(0x7f0000000140)="c8a66613ce2c2f6bd81d24a50173c73576ad9fcd4b737fb978f9a2fd13537de5", 0x20, 0x9}, {&(0x7f0000000180)="d6b25b9bde70d8d5d0a61dcdbcbeb7", 0xf, 0x2}, {&(0x7f0000001200)="2ebc4f4989c795e4c5ed0b05d531b2d1d28bfe1bcff8a9c00395b42963cd37214708294a908bdc508e7b2049b214a23e7f931562b026ab5ee94836027f14f4cb9cd9ff21598380e60f8ac56a4be9d6c73e8c93833d03e250dd719c2bb4d08fb8a4daf4dcfe020f48db11208ecad28d4a1f3a40a8aa7e80955085ad810ff303a21aab0d84f5e346adafa5ed6feec86ea48bfaffb1874574ecf3040c1ef09665afe10cd4e6903150a4021e6fea48e9beb771c52822a0d40a7031cc89114461137a6d087ad050d2a3a1e3508765009dc05f90df93b8a45745823e8f34b243e716d4310aa4e5e5423bbfee8fc5e131", 0xed, 0x502}, {&(0x7f0000001300)="702dbcd589fb6e5514a9aa0d855142ad7cacf24f4e1588c930394418b31af7f74a329412d3e1bad9019e6859a7f4fb1db286f4c6a721fcb0d301f5616dfbc5faee3b0083c57a029c4f811b21a16605da16d54dddb88d70dd53a1278f4b58d388131c83f3e7a5ba0e5b688745d3c067df46c80aa713e9b0beec890a207d7633be2559eef4c887ad505d43c3dc5de3c0699c7eaf6f21aedde629f3f6ac77ad91285ab3ae6e0fe5307127bc6a594e65bea14c58e78c44e24d7b952a5c87f687989ea0fc4776", 0xc4, 0x10000}, {&(0x7f0000001400)="27a43ba50bf77e8758b5", 0xa}, {&(0x7f0000001440)="5a848d95e1be8072960efa537854301994783d7b61b60cc370872a5dbd177e65c936a95685a6a27f57a040e1926898db0292cb06eb5835ce2a5bad82f4c78471136c20acc260ce5be55157425a0cbf192ec5247a9d6c30f787bc4dc8d3de0746c14690313f6cbf4a1e100351e6afc07e6f7767fe12b2de605972742451c23e6e22c39234a8a0e1fa5f5e0c10f1711812edb84e002889c919588be0e667a215cc6a27e2db7d330be020d105f4b355b10953844da17937a6dd2aebd0f159268d838e1e53e5b4b1ee36a2a98302f31806fb2d7838e47918baf9bcf8af", 0xdb, 0x6}, {&(0x7f0000001540)="7fbef4124015710520701e3986f997", 0xf, 0x9}, {&(0x7f0000001580)="6feb3abe24572c88a83a8b2bb9798e7a5b57ca04fd3ca4e3210734328350ac49e03b99f55229dc768e806b428780a7a32920693632a3a7b0b56e38c7c56fef8c3d0f11060ab4096ce573c3988ffd9d97e2a4c9b5fdc5185714b44f713327616c1b44e136d513b0165fb003b4ae50af170e5bed576cb8c44982813520f7209e3cbfca5190560a786d43e0a423d49bae4cb66d1b1f32d713", 0x97, 0x6}], 0x8000, &(0x7f0000001740)={[{@umask={'umask', 0x3d, 0x2}}, {@namecase}, {@errors_remount}, {@discard}, {@discard}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0x569}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_gt}, {@dont_appraise}, {@pcr={'pcr', 0x3d, 0x3e}}]}) dup2(r4, r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002da8) 16:29:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109841, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)) write$dsp(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x141) 16:29:24 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0xa04, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x27d, 0x33, @mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @device_a, @from_mac, {0x0, 0x79}}, 0x7eee, @default, 0x0, @void, @val={0x1, 0x7, [{0x3, 0x1}, {0x18}, {0x6c, 0x1}, {0x1}, {0x60}, {}, {0x5}]}, @val={0x3, 0x1, 0xb1}, @void, @void, @void, @void, @void, [{0xdd, 0x77, "6a63589ab99cc4e4b89cace53b2337864357bc25d981a702ae617950823521c1c3c434a3fe350155c57660ac5ccc41abece5b66ceb7a9b45179acdba1d69d77f4754c62ed9a055543f929ccf57e570fc4e515a08e468dfe298bf7f4f41279f18f30a7cab02d01908a9dceb10a207bb22aa920f40aa1517"}, {0xdd, 0xed, "cb0392bce984d68242f346f878bccd61f601f93a3caee228f35594a04de2fbc2c188dd6040aa7567bfcec1fba41d6a635655fb749066f35599cde86208f5c57fc325024e497b6d0eb9cf7105fc4e82f9cbb728f35e787d44b2f8f69026515badab309bec48935f04317d58e25034e8d9becdc02f3dfd7634da668d3a6221f137517b98d15f70ecc6135a73c151bb7d02b605c79b69cad70546658fe49985f67282c19e7212d76e1f36a423f6f1522b56b9c48c100cdc82b13b31910807a0a153c8982ae8e4d0794db8bb3cadffe675e67946c482a1404b771bc309610b1827c33fa31cc337536e4b9204008c41"}, {0xdd, 0xdf, "c11efd91bc7e89f3add4c48ca4decf2a12892d4a59da1d2464b9d96831a747406c653a4cf8251ca0284f8d2f6c94ed5c8204c6030788ec3c4b24d26f293f5db7029c7477857ae5477c4bcf82f115c2eb9c4651cb7c5928c8f5922706d80705e84da715a14f7a4dfd5deea92da4bb50d3d82e118d70e8cb3461e276cd607c70af4f5a7f2948bf3e76c568c6ce3f65070f113a41c0c271a63221e56759f8251ee24b3bc4005810d4dc4a8744fffee14ca59bcd13153cb01042b0043a4ea3ff32b39e967efcd38c95e907a1f6f959477df20e1d9c8eabaf8fe7015fc1f64323d9"}]}}, @NL80211_ATTR_FRAME={0x4b, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xa}, {0x20}, @broadcast, @device_b, @from_mac=@broadcast, {0xa, 0x9}}, {0x1, 0x0, 0x0, 0x0, 0x43}}, {@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @from_mac=@device_b, @initial, {0x0, 0x1}}, {0x0, 0x0, 0x3, 0x1, 0x6}}}, @random="5311bf89f582c3af5b3f31372cbabfd3bd27fe"}}, @NL80211_ATTR_FRAME={0x6fe, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xc}, {0x7f}, @broadcast, @device_a, @from_mac, {0xb, 0x3}}, {0x4, 0x1, 0x0, 0x0, 0x1}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x9}, @device_b, @from_mac=@broadcast, @from_mac=@broadcast, {0x0, 0x215}}, {0x7, 0x1, 0x0, 0x1, 0xff}}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa04}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000200)='./bus\x00', 0x1) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r3, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff61, 0x79000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) 16:29:24 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVex:De', 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x15, &(0x7f00000000c0)) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x20) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) capset(&(0x7f0000000180)={0x19980330}, &(0x7f00000001c0)={0xed7d, 0x8, 0x0, 0x9, 0x6, 0x9}) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0x5, r3, 0x0, 0x0, 0x0) keyctl$clear(0xf, r3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000380)="dee70300b3fc52bafea12ebd22cf9e5e1dbac27b0426fc0291c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab41c3a4f51ab0124b50c3362201a307df03000", 0x80, r4) r5 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000380)="dee70300b3fc52bafea12ebd22cf9e5e1dbac27b0426fc0291c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab41c3a4f51ab0124b50c3362201a307df030", 0x7f, r5) 16:29:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109841, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)) write$dsp(0xffffffffffffffff, &(0x7f00000002c0)="40388046e2f8e44fb7fb4aa8d43a66220e510141721862951256d3c6d873f1a06e7df3c311d03e0e8474d36bd3bc84d07da79eeafd45a1845f50a05455b60ed6cc8fda0b9ff9c2a333f02074277b9e709634f66eac2a239def0132b163f91c16aa43665d7d121eff3f8745b1a89e6f964e924c356a938d1ad4d30626fce9ca5430e5cb6960a3334b442ee840c6b40189ca432a1cb4e91f9961b73f4190ab2a15eb6c9315ee6853dcfe8856738a9e2840243d4ce5f442bf2c058125585050a21641eaf9795968630d3fec6a69cf201180b224e6b9a3791acf1a1141be5acfeb09f4c9b21627938af6dac7cafce243a7ddcd5bef405b6b54e3e2b187e12ea26d9e4e2d2ec992fee6b600918551baf4d243f10094f5a9d1d90ea424ad986161dab2c99c71fc3bbc577bdd32cc642909033b70e81bd0a5c9195b4a8e72000000000000", 0x141) [ 783.510050][ T3554] usb 3-1: new high-speed USB device number 15 using dummy_hcd 16:29:24 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVex:De', 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x15, &(0x7f00000000c0)) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x20) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) capset(&(0x7f0000000180)={0x19980330}, &(0x7f00000001c0)={0xed7d, 0x8, 0x0, 0x9, 0x6, 0x9}) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0x5, r3, 0x0, 0x0, 0x0) keyctl$clear(0xf, r3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000380)="dee70300b3fc52bafea12ebd22cf9e5e1dbac27b0426fc0291c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab41c3a4f51ab0124b50c3362201a307df03000", 0x80, r4) r5 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000380)="dee70300b3fc52bafea12ebd22cf9e5e1dbac27b0426fc0291c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab41c3a4f51ab0124b50c3362201a307df030", 0x7f, r5) 16:29:24 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0xa04, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x27d, 0x33, @mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @device_a, @from_mac, {0x0, 0x79}}, 0x7eee, @default, 0x0, @void, @val={0x1, 0x7, [{0x3, 0x1}, {0x18}, {0x6c, 0x1}, {0x1}, {0x60}, {}, {0x5}]}, @val={0x3, 0x1, 0xb1}, @void, @void, @void, @void, @void, [{0xdd, 0x77, "6a63589ab99cc4e4b89cace53b2337864357bc25d981a702ae617950823521c1c3c434a3fe350155c57660ac5ccc41abece5b66ceb7a9b45179acdba1d69d77f4754c62ed9a055543f929ccf57e570fc4e515a08e468dfe298bf7f4f41279f18f30a7cab02d01908a9dceb10a207bb22aa920f40aa1517"}, {0xdd, 0xed, "cb0392bce984d68242f346f878bccd61f601f93a3caee228f35594a04de2fbc2c188dd6040aa7567bfcec1fba41d6a635655fb749066f35599cde86208f5c57fc325024e497b6d0eb9cf7105fc4e82f9cbb728f35e787d44b2f8f69026515badab309bec48935f04317d58e25034e8d9becdc02f3dfd7634da668d3a6221f137517b98d15f70ecc6135a73c151bb7d02b605c79b69cad70546658fe49985f67282c19e7212d76e1f36a423f6f1522b56b9c48c100cdc82b13b31910807a0a153c8982ae8e4d0794db8bb3cadffe675e67946c482a1404b771bc309610b1827c33fa31cc337536e4b9204008c41"}, {0xdd, 0xdf, "c11efd91bc7e89f3add4c48ca4decf2a12892d4a59da1d2464b9d96831a747406c653a4cf8251ca0284f8d2f6c94ed5c8204c6030788ec3c4b24d26f293f5db7029c7477857ae5477c4bcf82f115c2eb9c4651cb7c5928c8f5922706d80705e84da715a14f7a4dfd5deea92da4bb50d3d82e118d70e8cb3461e276cd607c70af4f5a7f2948bf3e76c568c6ce3f65070f113a41c0c271a63221e56759f8251ee24b3bc4005810d4dc4a8744fffee14ca59bcd13153cb01042b0043a4ea3ff32b39e967efcd38c95e907a1f6f959477df20e1d9c8eabaf8fe7015fc1f64323d9"}]}}, @NL80211_ATTR_FRAME={0x4b, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xa}, {0x20}, @broadcast, @device_b, @from_mac=@broadcast, {0xa, 0x9}}, {0x1, 0x0, 0x0, 0x0, 0x43}}, {@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @from_mac=@device_b, @initial, {0x0, 0x1}}, {0x0, 0x0, 0x3, 0x1, 0x6}}}, @random="5311bf89f582c3af5b3f31372cbabfd3bd27fe"}}, @NL80211_ATTR_FRAME={0x6fe, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xc}, {0x7f}, @broadcast, @device_a, @from_mac, {0xb, 0x3}}, {0x4, 0x1, 0x0, 0x0, 0x1}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x9}, @device_b, @from_mac=@broadcast, @from_mac=@broadcast, {0x0, 0x215}}, {0x7, 0x1, 0x0, 0x1, 0xff}}}, @random="3e6f93788fcdfd345b2330bb5bbf0c6f5216b695a6d863fbfbac6f672c489d208b6ea16c4a46bcce58b3b1bffb04d48092196d3336b70bbfc75ac504372889a7e70c4c50f1e209d9e6ba5d1136272c5c2341c625e07fd354b7d7cea04a9bd570d728905ce35b65ac030d1241ceaca4403ab804a34914095580ae9565a4b6d92c2b4f7ebcd2270f207755a6f18a1deed989cac37d7c56e931fc9e54b3466e51315a5aee56a4b173f5de10adfb376362cb86cfa9562f2c2ec2ac35513276018f0f4b3254044fb5e8934a3516a5665ef2e518833feda7390e5930f218c413dbf4f9c8e751c1ee44ef5cf985f0d4ce1443c065c0a2a183c58dbbbf77ac55de3b5bff0f8bbc31deb11ef73540a216d9703fcd164c0a2f118cb8f25aeae547dc09cc447cf5bac86a06a6aabeb18118e1f39de89a369912d8d1ef4bbe5f8ef2034f2327ffd5d704df417dec291c8a9c738d967feea7e0dda02657b72328ce599b0438f89c9d249427d0625800de61fb7934d2d6c5b16fd58c6f0db76e01e9198492c034b9c01af72264fe94ef725d90a4f2c2c7541787875c7a67823d1c2693d1ee1b13ff855ab4216478d4a319e52885b0bc8d856b19774c277523511d42e528f2233688adcdeedd93971a6c7594b64025d3b7c51272540e97253752ee181ef3f16d6eaa3811eba9347a5dda0b0a7588d44d82b3bea98c6883a68f5aa562d40d51dcd4f3f6870901060cbbfde0b36b242b15e721f2f40ac078d6352c906b3d076778ed2fb96cff3e6cdb5e658330ac259921a3538ddfc4692300f9e7f5e9175fceccc8a1341868a63b48e905051f2dbf56af1ffc2f53c72c9353e470e63a529ecbc8d5ef81206faa9d5ab2da53e42a19a7748a0f5232ca6c8bcb5e056f458d4417545d45671eba1c493d656b20c1e51d5912534d26f351ae2d24c5eeb57695b92e9aa9d4a067796966534e3c9b2d5dbafe4b3f55c6ab3b34f5b82fab72b930c35b2093b615c8fcd3b1d47930645f1091cc325eee8d501603e7e818c902da386c1952ff0643ce457c1eb79d8cf8e0a23ce1cbf6386eb58d41936676fc2ebe51e3d906a8dca1154d3edb7985a008a19a38701d62a39d4db6362fc9b8f14e13296db43b611a76f743bfa90c206b4336d29cf94c91706ea614394dc60b517d4744871992ea8aa44fce09597ffa7fd7c9b72ca28f328944d69c2e34f60861b15afe681b56beaab96131784b8b892413fc14c3dd98df21f9b031fb628fb59cbf9bc033e5ebf080c91b9dd113358a0f86882781e100ef94df79f68b0b94fcc5fa12c43440801228252ad2932b1a4de27951ea2250ae8851b47e079fc01d77760bf4c962f3f6e7dd795bd30b964eb80e0c6d33649632e64425eb556be069427b1a7de3a35200ec1e0985737b017bd88b26927f2b2fe1a7168eca2bc0e3a0f5b9b38cb29157f5cb7c9223d7f1ba680a90e1574401a0668b13f5186175b4fecba2e2eeca8c5ba6a60f708b2b4ace49362d8504534f406b01738dcb05dae5e15e0e846229c40968f7c9815a5049b4aaa0165bf2d019d59b45a83331b751afe8daa0e2acd70908778329104dd7a23af0f3e8141d7e2a7e0378b19fc322aa4e81b71a9050047b3ccbc8988ef9ef9ed6c0f438cd6cc05955883e7e608e85c0d20d1d7ff99ee7f54ea9a124ac482031d4f59a01e527d11be45f7d427bec5766e6108b341ccbefb5eb269d0a712328a4fa72f7ca5a350d70d67e053a0f44c75ed7f55328549ab14bb8f4774d62df079ea946d5633cff9b3db6a54e13125b33a0a0c76a8d01bb4cadc6d9b5487e0734911331dd90e71046b0dc974b9128ce57ccaae9137c49111ba022331ca1dcf1eb13492d2e2f01f38096bfba953360878f1232e7123808be716ca13f724542d3472392826d57ef279e0b8f00a0657e0f9ce4af2aa7cfd5add6a91f7d78e7be816f93cb3488e3427ce548266b1a2077c784076cf2e242fb3e8a3365df1deea8e283cbb76eedfa5062ecfdc7cd3c373fa2333d64e212728011f3daec3f12e3cd2e97de3fcc8cf449b1cb8a858033e6fa49765528dc564c5ce390ed72a30a36a4ad64a3f170359e31308fcd4eca4896bba31f8a34af0fb7661b69f25cc7fecf55ad16db946205dab07b1b934ba88856c7596a1233a50bcf750134dbbec8ce733de5ee5fbbeeaae3dfebde9c5b4f2a6ac686a7f5af8ba8e885b0723aa7c474c4ecfbdaee1a62f820ea7c76b1d20978428c315dcc7d8ca849ade596d297acd89eb8d302918e0b7238cb87eaa14e495600106e932bc4873c21e4a1b8f6005a7d33885501564cb9ba88261aae760fab916dff1ff6239196d76bd10c0941eecc7a8aaba2115250a22068474f8dcb9e6753abbaaebd68ad167d725d7926f665bf96bd9190ebe7e804f86d64502ac87532e84615858046c61a6d6ea121bad40108aa4334d2ebb045"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa04}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000200)='./bus\x00', 0x1) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r3, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff61, 0x79000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) 16:29:24 executing program 0: setreuid(0xee01, 0x0) r0 = getuid() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000c80), 0x6) setreuid(0x0, r0) ioctl$sock_bt_hci(r1, 0x400448e7, 0x0) [ 783.932688][ T3554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.943847][ T3554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.953874][ T3554] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 783.967042][ T3554] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 783.976372][ T3554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.247475][ T3554] usb 3-1: config 0 descriptor?? 16:29:25 executing program 0: setreuid(0xee01, 0x0) r0 = getuid() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000c80), 0x6) setreuid(0x0, r0) ioctl$sock_bt_hci(r1, 0x400448e7, 0x0) 16:29:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109841, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)) write$dsp(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x141) 16:29:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109841, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)) write$dsp(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x141) 16:29:25 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVex:De', 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x15, &(0x7f00000000c0)) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x20) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) capset(&(0x7f0000000180)={0x19980330}, &(0x7f00000001c0)={0xed7d, 0x8, 0x0, 0x9, 0x6, 0x9}) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0x5, r3, 0x0, 0x0, 0x0) keyctl$clear(0xf, r3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000380)="dee70300b3fc52bafea12ebd22cf9e5e1dbac27b0426fc0291c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab41c3a4f51ab0124b50c3362201a307df03000", 0x80, r4) r5 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000380)="dee70300b3fc52bafea12ebd22cf9e5e1dbac27b0426fc0291c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab41c3a4f51ab0124b50c3362201a307df030", 0x7f, r5) [ 784.738398][ T3554] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 784.867478][ T3554] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 785.078242][ T8351] loop2: detected capacity change from 0 to 1 [ 785.125980][ T8351] UDC core: couldn't find an available UDC or it's busy: -16 [ 785.133707][ T8351] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 16:29:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000f000000daf73248289e2f729534b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000ec0)={0x3}) syz_mount_image$minix(0x0, 0x0, 0x381, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000d00)=ANY=[]) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000ed0802088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "7ec70f8f"}]}}, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x441, &(0x7f00000000c0)=ANY=[]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000a40)={0x1, 0x1, 0x400, 0x3, 0x101, 0xfffffff7, 0xfff, 0x1, 0x0, 0x8000, 0x7, 0x0, 0x81, 0x2}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x3, 0x4, 0x4, 0xc, "b731e9ab57aa9c45632dd46a27b2b4f1e01b5649bab9144a966ce384ee5cbe243e6915753542dfde37a2f91a9f8b463fd7f5741e32d9a4a15868bfdb41da18b7", "a794de9607bec1c04f6343152e3053b8945dfeba2b440c69f575a64ad23611ba", [0x7]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x40) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000006c0)={r4, 0x0, 0x0}, 0x20) r5 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x9, &(0x7f0000001640)=[{&(0x7f0000000200)="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", 0x1000, 0x100}, {&(0x7f0000000140)="c8a66613ce2c2f6bd81d24a50173c73576ad9fcd4b737fb978f9a2fd13537de5", 0x20, 0x9}, {&(0x7f0000000180)="d6b25b9bde70d8d5d0a61dcdbcbeb7", 0xf, 0x2}, {&(0x7f0000001200)="2ebc4f4989c795e4c5ed0b05d531b2d1d28bfe1bcff8a9c00395b42963cd37214708294a908bdc508e7b2049b214a23e7f931562b026ab5ee94836027f14f4cb9cd9ff21598380e60f8ac56a4be9d6c73e8c93833d03e250dd719c2bb4d08fb8a4daf4dcfe020f48db11208ecad28d4a1f3a40a8aa7e80955085ad810ff303a21aab0d84f5e346adafa5ed6feec86ea48bfaffb1874574ecf3040c1ef09665afe10cd4e6903150a4021e6fea48e9beb771c52822a0d40a7031cc89114461137a6d087ad050d2a3a1e3508765009dc05f90df93b8a45745823e8f34b243e716d4310aa4e5e5423bbfee8fc5e131", 0xed, 0x502}, {&(0x7f0000001300)="702dbcd589fb6e5514a9aa0d855142ad7cacf24f4e1588c930394418b31af7f74a329412d3e1bad9019e6859a7f4fb1db286f4c6a721fcb0d301f5616dfbc5faee3b0083c57a029c4f811b21a16605da16d54dddb88d70dd53a1278f4b58d388131c83f3e7a5ba0e5b688745d3c067df46c80aa713e9b0beec890a207d7633be2559eef4c887ad505d43c3dc5de3c0699c7eaf6f21aedde629f3f6ac77ad91285ab3ae6e0fe5307127bc6a594e65bea14c58e78c44e24d7b952a5c87f687989ea0fc4776", 0xc4, 0x10000}, {&(0x7f0000001400)="27a43ba50bf77e8758b5", 0xa}, {&(0x7f0000001440)="5a848d95e1be8072960efa537854301994783d7b61b60cc370872a5dbd177e65c936a95685a6a27f57a040e1926898db0292cb06eb5835ce2a5bad82f4c78471136c20acc260ce5be55157425a0cbf192ec5247a9d6c30f787bc4dc8d3de0746c14690313f6cbf4a1e100351e6afc07e6f7767fe12b2de605972742451c23e6e22c39234a8a0e1fa5f5e0c10f1711812edb84e002889c919588be0e667a215cc6a27e2db7d330be020d105f4b355b10953844da17937a6dd2aebd0f159268d838e1e53e5b4b1ee36a2a98302f31806fb2d7838e47918baf9bcf8af", 0xdb, 0x6}, {&(0x7f0000001540)="7fbef4124015710520701e3986f997", 0xf, 0x9}, {&(0x7f0000001580)="6feb3abe24572c88a83a8b2bb9798e7a5b57ca04fd3ca4e3210734328350ac49e03b99f55229dc768e806b428780a7a32920693632a3a7b0b56e38c7c56fef8c3d0f11060ab4096ce573c3988ffd9d97e2a4c9b5fdc5185714b44f713327616c1b44e136d513b0165fb003b4ae50af170e5bed576cb8c44982813520f7209e3cbfca5190560a786d43e0a423d49bae4cb66d1b1f32d713", 0x97, 0x6}], 0x8000, &(0x7f0000001740)={[{@umask={'umask', 0x3d, 0x2}}, {@namecase}, {@errors_remount}, {@discard}, {@discard}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0x569}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_gt}, {@dont_appraise}, {@pcr={'pcr', 0x3d, 0x3e}}]}) dup2(r4, r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002da8) 16:29:27 executing program 0: setreuid(0xee01, 0x0) r0 = getuid() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000c80), 0x6) setreuid(0x0, r0) ioctl$sock_bt_hci(r1, 0x400448e7, 0x0) 16:29:27 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000c00)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 16:29:27 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) finit_module(0xffffffffffffffff, 0x0, 0x0) 16:29:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109841, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)) write$dsp(0xffffffffffffffff, &(0x7f00000002c0)="40388046e2f8e44fb7fb4aa8d43a66220e510141721862951256d3c6d873f1a06e7df3c311d03e0e8474d36bd3bc84d07da79eeafd45a1845f50a05455b60ed6cc8fda0b9ff9c2a333f02074277b9e709634f66eac2a239def0132b163f91c16aa43665d7d121eff3f8745b1a89e6f964e924c356a938d1ad4d30626fce9ca5430e5cb6960a3334b442ee840c6b40189ca432a1cb4e91f9961b73f4190ab2a15eb6c9315ee6853dcfe8856738a9e2840243d4ce5f442bf2c058125585050a21641eaf9795968630d3fec6a69cf201180b224e6b9a3791acf1a1141be5acfeb09f4c9b21627938af6dac7cafce243a7ddcd5bef405b6b54e3e2b187e12ea26d9e4e2d2ec992fee6b600918551baf4d243f10094f5a9d1d90ea424ad986161dab2c99c71fc3bbc577bdd32cc642909033b70e81bd0a5c9195b4a8e72000000000000", 0x141) 16:29:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109841, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)) write$dsp(0xffffffffffffffff, &(0x7f00000002c0)="40388046e2f8e44fb7fb4aa8d43a66220e510141721862951256d3c6d873f1a06e7df3c311d03e0e8474d36bd3bc84d07da79eeafd45a1845f50a05455b60ed6cc8fda0b9ff9c2a333f02074277b9e709634f66eac2a239def0132b163f91c16aa43665d7d121eff3f8745b1a89e6f964e924c356a938d1ad4d30626fce9ca5430e5cb6960a3334b442ee840c6b40189ca432a1cb4e91f9961b73f4190ab2a15eb6c9315ee6853dcfe8856738a9e2840243d4ce5f442bf2c058125585050a21641eaf9795968630d3fec6a69cf201180b224e6b9a3791acf1a1141be5acfeb09f4c9b21627938af6dac7cafce243a7ddcd5bef405b6b54e3e2b187e12ea26d9e4e2d2ec992fee6b600918551baf4d243f10094f5a9d1d90ea424ad986161dab2c99c71fc3bbc577bdd32cc642909033b70e81bd0a5c9195b4a8e72000000000000", 0x141) 16:29:27 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000f000000daf73248289e2f729534b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000ec0)={0x3}) syz_mount_image$minix(0x0, 0x0, 0x381, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000d00)=ANY=[]) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000ed0802088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "7ec70f8f"}]}}, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x441, &(0x7f00000000c0)=ANY=[]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000a40)={0x1, 0x1, 0x400, 0x3, 0x101, 0xfffffff7, 0xfff, 0x1, 0x0, 0x8000, 0x7, 0x0, 0x81, 0x2}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x3, 0x4, 0x4, 0xc, "b731e9ab57aa9c45632dd46a27b2b4f1e01b5649bab9144a966ce384ee5cbe243e6915753542dfde37a2f91a9f8b463fd7f5741e32d9a4a15868bfdb41da18b7", "a794de9607bec1c04f6343152e3053b8945dfeba2b440c69f575a64ad23611ba", [0x7]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x40) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000006c0)={r4, 0x0, 0x0}, 0x20) r5 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x9, &(0x7f0000001640)=[{&(0x7f0000000200)="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", 0x1000, 0x100}, {&(0x7f0000000140)="c8a66613ce2c2f6bd81d24a50173c73576ad9fcd4b737fb978f9a2fd13537de5", 0x20, 0x9}, {&(0x7f0000000180)="d6b25b9bde70d8d5d0a61dcdbcbeb7", 0xf, 0x2}, {&(0x7f0000001200)="2ebc4f4989c795e4c5ed0b05d531b2d1d28bfe1bcff8a9c00395b42963cd37214708294a908bdc508e7b2049b214a23e7f931562b026ab5ee94836027f14f4cb9cd9ff21598380e60f8ac56a4be9d6c73e8c93833d03e250dd719c2bb4d08fb8a4daf4dcfe020f48db11208ecad28d4a1f3a40a8aa7e80955085ad810ff303a21aab0d84f5e346adafa5ed6feec86ea48bfaffb1874574ecf3040c1ef09665afe10cd4e6903150a4021e6fea48e9beb771c52822a0d40a7031cc89114461137a6d087ad050d2a3a1e3508765009dc05f90df93b8a45745823e8f34b243e716d4310aa4e5e5423bbfee8fc5e131", 0xed, 0x502}, {&(0x7f0000001300)="702dbcd589fb6e5514a9aa0d855142ad7cacf24f4e1588c930394418b31af7f74a329412d3e1bad9019e6859a7f4fb1db286f4c6a721fcb0d301f5616dfbc5faee3b0083c57a029c4f811b21a16605da16d54dddb88d70dd53a1278f4b58d388131c83f3e7a5ba0e5b688745d3c067df46c80aa713e9b0beec890a207d7633be2559eef4c887ad505d43c3dc5de3c0699c7eaf6f21aedde629f3f6ac77ad91285ab3ae6e0fe5307127bc6a594e65bea14c58e78c44e24d7b952a5c87f687989ea0fc4776", 0xc4, 0x10000}, {&(0x7f0000001400)="27a43ba50bf77e8758b5", 0xa}, {&(0x7f0000001440)="5a848d95e1be8072960efa537854301994783d7b61b60cc370872a5dbd177e65c936a95685a6a27f57a040e1926898db0292cb06eb5835ce2a5bad82f4c78471136c20acc260ce5be55157425a0cbf192ec5247a9d6c30f787bc4dc8d3de0746c14690313f6cbf4a1e100351e6afc07e6f7767fe12b2de605972742451c23e6e22c39234a8a0e1fa5f5e0c10f1711812edb84e002889c919588be0e667a215cc6a27e2db7d330be020d105f4b355b10953844da17937a6dd2aebd0f159268d838e1e53e5b4b1ee36a2a98302f31806fb2d7838e47918baf9bcf8af", 0xdb, 0x6}, {&(0x7f0000001540)="7fbef4124015710520701e3986f997", 0xf, 0x9}, {&(0x7f0000001580)="6feb3abe24572c88a83a8b2bb9798e7a5b57ca04fd3ca4e3210734328350ac49e03b99f55229dc768e806b428780a7a32920693632a3a7b0b56e38c7c56fef8c3d0f11060ab4096ce573c3988ffd9d97e2a4c9b5fdc5185714b44f713327616c1b44e136d513b0165fb003b4ae50af170e5bed576cb8c44982813520f7209e3cbfca5190560a786d43e0a423d49bae4cb66d1b1f32d713", 0x97, 0x6}], 0x8000, &(0x7f0000001740)={[{@umask={'umask', 0x3d, 0x2}}, {@namecase}, {@errors_remount}, {@discard}, {@discard}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0x569}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_gt}, {@dont_appraise}, {@pcr={'pcr', 0x3d, 0x3e}}]}) dup2(r4, r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002da8) 16:29:27 executing program 0: setreuid(0xee01, 0x0) r0 = getuid() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000c80), 0x6) setreuid(0x0, r0) ioctl$sock_bt_hci(r1, 0x400448e7, 0x0) 16:29:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8) [ 786.924811][ T3581] usb 3-1: USB disconnect, device number 15 16:29:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700aec97094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f34f97000212775c28ad3584b13b3988d1fbd53c3e3428aec4436b4d7edf9cbd424ee42ec6a971a77c1d1d6a6503b03d39134e1853e2930158af817b5329bd3e9071d674a78e574fad0fa88867a790d47a2e19d6c8266fb83d519c", 0x99}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 787.701502][ T6648] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 787.772471][ T3581] usb 3-1: new high-speed USB device number 16 using dummy_hcd 16:29:28 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, &(0x7f0000000240)=""/38, 0x26, 0x0, &(0x7f0000000280)=@rc={0x1f, @fixed, 0x8}, 0x80) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001100)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) getsockname(r1, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000001c0)=0x80) connect$unix(r3, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000002000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00040000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}}, 0x0) 16:29:29 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x600, 0x0) [ 788.132461][ T6648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.143882][ T6648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.153900][ T6648] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 788.167088][ T6648] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 788.176821][ T6648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.232248][ T3581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.243563][ T3581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.253968][ T3581] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 788.267107][ T3581] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 788.276380][ T3581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.423404][ C0] sd 0:0:1:0: tag#2208 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 788.433615][ C0] sd 0:0:1:0: tag#2208 CDB: opcode=0xe5 (vendor) [ 788.440181][ C0] sd 0:0:1:0: tag#2208 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 788.449579][ C0] sd 0:0:1:0: tag#2208 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 788.458915][ C0] sd 0:0:1:0: tag#2208 CDB[20]: ba [ 788.480114][ T8395] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. [ 788.519687][ T6648] usb 4-1: config 0 descriptor?? [ 788.559066][ T3581] usb 3-1: config 0 descriptor?? [ 788.812663][ T34] Bluetooth: hci3: command 0x0405 tx timeout [ 789.052608][ T3581] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 789.068527][ T6648] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 789.084495][ T3581] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 789.114342][ T6648] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 789.391015][ T8398] loop3: detected capacity change from 0 to 1 [ 789.401694][ T8399] loop2: detected capacity change from 0 to 1 [ 789.408562][ T8398] UDC core: couldn't find an available UDC or it's busy: -16 [ 789.416566][ T8398] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 789.421576][ T8399] UDC core: couldn't find an available UDC or it's busy: -16 [ 789.431955][ T8399] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 790.386676][ T6648] usb 3-1: USB disconnect, device number 16 [ 790.394641][ T6587] usb 4-1: USB disconnect, device number 6 16:29:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000f000000daf73248289e2f729534b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000ec0)={0x3}) syz_mount_image$minix(0x0, 0x0, 0x381, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000d00)=ANY=[]) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000ed0802088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "7ec70f8f"}]}}, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x441, &(0x7f00000000c0)=ANY=[]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000a40)={0x1, 0x1, 0x400, 0x3, 0x101, 0xfffffff7, 0xfff, 0x1, 0x0, 0x8000, 0x7, 0x0, 0x81, 0x2}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x3, 0x4, 0x4, 0xc, "b731e9ab57aa9c45632dd46a27b2b4f1e01b5649bab9144a966ce384ee5cbe243e6915753542dfde37a2f91a9f8b463fd7f5741e32d9a4a15868bfdb41da18b7", "a794de9607bec1c04f6343152e3053b8945dfeba2b440c69f575a64ad23611ba", [0x7]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x40) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000006c0)={r4, 0x0, 0x0}, 0x20) r5 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x9, &(0x7f0000001640)=[{&(0x7f0000000200)="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", 0x1000, 0x100}, {&(0x7f0000000140)="c8a66613ce2c2f6bd81d24a50173c73576ad9fcd4b737fb978f9a2fd13537de5", 0x20, 0x9}, {&(0x7f0000000180)="d6b25b9bde70d8d5d0a61dcdbcbeb7", 0xf, 0x2}, {&(0x7f0000001200)="2ebc4f4989c795e4c5ed0b05d531b2d1d28bfe1bcff8a9c00395b42963cd37214708294a908bdc508e7b2049b214a23e7f931562b026ab5ee94836027f14f4cb9cd9ff21598380e60f8ac56a4be9d6c73e8c93833d03e250dd719c2bb4d08fb8a4daf4dcfe020f48db11208ecad28d4a1f3a40a8aa7e80955085ad810ff303a21aab0d84f5e346adafa5ed6feec86ea48bfaffb1874574ecf3040c1ef09665afe10cd4e6903150a4021e6fea48e9beb771c52822a0d40a7031cc89114461137a6d087ad050d2a3a1e3508765009dc05f90df93b8a45745823e8f34b243e716d4310aa4e5e5423bbfee8fc5e131", 0xed, 0x502}, {&(0x7f0000001300)="702dbcd589fb6e5514a9aa0d855142ad7cacf24f4e1588c930394418b31af7f74a329412d3e1bad9019e6859a7f4fb1db286f4c6a721fcb0d301f5616dfbc5faee3b0083c57a029c4f811b21a16605da16d54dddb88d70dd53a1278f4b58d388131c83f3e7a5ba0e5b688745d3c067df46c80aa713e9b0beec890a207d7633be2559eef4c887ad505d43c3dc5de3c0699c7eaf6f21aedde629f3f6ac77ad91285ab3ae6e0fe5307127bc6a594e65bea14c58e78c44e24d7b952a5c87f687989ea0fc4776", 0xc4, 0x10000}, {&(0x7f0000001400)="27a43ba50bf77e8758b5", 0xa}, {&(0x7f0000001440)="5a848d95e1be8072960efa537854301994783d7b61b60cc370872a5dbd177e65c936a95685a6a27f57a040e1926898db0292cb06eb5835ce2a5bad82f4c78471136c20acc260ce5be55157425a0cbf192ec5247a9d6c30f787bc4dc8d3de0746c14690313f6cbf4a1e100351e6afc07e6f7767fe12b2de605972742451c23e6e22c39234a8a0e1fa5f5e0c10f1711812edb84e002889c919588be0e667a215cc6a27e2db7d330be020d105f4b355b10953844da17937a6dd2aebd0f159268d838e1e53e5b4b1ee36a2a98302f31806fb2d7838e47918baf9bcf8af", 0xdb, 0x6}, {&(0x7f0000001540)="7fbef4124015710520701e3986f997", 0xf, 0x9}, {&(0x7f0000001580)="6feb3abe24572c88a83a8b2bb9798e7a5b57ca04fd3ca4e3210734328350ac49e03b99f55229dc768e806b428780a7a32920693632a3a7b0b56e38c7c56fef8c3d0f11060ab4096ce573c3988ffd9d97e2a4c9b5fdc5185714b44f713327616c1b44e136d513b0165fb003b4ae50af170e5bed576cb8c44982813520f7209e3cbfca5190560a786d43e0a423d49bae4cb66d1b1f32d713", 0x97, 0x6}], 0x8000, &(0x7f0000001740)={[{@umask={'umask', 0x3d, 0x2}}, {@namecase}, {@errors_remount}, {@discard}, {@discard}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0x569}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_gt}, {@dont_appraise}, {@pcr={'pcr', 0x3d, 0x3e}}]}) dup2(r4, r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002da8) 16:29:32 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000340)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) mount$9p_fd(0x0, 0x0, &(0x7f0000000500), 0x800000, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f3d40b102843b520da7a30c7245b527b19e6131a3b8076a67fe6fb575651562e61f526f1305abbb73303216471c8c0c8ebb188a4d3dcb10f0fef7183b8730000000000000000000000000000000001f0c9d660e29f5aeb29c95ff98991cba00b8834bdd610e12144d843cca8ce1f97f0200000000000000012556bd6c0bc79bfbe2818b53a97a87f4f6a262bd4828d8bffe3a62ade2ac43df2c5ca9befa6c7521a2cc4fa2cb6856e0cd117c59b63dd80603c4ae3a7e58302e8ef5c9b92722f9eb741aa9584b385c117416d28c41cdd1505c0a8e94e7a8654a4abcd88eb28fcedb094a3cf95af1d4fd992582e7512863", @ANYRESHEX, @ANYBLOB=',wfdno', @ANYRESHEX=r0, @ANYBLOB="2c6163636573733d757365722c756e616d653dd22c6163636573733d616e792c6c6f6f73652c636f6e746578743d756e636f6e66696e6564", @ANYBLOB=',dont_hash,dont_hash,\x00']) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1448}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000001180), 0x9) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x33, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000180)={0x1ff, 0x417}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) 16:29:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8) 16:29:32 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x40000, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) dup2(r1, r2) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x48889, 0x0, 0x0) epoll_create1(0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x4c000000, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000140)={{0x3b, @broadcast, 0x4e21, 0x3, 'lc\x00', 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x400, 0x9}}, 0x44) 16:29:32 executing program 0: r0 = getpid() perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000480)='net/mcfilter6\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x0, 0x9cffffff, 0x148, 0x0, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x28, 0x66010000, 0x0, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@empty, @private, 0x0, 0x0, 'veth0_to_bond\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) 16:29:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000f000000daf73248289e2f729534b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000ec0)={0x3}) syz_mount_image$minix(0x0, 0x0, 0x381, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000d00)=ANY=[]) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000ed0802088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "7ec70f8f"}]}}, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x441, &(0x7f00000000c0)=ANY=[]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000a40)={0x1, 0x1, 0x400, 0x3, 0x101, 0xfffffff7, 0xfff, 0x1, 0x0, 0x8000, 0x7, 0x0, 0x81, 0x2}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x3, 0x4, 0x4, 0xc, "b731e9ab57aa9c45632dd46a27b2b4f1e01b5649bab9144a966ce384ee5cbe243e6915753542dfde37a2f91a9f8b463fd7f5741e32d9a4a15868bfdb41da18b7", "a794de9607bec1c04f6343152e3053b8945dfeba2b440c69f575a64ad23611ba", [0x7]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x40) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000006c0)={r4, 0x0, 0x0}, 0x20) r5 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x9, &(0x7f0000001640)=[{&(0x7f0000000200)="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", 0x1000, 0x100}, {&(0x7f0000000140)="c8a66613ce2c2f6bd81d24a50173c73576ad9fcd4b737fb978f9a2fd13537de5", 0x20, 0x9}, {&(0x7f0000000180)="d6b25b9bde70d8d5d0a61dcdbcbeb7", 0xf, 0x2}, {&(0x7f0000001200)="2ebc4f4989c795e4c5ed0b05d531b2d1d28bfe1bcff8a9c00395b42963cd37214708294a908bdc508e7b2049b214a23e7f931562b026ab5ee94836027f14f4cb9cd9ff21598380e60f8ac56a4be9d6c73e8c93833d03e250dd719c2bb4d08fb8a4daf4dcfe020f48db11208ecad28d4a1f3a40a8aa7e80955085ad810ff303a21aab0d84f5e346adafa5ed6feec86ea48bfaffb1874574ecf3040c1ef09665afe10cd4e6903150a4021e6fea48e9beb771c52822a0d40a7031cc89114461137a6d087ad050d2a3a1e3508765009dc05f90df93b8a45745823e8f34b243e716d4310aa4e5e5423bbfee8fc5e131", 0xed, 0x502}, {&(0x7f0000001300)="702dbcd589fb6e5514a9aa0d855142ad7cacf24f4e1588c930394418b31af7f74a329412d3e1bad9019e6859a7f4fb1db286f4c6a721fcb0d301f5616dfbc5faee3b0083c57a029c4f811b21a16605da16d54dddb88d70dd53a1278f4b58d388131c83f3e7a5ba0e5b688745d3c067df46c80aa713e9b0beec890a207d7633be2559eef4c887ad505d43c3dc5de3c0699c7eaf6f21aedde629f3f6ac77ad91285ab3ae6e0fe5307127bc6a594e65bea14c58e78c44e24d7b952a5c87f687989ea0fc4776", 0xc4, 0x10000}, {&(0x7f0000001400)="27a43ba50bf77e8758b5", 0xa}, {&(0x7f0000001440)="5a848d95e1be8072960efa537854301994783d7b61b60cc370872a5dbd177e65c936a95685a6a27f57a040e1926898db0292cb06eb5835ce2a5bad82f4c78471136c20acc260ce5be55157425a0cbf192ec5247a9d6c30f787bc4dc8d3de0746c14690313f6cbf4a1e100351e6afc07e6f7767fe12b2de605972742451c23e6e22c39234a8a0e1fa5f5e0c10f1711812edb84e002889c919588be0e667a215cc6a27e2db7d330be020d105f4b355b10953844da17937a6dd2aebd0f159268d838e1e53e5b4b1ee36a2a98302f31806fb2d7838e47918baf9bcf8af", 0xdb, 0x6}, {&(0x7f0000001540)="7fbef4124015710520701e3986f997", 0xf, 0x9}, {&(0x7f0000001580)="6feb3abe24572c88a83a8b2bb9798e7a5b57ca04fd3ca4e3210734328350ac49e03b99f55229dc768e806b428780a7a32920693632a3a7b0b56e38c7c56fef8c3d0f11060ab4096ce573c3988ffd9d97e2a4c9b5fdc5185714b44f713327616c1b44e136d513b0165fb003b4ae50af170e5bed576cb8c44982813520f7209e3cbfca5190560a786d43e0a423d49bae4cb66d1b1f32d713", 0x97, 0x6}], 0x8000, &(0x7f0000001740)={[{@umask={'umask', 0x3d, 0x2}}, {@namecase}, {@errors_remount}, {@discard}, {@discard}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0x569}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_gt}, {@dont_appraise}, {@pcr={'pcr', 0x3d, 0x3e}}]}) dup2(r4, r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002da8) [ 791.065584][ T8406] loop1: detected capacity change from 0 to 264192 16:29:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x1e0, 0x2c0, 0x0, 0x0, 0x2c0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}, @common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) [ 792.272189][ T6587] usb 4-1: new high-speed USB device number 7 using dummy_hcd 16:29:33 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000340)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) mount$9p_fd(0x0, 0x0, &(0x7f0000000500), 0x800000, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f3d40b102843b520da7a30c7245b527b19e6131a3b8076a67fe6fb575651562e61f526f1305abbb73303216471c8c0c8ebb188a4d3dcb10f0fef7183b8730000000000000000000000000000000001f0c9d660e29f5aeb29c95ff98991cba00b8834bdd610e12144d843cca8ce1f97f0200000000000000012556bd6c0bc79bfbe2818b53a97a87f4f6a262bd4828d8bffe3a62ade2ac43df2c5ca9befa6c7521a2cc4fa2cb6856e0cd117c59b63dd80603c4ae3a7e58302e8ef5c9b92722f9eb741aa9584b385c117416d28c41cdd1505c0a8e94e7a8654a4abcd88eb28fcedb094a3cf95af1d4fd992582e7512863", @ANYRESHEX, @ANYBLOB=',wfdno', @ANYRESHEX=r0, @ANYBLOB="2c6163636573733d757365722c756e616d653dd22c6163636573733d616e792c6c6f6f73652c636f6e746578743d756e636f6e66696e6564", @ANYBLOB=',dont_hash,dont_hash,\x00']) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1448}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000001180), 0x9) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x33, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000180)={0x1ff, 0x417}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) 16:29:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8) 16:29:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="0300", 0x2, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000", 0x1e, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x181, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x94) lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x422) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/21) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"], 0x401, 0x0) msgget$private(0x0, 0x21) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = getgid() getpid() msgctl$IPC_SET(r1, 0x1, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="980e000030003dfa000000000000000000000000840e0100800e01000a0001007065646974000000540e0280500e0200000000000000000000000000000000000000000097000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000000000000000000000000000000000f58a972c3c88eb5afa3b09fd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009321000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000100"/3658], 0xe98}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000001040)={{}, {}, [{0x2, 0x5}, {}, {0x2, 0x4, 0xee01}, {0x2, 0x3}, {0x2, 0x0, 0xee00}, {0x2, 0x1, 0xee00}, {0x2, 0x7, 0xffffffffffffffff}, {0x2, 0x3}], {0x4, 0x2}, [{0x8, 0x1}, {}, {0x8, 0x5}, {0x8, 0x1}, {0x8, 0x3}, {0x8, 0x3}, {0x8, 0x2, r2}, {0x8, 0x1, r2}, {}], {0x10, 0x3}, {0x20, 0x6}}, 0xac, 0x1) [ 792.472075][ T3581] usb 3-1: new high-speed USB device number 17 using dummy_hcd 16:29:33 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000001040)) syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x80, 0x82, 0x5a, 0x0, 0x0, 0x0, 0x20201, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3f, 0x0, @perf_config_ext, 0x2200, 0x4, 0x8cde, 0x0, 0x0, 0x7}, 0x0, 0xd, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xaa5d) preadv(r1, &(0x7f0000001b80)=[{0x0}, {0x0}, {&(0x7f0000000580)=""/74, 0x4a}, {&(0x7f0000002d00)=""/4094, 0xffe}, {0x0}, {0x0}, {&(0x7f0000001140)=""/82, 0x52}, {0x0}], 0x8, 0x4000002, 0x48) r2 = gettid() timer_create(0x5, &(0x7f0000000780)={0x0, 0x0, 0x4, @tid=r2}, &(0x7f0000000040)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x2200, 0x4, 0x8cde, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffff21}, r2, 0x0, 0xffffffffffffffff, 0x1) r3 = getgid() setregid(0x0, r3) syz_mount_image$squashfs(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x7, 0x0, &(0x7f0000000ec0), 0x10008, &(0x7f0000000f00)={[{}], [{@subj_role={'subj_role', 0x3d, 'comm\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/4\x00'}}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4), 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f0000000040)="8c"}, 0x20) [ 792.642746][ T6587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.654176][ T6587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.664268][ T6587] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 792.677506][ T6587] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 792.687252][ T6587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.761424][ T8427] loop1: detected capacity change from 0 to 264192 [ 792.787906][ T8428] loop5: detected capacity change from 0 to 4096 [ 792.862467][ T3581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.866487][ T6587] usb 4-1: config 0 descriptor?? [ 792.873577][ T3581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.873701][ T3581] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 792.901515][ T3581] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 792.910764][ T3581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.030431][ T8428] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 793.273563][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 793.283368][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 793.325137][ T8440] squashfs: Unknown parameter 'subj_role' [ 793.398081][ T6587] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 793.436815][ T3581] usb 3-1: config 0 descriptor?? 16:29:34 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000340)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) mount$9p_fd(0x0, 0x0, &(0x7f0000000500), 0x800000, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f3d40b102843b520da7a30c7245b527b19e6131a3b8076a67fe6fb575651562e61f526f1305abbb73303216471c8c0c8ebb188a4d3dcb10f0fef7183b8730000000000000000000000000000000001f0c9d660e29f5aeb29c95ff98991cba00b8834bdd610e12144d843cca8ce1f97f0200000000000000012556bd6c0bc79bfbe2818b53a97a87f4f6a262bd4828d8bffe3a62ade2ac43df2c5ca9befa6c7521a2cc4fa2cb6856e0cd117c59b63dd80603c4ae3a7e58302e8ef5c9b92722f9eb741aa9584b385c117416d28c41cdd1505c0a8e94e7a8654a4abcd88eb28fcedb094a3cf95af1d4fd992582e7512863", @ANYRESHEX, @ANYBLOB=',wfdno', @ANYRESHEX=r0, @ANYBLOB="2c6163636573733d757365722c756e616d653dd22c6163636573733d616e792c6c6f6f73652c636f6e746578743d756e636f6e66696e6564", @ANYBLOB=',dont_hash,dont_hash,\x00']) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1448}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000001180), 0x9) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x33, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000180)={0x1ff, 0x417}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) [ 793.520731][ T6587] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 793.823024][ T8445] loop3: detected capacity change from 0 to 1 [ 793.901551][ T8445] UDC core: couldn't find an available UDC or it's busy: -16 [ 793.909833][ T8445] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 793.937003][ T3581] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 793.999950][ T8447] loop1: detected capacity change from 0 to 264192 [ 794.003241][ T3581] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 794.340164][ T8449] loop2: detected capacity change from 0 to 1 [ 794.434012][ T8449] UDC core: couldn't find an available UDC or it's busy: -16 [ 794.441624][ T8449] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 794.906315][ T3554] usb 3-1: USB disconnect, device number 17 16:29:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000f000000daf73248289e2f729534b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000ec0)={0x3}) syz_mount_image$minix(0x0, 0x0, 0x381, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000d00)=ANY=[]) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000ed0802088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "7ec70f8f"}]}}, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x441, &(0x7f00000000c0)=ANY=[]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000a40)={0x1, 0x1, 0x400, 0x3, 0x101, 0xfffffff7, 0xfff, 0x1, 0x0, 0x8000, 0x7, 0x0, 0x81, 0x2}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x3, 0x4, 0x4, 0xc, "b731e9ab57aa9c45632dd46a27b2b4f1e01b5649bab9144a966ce384ee5cbe243e6915753542dfde37a2f91a9f8b463fd7f5741e32d9a4a15868bfdb41da18b7", "a794de9607bec1c04f6343152e3053b8945dfeba2b440c69f575a64ad23611ba", [0x7]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x40) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000006c0)={r4, 0x0, 0x0}, 0x20) r5 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x9, &(0x7f0000001640)=[{&(0x7f0000000200)="bf418283c9067ecac78e144055584fdfdfffa5f839ae867fae01f002ec69b36b6c07913ff2738422d8e53e71bc10da4709fcdd66eef82e9905d7f99c8f7796279daf1837da648bf026b434903441d1f397154e7cc96958b00363d274d9827882ec17cb6116446028b0edb7d8719873966c73956f8ed9ece7932595701136b9ff4807fb44ad035120b46096c8d7839e577bd532918787de6a7fe43fd30d0a786f9ac1febf76fec21ed701cb10e497c37449285e8400eb93e379302291f457135015024b32e3ac4d90d7d4e5bca52d95e928709e3aa33f018d4b2456ac52fbd5021e962da791742015f1eec94b49b24bd5454e808050af9ab7209833851c4fd5b8f53caa7b9d2c24ef8ee2a99951b1d6eee5f3db8d11d01ef52e1ea149cffc14866b41ca66bc1ac1dc0d2d06534c8fc74c85c7632fa141afeb6ecdcb4a399d6c57919ccf524be529c15fa72d176729bde6b623a66f5f48787d795bf29b61ab0f332bebf819f6f89e5fdaf7f47d020d0b90cda54bfca246dd3c266540bc5b083adf586cbe28e1587594506dbf863d18fa00effb25bec5cce8ee1b55844d37484523550c00313adc07b3cc1bae1122f32845c397cf1ee2f3d2f821129086cb5bb21fa2dfdbf3f62328db1e2e62e8165badda93613734016cef7552383f399b0a35674f4570be5c273bb92156e1d5bd74ceb2787711dd0d3e567e4c9ebfb459eeb2b939f607d0da9b52c0cf7cd66f5530fe883bc23b265b3c58bf25c8bf259c3b87e5af072a29a74884234361cd18ae9659982f365befd6ac55040fdacf7d411eaaebafe19fd7e7e9416c20e87e02b21dc4ea8116593e8d65fc06635d45ab6e0dd57c2738a77075de123f0c8d9c47f4b08aef33d0e431c87c784d61caf9e1e7b57978985ee53e702769b52265d7fdcd354f44db35d2ad210ff27b6c49094efed33f98b00832002350bc0ea250e5b98f093bdc38a389c99a928c0b179f8f88949a76145c8ef8e663421b83e6d9ea021e3ff21e92384e6acce20abc00b39e731fcf5bf5e28ea5e538528ca3d6e80117bd3a62b13d82d6f7463a91bb9d6029efdf36e46873773688dbcf5c2e7f17afa44b1d62fce1987b08bc6e7eccf1f10ecbc66880138b86f51fd3a9cc2f940b8565523225af564d42ce68a9d6d0479a0d20138399772e5ddded63f6c247f2d925182f8df3ef3a2f62ef8681a06104536e9b5188d5b9262c91f66bb2548be90df6965c44fcba7002c6b94093d4415dadd66b440837f630fd37a04b8958857b671e4670ae02ff40fb8e877f1f12d883edaf119b398de1e0aa871d924ad1512299607178bbbaf5bb577792499bce366a94eb47649f3d67c730bd7fc239f267020c1c9195a02a43b9a78b9b2c407f42e92695460a591f4a8a50612fc342775b29bf3adc8b19d04af1084d6ab22140a8f85a36385f025db7bd3db311d44dee5ed64c724ce2087ba8004396197baec77e40109d7bfffe3c05dbbd8b722be5499cfa53da252674431474c2bbf68bc21e1e67d445216f879a75f5c60b9ef5a362f726296fca94e23511ee403aeb2cba750ee5b18e7f06e1472de641003d8ad94270dedbc3c4cb5011107c6253ec32c3727a53a93293d2e42aabc19b2b6e02c5b618a22bc685029ea0662d8ced0d4da08d68604ae460641b99b2e0dfd27670c18c32c002f0622e5f230ff739e915828e5134af6845cf7f4d38e12e63c7ed705cdadac406dcdff7ee8e7037ac6185fb3a865332fced03470f18c3a19fe6fbc396f6a1a8c123637c5a9dfa7f5dfd823fb5bde3a4330e38afcbb28153230970bb6f2fe3f8de14c5429bdf965b47064da3615906fd66d407e6581cd736f929f95c9731ae572b12bcbaf11dce3d2a27585436a14a5099c7f9f5826a26a31aa8f4491866f50668eb025bd138d7f7cbbe52d8875e005850184f00794ba98825c816ba89e8f4269455d99c69dd29c56249bdab09a53361eda68a2c4b649c9771822695fff20686d90e85c6f79481f8036a9418d895feb2af4bda089b15cfc30a79500410e87f42856214ed580bd3e242cf59f7112391862f9d41ea04194a3b883054c8d7193a42a6ffa2147b08a9e4f51c0881459d38889b7220e82fe5bf6d6f4cad0e54c001bb50425db2490e58be3026661bd56e7a8f57d2bf9c093b7ea5077a90cd1007e07d05a586f369c16dd8cbb5520b89a59977e32578657f03a7c719c6c88696c85c121af86aa7119cd57fc194563adbda1ad4ed711d16d93ca71f9e5aea9bcc91cb098a755213c6cc5b2ef0855a158ac05f503da14b05b989f614aadc929fc6e5354ccb9cfb577b214bec1f3e44c482072905c40f55d8d96eb9e651d474a2f4a6a0873b12cdff6f60d85e53680ee9b41d5adbcbfb7e0c606c894704a160387ad0bc282279e0bc3ead0410fdf6a50b791fcd31d00469f63485f215e2805a323a82026d4af36992fb1596ad8f7463183b516de47439d1863e26c94410641ecd385d3f634e2074bf8995124b5b7c9a4d9cbc204ca0b1a6794cfcee3891a69727a7082f7c7fba011ebf1833b78f1dfd1e1f45b648c3d424d42c4bf0d0a0b826aee6646a9f54c31d67f3ef3b53299ec2030de9fa58ff1e3f79bfd43e7565bd57ec307d82dbf850ee77b4d4bb041d219aa059af35ff18c3251ec547207f386140c9456db83d6403e4e7e550e53d1bf880f3f9cce39b21d283547352584415189bdcf6315f551881ca46f5a8ace40eaa29aa433ef63a4e35084f6a9603f30647b1264fa924c3c6ce57504537645506567ae8977b290c40727a5907e7362ad913b02ff46e456286a9a1d3d45d4b545f9f2b63d86ee3ef14d520b4f697ac072fb60a620a42d847f2f900c91bbf1fcdafa47cf6633710efae292910d458591dc5ab80aa361cfea6afb59eff8420de3107ea9ea94a388f5f1ac1a405380a54bce8e4e5d5385a875c4765e8a0dcd52fe6eda83a6c4b1eec051174ab4c4db25daaa0d6ad16c30fa54b9a5dd0898718926e9bcbd82d5bab0cdaaeb8edf7b3327ac37fadeeaba8392d3aa49eb78fdf331feb348a6dca6fdfe59c62dc6863ea8d17fe04e47f16bc55dffd938b7a95f049d21ad86b5277b610054dc63597a4829cc74b3ef945f53c0f4881b0a148ce1cc6c5f378615d3be6aff9616512d410d93b4c0e3299f641cdccc8f4a93cc9f67b53d455691dd833361d730a71dc827a428e449d29d341200a79f51f02e1d48f14cff6ff6f3d9fbe7f651da34271066036a407236f0fdcf7c71f5f33698ee667bed96957136bb7f9c9034dceab18abd3847635c0b1611dd82b4ca5da528353a01bceb7e4304bfc2027a63efc9619ec27c6a61a404a0b7572c98b813b25863334e25ffdb8273b2449d2e45c45fc41d71c857650231432f37f368a278b94b0d6ad10e7ea09e07dcc0df05e82f10fc973e3dad003c0a45b39532eda7f395f7f445b5325e0419cc6e78d00b6adde1bd3053a692ebe37d7305882f439ecfe9eb5ad4c793ea1e46cd8999fa5710e6145d5bf0d153d45fd54b92ba2a89fec5d6549fab961be796706b28cef0db168e9c72c903d49d397ea6d04f9ce6596738b8b3c227723ee725247537e855f00b344540a313f2618c2fd472164ef67a328e4729ac14b989af90e7aeaf77372f02ba0a5e3e8ee4ff403426bc49aab670f66d4784cec8031d0cb9460ddc5f5460e3cb9af72384938c7d6e79a3bad0662ffee31f696e307e7e574c9e5c702d8aada7b2f644e97088d3b7cc364a7e65a65d18a0bfb9b405b3d63a7570eb2db3db8c6ea424c39b60fb764a3d2eec652046778bbc956f7694fb90ab6f168dec785711bdf91ae0acc910db1d081174adcab9ca502483ceb5c8c52fc9d5a03af5eb32e00149bb68bac617ef30221915b8341d8d3acb3fffc659f4035287987c1849a828e3b4f3acdace54679bc7d4b86c94844ecaefc7542c180871bed7056c07bb0df6ae33ac123e0a514ea39b04b8d48ba95a88263e59cd94e05eb0b3b5ea45c4b9f61058df646ab9a87e4a92ba7702bc5403ae5d4dc6fd96341234a6d6043f7d1c9db1ad8b0fac72e0e756ef568a2fdcf6f3c2e3f9b84024d192fc746243af92d6b7fa231a2fcf719acee09e4d9c1bec9f8090ee4be4ab655e2f6928f2e1ca1b05eb39f3524a66fc5d2722459b92b8b068a5ea03cc5a0dad1de6e48d41eeae779aba67451e3431e30f6d34b01fcde519110f2560517e23faef10b6af7bc3c93af8ff8ebff891308e202a220b18cf62f953e558ca94b8d38bc4869fde39f5e6974a05ac4bb7c73e0407044f5ccd5c015b37401c79acf7f29000a27ba59433213cafff1cbc9cf7a7c2baf4653c4a1ae436feacc6982ef6f6f59e4b5cfa689e52cee2ca409c739a4a9ee8b4ae860f5894705ea8bbe6bd6f1ff0c59004bb0de345f3976a924ad016cad2337d80eb8715a125d673c67a614d371ea1c81c8b648e7285dd02280834acdc32865dc2c0e67892a61d0946414cb63488fb4a5fd83ced03531ba23a9b3c8a638054ae639fe53c8c809c0c48818821027a0969e0784367e21d215c7184faffde91399b556e30fcbf14a7999d76be8c64a05156a9c30c8feb7fb6b8c22ba54afebccea6dcecf9fa297f9801a04e69aca6f4545aaf92f646834e75b2898d9e3029df021eb3beba9f262d0ed5c241ab3e5c3994a26355eab9c4586ce549276a59b1037b1dba8d1a320ddaf70013a08b52c07ce274da05674ff617170fe67200d9bd1ee4de7d761010d2705c1d95709c49e44ea24b4c46f227924c99325dbf93883d64685157e9636a87ca42524a59aefc2ed343e25486478ed0af1c74b7629c9f57985d55632144391a2bd0552866520231cc91470178ab3c4d4c9c2d6215a5a76fdcf745ed1a4f3f996766ca0f88623a20a7929955399424b9991e4da9c3813493e361604936f27344d900e4406b3d4b24b034261fb7b1d09f85dca1bcb7967dfe0f6f41f4e75f287c8af057a70e1050a04cdc37dfcfdeb4053f5ad2050288d0a8f41b86903b35aef6ebf46fc655d79bed37b5e6abf59d5916c0e7762ad075dd216b96c9628313cfc2d56792559aa58e44a01431bd2650e37cf6da85b01c31bbe0e097048fe2c4da395a0c7fda8b3ae465819574aca77bf6a82c8608595d37ca4deb42e19819930372d99ca5bc0aa786283e06d3f6fc2c949727c95f1ee75156bee9d7b91e9e912bb5df5bd31cd6598394f5e3ba4fdbbfa7080cf610e1ac00aca12a713fcd10d13fac9be548141f84b5a8356d0c00eb0d853320c1f914df9f3d0c54152374dc5f354a801ce4c80b10c84345bb7dfbadc574f911db38ec7518198dbb0df6e706304476ac9f12e3096dcb06f959cf2a21c4628b983d2af2d39883e104fb3fc7b50c6b34913ba3538d238b5ab25e0bfee3a317cc184875e4c155b63d16d30b44dcf25c7dbe5a84ecd96cda8d82c2409c6f030f3f899e29ce0ae5943b1346f12ea7107a5314f87ad429c8d8b0454b46a776395828bf1c95fd68bb54b367a0593357469223b6f2484a049b93f3d29db63782c3676befced5dd16646899934bc161112e2a7f9e27ecff9a3a21c3a15ea1be85ee9742ccef32551db0169289c451306ffc9217641a8b817df5e4fb4365cd86cf48737c45ce4307b7a7b21a1086c4f57455855f75831c52b3dbce10503669b9bc6b2fe46704d45754aa6850a09b2e9f3fe6ef90d96703af4e7759d61ef21f7f92327d8102da013898b0dda7fe4f36e969616dc9e2623cb3551db92b739e40795bd9c60452eed576e4b1c77ebc129732f", 0x1000, 0x100}, {&(0x7f0000000140)="c8a66613ce2c2f6bd81d24a50173c73576ad9fcd4b737fb978f9a2fd13537de5", 0x20, 0x9}, {&(0x7f0000000180)="d6b25b9bde70d8d5d0a61dcdbcbeb7", 0xf, 0x2}, {&(0x7f0000001200)="2ebc4f4989c795e4c5ed0b05d531b2d1d28bfe1bcff8a9c00395b42963cd37214708294a908bdc508e7b2049b214a23e7f931562b026ab5ee94836027f14f4cb9cd9ff21598380e60f8ac56a4be9d6c73e8c93833d03e250dd719c2bb4d08fb8a4daf4dcfe020f48db11208ecad28d4a1f3a40a8aa7e80955085ad810ff303a21aab0d84f5e346adafa5ed6feec86ea48bfaffb1874574ecf3040c1ef09665afe10cd4e6903150a4021e6fea48e9beb771c52822a0d40a7031cc89114461137a6d087ad050d2a3a1e3508765009dc05f90df93b8a45745823e8f34b243e716d4310aa4e5e5423bbfee8fc5e131", 0xed, 0x502}, {&(0x7f0000001300)="702dbcd589fb6e5514a9aa0d855142ad7cacf24f4e1588c930394418b31af7f74a329412d3e1bad9019e6859a7f4fb1db286f4c6a721fcb0d301f5616dfbc5faee3b0083c57a029c4f811b21a16605da16d54dddb88d70dd53a1278f4b58d388131c83f3e7a5ba0e5b688745d3c067df46c80aa713e9b0beec890a207d7633be2559eef4c887ad505d43c3dc5de3c0699c7eaf6f21aedde629f3f6ac77ad91285ab3ae6e0fe5307127bc6a594e65bea14c58e78c44e24d7b952a5c87f687989ea0fc4776", 0xc4, 0x10000}, {&(0x7f0000001400)="27a43ba50bf77e8758b5", 0xa}, {&(0x7f0000001440)="5a848d95e1be8072960efa537854301994783d7b61b60cc370872a5dbd177e65c936a95685a6a27f57a040e1926898db0292cb06eb5835ce2a5bad82f4c78471136c20acc260ce5be55157425a0cbf192ec5247a9d6c30f787bc4dc8d3de0746c14690313f6cbf4a1e100351e6afc07e6f7767fe12b2de605972742451c23e6e22c39234a8a0e1fa5f5e0c10f1711812edb84e002889c919588be0e667a215cc6a27e2db7d330be020d105f4b355b10953844da17937a6dd2aebd0f159268d838e1e53e5b4b1ee36a2a98302f31806fb2d7838e47918baf9bcf8af", 0xdb, 0x6}, {&(0x7f0000001540)="7fbef4124015710520701e3986f997", 0xf, 0x9}, {&(0x7f0000001580)="6feb3abe24572c88a83a8b2bb9798e7a5b57ca04fd3ca4e3210734328350ac49e03b99f55229dc768e806b428780a7a32920693632a3a7b0b56e38c7c56fef8c3d0f11060ab4096ce573c3988ffd9d97e2a4c9b5fdc5185714b44f713327616c1b44e136d513b0165fb003b4ae50af170e5bed576cb8c44982813520f7209e3cbfca5190560a786d43e0a423d49bae4cb66d1b1f32d713", 0x97, 0x6}], 0x8000, &(0x7f0000001740)={[{@umask={'umask', 0x3d, 0x2}}, {@namecase}, {@errors_remount}, {@discard}, {@discard}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0x569}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_gt}, {@dont_appraise}, {@pcr={'pcr', 0x3d, 0x3e}}]}) dup2(r4, r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002da8) 16:29:36 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8) 16:29:36 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000001040)) syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x80, 0x82, 0x5a, 0x0, 0x0, 0x0, 0x20201, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3f, 0x0, @perf_config_ext, 0x2200, 0x4, 0x8cde, 0x0, 0x0, 0x7}, 0x0, 0xd, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xaa5d) preadv(r1, &(0x7f0000001b80)=[{0x0}, {0x0}, {&(0x7f0000000580)=""/74, 0x4a}, {&(0x7f0000002d00)=""/4094, 0xffe}, {0x0}, {0x0}, {&(0x7f0000001140)=""/82, 0x52}, {0x0}], 0x8, 0x4000002, 0x48) r2 = gettid() timer_create(0x5, &(0x7f0000000780)={0x0, 0x0, 0x4, @tid=r2}, &(0x7f0000000040)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x2200, 0x4, 0x8cde, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffff21}, r2, 0x0, 0xffffffffffffffff, 0x1) r3 = getgid() setregid(0x0, r3) syz_mount_image$squashfs(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x7, 0x0, &(0x7f0000000ec0), 0x10008, &(0x7f0000000f00)={[{}], [{@subj_role={'subj_role', 0x3d, 'comm\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/4\x00'}}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4), 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f0000000040)="8c"}, 0x20) 16:29:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="0300", 0x2, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000", 0x1e, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x181, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x94) lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x422) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/21) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"], 0x401, 0x0) msgget$private(0x0, 0x21) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = getgid() getpid() msgctl$IPC_SET(r1, 0x1, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="980e000030003dfa000000000000000000000000840e0100800e01000a0001007065646974000000540e0280500e0200000000000000000000000000000000000000000097000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000000000000000000000000000000000f58a972c3c88eb5afa3b09fd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009321000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000100"/3658], 0xe98}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000001040)={{}, {}, [{0x2, 0x5}, {}, {0x2, 0x4, 0xee01}, {0x2, 0x3}, {0x2, 0x0, 0xee00}, {0x2, 0x1, 0xee00}, {0x2, 0x7, 0xffffffffffffffff}, {0x2, 0x3}], {0x4, 0x2}, [{0x8, 0x1}, {}, {0x8, 0x5}, {0x8, 0x1}, {0x8, 0x3}, {0x8, 0x3}, {0x8, 0x2, r2}, {0x8, 0x1, r2}, {}], {0x10, 0x3}, {0x20, 0x6}}, 0xac, 0x1) 16:29:36 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000340)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) mount$9p_fd(0x0, 0x0, &(0x7f0000000500), 0x800000, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f3d40b102843b520da7a30c7245b527b19e6131a3b8076a67fe6fb575651562e61f526f1305abbb73303216471c8c0c8ebb188a4d3dcb10f0fef7183b8730000000000000000000000000000000001f0c9d660e29f5aeb29c95ff98991cba00b8834bdd610e12144d843cca8ce1f97f0200000000000000012556bd6c0bc79bfbe2818b53a97a87f4f6a262bd4828d8bffe3a62ade2ac43df2c5ca9befa6c7521a2cc4fa2cb6856e0cd117c59b63dd80603c4ae3a7e58302e8ef5c9b92722f9eb741aa9584b385c117416d28c41cdd1505c0a8e94e7a8654a4abcd88eb28fcedb094a3cf95af1d4fd992582e7512863", @ANYRESHEX, @ANYBLOB=',wfdno', @ANYRESHEX=r0, @ANYBLOB="2c6163636573733d757365722c756e616d653dd22c6163636573733d616e792c6c6f6f73652c636f6e746578743d756e636f6e66696e6564", @ANYBLOB=',dont_hash,dont_hash,\x00']) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1448}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000001180), 0x9) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x33, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000180)={0x1ff, 0x417}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) 16:29:36 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000f000000daf73248289e2f729534b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000ec0)={0x3}) syz_mount_image$minix(0x0, 0x0, 0x381, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000d00)=ANY=[]) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000ed0802088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "7ec70f8f"}]}}, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x441, &(0x7f00000000c0)=ANY=[]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000a40)={0x1, 0x1, 0x400, 0x3, 0x101, 0xfffffff7, 0xfff, 0x1, 0x0, 0x8000, 0x7, 0x0, 0x81, 0x2}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x3, 0x4, 0x4, 0xc, "b731e9ab57aa9c45632dd46a27b2b4f1e01b5649bab9144a966ce384ee5cbe243e6915753542dfde37a2f91a9f8b463fd7f5741e32d9a4a15868bfdb41da18b7", "a794de9607bec1c04f6343152e3053b8945dfeba2b440c69f575a64ad23611ba", [0x7]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x40) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000006c0)={r4, 0x0, 0x0}, 0x20) r5 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x9, &(0x7f0000001640)=[{&(0x7f0000000200)="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", 0x1000, 0x100}, {&(0x7f0000000140)="c8a66613ce2c2f6bd81d24a50173c73576ad9fcd4b737fb978f9a2fd13537de5", 0x20, 0x9}, {&(0x7f0000000180)="d6b25b9bde70d8d5d0a61dcdbcbeb7", 0xf, 0x2}, {&(0x7f0000001200)="2ebc4f4989c795e4c5ed0b05d531b2d1d28bfe1bcff8a9c00395b42963cd37214708294a908bdc508e7b2049b214a23e7f931562b026ab5ee94836027f14f4cb9cd9ff21598380e60f8ac56a4be9d6c73e8c93833d03e250dd719c2bb4d08fb8a4daf4dcfe020f48db11208ecad28d4a1f3a40a8aa7e80955085ad810ff303a21aab0d84f5e346adafa5ed6feec86ea48bfaffb1874574ecf3040c1ef09665afe10cd4e6903150a4021e6fea48e9beb771c52822a0d40a7031cc89114461137a6d087ad050d2a3a1e3508765009dc05f90df93b8a45745823e8f34b243e716d4310aa4e5e5423bbfee8fc5e131", 0xed, 0x502}, {&(0x7f0000001300)="702dbcd589fb6e5514a9aa0d855142ad7cacf24f4e1588c930394418b31af7f74a329412d3e1bad9019e6859a7f4fb1db286f4c6a721fcb0d301f5616dfbc5faee3b0083c57a029c4f811b21a16605da16d54dddb88d70dd53a1278f4b58d388131c83f3e7a5ba0e5b688745d3c067df46c80aa713e9b0beec890a207d7633be2559eef4c887ad505d43c3dc5de3c0699c7eaf6f21aedde629f3f6ac77ad91285ab3ae6e0fe5307127bc6a594e65bea14c58e78c44e24d7b952a5c87f687989ea0fc4776", 0xc4, 0x10000}, {&(0x7f0000001400)="27a43ba50bf77e8758b5", 0xa}, {&(0x7f0000001440)="5a848d95e1be8072960efa537854301994783d7b61b60cc370872a5dbd177e65c936a95685a6a27f57a040e1926898db0292cb06eb5835ce2a5bad82f4c78471136c20acc260ce5be55157425a0cbf192ec5247a9d6c30f787bc4dc8d3de0746c14690313f6cbf4a1e100351e6afc07e6f7767fe12b2de605972742451c23e6e22c39234a8a0e1fa5f5e0c10f1711812edb84e002889c919588be0e667a215cc6a27e2db7d330be020d105f4b355b10953844da17937a6dd2aebd0f159268d838e1e53e5b4b1ee36a2a98302f31806fb2d7838e47918baf9bcf8af", 0xdb, 0x6}, {&(0x7f0000001540)="7fbef4124015710520701e3986f997", 0xf, 0x9}, {&(0x7f0000001580)="6feb3abe24572c88a83a8b2bb9798e7a5b57ca04fd3ca4e3210734328350ac49e03b99f55229dc768e806b428780a7a32920693632a3a7b0b56e38c7c56fef8c3d0f11060ab4096ce573c3988ffd9d97e2a4c9b5fdc5185714b44f713327616c1b44e136d513b0165fb003b4ae50af170e5bed576cb8c44982813520f7209e3cbfca5190560a786d43e0a423d49bae4cb66d1b1f32d713", 0x97, 0x6}], 0x8000, &(0x7f0000001740)={[{@umask={'umask', 0x3d, 0x2}}, {@namecase}, {@errors_remount}, {@discard}, {@discard}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0x569}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_gt}, {@dont_appraise}, {@pcr={'pcr', 0x3d, 0x3e}}]}) dup2(r4, r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002da8) [ 795.603132][ T8458] loop1: detected capacity change from 0 to 264192 [ 795.649845][ T8459] loop5: detected capacity change from 0 to 4096 [ 795.847492][ T8457] squashfs: Unknown parameter 'subj_role' [ 795.971999][ T6648] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 796.170213][ T8459] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 796.222320][ T8459] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 796.252883][ T3554] usb 3-1: new high-speed USB device number 18 using dummy_hcd 16:29:37 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000001040)) syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x80, 0x82, 0x5a, 0x0, 0x0, 0x0, 0x20201, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3f, 0x0, @perf_config_ext, 0x2200, 0x4, 0x8cde, 0x0, 0x0, 0x7}, 0x0, 0xd, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xaa5d) preadv(r1, &(0x7f0000001b80)=[{0x0}, {0x0}, {&(0x7f0000000580)=""/74, 0x4a}, {&(0x7f0000002d00)=""/4094, 0xffe}, {0x0}, {0x0}, {&(0x7f0000001140)=""/82, 0x52}, {0x0}], 0x8, 0x4000002, 0x48) r2 = gettid() timer_create(0x5, &(0x7f0000000780)={0x0, 0x0, 0x4, @tid=r2}, &(0x7f0000000040)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x2200, 0x4, 0x8cde, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffff21}, r2, 0x0, 0xffffffffffffffff, 0x1) r3 = getgid() setregid(0x0, r3) syz_mount_image$squashfs(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x7, 0x0, &(0x7f0000000ec0), 0x10008, &(0x7f0000000f00)={[{}], [{@subj_role={'subj_role', 0x3d, 'comm\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/4\x00'}}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4), 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f0000000040)="8c"}, 0x20) 16:29:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="0300", 0x2, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000", 0x1e, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x181, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x94) lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x422) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/21) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"], 0x401, 0x0) msgget$private(0x0, 0x21) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = getgid() getpid() msgctl$IPC_SET(r1, 0x1, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="980e000030003dfa000000000000000000000000840e0100800e01000a0001007065646974000000540e0280500e0200000000000000000000000000000000000000000097000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000000000000000000000000000000000f58a972c3c88eb5afa3b09fd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009321000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000100"/3658], 0xe98}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000001040)={{}, {}, [{0x2, 0x5}, {}, {0x2, 0x4, 0xee01}, {0x2, 0x3}, {0x2, 0x0, 0xee00}, {0x2, 0x1, 0xee00}, {0x2, 0x7, 0xffffffffffffffff}, {0x2, 0x3}], {0x4, 0x2}, [{0x8, 0x1}, {}, {0x8, 0x5}, {0x8, 0x1}, {0x8, 0x3}, {0x8, 0x3}, {0x8, 0x2, r2}, {0x8, 0x1, r2}, {}], {0x10, 0x3}, {0x20, 0x6}}, 0xac, 0x1) [ 796.653153][ T3554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.664390][ T3554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.674488][ T3554] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 796.687624][ T3554] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 16:29:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="0300", 0x2, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000", 0x1e, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x181, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x94) lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x422) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/21) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"], 0x401, 0x0) msgget$private(0x0, 0x21) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = getgid() getpid() msgctl$IPC_SET(r1, 0x1, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="980e000030003dfa000000000000000000000000840e0100800e01000a0001007065646974000000540e0280500e0200000000000000000000000000000000000000000097000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000000000000000000000000000000000f58a972c3c88eb5afa3b09fd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009321000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000100"/3658], 0xe98}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000001040)={{}, {}, [{0x2, 0x5}, {}, {0x2, 0x4, 0xee01}, {0x2, 0x3}, {0x2, 0x0, 0xee00}, {0x2, 0x1, 0xee00}, {0x2, 0x7, 0xffffffffffffffff}, {0x2, 0x3}], {0x4, 0x2}, [{0x8, 0x1}, {}, {0x8, 0x5}, {0x8, 0x1}, {0x8, 0x3}, {0x8, 0x3}, {0x8, 0x2, r2}, {0x8, 0x1, r2}, {}], {0x10, 0x3}, {0x20, 0x6}}, 0xac, 0x1) [ 796.696955][ T3554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.995890][ T8473] squashfs: Unknown parameter 'subj_role' [ 797.025113][ T3554] usb 3-1: config 0 descriptor?? 16:29:38 executing program 4: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x108}, 0x8, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f00000001c0)='~', 0x1}], 0x1) [ 797.045549][ T8475] loop1: detected capacity change from 0 to 4096 [ 797.063065][ T8477] loop5: detected capacity change from 0 to 4096 [ 797.102535][ T8479] loop3: detected capacity change from 0 to 1 [ 797.179573][ T8479] UDC core: couldn't find an available UDC or it's busy: -16 [ 797.187904][ T8479] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 797.321041][ T8477] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 16:29:38 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000001040)) syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x80, 0x82, 0x5a, 0x0, 0x0, 0x0, 0x20201, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3f, 0x0, @perf_config_ext, 0x2200, 0x4, 0x8cde, 0x0, 0x0, 0x7}, 0x0, 0xd, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xaa5d) preadv(r1, &(0x7f0000001b80)=[{0x0}, {0x0}, {&(0x7f0000000580)=""/74, 0x4a}, {&(0x7f0000002d00)=""/4094, 0xffe}, {0x0}, {0x0}, {&(0x7f0000001140)=""/82, 0x52}, {0x0}], 0x8, 0x4000002, 0x48) r2 = gettid() timer_create(0x5, &(0x7f0000000780)={0x0, 0x0, 0x4, @tid=r2}, &(0x7f0000000040)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x2200, 0x4, 0x8cde, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffff21}, r2, 0x0, 0xffffffffffffffff, 0x1) r3 = getgid() setregid(0x0, r3) syz_mount_image$squashfs(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x7, 0x0, &(0x7f0000000ec0), 0x10008, &(0x7f0000000f00)={[{}], [{@subj_role={'subj_role', 0x3d, 'comm\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/4\x00'}}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4), 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f0000000040)="8c"}, 0x20) [ 797.409824][ T8475] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 797.529469][ T8497] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 797.539213][ T8497] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 797.550594][ T3554] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 797.566922][ T8489] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 797.576619][ T8489] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 16:29:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) [ 797.622000][ T3554] plantronics 0003:047F:FFFF.000B: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 797.825265][ T8498] squashfs: Unknown parameter 'subj_role' [ 797.848408][ T8500] loop2: detected capacity change from 0 to 1 [ 797.874148][ T8500] UDC core: couldn't find an available UDC or it's busy: -16 [ 797.882215][ T8500] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 16:29:42 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_port', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) [ 801.856400][ T3581] usb 3-1: USB disconnect, device number 18 16:29:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="0300", 0x2, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000", 0x1e, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x181, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x94) lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x422) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/21) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"], 0x401, 0x0) msgget$private(0x0, 0x21) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = getgid() getpid() msgctl$IPC_SET(r1, 0x1, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="980e000030003dfa000000000000000000000000840e0100800e01000a0001007065646974000000540e0280500e0200000000000000000000000000000000000000000097000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000000000000000000000000000000000f58a972c3c88eb5afa3b09fd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009321000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000100"/3658], 0xe98}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000001040)={{}, {}, [{0x2, 0x5}, {}, {0x2, 0x4, 0xee01}, {0x2, 0x3}, {0x2, 0x0, 0xee00}, {0x2, 0x1, 0xee00}, {0x2, 0x7, 0xffffffffffffffff}, {0x2, 0x3}], {0x4, 0x2}, [{0x8, 0x1}, {}, {0x8, 0x5}, {0x8, 0x1}, {0x8, 0x3}, {0x8, 0x3}, {0x8, 0x2, r2}, {0x8, 0x1, r2}, {}], {0x10, 0x3}, {0x20, 0x6}}, 0xac, 0x1) 16:29:42 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 16:29:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="0300", 0x2, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000", 0x1e, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x181, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x94) lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x422) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/21) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"], 0x401, 0x0) msgget$private(0x0, 0x21) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = getgid() getpid() msgctl$IPC_SET(r1, 0x1, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="980e000030003dfa000000000000000000000000840e0100800e01000a0001007065646974000000540e0280500e0200000000000000000000000000000000000000000097000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000000000000000000000000000000000f58a972c3c88eb5afa3b09fd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009321000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000100"/3658], 0xe98}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000001040)={{}, {}, [{0x2, 0x5}, {}, {0x2, 0x4, 0xee01}, {0x2, 0x3}, {0x2, 0x0, 0xee00}, {0x2, 0x1, 0xee00}, {0x2, 0x7, 0xffffffffffffffff}, {0x2, 0x3}], {0x4, 0x2}, [{0x8, 0x1}, {}, {0x8, 0x5}, {0x8, 0x1}, {0x8, 0x3}, {0x8, 0x3}, {0x8, 0x2, r2}, {0x8, 0x1, r2}, {}], {0x10, 0x3}, {0x20, 0x6}}, 0xac, 0x1) [ 801.989193][ T8508] loop1: detected capacity change from 0 to 4096 [ 802.059919][ T8510] loop5: detected capacity change from 0 to 4096 16:29:43 executing program 3: write(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0xc008ae88, &(0x7f00000004c0)={"06000000dd245c84010201c0c9c8dc1964325fa96fa42b761e0100002bec0ba41f01010000000000000000403b00041f01ffff8e083c5ca22c000000ee377abaece6b88378e3d63aa0010000361d264ffa8b46485f02baee010100c04252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1d0500000000000000174a3ac8694525a7e8c499a573577736800000000000008f37f06e4ea995e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcd9bbb5a6baa41d614f6c824b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daecc04d96d9ec2db07478fbe65449b404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8df2239b1f58e068af6afbbc19db161c6df1e7c9c7d7c08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c569319d6e9bb2058d0202009a64fc7d9684364673dcfa9235ea5a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d185a0228b774b99d38c909374286070000006f53c419ce31054182fd898af706f1b1152c691611f897558d4b755cb78397979859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17ff030c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b8da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf4aba16f70f558b2246ad95ccf7d3f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f98d5703dc78b1ca9d74ea6a9ae12ab367c0ada119b5132145fa45250300c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a811018000006f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8fdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 16:29:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001a40)=[{{&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @empty, 0xe6}, 0x1c, 0x0, 0x0, &(0x7f0000001940)=[@flowinfo={{0x14, 0x29, 0xb, 0x93bb}}], 0x18}}], 0x1, 0x0) [ 802.205451][ T8510] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 16:29:43 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x2, @l2tp={0x2, 0x0, @dev}, @rc={0x1f, @none, 0xff}, @nl=@unspec, 0xfd}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001500)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, r4, 0x0, @unused=[0x20, 0x80000001, 0x4], @name="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"}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000140)={{}, r4, 0x0, @inherit={0x67, &(0x7f0000001840)=ANY=[@ANYBLOB="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"]}, @name="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"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"08ee0a3c088fa20fb5fb56581f369467", 0x0, r4, {0x6, 0x3}, {0xfffffffffffffff7, 0xffff}, 0x401, [0x5, 0x8, 0x48, 0x400, 0x5, 0x0, 0x7fffffff, 0xe1, 0x40, 0x4, 0x34, 0x2, 0xfffffffffffffff9, 0x3, 0x0, 0x2]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"61359e13b8c4a6b9a4a3d07561e0fd80", r4, 0x0, {0x470, 0x9}, {0x3, 0x1}, 0x0, [0x7, 0x80, 0x5, 0x5, 0x9, 0xbd, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, 0x800, 0x6b5]}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f0000000300)={@local}) timerfd_create(0x6, 0x80000) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001a80)={r6, 0x8}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000200)={{}, r4, 0xc, @unused=[0x20, 0x7fffffff, 0x0, 0x400], @name="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"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{}, r4, 0x16, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000100000000000000060000000000000084050000000000000a0000000000000007000000000000000200000000000000ff0100000000000004000000"]}, @subvolid}) sendmsg(r1, 0x0, 0x0) [ 802.268091][ T8508] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 802.483128][ T8525] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 802.493031][ T8525] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 802.505903][ T8528] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 802.515665][ T8528] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 802.624937][ T6587] usb 4-1: USB disconnect, device number 7 16:29:43 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r0) 16:29:43 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1e0b, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x23, &(0x7f00000000c0)=""/35}, &(0x7f0000000140)="be8993106df5", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:29:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8000a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x11, 0x0, 0x9, 0x0, 0x2}}, &(0x7f0000000200)=""/161, 0x1a, 0xa1, 0x8}, 0x20) [ 803.003759][ T8539] block nbd2: shutting down sockets 16:29:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="0300", 0x2, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000", 0x1e, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x181, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x94) lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x422) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/21) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"], 0x401, 0x0) msgget$private(0x0, 0x21) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = getgid() getpid() msgctl$IPC_SET(r1, 0x1, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="980e000030003dfa000000000000000000000000840e0100800e01000a0001007065646974000000540e0280500e0200000000000000000000000000000000000000000097000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000000000000000000000000000000000f58a972c3c88eb5afa3b09fd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009321000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000100"/3658], 0xe98}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000001040)={{}, {}, [{0x2, 0x5}, {}, {0x2, 0x4, 0xee01}, {0x2, 0x3}, {0x2, 0x0, 0xee00}, {0x2, 0x1, 0xee00}, {0x2, 0x7, 0xffffffffffffffff}, {0x2, 0x3}], {0x4, 0x2}, [{0x8, 0x1}, {}, {0x8, 0x5}, {0x8, 0x1}, {0x8, 0x3}, {0x8, 0x3}, {0x8, 0x2, r2}, {0x8, 0x1, r2}, {}], {0x10, 0x3}, {0x20, 0x6}}, 0xac, 0x1) 16:29:44 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r0) 16:29:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) connect(r1, &(0x7f0000000180)=@isdn, 0x80) 16:29:44 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0xeb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040)) 16:29:44 executing program 3: syz_mount_image$gfs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) stat(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)) 16:29:44 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x9) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) [ 803.483823][ T8550] loop1: detected capacity change from 0 to 4096 [ 803.555145][ T8550] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 803.624889][ T8554] block nbd2: shutting down sockets 16:29:44 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}], 0x20000010) 16:29:44 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 16:29:44 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r0) 16:29:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280), 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000240)=0x7, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) [ 803.934549][ T8569] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 803.944250][ T8569] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 16:29:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366ee578400080820000200008000f8000020004000000000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010200)='\x00\x00\x00\x00rrAa', 0x8, 0x9e0}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011000)) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=""/113) [ 804.263132][ T8577] block nbd2: Device being setup by another task [ 804.294689][ T8576] block nbd2: shutting down sockets 16:29:45 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r0) 16:29:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280), 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000240)=0x7, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 16:29:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050019000000000005002d0001"], 0x44}}, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x81000000, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) 16:29:45 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a62, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) fallocate(r0, 0x10, 0x0, 0x200) [ 804.787409][ T8583] loop5: detected capacity change from 0 to 256 [ 804.924223][ T8588] block nbd2: shutting down sockets 16:29:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280), 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000240)=0x7, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 16:29:46 executing program 1: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000780)='./bus/file0\x00', 0x80000, 0x9c) lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000480)='./file0\x00', 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) syncfs(r1) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) mount$9p_fd(0x0, 0x0, &(0x7f0000000400), 0x1428c1, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'rfdno'}}]}}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000500)=0x5a6) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000500)}, {&(0x7f0000000600)}], 0x2, 0x6, 0xfffffe01) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./bus/file0\x00') 16:29:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc}, 0x8084, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, @loopback, @private0}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8800) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x40010, 0xffffffffffffffff, 0x4bd4000) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000170a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 16:29:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) capset(0x0, &(0x7f0000000340)={0xbe2, 0x7fffffff, 0x10001, 0x2, 0x400, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/67, 0x43}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f00000000c0)=""/110, 0x6e}], 0x3, 0x5, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 16:29:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000340)=""/142, 0x5a, 0x8e, 0x8}, 0x20) 16:29:46 executing program 0: r0 = landlock_create_ruleset(&(0x7f0000000000)={0x80c}, 0x8, 0x0) write(r0, 0x0, 0x0) 16:29:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280), 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000240)=0x7, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) [ 805.451378][ T8600] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 805.593635][ T8600] device gretap0 entered promiscuous mode 16:29:46 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="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", 0x104}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000000c0)={{@hyper}, @local}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 805.727429][ T8597] overlayfs: './file0' not a directory 16:29:46 executing program 0: r0 = syz_open_dev$hidraw(0xffffffffffffffff, 0x0, 0xc43e2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x2, 0x0, 0x0, {}, 0x0, 0x0}}) syz_open_dev$hidraw(&(0x7f0000000400), 0x5c42, 0x20800) syz_open_dev$hidraw(&(0x7f0000000200), 0x200, 0x40001) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, "5ce30015b6ab44497d7a98847bea3ed0206a39fdc2364ee68b861505c4b62cd3"}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000280)={0x51, 0x3, 0x0, {0x1, 0x2}, {0x1, 0x3ff}, @period={0x58, 0xcb23, 0x5, 0x6, 0x4, {0x3, 0x1c2, 0x5c8, 0x100}, 0xa, &(0x7f0000000240)=[0x3f, 0x1ff, 0xfffb, 0x9, 0x2, 0x1, 0x0, 0x5, 0x11d, 0x8001]}}) r2 = syz_open_dev$hidraw(0xffffffffffffffff, 0x0, 0x8262) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, "5ce30015b6ab44497d7a98847bea3ed0206a39fdc2364ee68b861505c4b62cd3"}) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000003c0)={0x11, 0x8b, &(0x7f0000000300)="a9361056bbcc89abb9182797347e4df776cc4af119222048c2c45fefa4deeaf5d46da31599aa6c35c300e354a3058f7523565076ad2125e14fb45a6d56fd45b33ee4fe855c79ea88124edc35d98545d9dc7246bb24de392ebed318570f7248599c2e1829f6f620f95fc2736f07ecd7e25b93cbd8c10903fab3c59b562c034dce7947d785488e5024ca19ed"}) write$hidraw(r2, &(0x7f0000001540)="17", 0x1) ioctl$HIDIOCGRAWNAME(r0, 0x40305839, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000500)="9736", 0x2) write$hidraw(r0, &(0x7f0000000000)="44c0f49952ffee802a6334c1dc02b36ebb34f9fe69346eef3d5d6d76b8d2b88369358f2ce7e564a1c36146376d15f0fd89f31cd5c4ee768332b3026569fc2b2ab8cfbfabc7a3387e8e3f51949da7a76d70a47d61701d3ae482c8bea64a0dd73cf5fd5994f42813471bc41cb1a70d0369010cb1276595873d7dc777654a787c062a615f9acb826a390434de36c942cc9d5e639d3c25cbf3de841a31b2a6f0914c98ffb219080d1ed01f2bc2ec74c3634032afc2e37816130582b74554984c7cd8bece7fe269e2f6922349b14cea9331c3bf140ab8d6ef76f7a7521a09788779211faab23160f6cd3bf1f60cc018aa1667bb9751e2032bec608a62330d7b20f024c4444f6744028efa407cf24a5d88cb5ee5770ade7610a4b7c9169614fdd7c703c603d2ec04921ac203fba7b2372acafdc33dbdda972fa7fdc8825c5511e8d52328688097ff3f7d1788995571700db2d76712cf06c8b42e3006b302f686c7f94a958ffa68f90225bacd9a2a7ce6df2b474f77db88b05050ce7d5e5b82dc11dc39c3d0534fd56dfa5b2a20d510195f3e4304de5883a7ba1f80b2487276105a82dc2371edbfad94d518fdf74e05f33ca361ca3b2e75a640ac3412f1b3ed909293f96abe6bf0b19207844be8a509f190dbda564bc15e175c3b904a4be42baed8a5a7ea753efa9614a5e5850dd226c92e9a64b34d42df9d1fd1ab5a58504f4d230da6", 0x300000) syz_open_dev$hidraw(&(0x7f00000002c0), 0x100000001, 0x101000) 16:29:47 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000004740)={r0, 0x0, 0x0, 0x41a}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa) [ 806.047784][ T8608] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 806.062022][ T8608] ‘|‚ªu: renamed from gretap0 16:29:47 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{}, {0x6, 0x0, 0x0, 0x7ffffdc0}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') utimensat(r0, 0x0, 0x0, 0x0) [ 806.164006][ T8608] device ‘|‚ªu left promiscuous mode [ 806.197812][ T8608] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 16:29:47 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 16:29:47 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='memory.events\x00'}, 0x30) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 16:29:47 executing program 4: syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "bbce"}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "52a134e7fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x8b}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xb2, 0x4, 0x0, 0x0, "d1e8c1", "ab5d81"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 16:29:47 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sync() perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5920c, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sync() perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) [ 806.972300][ T6587] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 807.205197][ T8601] not chained 3840000 origins [ 807.210009][ T8601] CPU: 1 PID: 8601 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 807.218733][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.228823][ T8601] Call Trace: [ 807.232123][ T8601] [ 807.235079][ T8601] dump_stack_lvl+0x1ff/0x28e [ 807.239819][ T8601] dump_stack+0x25/0x28 [ 807.244027][ T8601] kmsan_internal_chain_origin+0x78/0x110 [ 807.249823][ T8601] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 807.255947][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 807.261117][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 807.266994][ T8601] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 807.272599][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 807.277769][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 807.283642][ T8601] ? should_fail+0x75/0x9c0 [ 807.288192][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 807.293359][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 807.299664][ T8601] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 807.305801][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 807.310980][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 807.316847][ T8601] __msan_chain_origin+0xbf/0x140 [ 807.321928][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 807.327111][ T8601] get_compat_msghdr+0x108/0x2c0 [ 807.332101][ T8601] ? __sys_recvmmsg+0x51c/0x6f0 [ 807.337010][ T8601] do_recvmmsg+0xd77/0x2120 [ 807.341586][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 807.346762][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 807.353066][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 807.358233][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 807.364558][ T8601] ? fput+0x82/0x320 [ 807.368601][ T8601] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 807.375164][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 807.379915][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 807.386311][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 807.391407][ T8601] do_fast_syscall_32+0x34/0x70 [ 807.396327][ T8601] do_SYSENTER_32+0x1b/0x20 [ 807.400887][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 807.407275][ T8601] RIP: 0023:0xf6ec3549 [ 807.411378][ T8601] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 807.431040][ T8601] RSP: 002b:00000000f589c5bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 807.439500][ T8601] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 807.447517][ T8601] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 807.455531][ T8601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 807.463537][ T8601] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 807.471541][ T8601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 807.479566][ T8601] [ 807.484652][ T8601] Uninit was stored to memory at: [ 807.489755][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 807.495574][ T8601] get_compat_msghdr+0x108/0x2c0 [ 807.500583][ T8601] do_recvmmsg+0xd77/0x2120 [ 807.505266][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 807.510003][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 807.516512][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 807.521599][ T8601] do_fast_syscall_32+0x34/0x70 [ 807.526645][ T8601] do_SYSENTER_32+0x1b/0x20 [ 807.531197][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 807.537734][ T8601] [ 807.540069][ T8601] Uninit was stored to memory at: [ 807.545279][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 807.550438][ T8601] get_compat_msghdr+0x108/0x2c0 [ 807.555541][ T8601] do_recvmmsg+0xd77/0x2120 [ 807.560099][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 807.564942][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 807.571331][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 807.576600][ T8601] do_fast_syscall_32+0x34/0x70 [ 807.581505][ T8601] do_SYSENTER_32+0x1b/0x20 [ 807.586255][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 807.592772][ T8601] [ 807.595113][ T8601] Uninit was stored to memory at: [ 807.600198][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 807.605523][ T8601] get_compat_msghdr+0x108/0x2c0 [ 807.610508][ T8601] do_recvmmsg+0xd77/0x2120 [ 807.615250][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 807.619985][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 807.626481][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 807.631559][ T8601] do_fast_syscall_32+0x34/0x70 [ 807.636587][ T8601] do_SYSENTER_32+0x1b/0x20 [ 807.641140][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 807.647651][ T8601] [ 807.649994][ T8601] Uninit was stored to memory at: [ 807.655275][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 807.660428][ T8601] get_compat_msghdr+0x108/0x2c0 [ 807.665668][ T8601] do_recvmmsg+0xd77/0x2120 [ 807.670226][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 807.675088][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 807.681464][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 807.686716][ T8601] do_fast_syscall_32+0x34/0x70 [ 807.691623][ T8601] do_SYSENTER_32+0x1b/0x20 [ 807.696300][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 807.702859][ T8601] [ 807.705194][ T8601] Uninit was stored to memory at: [ 807.710282][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 807.715617][ T8601] get_compat_msghdr+0x108/0x2c0 [ 807.720600][ T8601] do_recvmmsg+0xd77/0x2120 [ 807.725363][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 807.730091][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 807.736651][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 807.741735][ T8601] do_fast_syscall_32+0x34/0x70 [ 807.746807][ T8601] do_SYSENTER_32+0x1b/0x20 [ 807.751360][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 807.757898][ T8601] [ 807.760236][ T8601] Uninit was stored to memory at: [ 807.765513][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 807.770662][ T8601] get_compat_msghdr+0x108/0x2c0 [ 807.775808][ T8601] do_recvmmsg+0xd77/0x2120 [ 807.780362][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 807.785265][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 807.791652][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 807.796917][ T8601] do_fast_syscall_32+0x34/0x70 [ 807.801931][ T8601] do_SYSENTER_32+0x1b/0x20 [ 807.806489][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 807.813050][ T8601] [ 807.815384][ T8601] Uninit was stored to memory at: [ 807.820468][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 807.825794][ T8601] get_compat_msghdr+0x108/0x2c0 [ 807.830777][ T8601] do_recvmmsg+0xd77/0x2120 [ 807.835504][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 807.840235][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 807.846878][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 807.852068][ T8601] do_fast_syscall_32+0x34/0x70 [ 807.856976][ T8601] do_SYSENTER_32+0x1b/0x20 [ 807.861548][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 807.868117][ T8601] [ 807.870454][ T8601] Local variable msg_sys created at: [ 807.875924][ T8601] do_recvmmsg+0xbb/0x2120 [ 807.880395][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 808.002876][ T6587] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 808.012741][ T6587] usb 5-1: config 1 has no interface number 1 [ 808.018996][ T6587] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 808.029747][ T6587] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 808.042913][ T6587] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 808.243611][ T6587] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 808.253485][ T6587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.261635][ T6587] usb 5-1: Product: syz [ 808.266084][ T6587] usb 5-1: Manufacturer: syz [ 808.270811][ T6587] usb 5-1: SerialNumber: syz [ 808.596178][ T8601] not chained 3850000 origins [ 808.600900][ T8601] CPU: 0 PID: 8601 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 808.609595][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.619663][ T8601] Call Trace: [ 808.622958][ T8601] [ 808.623331][ T6587] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 808.625900][ T8601] dump_stack_lvl+0x1ff/0x28e [ 808.637970][ T8601] dump_stack+0x25/0x28 [ 808.642172][ T8601] kmsan_internal_chain_origin+0x78/0x110 [ 808.647942][ T8601] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 808.654046][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 808.659210][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 808.665080][ T8601] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 808.670673][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 808.675815][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 808.681677][ T8601] ? should_fail+0x75/0x9c0 [ 808.686203][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 808.691345][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 808.697648][ T8601] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 808.703777][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 808.708937][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 808.714801][ T8601] __msan_chain_origin+0xbf/0x140 [ 808.719874][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 808.725047][ T8601] get_compat_msghdr+0x108/0x2c0 [ 808.730031][ T8601] ? __sys_recvmmsg+0x51c/0x6f0 [ 808.734940][ T8601] do_recvmmsg+0xd77/0x2120 [ 808.739512][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 808.744690][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 808.750987][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 808.756153][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 808.762454][ T8601] ? fput+0x82/0x320 [ 808.766403][ T8601] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 808.772962][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 808.777713][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 808.784104][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 808.789190][ T8601] do_fast_syscall_32+0x34/0x70 [ 808.794099][ T8601] do_SYSENTER_32+0x1b/0x20 [ 808.798657][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 808.805045][ T8601] RIP: 0023:0xf6ec3549 [ 808.809138][ T8601] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 808.828793][ T8601] RSP: 002b:00000000f589c5bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 808.837256][ T8601] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 808.843565][ T6587] usb 5-1: USB disconnect, device number 23 [ 808.845264][ T8601] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 808.845298][ T8601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 808.845327][ T8601] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 808.845361][ T8601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 808.845405][ T8601] [ 808.888643][ T8601] Uninit was stored to memory at: [ 808.895270][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 808.900439][ T8601] get_compat_msghdr+0x108/0x2c0 [ 808.905739][ T8601] do_recvmmsg+0xd77/0x2120 [ 808.910296][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 808.915124][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 808.921624][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 808.926847][ T8601] do_fast_syscall_32+0x34/0x70 [ 808.931832][ T8601] do_SYSENTER_32+0x1b/0x20 [ 808.936388][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 808.942908][ T8601] [ 808.945239][ T8601] Uninit was stored to memory at: [ 808.950322][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 808.955622][ T8601] get_compat_msghdr+0x108/0x2c0 [ 808.960602][ T8601] do_recvmmsg+0xd77/0x2120 [ 808.965301][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 808.970038][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 808.976564][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 808.981640][ T8601] do_fast_syscall_32+0x34/0x70 [ 808.986688][ T8601] do_SYSENTER_32+0x1b/0x20 [ 808.991257][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 808.997779][ T8601] [ 809.000120][ T8601] Uninit was stored to memory at: [ 809.005350][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 809.010535][ T8601] get_compat_msghdr+0x108/0x2c0 [ 809.015647][ T8601] do_recvmmsg+0xd77/0x2120 [ 809.020195][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 809.024999][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 809.031380][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 809.036601][ T8601] do_fast_syscall_32+0x34/0x70 [ 809.041503][ T8601] do_SYSENTER_32+0x1b/0x20 [ 809.046202][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 809.053015][ T8601] [ 809.055353][ T8601] Uninit was stored to memory at: [ 809.060437][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 809.065745][ T8601] get_compat_msghdr+0x108/0x2c0 [ 809.070731][ T8601] do_recvmmsg+0xd77/0x2120 [ 809.075435][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 809.080172][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 809.086706][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 809.091867][ T8601] do_fast_syscall_32+0x34/0x70 [ 809.096766][ T8601] do_SYSENTER_32+0x1b/0x20 [ 809.101316][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 809.107857][ T8601] [ 809.110193][ T8601] Uninit was stored to memory at: [ 809.115417][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 809.120571][ T8601] get_compat_msghdr+0x108/0x2c0 [ 809.125691][ T8601] do_recvmmsg+0xd77/0x2120 [ 809.130248][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 809.135116][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 809.141495][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 809.146776][ T8601] do_fast_syscall_32+0x34/0x70 [ 809.151683][ T8601] do_SYSENTER_32+0x1b/0x20 [ 809.156364][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 809.162878][ T8601] [ 809.165212][ T8601] Uninit was stored to memory at: [ 809.170295][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 809.175611][ T8601] get_compat_msghdr+0x108/0x2c0 [ 809.180592][ T8601] do_recvmmsg+0xd77/0x2120 [ 809.185282][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 809.190024][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 809.196547][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 809.201637][ T8601] do_fast_syscall_32+0x34/0x70 [ 809.206696][ T8601] do_SYSENTER_32+0x1b/0x20 [ 809.211258][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 809.217888][ T8601] [ 809.220243][ T8601] Uninit was stored to memory at: [ 809.225482][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 809.230635][ T8601] get_compat_msghdr+0x108/0x2c0 [ 809.235758][ T8601] do_recvmmsg+0xd77/0x2120 [ 809.240318][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 809.245215][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 809.251598][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 809.256834][ T8601] do_fast_syscall_32+0x34/0x70 [ 809.261839][ T8601] do_SYSENTER_32+0x1b/0x20 [ 809.266402][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 809.272917][ T8601] [ 809.275249][ T8601] Local variable msg_sys created at: [ 809.280543][ T8601] do_recvmmsg+0xbb/0x2120 [ 809.285164][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 809.449569][ T8601] not chained 3860000 origins [ 809.454338][ T8601] CPU: 0 PID: 8601 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 809.463031][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.473112][ T8601] Call Trace: [ 809.476395][ T8601] [ 809.479324][ T8601] dump_stack_lvl+0x1ff/0x28e [ 809.484041][ T8601] dump_stack+0x25/0x28 [ 809.488253][ T8601] kmsan_internal_chain_origin+0x78/0x110 [ 809.494034][ T8601] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 809.500164][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 809.505305][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 809.511170][ T8601] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 809.516757][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 809.521902][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 809.527765][ T8601] ? should_fail+0x75/0x9c0 [ 809.532322][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 809.537464][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 809.543738][ T8601] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 809.549854][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 809.554989][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 809.560819][ T8601] __msan_chain_origin+0xbf/0x140 [ 809.565873][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 809.571033][ T8601] get_compat_msghdr+0x108/0x2c0 [ 809.575989][ T8601] ? __sys_recvmmsg+0x51c/0x6f0 [ 809.580914][ T8601] do_recvmmsg+0xd77/0x2120 [ 809.585464][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 809.590631][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 809.596898][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 809.602386][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 809.608680][ T8601] ? fput+0x82/0x320 [ 809.612622][ T8601] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 809.619177][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 809.623903][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 809.630312][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 809.635377][ T8601] do_fast_syscall_32+0x34/0x70 [ 809.640253][ T8601] do_SYSENTER_32+0x1b/0x20 [ 809.644785][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 809.651169][ T8601] RIP: 0023:0xf6ec3549 [ 809.655254][ T8601] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 809.674884][ T8601] RSP: 002b:00000000f589c5bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 809.683323][ T8601] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 809.691320][ T8601] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 809.699298][ T8601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 809.707287][ T8601] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 809.715290][ T8601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 809.723316][ T8601] [ 809.727667][ T8601] Uninit was stored to memory at: [ 809.733091][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 809.738244][ T8601] get_compat_msghdr+0x108/0x2c0 [ 809.743326][ T8601] do_recvmmsg+0xd77/0x2120 [ 809.747884][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 809.752680][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 809.759036][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 809.764322][ T8601] do_fast_syscall_32+0x34/0x70 [ 809.769221][ T8601] do_SYSENTER_32+0x1b/0x20 [ 809.773879][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 809.780260][ T8601] [ 809.784217][ T8601] Uninit was stored to memory at: [ 809.789307][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 809.794565][ T8601] get_compat_msghdr+0x108/0x2c0 [ 809.799540][ T8601] do_recvmmsg+0xd77/0x2120 [ 809.804224][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 809.808960][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 809.815480][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 809.820563][ T8601] do_fast_syscall_32+0x34/0x70 [ 809.825585][ T8601] do_SYSENTER_32+0x1b/0x20 [ 809.830136][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 809.836623][ T8601] [ 809.838952][ T8601] Uninit was stored to memory at: [ 809.844168][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 809.849319][ T8601] get_compat_msghdr+0x108/0x2c0 [ 809.854387][ T8601] do_recvmmsg+0xd77/0x2120 [ 809.858935][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 809.863782][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 809.870156][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 809.875327][ T8601] do_fast_syscall_32+0x34/0x70 [ 809.880225][ T8601] do_SYSENTER_32+0x1b/0x20 [ 809.884909][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 809.891291][ T8601] [ 809.893726][ T8601] Uninit was stored to memory at: [ 809.898888][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 809.904166][ T8601] get_compat_msghdr+0x108/0x2c0 [ 809.909138][ T8601] do_recvmmsg+0xd77/0x2120 [ 809.914471][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 809.919194][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 809.925702][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 809.930783][ T8601] do_fast_syscall_32+0x34/0x70 [ 809.935834][ T8601] do_SYSENTER_32+0x1b/0x20 [ 809.940382][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 809.946904][ T8601] [ 809.949234][ T8601] Uninit was stored to memory at: [ 809.954419][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 809.959568][ T8601] get_compat_msghdr+0x108/0x2c0 [ 809.964676][ T8601] do_recvmmsg+0xd77/0x2120 [ 809.969224][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 809.974037][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 809.980409][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 809.985614][ T8601] do_fast_syscall_32+0x34/0x70 [ 809.990511][ T8601] do_SYSENTER_32+0x1b/0x20 [ 809.995148][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.001524][ T8601] [ 810.003993][ T8601] Uninit was stored to memory at: [ 810.009064][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 810.014344][ T8601] get_compat_msghdr+0x108/0x2c0 [ 810.019325][ T8601] do_recvmmsg+0xd77/0x2120 [ 810.024027][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 810.028755][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.035239][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 810.040317][ T8601] do_fast_syscall_32+0x34/0x70 [ 810.045346][ T8601] do_SYSENTER_32+0x1b/0x20 [ 810.049899][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.056396][ T8601] [ 810.058728][ T8601] Uninit was stored to memory at: [ 810.064029][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 810.070565][ T8601] get_compat_msghdr+0x108/0x2c0 [ 810.075632][ T8601] do_recvmmsg+0xd77/0x2120 [ 810.080181][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 810.085042][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.091416][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 810.096579][ T8601] do_fast_syscall_32+0x34/0x70 [ 810.101482][ T8601] do_SYSENTER_32+0x1b/0x20 [ 810.106162][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.112633][ T8601] [ 810.114962][ T8601] Local variable msg_sys created at: [ 810.120289][ T8601] do_recvmmsg+0xbb/0x2120 [ 810.124876][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 810.250827][ T8601] not chained 3870000 origins [ 810.255700][ T8601] CPU: 1 PID: 8601 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 810.264397][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.274473][ T8601] Call Trace: [ 810.277759][ T8601] [ 810.280690][ T8601] dump_stack_lvl+0x1ff/0x28e [ 810.285485][ T8601] dump_stack+0x25/0x28 [ 810.289661][ T8601] kmsan_internal_chain_origin+0x78/0x110 [ 810.295405][ T8601] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 810.301493][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 810.306680][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 810.312536][ T8601] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 810.318114][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 810.323268][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 810.329202][ T8601] ? should_fail+0x75/0x9c0 [ 810.333737][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 810.338884][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 810.345151][ T8601] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 810.351252][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 810.356390][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 810.362222][ T8601] __msan_chain_origin+0xbf/0x140 [ 810.367388][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 810.372531][ T8601] get_compat_msghdr+0x108/0x2c0 [ 810.377488][ T8601] ? __sys_recvmmsg+0x51c/0x6f0 [ 810.382365][ T8601] do_recvmmsg+0xd77/0x2120 [ 810.387164][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 810.392306][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 810.398578][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 810.403711][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 810.409979][ T8601] ? fput+0x82/0x320 [ 810.413987][ T8601] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.420512][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 810.425222][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.431586][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 810.436647][ T8601] do_fast_syscall_32+0x34/0x70 [ 810.441563][ T8601] do_SYSENTER_32+0x1b/0x20 [ 810.446090][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.452443][ T8601] RIP: 0023:0xf6ec3549 [ 810.456513][ T8601] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 810.476139][ T8601] RSP: 002b:00000000f589c5bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 810.484566][ T8601] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 810.492546][ T8601] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 810.500675][ T8601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 810.508662][ T8601] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 810.516643][ T8601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 810.524639][ T8601] [ 810.529208][ T8601] Uninit was stored to memory at: [ 810.535490][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 810.540646][ T8601] get_compat_msghdr+0x108/0x2c0 [ 810.545873][ T8601] do_recvmmsg+0xd77/0x2120 [ 810.550423][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 810.555259][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.561640][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 810.566841][ T8601] do_fast_syscall_32+0x34/0x70 [ 810.571739][ T8601] do_SYSENTER_32+0x1b/0x20 [ 810.576449][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.583035][ T8601] [ 810.585377][ T8601] Uninit was stored to memory at: [ 810.590448][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 810.595704][ T8601] get_compat_msghdr+0x108/0x2c0 [ 810.600679][ T8601] do_recvmmsg+0xd77/0x2120 [ 810.605345][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 810.610076][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.616624][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 810.621699][ T8601] do_fast_syscall_32+0x34/0x70 [ 810.626747][ T8601] do_SYSENTER_32+0x1b/0x20 [ 810.631293][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.637793][ T8601] [ 810.640127][ T8601] Uninit was stored to memory at: [ 810.645327][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 810.650476][ T8601] get_compat_msghdr+0x108/0x2c0 [ 810.655615][ T8601] do_recvmmsg+0xd77/0x2120 [ 810.660168][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 810.665065][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.671442][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 810.676713][ T8601] do_fast_syscall_32+0x34/0x70 [ 810.681614][ T8601] do_SYSENTER_32+0x1b/0x20 [ 810.686324][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.692792][ T8601] [ 810.695116][ T8601] Uninit was stored to memory at: [ 810.700172][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 810.705489][ T8601] get_compat_msghdr+0x108/0x2c0 [ 810.710462][ T8601] do_recvmmsg+0xd77/0x2120 [ 810.715122][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 810.719844][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.726329][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 810.731405][ T8601] do_fast_syscall_32+0x34/0x70 [ 810.736468][ T8601] do_SYSENTER_32+0x1b/0x20 [ 810.741023][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.747681][ T8601] [ 810.750037][ T8601] Uninit was stored to memory at: [ 810.755309][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 810.760466][ T8601] get_compat_msghdr+0x108/0x2c0 [ 810.765611][ T8601] do_recvmmsg+0xd77/0x2120 [ 810.770180][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 810.775079][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.781459][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 810.786813][ T8601] do_fast_syscall_32+0x34/0x70 [ 810.791718][ T8601] do_SYSENTER_32+0x1b/0x20 [ 810.796445][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.802970][ T8601] [ 810.805302][ T8601] Uninit was stored to memory at: [ 810.810360][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 810.815621][ T8601] get_compat_msghdr+0x108/0x2c0 [ 810.820600][ T8601] do_recvmmsg+0xd77/0x2120 [ 810.825316][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 810.830040][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.836528][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 810.841602][ T8601] do_fast_syscall_32+0x34/0x70 [ 810.846616][ T8601] do_SYSENTER_32+0x1b/0x20 [ 810.851167][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.857685][ T8601] [ 810.860028][ T8601] Uninit was stored to memory at: [ 810.865492][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 810.870640][ T8601] get_compat_msghdr+0x108/0x2c0 [ 810.875777][ T8601] do_recvmmsg+0xd77/0x2120 [ 810.880347][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 810.885233][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.891609][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 810.896800][ T8601] do_fast_syscall_32+0x34/0x70 [ 810.901703][ T8601] do_SYSENTER_32+0x1b/0x20 [ 810.906412][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.912944][ T8601] [ 810.915275][ T8601] Local variable msg_sys created at: [ 810.920612][ T8601] do_recvmmsg+0xbb/0x2120 [ 810.925213][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 811.058220][ T8601] not chained 3880000 origins [ 811.063041][ T8601] CPU: 1 PID: 8601 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 811.071737][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.081817][ T8601] Call Trace: [ 811.085104][ T8601] [ 811.088033][ T8601] dump_stack_lvl+0x1ff/0x28e [ 811.092742][ T8601] dump_stack+0x25/0x28 [ 811.096919][ T8601] kmsan_internal_chain_origin+0x78/0x110 [ 811.102662][ T8601] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 811.108756][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 811.113890][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 811.119727][ T8601] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 811.125293][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 811.130427][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 811.136263][ T8601] ? should_fail+0x75/0x9c0 [ 811.140790][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 811.145935][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 811.152228][ T8601] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 811.158330][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 811.163462][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 811.169293][ T8601] __msan_chain_origin+0xbf/0x140 [ 811.174338][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 811.180783][ T8601] get_compat_msghdr+0x108/0x2c0 [ 811.185740][ T8601] ? __sys_recvmmsg+0x51c/0x6f0 [ 811.190767][ T8601] do_recvmmsg+0xd77/0x2120 [ 811.195393][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 811.200558][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 811.207260][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 811.212393][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 811.218657][ T8601] ? fput+0x82/0x320 [ 811.222574][ T8601] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.229104][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 811.233827][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.240528][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 811.245666][ T8601] do_fast_syscall_32+0x34/0x70 [ 811.250544][ T8601] do_SYSENTER_32+0x1b/0x20 [ 811.255076][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 811.261432][ T8601] RIP: 0023:0xf6ec3549 [ 811.265513][ T8601] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 811.285155][ T8601] RSP: 002b:00000000f589c5bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 811.293590][ T8601] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 811.301569][ T8601] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 811.309642][ T8601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 811.317639][ T8601] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 811.325619][ T8601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 811.333610][ T8601] [ 811.338089][ T8601] Uninit was stored to memory at: [ 811.343457][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 811.348612][ T8601] get_compat_msghdr+0x108/0x2c0 [ 811.353700][ T8601] do_recvmmsg+0xd77/0x2120 [ 811.358255][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 811.363120][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.369501][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 811.374705][ T8601] do_fast_syscall_32+0x34/0x70 [ 811.379610][ T8601] do_SYSENTER_32+0x1b/0x20 [ 811.384337][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 811.390845][ T8601] [ 811.393304][ T8601] Uninit was stored to memory at: [ 811.398384][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 811.403695][ T8601] get_compat_msghdr+0x108/0x2c0 [ 811.408672][ T8601] do_recvmmsg+0xd77/0x2120 [ 811.413380][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 811.418108][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.424602][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 811.429675][ T8601] do_fast_syscall_32+0x34/0x70 [ 811.434682][ T8601] do_SYSENTER_32+0x1b/0x20 [ 811.439235][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 811.445777][ T8601] [ 811.448109][ T8601] Uninit was stored to memory at: [ 811.453359][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 811.458510][ T8601] get_compat_msghdr+0x108/0x2c0 [ 811.463665][ T8601] do_recvmmsg+0xd77/0x2120 [ 811.468221][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 811.473081][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.479463][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 811.484669][ T8601] do_fast_syscall_32+0x34/0x70 [ 811.489572][ T8601] do_SYSENTER_32+0x1b/0x20 [ 811.494233][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 811.500617][ T8601] [ 811.503119][ T8601] Uninit was stored to memory at: [ 811.508211][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 811.513493][ T8601] get_compat_msghdr+0x108/0x2c0 [ 811.518567][ T8601] do_recvmmsg+0xd77/0x2120 [ 811.523229][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 811.528074][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.534620][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 811.539698][ T8601] do_fast_syscall_32+0x34/0x70 [ 811.544850][ T8601] do_SYSENTER_32+0x1b/0x20 [ 811.549400][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 811.555950][ T8601] [ 811.558301][ T8601] Uninit was stored to memory at: [ 811.563564][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 811.568719][ T8601] get_compat_msghdr+0x108/0x2c0 [ 811.573877][ T8601] do_recvmmsg+0xd77/0x2120 [ 811.578433][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 811.583320][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.589692][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 811.594883][ T8601] do_fast_syscall_32+0x34/0x70 [ 811.599784][ T8601] do_SYSENTER_32+0x1b/0x20 [ 811.604450][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 811.610829][ T8601] [ 811.613331][ T8601] Uninit was stored to memory at: [ 811.618408][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 811.623717][ T8601] get_compat_msghdr+0x108/0x2c0 [ 811.628699][ T8601] do_recvmmsg+0xd77/0x2120 [ 811.633438][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 811.638163][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.644735][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 811.649811][ T8601] do_fast_syscall_32+0x34/0x70 [ 811.654825][ T8601] do_SYSENTER_32+0x1b/0x20 [ 811.659463][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 811.666023][ T8601] [ 811.668360][ T8601] Uninit was stored to memory at: [ 811.673574][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 811.678730][ T8601] get_compat_msghdr+0x108/0x2c0 [ 811.683872][ T8601] do_recvmmsg+0xd77/0x2120 [ 811.688436][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 811.693292][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.699676][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 811.704935][ T8601] do_fast_syscall_32+0x34/0x70 [ 811.709837][ T8601] do_SYSENTER_32+0x1b/0x20 [ 811.714501][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 811.720879][ T8601] [ 811.723395][ T8601] Local variable msg_sys created at: [ 811.728777][ T8601] do_recvmmsg+0xbb/0x2120 [ 811.733366][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 811.881420][ T8601] not chained 3890000 origins [ 811.886220][ T8601] CPU: 0 PID: 8601 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 811.894917][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.905112][ T8601] Call Trace: [ 811.908394][ T8601] [ 811.911326][ T8601] dump_stack_lvl+0x1ff/0x28e [ 811.916044][ T8601] dump_stack+0x25/0x28 [ 811.920238][ T8601] kmsan_internal_chain_origin+0x78/0x110 [ 811.925986][ T8601] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 811.932083][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 811.937241][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 811.943102][ T8601] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 811.948673][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 811.953816][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 811.959678][ T8601] ? should_fail+0x75/0x9c0 [ 811.964230][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 811.969393][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 811.975675][ T8601] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 811.981800][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 811.986964][ T8601] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 811.992805][ T8601] __msan_chain_origin+0xbf/0x140 [ 811.997885][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 812.003049][ T8601] get_compat_msghdr+0x108/0x2c0 [ 812.008009][ T8601] ? __sys_recvmmsg+0x51c/0x6f0 [ 812.012895][ T8601] do_recvmmsg+0xd77/0x2120 [ 812.017467][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 812.022633][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 812.028904][ T8601] ? kmsan_get_metadata+0x33/0x220 [ 812.034041][ T8601] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 812.040332][ T8601] ? fput+0x82/0x320 [ 812.044252][ T8601] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 812.050786][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 812.055506][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 812.061890][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 812.066979][ T8601] do_fast_syscall_32+0x34/0x70 [ 812.071863][ T8601] do_SYSENTER_32+0x1b/0x20 [ 812.076420][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 812.082803][ T8601] RIP: 0023:0xf6ec3549 [ 812.086873][ T8601] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 812.106503][ T8601] RSP: 002b:00000000f589c5bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 812.114941][ T8601] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 812.122943][ T8601] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 812.130925][ T8601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 812.138906][ T8601] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 812.146889][ T8601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 812.154887][ T8601] [ 812.159636][ T8601] Uninit was stored to memory at: [ 812.165037][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 812.170265][ T8601] get_compat_msghdr+0x108/0x2c0 [ 812.175346][ T8601] do_recvmmsg+0xd77/0x2120 [ 812.179904][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 812.184723][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 812.191114][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 812.196282][ T8601] do_fast_syscall_32+0x34/0x70 [ 812.201181][ T8601] do_SYSENTER_32+0x1b/0x20 [ 812.205829][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 812.212346][ T8601] [ 812.214679][ T8601] Uninit was stored to memory at: [ 812.219740][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 812.225035][ T8601] get_compat_msghdr+0x108/0x2c0 [ 812.230015][ T8601] do_recvmmsg+0xd77/0x2120 [ 812.234728][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 812.239467][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 812.245981][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 812.251056][ T8601] do_fast_syscall_32+0x34/0x70 [ 812.256046][ T8601] do_SYSENTER_32+0x1b/0x20 [ 812.260593][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 812.267100][ T8601] [ 812.269436][ T8601] Uninit was stored to memory at: [ 812.274656][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 812.279802][ T8601] get_compat_msghdr+0x108/0x2c0 [ 812.284915][ T8601] do_recvmmsg+0xd77/0x2120 [ 812.289475][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 812.294374][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 812.300758][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 812.305979][ T8601] do_fast_syscall_32+0x34/0x70 [ 812.310886][ T8601] do_SYSENTER_32+0x1b/0x20 [ 812.315555][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 812.322019][ T8601] [ 812.324354][ T8601] Uninit was stored to memory at: [ 812.329426][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 812.334666][ T8601] get_compat_msghdr+0x108/0x2c0 [ 812.339645][ T8601] do_recvmmsg+0xd77/0x2120 [ 812.344336][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 812.349060][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 812.355582][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 812.360662][ T8601] do_fast_syscall_32+0x34/0x70 [ 812.365723][ T8601] do_SYSENTER_32+0x1b/0x20 [ 812.370275][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 812.376754][ T8601] [ 812.379087][ T8601] Uninit was stored to memory at: [ 812.384271][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 812.389428][ T8601] get_compat_msghdr+0x108/0x2c0 [ 812.394496][ T8601] do_recvmmsg+0xd77/0x2120 [ 812.399050][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 812.403866][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 812.410249][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 812.415419][ T8601] do_fast_syscall_32+0x34/0x70 [ 812.420323][ T8601] do_SYSENTER_32+0x1b/0x20 [ 812.424961][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 812.431340][ T8601] [ 812.433767][ T8601] Uninit was stored to memory at: [ 812.438856][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 812.444151][ T8601] get_compat_msghdr+0x108/0x2c0 [ 812.449132][ T8601] do_recvmmsg+0xd77/0x2120 [ 812.453830][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 812.458556][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 812.465088][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 812.470171][ T8601] do_fast_syscall_32+0x34/0x70 [ 812.475228][ T8601] do_SYSENTER_32+0x1b/0x20 [ 812.479791][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 812.486348][ T8601] [ 812.488685][ T8601] Uninit was stored to memory at: [ 812.494361][ T8601] __get_compat_msghdr+0x6e1/0x9d0 [ 812.501292][ T8601] get_compat_msghdr+0x108/0x2c0 [ 812.506524][ T8601] do_recvmmsg+0xd77/0x2120 [ 812.511083][ T8601] __sys_recvmmsg+0x51c/0x6f0 [ 812.515911][ T8601] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 812.522381][ T8601] __do_fast_syscall_32+0x96/0xf0 [ 812.527459][ T8601] do_fast_syscall_32+0x34/0x70 [ 812.532507][ T8601] do_SYSENTER_32+0x1b/0x20 [ 812.537056][ T8601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 812.543565][ T8601] [ 812.545898][ T8601] Local variable msg_sys created at: [ 812.551186][ T8601] do_recvmmsg+0xbb/0x2120 [ 812.555757][ T8601] __sys_recvmmsg+0x51c/0x6f0 16:29:53 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x111400, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c180)=[{}, {}, {}], 0x3, 0x277a3c0388688d1f) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:29:53 executing program 3: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000280)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="905b312329302ed0372e"], 0xfea7) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x0) 16:29:53 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000020c0), 0x4}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1}, 0x50) socket(0x0, 0x2, 0x0) setreuid(0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r2, 0x401870c8, &(0x7f0000002240)) getgid() 16:29:53 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = socket(0x10, 0x80002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492805, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0xab, 0x80, 0x1, 0x0, 0xd3, 0x2, 0x0, 0x5, 0x0, 0x40, 0x204, 0x200000, 0x1, 0x38, 0x1, 0x7ff, 0x1, 0x5}, [{0x7, 0x6, 0xad8, 0xffffffffffffff61, 0x829, 0xfffffffffffffff8, 0x754fdcfd, 0x8000}, {0x6474e551, 0x8, 0x800, 0x4, 0x1, 0x8, 0x9, 0x1}], "56b29986022e27aac6b1f31c02d23f1e046bc7b0983f2536cf6192ce22bc1038b7b66f8751de6797fbbfd7e2e5234d27396f3e294512a81de1b7e8c0fa21f857904edf7d84369a046343764d91243b5c11851b001681ed9d9f20898070ca036e2875bedeb3a06496fe4b30", ['\x00', '\x00']}, 0x31b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r2, 0x0, 0x11300, 0x0) 16:29:53 executing program 5: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000540)=0x100) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x3, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x9, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, [@exit, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xb1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @generic={0x5, 0x0, 0x8, 0xe72, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x13, r0, 0x8, &(0x7f00000004c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x5, 0xb067, 0x4}, 0x10}, 0x78) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="2e00000010008108040f80ecdb4cb92e0a4807000d00000009000e00390340d5ae7d0200ff050005b9833a442fa1c26686c01eed15e193331f875593a3de06a3bc26", 0x42}], 0x1, 0x0, 0x0, 0x7000000}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x9, 0x5, 0x7f, 0x1, 0x0, 0x1000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, 0x0, 0x8410, 0x5, 0x2d, 0x8, 0x0, 0x1000, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xe43) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000640)={0x5, 0x70, 0x40, 0x0, 0x1, 0x7f, 0x0, 0xfffffffffffffff9, 0x6, 0xf, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, 0x80000000, 0x9, 0x0, 0x0, 0x2, 0x5}) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600), 0xc) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e002403240248ff056c05001201", 0x5b}], 0x1}, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) socketpair(0x23, 0x0, 0x2002, &(0x7f0000000040)) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="01df0000aaaaaaaaaaaa"]) 16:29:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}]}, 0x3c}}, 0x0) [ 812.819349][ T8651] trusted_key: encrypted_key: insufficient parameters specified [ 812.824872][ T8650] loop3: detected capacity change from 0 to 264192 [ 812.988155][ T8649] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 813.072108][ T8657] sd 0:0:1:0: PR command failed: 2 [ 813.077447][ T8657] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 813.084555][ T8657] sd 0:0:1:0: Add. Sense: Invalid command operation code 16:29:54 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1fffff, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x77359400}, 0x1, 0x1, 0x1}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000600)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'bridge_slave_0\x00', @ifru_addrs=@xdp}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x40000) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000014c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000100)) readv(r3, &(0x7f0000002600)=[{&(0x7f00000002c0)=""/4096, 0xa00}], 0x1) fstatfs(r3, &(0x7f00000001c0)=""/108) 16:29:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}]}, 0x3c}}, 0x0) [ 813.252219][ T24] audit: type=1800 audit(1641745794.298:91): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1207 res=0 errno=0 [ 813.298002][ T8656] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.307673][ T8656] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.317508][ T8656] device bridge0 entered promiscuous mode [ 813.403534][ T24] audit: type=1800 audit(1641745794.328:92): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1207 res=0 errno=0 16:29:54 executing program 1: syz_emit_ethernet(0x86, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x1, "0000000108653e0401030500000009c56a3000", "931b7700", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 16:29:54 executing program 3: r0 = socket(0x1d, 0x2, 0x6) setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 16:29:54 executing program 2: r0 = socket(0x23, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8937, &(0x7f0000000080)={'wg0\x00'}) 16:29:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x4, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sched_setattr(0x0, 0x0, 0x0) syz_emit_ethernet(0x5a, 0x0, 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x24080, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 16:29:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}]}, 0x3c}}, 0x0) 16:29:55 executing program 1: syz_emit_ethernet(0x86, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x1, "0000000108653e0401030500000009c56a3000", "931b7700", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 16:29:55 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b04, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03G\xd9U\x1c\x06\x00\x00\x00\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002c80)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b30, &(0x7f0000000140)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x02\x00\x00@\x00\x00\x00\x00\x00h\x00\x03\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\a9\xb9\xc8\x8c\xbc\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8%O\x8dArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8a\a\xd52\x0e\xd8\a\xca\xc8\x00\x00\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x907\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac6\xafXf\xfd\xde\x1e\x83\x7f\x80\xddL[t% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1\x05{\xc6lw\xd24\xfe\xd6\xa1SV\x03\x88eGXC^w\x11D\xce\r 5R+y\xc3Dew\xa4O\xfa\rc\x170\xdbA\xfe\xe9\xa7\xb3\x91\x88(\f8\x14\n;\xd8\x02\xa8\x135\x92\xf5\xe4JV\x0f\x10\xd7\x06\x86z\t\x13\xc2\xe5E\xc3\xf2Mb\xf0+\xed{y\xd7\xf2') [ 814.501653][ T24] audit: type=1804 audit(1641745795.518:93): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir087459959/syzkaller.PXIFJO/229/bus" dev="sda1" ino=1206 res=1 errno=0 [ 814.528077][ T24] audit: type=1800 audit(1641745795.538:94): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1206 res=0 errno=0 16:29:55 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1fffff, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x77359400}, 0x1, 0x1, 0x1}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000600)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'bridge_slave_0\x00', @ifru_addrs=@xdp}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x40000) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000014c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000100)) readv(r3, &(0x7f0000002600)=[{&(0x7f00000002c0)=""/4096, 0xa00}], 0x1) fstatfs(r3, &(0x7f00000001c0)=""/108) 16:29:55 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1fffff, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x77359400}, 0x1, 0x1, 0x1}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000600)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'bridge_slave_0\x00', @ifru_addrs=@xdp}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x40000) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000014c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000100)) readv(r3, &(0x7f0000002600)=[{&(0x7f00000002c0)=""/4096, 0xa00}], 0x1) fstatfs(r3, &(0x7f00000001c0)=""/108) 16:29:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}]}, 0x3c}}, 0x0) 16:29:55 executing program 1: syz_emit_ethernet(0x86, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x1, "0000000108653e0401030500000009c56a3000", "931b7700", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 16:29:55 executing program 3: r0 = socket$kcm(0x21, 0x2, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x110, 0x6, 0x0, 0x20000000) 16:29:55 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, 0x0, &(0x7f0000000040)) 16:29:56 executing program 1: syz_emit_ethernet(0x86, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x1, "0000000108653e0401030500000009c56a3000", "931b7700", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 16:29:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000102}]}) 16:29:56 executing program 3: unshare(0x600) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) 16:29:56 executing program 4: r0 = getuid() r1 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r0]) syz_mount_image$msdos(0x0, &(0x7f0000001580)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r1, 0x3, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0/../file0\x00', 0x200) 16:29:56 executing program 3: r0 = request_key(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x88001) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "8100010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b38360054a5b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8ef6b3327d3a09ffc2c654"}, 0x80) keyctl$search(0xa, r0, &(0x7f00000004c0)='logon\x00', &(0x7f0000000500)={'syz', 0x1}, r0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x80802, 0x0) sendfile(r2, r3, 0x0, 0xffffffff00d) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="64a845959d68dc6bca8267cb23e9084ae75d10781fc2e176f8cca9bed9ea4edb432d7056df54df76b34c6b762ae43f0c2c1cb5c131c8f69f9497d4fd37eb37a6ad91e7b1b60cdc89670dae3e74629c8db7da938dc7d4916d4c827cef995849226ffecc0d97706a0d678c0edff74c4d77c68b919f00149873bd7559e3506c004aa7b9c8b7b10dad296d389ec1f9c88fe63524761dd54092e021c0c4d0a36b604864ed7156cd5e0023307cd9ac8297bd", 0xaf, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002780)={0x2020, 0x0, 0x0}, 0x2020) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x38ab, 0x0, 0x0, 0x0, 0x0, 0xfffe}, r6, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, r5, {{0x1, 0x1, 0x1, r6}}}, 0x28) sendfile(r1, r4, &(0x7f0000000080)=0x6db, 0x7) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000340)=[{&(0x7f0000000280)="8d351ed22baaf05b5d9241ac96c0c12f1c3bc7c2ec1daf60494fde97d5ba4797a8c95ac929c3bf82ce442012110d20c3807512bb3bd8a0e98f7dcea7299cffa6e1132ac7699c8145e5ff9e7ef6b97f653dd45e363e1bc9cdbf2298984a31f4952a7eec5189411cdd990a52eefccb29284bfff0448878c399766d21a3e5ecd5768d1ac0dd7c6969d97724f10b024be67b351acabec6aa5f29cae51576ac4773b35dfe04e8de56", 0xa6}], 0x1, 0x5) 16:29:56 executing program 4: r0 = getuid() r1 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r0]) syz_mount_image$msdos(0x0, &(0x7f0000001580)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r1, 0x3, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0/../file0\x00', 0x200) 16:29:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1fffff, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x77359400}, 0x1, 0x1, 0x1}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000600)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'bridge_slave_0\x00', @ifru_addrs=@xdp}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x40000) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000014c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000100)) readv(r3, &(0x7f0000002600)=[{&(0x7f00000002c0)=""/4096, 0xa00}], 0x1) fstatfs(r3, &(0x7f00000001c0)=""/108) 16:29:57 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1fffff, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x77359400}, 0x1, 0x1, 0x1}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000600)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'bridge_slave_0\x00', @ifru_addrs=@xdp}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x40000) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000014c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000100)) readv(r3, &(0x7f0000002600)=[{&(0x7f00000002c0)=""/4096, 0xa00}], 0x1) fstatfs(r3, &(0x7f00000001c0)=""/108) 16:29:57 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x30, 0x6, 0x0, {0x0, 0x0, 0x7, 0x0, 'T\x9d\xaa&\xf4\xf5$'}}, 0x30) 16:29:57 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2801001, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x2000820, &(0x7f0000000d00)=ANY=[@ANYBLOB='dioread_nolock,user_xattr,data=journal']) 16:29:57 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000200)='./bus\x00', 0x1) memfd_create(0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r1, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x79000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) 16:29:57 executing program 4: r0 = getuid() r1 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r0]) syz_mount_image$msdos(0x0, &(0x7f0000001580)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r1, 0x3, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0/../file0\x00', 0x200) [ 816.598325][ T8731] EXT4-fs (sda1): Cannot change data mode on remount 16:29:57 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2801001, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x2000820, &(0x7f0000000d00)=ANY=[@ANYBLOB='dioread_nolock,user_xattr,data=journal']) [ 817.171463][ T8728] warn_alloc: 3 callbacks suppressed [ 817.171526][ T8728] syz-executor.0: vmalloc error: size 1986560, page order 0, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 817.195664][ T8728] CPU: 0 PID: 8728 Comm: syz-executor.0 Not tainted 5.16.0-rc5-syzkaller #0 [ 817.204499][ T8728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.214661][ T8728] Call Trace: [ 817.218019][ T8728] [ 817.221020][ T8728] dump_stack_lvl+0x1ff/0x28e [ 817.225868][ T8728] dump_stack+0x25/0x28 [ 817.230164][ T8728] warn_alloc+0x4d9/0x690 [ 817.234692][ T8728] ? kmsan_get_metadata+0x33/0x220 [ 817.239969][ T8728] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 817.245943][ T8728] __vmalloc_node_range+0x1290/0x17b0 [ 817.251530][ T8728] __vmalloc+0xf8/0x110 [ 817.255821][ T8728] ? snd_dma_vmalloc_alloc+0xbc/0xe0 [ 817.261277][ T8728] ? snd_dma_vmalloc_alloc+0xbc/0xe0 [ 817.266743][ T8728] snd_dma_vmalloc_alloc+0xbc/0xe0 [ 817.272017][ T8728] ? snd_dma_iram_mmap+0x220/0x220 [ 817.277303][ T8728] snd_dma_alloc_dir_pages+0x29c/0x4f0 [ 817.282953][ T8728] snd_pcm_lib_malloc_pages+0x7b5/0xe00 [ 817.288704][ T8728] snd_pcm_hw_params+0xfd1/0x2870 [ 817.293859][ T8728] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 817.299866][ T8728] snd_pcm_kernel_ioctl+0x21a/0xfc0 [ 817.305267][ T8728] snd_pcm_oss_change_params_locked+0x4f12/0x74f0 [ 817.311882][ T8728] ? kmsan_get_shadow_origin_ptr+0x86/0xf0 [ 817.317942][ T8728] snd_pcm_oss_get_active_substream+0x59e/0x630 [ 817.324372][ T8728] snd_pcm_oss_get_formats+0x77/0x4f0 [ 817.329913][ T8728] snd_pcm_oss_set_format+0xc2/0xa30 [ 817.335356][ T8728] ? kmsan_get_metadata+0x33/0x220 [ 817.340722][ T8728] snd_pcm_oss_ioctl+0xbb9/0x1e40 [ 817.345920][ T8728] snd_pcm_oss_ioctl_compat+0x8e/0xa0 [ 817.351447][ T8728] ? snd_pcm_oss_ioctl+0x1e40/0x1e40 [ 817.356872][ T8728] __se_compat_sys_ioctl+0x876/0x1150 [ 817.362406][ T8728] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 817.368383][ T8728] __ia32_compat_sys_ioctl+0xd9/0x110 [ 817.373908][ T8728] __do_fast_syscall_32+0x96/0xf0 [ 817.379095][ T8728] do_fast_syscall_32+0x34/0x70 [ 817.384100][ T8728] do_SYSENTER_32+0x1b/0x20 [ 817.388756][ T8728] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 817.395250][ T8728] RIP: 0023:0xf6e95549 [ 817.399432][ T8728] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 817.419213][ T8728] RSP: 002b:00000000f588f5bc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 817.427786][ T8728] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0045005 [ 817.435865][ T8728] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 817.443936][ T8728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 817.452001][ T8728] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 817.460069][ T8728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 817.468262][ T8728] [ 817.471927][ T8728] Mem-Info: [ 817.475133][ T8728] active_anon:1628 inactive_anon:135783 isolated_anon:0 [ 817.475133][ T8728] active_file:4351 inactive_file:62973 isolated_file:0 [ 817.475133][ T8728] unevictable:768 dirty:0 writeback:1 [ 817.475133][ T8728] slab_reclaimable:8081 slab_unreclaimable:21217 [ 817.475133][ T8728] mapped:26957 shmem:2623 pagetables:1639 bounce:0 [ 817.475133][ T8728] kernel_misc_reclaimable:0 [ 817.475133][ T8728] free:259762 free_pcp:18790 free_cma:0 [ 817.517159][ T8728] Node 0 active_anon:6448kB inactive_anon:542400kB active_file:17176kB inactive_file:251484kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107816kB dirty:0kB writeback:4kB shmem:8872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 333824kB writeback_tmp:0kB kernel_stack:5152kB pagetables:6228kB all_unreclaimable? no [ 817.548938][ T8728] Node 1 active_anon:64kB inactive_anon:732kB active_file:228kB inactive_file:408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:1620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:240kB pagetables:328kB all_unreclaimable? no [ 817.578903][ T8728] Node 0 DMA free:4096kB boost:0kB min:156kB low:192kB high:228kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 817.606189][ T8728] lowmem_reserve[]: 0 905 1218 1218 1218 [ 817.612172][ T8728] Node 0 DMA32 free:44368kB boost:0kB min:36008kB low:45008kB high:54008kB reserved_highatomic:0KB active_anon:584kB inactive_anon:480456kB active_file:932kB inactive_file:222412kB unevictable:0kB writepending:4kB present:3129332kB managed:932648kB mlocked:0kB bounce:0kB free_pcp:42028kB local_pcp:21464kB free_cma:0kB [ 817.642514][ T8728] lowmem_reserve[]: 0 0 312 312 312 [ 817.647993][ T8728] Node 0 Normal free:25744kB boost:10240kB min:22688kB low:25800kB high:28912kB reserved_highatomic:0KB active_anon:5864kB inactive_anon:61944kB active_file:16244kB inactive_file:29072kB unevictable:1536kB writepending:0kB present:1048576kB managed:320500kB mlocked:0kB bounce:0kB free_pcp:14032kB local_pcp:6856kB free_cma:0kB [ 817.679036][ T8728] lowmem_reserve[]: 0 0 0 0 0 [ 817.684083][ T8728] Node 1 Normal free:964840kB boost:0kB min:41492kB low:51864kB high:62236kB reserved_highatomic:0KB active_anon:64kB inactive_anon:732kB active_file:228kB inactive_file:408kB unevictable:1536kB writepending:0kB present:4194304kB managed:1067996kB mlocked:0kB bounce:0kB free_pcp:19084kB local_pcp:8496kB free_cma:0kB [ 817.714250][ T8728] lowmem_reserve[]: 0 0 0 0 0 16:29:58 executing program 3: r0 = request_key(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x88001) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "8100010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b38360054a5b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8ef6b3327d3a09ffc2c654"}, 0x80) keyctl$search(0xa, r0, &(0x7f00000004c0)='logon\x00', &(0x7f0000000500)={'syz', 0x1}, r0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x80802, 0x0) sendfile(r2, r3, 0x0, 0xffffffff00d) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="64a845959d68dc6bca8267cb23e9084ae75d10781fc2e176f8cca9bed9ea4edb432d7056df54df76b34c6b762ae43f0c2c1cb5c131c8f69f9497d4fd37eb37a6ad91e7b1b60cdc89670dae3e74629c8db7da938dc7d4916d4c827cef995849226ffecc0d97706a0d678c0edff74c4d77c68b919f00149873bd7559e3506c004aa7b9c8b7b10dad296d389ec1f9c88fe63524761dd54092e021c0c4d0a36b604864ed7156cd5e0023307cd9ac8297bd", 0xaf, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002780)={0x2020, 0x0, 0x0}, 0x2020) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x38ab, 0x0, 0x0, 0x0, 0x0, 0xfffe}, r6, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, r5, {{0x1, 0x1, 0x1, r6}}}, 0x28) sendfile(r1, r4, &(0x7f0000000080)=0x6db, 0x7) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000340)=[{&(0x7f0000000280)="8d351ed22baaf05b5d9241ac96c0c12f1c3bc7c2ec1daf60494fde97d5ba4797a8c95ac929c3bf82ce442012110d20c3807512bb3bd8a0e98f7dcea7299cffa6e1132ac7699c8145e5ff9e7ef6b97f653dd45e363e1bc9cdbf2298984a31f4952a7eec5189411cdd990a52eefccb29284bfff0448878c399766d21a3e5ecd5768d1ac0dd7c6969d97724f10b024be67b351acabec6aa5f29cae51576ac4773b35dfe04e8de56", 0xa6}], 0x1, 0x5) [ 817.719206][ T8728] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 817.731858][ T8728] Node 0 DMA32: 1198*4kB (ME) 305*8kB (UME) 337*16kB (UME) 198*32kB (UME) 95*64kB (UME) 13*128kB (UME) 7*256kB (ME) 5*512kB (UME) 13*1024kB (UME) 0*2048kB 0*4096kB = 44368kB [ 817.750165][ T8728] Node 0 Normal: 714*4kB (UME) 497*8kB (ME) 198*16kB (ME) 70*32kB (UME) 19*64kB (ME) 6*128kB (ME) 17*256kB (UME) 8*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 25744kB [ 817.768043][ T8728] Node 1 Normal: 4*4kB (UME) 7*8kB (UME) 8*16kB (UME) 9*32kB (UME) 2*64kB (UE) 3*128kB (UE) 1*256kB (U) 2*512kB (UE) 2*1024kB (UM) 1*2048kB (U) 234*4096kB (M) = 964840kB [ 817.786117][ T8728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 817.795894][ T8728] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 817.805480][ T8728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 817.815256][ T8728] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 817.824837][ T8728] 14288 total pagecache pages [ 817.829595][ T8728] 0 pages in swap cache [ 817.833961][ T8728] Swap cache stats: add 0, delete 0, find 0/0 [ 817.840132][ T8728] Free swap = 0kB [ 817.844072][ T8728] Total swap = 0kB [ 817.847866][ T8728] 2097051 pages RAM [ 817.851738][ T8728] 0 pages HighMem/MovableOnly [ 817.856627][ T8728] 1515741 pages reserved [ 817.860936][ T8728] 0 pages cma reserved 16:29:59 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000200)='./bus\x00', 0x1) memfd_create(0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r1, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x79000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) 16:29:59 executing program 4: r0 = getuid() r1 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r0]) syz_mount_image$msdos(0x0, &(0x7f0000001580)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r1, 0x3, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0/../file0\x00', 0x200) 16:29:59 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1fffff, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x77359400}, 0x1, 0x1, 0x1}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000600)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'bridge_slave_0\x00', @ifru_addrs=@xdp}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x40000) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000014c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000100)) readv(r3, &(0x7f0000002600)=[{&(0x7f00000002c0)=""/4096, 0xa00}], 0x1) fstatfs(r3, &(0x7f00000001c0)=""/108) 16:29:59 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1fffff, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x77359400}, 0x1, 0x1, 0x1}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000600)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'bridge_slave_0\x00', @ifru_addrs=@xdp}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x40000) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000014c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000100)) readv(r3, &(0x7f0000002600)=[{&(0x7f00000002c0)=""/4096, 0xa00}], 0x1) fstatfs(r3, &(0x7f00000001c0)=""/108) [ 818.465390][ T8752] EXT4-fs (sda1): Cannot change data mode on remount 16:29:59 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2801001, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x2000820, &(0x7f0000000d00)=ANY=[@ANYBLOB='dioread_nolock,user_xattr,data=journal']) 16:30:00 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') write$binfmt_elf64(r0, &(0x7f0000000140)={{0x1b, 0x5b, 0x7, 0x7, 0x31, 0x0, 0x30, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:30:00 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000200)='./bus\x00', 0x1) memfd_create(0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r1, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x79000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) 16:30:00 executing program 3: r0 = request_key(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x88001) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "8100010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b38360054a5b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8ef6b3327d3a09ffc2c654"}, 0x80) keyctl$search(0xa, r0, &(0x7f00000004c0)='logon\x00', &(0x7f0000000500)={'syz', 0x1}, r0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x80802, 0x0) sendfile(r2, r3, 0x0, 0xffffffff00d) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="64a845959d68dc6bca8267cb23e9084ae75d10781fc2e176f8cca9bed9ea4edb432d7056df54df76b34c6b762ae43f0c2c1cb5c131c8f69f9497d4fd37eb37a6ad91e7b1b60cdc89670dae3e74629c8db7da938dc7d4916d4c827cef995849226ffecc0d97706a0d678c0edff74c4d77c68b919f00149873bd7559e3506c004aa7b9c8b7b10dad296d389ec1f9c88fe63524761dd54092e021c0c4d0a36b604864ed7156cd5e0023307cd9ac8297bd", 0xaf, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002780)={0x2020, 0x0, 0x0}, 0x2020) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x38ab, 0x0, 0x0, 0x0, 0x0, 0xfffe}, r6, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, r5, {{0x1, 0x1, 0x1, r6}}}, 0x28) sendfile(r1, r4, &(0x7f0000000080)=0x6db, 0x7) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000340)=[{&(0x7f0000000280)="8d351ed22baaf05b5d9241ac96c0c12f1c3bc7c2ec1daf60494fde97d5ba4797a8c95ac929c3bf82ce442012110d20c3807512bb3bd8a0e98f7dcea7299cffa6e1132ac7699c8145e5ff9e7ef6b97f653dd45e363e1bc9cdbf2298984a31f4952a7eec5189411cdd990a52eefccb29284bfff0448878c399766d21a3e5ecd5768d1ac0dd7c6969d97724f10b024be67b351acabec6aa5f29cae51576ac4773b35dfe04e8de56", 0xa6}], 0x1, 0x5) 16:30:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xfffffdfd) 16:30:00 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2801001, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x2000820, &(0x7f0000000d00)=ANY=[@ANYBLOB='dioread_nolock,user_xattr,data=journal']) 16:30:00 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000200)='./bus\x00', 0x1) memfd_create(0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r1, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x79000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) 16:30:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000004) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x501000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001f40)=@xdp, 0x80, &(0x7f0000002040), 0x0, 0x0, 0x38}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="bccad8038e37918fd44f241f5553c1ecd1d4d737bf4781e87c91f8e336a812f2022614eea7", @ANYRES32], 0x0, 0x1, 0xe3, &(0x7f0000000080)=""/227, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffe0c, &(0x7f0000000680)=[{&(0x7f0000005600)=""/102380, 0x1731f}], 0x1, 0x0, 0x60}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa278b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000006c0)=""/202, 0xca}, {&(0x7f0000000040)}, {&(0x7f00000002c0)=""/67, 0x43}], 0x3, &(0x7f0000000340)=""/11, 0xb}, 0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)}, 0x40012062) [ 820.140785][ T8794] EXT4-fs (sda1): Cannot change data mode on remount 16:30:01 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x6}}, @TCA_STAB={0x4}]}, 0x3c}}, 0x0) 16:30:01 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x3, 0x5, 0x10) recvmsg(r0, &(0x7f000000b040)={0x0, 0x0, 0x0}, 0x0) [ 820.765731][ T8799] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 820.775995][ T8799] netlink: 'syz-executor.0': attribute type 29 has an invalid length. 16:30:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) eventfd(0x0) 16:30:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xa, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 16:30:02 executing program 3: r0 = request_key(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x88001) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "8100010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b38360054a5b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8ef6b3327d3a09ffc2c654"}, 0x80) keyctl$search(0xa, r0, &(0x7f00000004c0)='logon\x00', &(0x7f0000000500)={'syz', 0x1}, r0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x80802, 0x0) sendfile(r2, r3, 0x0, 0xffffffff00d) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="64a845959d68dc6bca8267cb23e9084ae75d10781fc2e176f8cca9bed9ea4edb432d7056df54df76b34c6b762ae43f0c2c1cb5c131c8f69f9497d4fd37eb37a6ad91e7b1b60cdc89670dae3e74629c8db7da938dc7d4916d4c827cef995849226ffecc0d97706a0d678c0edff74c4d77c68b919f00149873bd7559e3506c004aa7b9c8b7b10dad296d389ec1f9c88fe63524761dd54092e021c0c4d0a36b604864ed7156cd5e0023307cd9ac8297bd", 0xaf, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002780)={0x2020, 0x0, 0x0}, 0x2020) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x38ab, 0x0, 0x0, 0x0, 0x0, 0xfffe}, r6, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, r5, {{0x1, 0x1, 0x1, r6}}}, 0x28) sendfile(r1, r4, &(0x7f0000000080)=0x6db, 0x7) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000340)=[{&(0x7f0000000280)="8d351ed22baaf05b5d9241ac96c0c12f1c3bc7c2ec1daf60494fde97d5ba4797a8c95ac929c3bf82ce442012110d20c3807512bb3bd8a0e98f7dcea7299cffa6e1132ac7699c8145e5ff9e7ef6b97f653dd45e363e1bc9cdbf2298984a31f4952a7eec5189411cdd990a52eefccb29284bfff0448878c399766d21a3e5ecd5768d1ac0dd7c6969d97724f10b024be67b351acabec6aa5f29cae51576ac4773b35dfe04e8de56", 0xa6}], 0x1, 0x5) [ 820.941417][ T8798] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 821.005023][ T8799] netlink: 'syz-executor.0': attribute type 29 has an invalid length. 16:30:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000004) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x501000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001f40)=@xdp, 0x80, &(0x7f0000002040), 0x0, 0x0, 0x38}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="bccad8038e37918fd44f241f5553c1ecd1d4d737bf4781e87c91f8e336a812f2022614eea7", @ANYRES32], 0x0, 0x1, 0xe3, &(0x7f0000000080)=""/227, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffe0c, &(0x7f0000000680)=[{&(0x7f0000005600)=""/102380, 0x1731f}], 0x1, 0x0, 0x60}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa278b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000006c0)=""/202, 0xca}, {&(0x7f0000000040)}, {&(0x7f00000002c0)=""/67, 0x43}], 0x3, &(0x7f0000000340)=""/11, 0xb}, 0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)}, 0x40012062) 16:30:02 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000000}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0x9) r2 = epoll_create1(0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 16:30:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x34, r1, 0x413, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}]}, 0x34}}, 0x0) 16:30:02 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000049c0)='io\x00') ioctl$RTC_AIE_ON(r0, 0x7001) mount$overlay(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x202a405, &(0x7f0000002100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@xino_off}, {@xino_auto}, {@metacopy_on}, {@xino_auto}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}], [{@smackfsdef={'smackfsdef', 0x3d, ',$\'^'}}, {@obj_role={'obj_role', 0x3d, 'syz'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) keyctl$read(0x12, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(r0, &(0x7f0000002040)='./file0\x00', 0x373300, 0x176) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', 0x0) [ 821.718003][ T8822] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 821.727634][ T8822] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 821.738518][ T8816] netlink: 'syz-executor.0': attribute type 29 has an invalid length. 16:30:02 executing program 1: openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) unshare(0x40000000) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'filter\x00', 0x0, [0x138, 0x1000000, 0xfe03, 0x7]}, &(0x7f0000000380)=0x54) [ 821.887043][ T8822] netlink: 'syz-executor.0': attribute type 29 has an invalid length. 16:30:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}], {0x14}}, 0xa4}}, 0x0) [ 822.199974][ T1199] ieee802154 phy0 wpan0: encryption failed: -22 [ 822.206555][ T1199] ieee802154 phy1 wpan1: encryption failed: -22 16:30:03 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000004) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x501000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001f40)=@xdp, 0x80, &(0x7f0000002040), 0x0, 0x0, 0x38}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="bccad8038e37918fd44f241f5553c1ecd1d4d737bf4781e87c91f8e336a812f2022614eea7", @ANYRES32], 0x0, 0x1, 0xe3, &(0x7f0000000080)=""/227, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffe0c, &(0x7f0000000680)=[{&(0x7f0000005600)=""/102380, 0x1731f}], 0x1, 0x0, 0x60}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa278b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000006c0)=""/202, 0xca}, {&(0x7f0000000040)}, {&(0x7f00000002c0)=""/67, 0x43}], 0x3, &(0x7f0000000340)=""/11, 0xb}, 0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)}, 0x40012062) 16:30:03 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000049c0)='io\x00') ioctl$RTC_AIE_ON(r0, 0x7001) mount$overlay(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x202a405, &(0x7f0000002100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@xino_off}, {@xino_auto}, {@metacopy_on}, {@xino_auto}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}], [{@smackfsdef={'smackfsdef', 0x3d, ',$\'^'}}, {@obj_role={'obj_role', 0x3d, 'syz'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) keyctl$read(0x12, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(r0, &(0x7f0000002040)='./file0\x00', 0x373300, 0x176) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', 0x0) 16:30:03 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047455, &(0x7f0000000100)) 16:30:04 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa1, 0x4, 0x8c, 0x8, 0x1199, 0x68a3, 0x7124, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x0, 0x60, 0x55, 0x62}}]}}]}}, 0x0) 16:30:04 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000000}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0x9) r2 = epoll_create1(0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) [ 823.218452][ T8841] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 823.689140][ T6648] usb 6-1: new high-speed USB device number 16 using dummy_hcd 16:30:04 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000049c0)='io\x00') ioctl$RTC_AIE_ON(r0, 0x7001) mount$overlay(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x202a405, &(0x7f0000002100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@xino_off}, {@xino_auto}, {@metacopy_on}, {@xino_auto}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}], [{@smackfsdef={'smackfsdef', 0x3d, ',$\'^'}}, {@obj_role={'obj_role', 0x3d, 'syz'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) keyctl$read(0x12, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(r0, &(0x7f0000002040)='./file0\x00', 0x373300, 0x176) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', 0x0) [ 823.842265][ T8841] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 823.972065][ T6648] usb 6-1: Using ep0 maxpacket: 8 16:30:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000004) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x501000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001f40)=@xdp, 0x80, &(0x7f0000002040), 0x0, 0x0, 0x38}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="bccad8038e37918fd44f241f5553c1ecd1d4d737bf4781e87c91f8e336a812f2022614eea7", @ANYRES32], 0x0, 0x1, 0xe3, &(0x7f0000000080)=""/227, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffe0c, &(0x7f0000000680)=[{&(0x7f0000005600)=""/102380, 0x1731f}], 0x1, 0x0, 0x60}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa278b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000006c0)=""/202, 0xca}, {&(0x7f0000000040)}, {&(0x7f00000002c0)=""/67, 0x43}], 0x3, &(0x7f0000000340)=""/11, 0xb}, 0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)}, 0x40012062) [ 824.105434][ T6648] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 824.113770][ T6648] usb 6-1: config 0 has no interface number 0 [ 824.272564][ T6648] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=71.24 [ 824.281994][ T6648] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.290120][ T6648] usb 6-1: Product: syz [ 824.294601][ T6648] usb 6-1: Manufacturer: syz [ 824.299334][ T6648] usb 6-1: SerialNumber: syz 16:30:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000049c0)='io\x00') ioctl$RTC_AIE_ON(r0, 0x7001) mount$overlay(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x202a405, &(0x7f0000002100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@xino_off}, {@xino_auto}, {@metacopy_on}, {@xino_auto}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}], [{@smackfsdef={'smackfsdef', 0x3d, ',$\'^'}}, {@obj_role={'obj_role', 0x3d, 'syz'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) keyctl$read(0x12, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(r0, &(0x7f0000002040)='./file0\x00', 0x373300, 0x176) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', 0x0) [ 824.503891][ T6648] usb 6-1: config 0 descriptor?? 16:30:05 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000000}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0x9) r2 = epoll_create1(0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) [ 824.557467][ T6648] usb 6-1: Expected 3 endpoints, found: 0 [ 824.784345][ T5] usb 6-1: USB disconnect, device number 16 16:30:06 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000000}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0x9) r2 = epoll_create1(0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) [ 826.410329][ T965] device hsr_slave_0 left promiscuous mode [ 826.433459][ T965] device hsr_slave_1 left promiscuous mode [ 826.458215][ T965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.466114][ T965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.477960][ T965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.485722][ T965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.501954][ T965] device bridge_slave_1 left promiscuous mode [ 826.509181][ T965] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.520295][ T965] device bridge_slave_0 left promiscuous mode [ 826.527172][ T965] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.548000][ T965] device veth1_macvtap left promiscuous mode [ 826.554383][ T965] device veth0_macvtap left promiscuous mode [ 826.560494][ T965] device veth1_vlan left promiscuous mode [ 826.566528][ T965] device veth0_vlan left promiscuous mode [ 826.811167][ T965] bond1 (unregistering): Released all slaves [ 827.040040][ T965] team0 (unregistering): Port device team_slave_1 removed [ 827.071477][ T965] team0 (unregistering): Port device team_slave_0 removed [ 827.097563][ T965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.124061][ T965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.258599][ T965] bond0 (unregistering): Released all slaves 16:30:10 executing program 1: openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) unshare(0x40000000) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'filter\x00', 0x0, [0x138, 0x1000000, 0xfe03, 0x7]}, &(0x7f0000000380)=0x54) 16:30:10 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000000}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0x9) r2 = epoll_create1(0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 16:30:10 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000000}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0x9) r2 = epoll_create1(0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 16:30:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:30:10 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b702000005000005bf230000000000002703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000026000000b7000000000000009500000000000000acaa8e53a53cbe64c30009801c32048574bf16d94cf0987b00a749a8e53ba870f7778d3e77ad85319f0113fe7699162334343befce832cb8075c5f0ae30cde221371ff00005da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f044855a94eaaa9e8b6133b0cd417bdc68af2b4ca5467a97184c8e9d34b3e382b25e9614634e8e09194f7b83138f5275d9ba463797a2f6dcb45d5ff8ebfffe74559575da3560c01cdf1eaa3fc7a2fb4f1689dfd5b688e68cfa45850913c70f26174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec20bc22573f8594b91781cd8075167312de56956299ebf94588e60abe9c465c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da5089269cb24e728dee6330444576c87cc576291e5367a5f1a5d5a12f8313bc8f0b7f73335279aa2b68c9f045831119881764c2c2c71bb65b5138c50e06024e80fd9656bc077e4e259695748b89335ba9eeef288de73815f20fefd4acfb68131b5fd9bc0b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903acadee5a21396dce6f61c6f3c7e789786b6cb0868b48719e47296d9299df3831a1eff0e42f6f1eb1d20333b7a8100000000000000000000000000edd4e1266dc94de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c67b110068243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e974ff0e55ce713ed8d8547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c100000000000000dd43c108c2fa9cec087b26b7c9c22c46997042345bf59bf63dfa724a6b480443159c6bed76443ed6249eb88a1b99cdb4d08d903121dfc739f50ecba93129b3dfd40ac00e67d8c40a18503cb7aabcc066dfa2605889bdd8ecf498b0eb363eb9a949eb0c8a7c411b562f4a3ae3d29008bfe2e60137b601deda2d37b1b323f06ef31e77eb35acb91f9579940775db"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xcc0, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0xfff}, 0x28) 16:30:10 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000000}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0x9) r2 = epoll_create1(0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 16:30:10 executing program 3: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000010}) 16:30:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x80201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f0000000140)={0x0, 0x0}) 16:30:11 executing program 4: perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x3b6af0}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x17, &(0x7f0000000400)=[{&(0x7f0000000340)="4f15a39a2df43b14ed5f2c578d4db055ee07f5a3d802cf8b50b4e7df21e18cb5fc59569f9e048c6343d4d93a8de61654aea60f37d00726bbbaf8413fa35f711e8ebd6b86b0d049ac43de63ad10d251b4fdb14d20706d042b10384fce5ec562f80eea2946c9cfc7f1078325732582af6da35442dfadaacf63643c41a7e5f882e09016d46b27739751f7cb3c9747d087919a9ce3b13b0c9a2774a54d8d5a2c5053ac2eebb14cad"}, {&(0x7f0000000240)="ae61a8d192171409dc2c19809ce70f90c61b402d89906f876fbb89196fa57c9dd7ed6fe73d4a9a050d32416a7e622c1c9943ab04d4e7db1546fab943d95d0a7057459e2d58c83e7f97ddda17b3aff67efc92f873b90a00b5d3c8226357fc7dce76f9ccb0c757e1f3f3d77ab2c382b1f474dbfc9f"}], 0x47, &(0x7f0000000000), 0x0, 0xb9efff7f}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x100000000000003, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = gettid() perf_event_open(&(0x7f0000001a80)={0x5, 0x70, 0x5, 0x6, 0x3, 0x20, 0x0, 0x3ff, 0x1000, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x8, 0x2}, r4, 0xc, r3, 0xb) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x7, 0x9, 0x1, 0x2, 0x0, 0x10001, 0x2000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x400, 0x7}, 0x48030, 0x7fffffff, 0x3, 0x3, 0x0, 0x4, 0x9, 0x0, 0x5, 0x0, 0x5}, r4, 0x1, r2, 0x1e) [ 831.292234][ T5] Bluetooth: hci6: command 0x0409 tx timeout [ 831.689194][ T8865] chnl_net:caif_netlink_parms(): no params data found [ 832.223145][ T8865] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.230561][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.241665][ T8865] device bridge_slave_0 entered promiscuous mode [ 832.268633][ T8865] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.276432][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.286608][ T8865] device bridge_slave_1 entered promiscuous mode [ 832.358450][ T8865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.400292][ T8865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.744592][ T8865] team0: Port device team_slave_0 added [ 832.758716][ T8865] team0: Port device team_slave_1 added [ 832.846522][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.853753][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.880589][ T8865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.945132][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.952341][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.979247][ T8865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.137085][ T8865] device hsr_slave_0 entered promiscuous mode [ 833.156834][ T8865] device hsr_slave_1 entered promiscuous mode [ 833.169042][ T8865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 833.177139][ T8865] Cannot create hsr debugfs directory [ 833.372300][ T5] Bluetooth: hci6: command 0x041b tx timeout [ 833.822520][ T8865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.854367][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 833.863952][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 833.883632][ T8865] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.906979][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 833.917737][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 833.927823][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.935313][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.986341][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 833.996308][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 834.007180][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 834.017044][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.024777][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.034025][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 834.045648][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 834.057235][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 834.068489][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 834.115379][ T8865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 834.126066][ T8865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 834.142613][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 834.153359][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 834.164387][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 834.175209][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 834.185268][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 834.196179][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 834.206270][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 834.227857][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 834.300073][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 834.309373][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 834.386281][ T8865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.496123][ T6648] Bluetooth: hci5: command 0x0406 tx timeout [ 834.722083][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 834.733122][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 834.771731][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 834.781302][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 834.793561][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 834.803532][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 834.826009][ T8865] device veth0_vlan entered promiscuous mode [ 834.853104][ T8865] device veth1_vlan entered promiscuous mode [ 834.908009][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 834.918168][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 834.928436][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 834.938557][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 834.962236][ T8865] device veth0_macvtap entered promiscuous mode [ 834.979790][ T8865] device veth1_macvtap entered promiscuous mode [ 835.019328][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 835.029965][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.040425][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 835.051156][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.061227][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 835.071905][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.082027][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 835.092670][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.106682][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.119438][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 835.129075][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 835.138554][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 835.148630][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 835.167458][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 835.178257][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.188763][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 835.202419][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.212432][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 835.223090][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.233083][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 835.244048][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.254033][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 835.264652][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.277613][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.286871][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 835.297248][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 835.462616][ T5] Bluetooth: hci6: command 0x040f tx timeout [ 836.095316][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.103456][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.149891][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 836.171281][ T965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.180012][ T965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.189951][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:30:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x80201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f0000000140)={0x0, 0x0}) 16:30:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000300)="00000000000000000000000000000000000000000000000000000000000055aaf8ff75", 0x23, 0x1e4}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000010d00)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x1, 0x3f, 0x3, 0x0, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x8, r0, 0x9) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) 16:30:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) 16:30:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000012140)={0x0, 0x0, &(0x7f0000012100)={&(0x7f00000016c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 16:30:17 executing program 1: openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) unshare(0x40000000) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'filter\x00', 0x0, [0x138, 0x1000000, 0xfe03, 0x7]}, &(0x7f0000000380)=0x54) [ 836.621564][ T8940] loop3: detected capacity change from 0 to 6 16:30:17 executing program 2: rt_sigaction(0x13, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) 16:30:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) [ 836.882769][ T8940] FAT-fs (loop3): Directory bread(block 6) failed 16:30:18 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) 16:30:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x80201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f0000000140)={0x0, 0x0}) 16:30:18 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xd7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="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"/1849], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c45}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000280)="e0", 0x1}], 0x1, 0x0, 0x0, 0x3680}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) close(r0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000740)={r3}) 16:30:18 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) 16:30:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@gettaction={0x34, 0x32, 0x505, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x34}}, 0x0) 16:30:18 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) 16:30:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000004) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x501000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001f40)=@xdp, 0x80, &(0x7f0000002040), 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="3800000000000000002000000200000087ad3500f0ffffb1b0534ba2af3ed31236f60ec7387bfd5d12da4273ad1e0ab698d5000000000000"], 0x38}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="bccad8038e37918fd44f241f5553c1ecd1d4d737bf4781e87c91f8e336a812f2022614eea77e", @ANYRES32], 0x0, 0x1, 0xe3, &(0x7f0000000080)=""/227, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0xfffffffffffffe0c, &(0x7f0000000680)=[{&(0x7f0000005600)=""/102380, 0x1731f}], 0x1, 0x0, 0x60}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa278b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000006c0)=""/202, 0xca}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000040)}, {&(0x7f00000002c0)=""/67, 0x43}], 0x4, &(0x7f0000000340)=""/11, 0xb}, 0x1) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)}, 0x40012062) 16:30:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) 16:30:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x80201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f0000000140)={0x0, 0x0}) [ 840.191155][ T3591] device hsr_slave_0 left promiscuous mode [ 840.199803][ T3591] device hsr_slave_1 left promiscuous mode [ 840.210586][ T3591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.218246][ T3591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.230263][ T3591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.238077][ T3591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.248323][ T3591] device bridge_slave_1 left promiscuous mode [ 840.255247][ T3591] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.267692][ T3591] device bridge_slave_0 left promiscuous mode [ 840.274620][ T3591] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.298832][ T3591] device veth1_macvtap left promiscuous mode [ 840.305319][ T3591] device veth0_macvtap left promiscuous mode [ 840.311474][ T3591] device veth1_vlan left promiscuous mode [ 840.317464][ T3591] device veth0_vlan left promiscuous mode [ 840.948353][ T3591] team0 (unregistering): Port device team_slave_1 removed [ 841.009259][ T3591] team0 (unregistering): Port device team_slave_0 removed [ 841.048065][ T3591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.099860][ T3591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.293252][ T3591] bond0 (unregistering): Released all slaves [ 842.810067][ T8963] chnl_net:caif_netlink_parms(): no params data found 16:30:24 executing program 1: openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) unshare(0x40000000) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'filter\x00', 0x0, [0x138, 0x1000000, 0xfe03, 0x7]}, &(0x7f0000000380)=0x54) 16:30:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) 16:30:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 16:30:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) clock_gettime(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000001c0)=0x317f, 0x0, 0x4) clock_gettime(0x0, &(0x7f0000000000)) r3 = socket$unix(0x1, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x12) listen(r4, 0x8) syz_io_uring_setup(0x5531, &(0x7f0000000240)={0x0, 0x4d1c, 0x10, 0x2, 0x1c0}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000002c0)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440), 0x0, 0x0, 0x0, &(0x7f0000000580)={0x0}) clock_nanosleep(0x5, 0x0, &(0x7f00000003c0), &(0x7f0000000400)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000480)={0x0, 'bridge_slave_0\x00', {0x2}, 0x200}) io_setup(0x1ff, &(0x7f0000000640)) r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x7, 0x900) io_uring_enter(r6, 0x14ce, 0x7243, 0x1, &(0x7f0000000380)={[0x9]}, 0x8) 16:30:24 executing program 5: openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 16:30:24 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0xffffffffffffffff, 0x1ef04) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x6, 0x6, 0x1, 0x0, 0x3f, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0xffff, 0x0, 0x0, 0x6, 0x80000000, 0x1}, r1, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x2, 0x20, 0x0, 0x7e, 0x0, 0x9c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x16c31}, r1, 0xc, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16:30:24 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x20, 0x0, 0xff, 0x0, 0x0, 0x5, 0x8100, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1a004, 0xc8f3, 0x3, 0x4, 0x1f, 0x3}, 0xffffffffffffffff, 0x9, r0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r3}, 0xfffffdbc) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x70, 0x2, 0x3, 0x1, 0x81, 0x0, 0x90, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0xffff, 0x7, 0x9, 0x0, 0x80000000, 0xb88}, 0xffffffffffffffff, 0x6, r4, 0x2) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r2) 16:30:24 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)=')&]#\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pipe(&(0x7f0000000000)) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000002c0)='m', 0x1}], 0x1, 0x0) mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) connect$netlink(0xffffffffffffffff, 0x0, 0x0) [ 844.005022][ T8963] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.012826][ T8963] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.023719][ T8963] device bridge_slave_0 entered promiscuous mode 16:30:25 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = fork() process_vm_writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000001200)=[{&(0x7f0000000140)=""/22, 0x16}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) [ 844.163803][ T8963] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.171560][ T8963] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.183421][ T8963] device bridge_slave_1 entered promiscuous mode [ 844.345026][ T3581] Bluetooth: hci6: command 0x0409 tx timeout [ 844.976457][ T8963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.024726][ T8963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.130356][ T8963] team0: Port device team_slave_0 added [ 845.141708][ T8963] team0: Port device team_slave_1 added [ 845.198984][ T8963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.206182][ T8963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.232555][ T8963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.248587][ T8963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.255958][ T8963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.282675][ T8963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.363447][ T8963] device hsr_slave_0 entered promiscuous mode [ 845.372400][ T8963] device hsr_slave_1 entered promiscuous mode [ 845.380717][ T8963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 845.388527][ T8963] Cannot create hsr debugfs directory [ 845.774663][ T8963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.807193][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 845.816326][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 845.833884][ T8963] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.858617][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 845.869344][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 845.879248][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.886676][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.899089][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 845.914847][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 845.925728][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 845.935576][ T3581] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.942953][ T3581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.969430][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 845.992354][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 846.015593][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 846.026783][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 846.038098][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 846.065687][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 846.104507][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 846.119444][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 846.129623][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 846.147773][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 846.195426][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 846.204067][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 846.231729][ T8963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.422326][ T3581] Bluetooth: hci6: command 0x041b tx timeout [ 846.493828][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 846.504306][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 846.555695][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 846.565754][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 846.580501][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 846.590271][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 846.608916][ T8963] device veth0_vlan entered promiscuous mode [ 846.637350][ T8963] device veth1_vlan entered promiscuous mode [ 846.698313][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 846.708439][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 846.718070][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 846.728426][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 846.748854][ T8963] device veth0_macvtap entered promiscuous mode [ 846.765954][ T8963] device veth1_macvtap entered promiscuous mode [ 846.807003][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 846.817699][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.828401][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 846.839038][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.849136][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 846.859714][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.869835][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 846.880473][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.894772][ T8963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 846.903890][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 846.914048][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 846.924288][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 846.934964][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 846.958363][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 846.969204][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.983312][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 846.993985][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.003968][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 847.014882][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.024877][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 847.035666][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.045685][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 847.056304][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.069909][ T8963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.078473][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 847.089285][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 847.869686][ T3591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.877783][ T3591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.898198][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 847.946243][ T3591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.954404][ T3591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.963136][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 848.149871][ T9025] validate_nla: 4 callbacks suppressed [ 848.149931][ T9025] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 848.164520][ T9025] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 848.183553][ T9024] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 16:30:29 executing program 2: clock_adjtime(0x700, &(0x7f0000000040)) 16:30:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) clock_gettime(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000001c0)=0x317f, 0x0, 0x4) clock_gettime(0x0, &(0x7f0000000000)) r3 = socket$unix(0x1, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x12) listen(r4, 0x8) syz_io_uring_setup(0x5531, &(0x7f0000000240)={0x0, 0x4d1c, 0x10, 0x2, 0x1c0}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000002c0)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440), 0x0, 0x0, 0x0, &(0x7f0000000580)={0x0}) clock_nanosleep(0x5, 0x0, &(0x7f00000003c0), &(0x7f0000000400)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000480)={0x0, 'bridge_slave_0\x00', {0x2}, 0x200}) io_setup(0x1ff, &(0x7f0000000640)) r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x7, 0x900) io_uring_enter(r6, 0x14ce, 0x7243, 0x1, &(0x7f0000000380)={[0x9]}, 0x8) 16:30:29 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0xffffffffffffffff, 0x1ef04) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x6, 0x6, 0x1, 0x0, 0x3f, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0xffff, 0x0, 0x0, 0x6, 0x80000000, 0x1}, r1, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x2, 0x20, 0x0, 0x7e, 0x0, 0x9c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x16c31}, r1, 0xc, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16:30:29 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)=')&]#\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pipe(&(0x7f0000000000)) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000002c0)='m', 0x1}], 0x1, 0x0) mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) connect$netlink(0xffffffffffffffff, 0x0, 0x0) 16:30:29 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103fbff"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002bc0)={0x2c, &(0x7f0000002ac0)={0x0, 0x0, 0x4, "99dd24fc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:30:29 executing program 4: set_mempolicy(0x4005, &(0x7f0000000140)=0x800000000004, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 848.471101][ T9035] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 848.555983][ T3581] Bluetooth: hci6: command 0x040f tx timeout [ 848.716171][ T9035] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 848.765402][ T6648] usb 2-1: new high-speed USB device number 11 using dummy_hcd 16:30:30 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) write$capi20(r0, 0x0, 0x0) [ 849.032156][ T6648] usb 2-1: Using ep0 maxpacket: 16 16:30:30 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)=')&]#\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pipe(&(0x7f0000000000)) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000002c0)='m', 0x1}], 0x1, 0x0) mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) connect$netlink(0xffffffffffffffff, 0x0, 0x0) 16:30:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {0x2}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x0) [ 849.162821][ T6648] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 849.176904][ T6648] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 849.186276][ T6648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.288741][ T6648] usb 2-1: config 0 descriptor?? [ 849.323193][ T9033] raw-gadget gadget: fail, usb_ep_enable returned -22 16:30:30 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0xffffffffffffffff, 0x1ef04) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x6, 0x6, 0x1, 0x0, 0x3f, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0xffff, 0x0, 0x0, 0x6, 0x80000000, 0x1}, r1, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x2, 0x20, 0x0, 0x7e, 0x0, 0x9c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x16c31}, r1, 0xc, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 849.369149][ T6648] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 16:30:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) clock_gettime(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000001c0)=0x317f, 0x0, 0x4) clock_gettime(0x0, &(0x7f0000000000)) r3 = socket$unix(0x1, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x12) listen(r4, 0x8) syz_io_uring_setup(0x5531, &(0x7f0000000240)={0x0, 0x4d1c, 0x10, 0x2, 0x1c0}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000002c0)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440), 0x0, 0x0, 0x0, &(0x7f0000000580)={0x0}) clock_nanosleep(0x5, 0x0, &(0x7f00000003c0), &(0x7f0000000400)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000480)={0x0, 'bridge_slave_0\x00', {0x2}, 0x200}) io_setup(0x1ff, &(0x7f0000000640)) r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x7, 0x900) io_uring_enter(r6, 0x14ce, 0x7243, 0x1, &(0x7f0000000380)={[0x9]}, 0x8) [ 849.598990][ T6648] usb 2-1: USB disconnect, device number 11 16:30:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, &(0x7f0000000040)) 16:30:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) shmget$private(0x0, 0x1000, 0x0, &(0x7f000034e000/0x1000)=nil) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002) 16:30:30 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)=')&]#\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pipe(&(0x7f0000000000)) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000002c0)='m', 0x1}], 0x1, 0x0) mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) connect$netlink(0xffffffffffffffff, 0x0, 0x0) [ 850.086153][ T9059] warn_alloc: 1 callbacks suppressed [ 850.086216][ T9059] syz-executor.5: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 850.110238][ T9059] CPU: 1 PID: 9059 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0 [ 850.119171][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 850.129429][ T9059] Call Trace: [ 850.132795][ T9059] [ 850.135812][ T9059] dump_stack_lvl+0x1ff/0x28e [ 850.140689][ T9059] dump_stack+0x25/0x28 [ 850.145009][ T9059] warn_alloc+0x4d9/0x690 [ 850.149553][ T9059] ? kmsan_get_metadata+0x33/0x220 [ 850.154872][ T9059] __vmalloc_node_range+0x1290/0x17b0 [ 850.160516][ T9059] __vmalloc+0xf8/0x110 [ 850.164824][ T9059] ? snd_dma_vmalloc_alloc+0xbc/0xe0 [ 850.170299][ T9059] ? snd_dma_vmalloc_alloc+0xbc/0xe0 [ 850.175786][ T9059] snd_dma_vmalloc_alloc+0xbc/0xe0 [ 850.181085][ T9059] ? snd_dma_iram_mmap+0x220/0x220 [ 850.186381][ T9059] snd_dma_alloc_dir_pages+0x29c/0x4f0 [ 850.192035][ T9059] snd_pcm_lib_malloc_pages+0x7b5/0xe00 [ 850.197787][ T9059] snd_pcm_hw_params+0xfd1/0x2870 [ 850.202939][ T9059] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 850.208940][ T9059] snd_pcm_kernel_ioctl+0x21a/0xfc0 [ 850.214338][ T9059] snd_pcm_oss_change_params_locked+0x4f12/0x74f0 [ 850.220929][ T9059] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 850.227414][ T9059] snd_pcm_oss_sync+0xadf/0x1bd0 [ 850.232567][ T9059] snd_pcm_oss_release+0x219/0x4d0 [ 850.237836][ T9059] ? snd_pcm_oss_open+0x2df0/0x2df0 [ 850.243174][ T9059] __fput+0x7c4/0x10a0 [ 850.247439][ T9059] ____fput+0x37/0x40 [ 850.251566][ T9059] ? fput_many+0x370/0x370 [ 850.256130][ T9059] task_work_run+0x154/0x290 [ 850.260869][ T9059] exit_to_user_mode_loop+0x3f0/0x490 [ 850.266395][ T9059] syscall_exit_to_user_mode+0x7e/0xc0 [ 850.272039][ T9059] __do_fast_syscall_32+0xa5/0xf0 [ 850.277659][ T9059] do_fast_syscall_32+0x34/0x70 [ 850.282667][ T9059] do_SYSENTER_32+0x1b/0x20 [ 850.287324][ T9059] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 850.293815][ T9059] RIP: 0023:0xf6f04549 [ 850.297977][ T9059] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 850.317733][ T9059] RSP: 002b:00000000f58bc5bc EFLAGS: 00000296 ORIG_RAX: 00000000000001b4 [ 850.326298][ T9059] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000ffffffff [ 850.334375][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 850.342443][ T9059] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 850.350510][ T9059] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 850.358587][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 850.366688][ T9059] [ 850.370779][ T9059] Mem-Info: [ 850.374159][ T9059] active_anon:1643 inactive_anon:135573 isolated_anon:0 [ 850.374159][ T9059] active_file:4366 inactive_file:62858 isolated_file:0 [ 850.374159][ T9059] unevictable:768 dirty:31 writeback:0 [ 850.374159][ T9059] slab_reclaimable:8023 slab_unreclaimable:21586 [ 850.374159][ T9059] mapped:27181 shmem:2636 pagetables:1701 bounce:0 [ 850.374159][ T9059] kernel_misc_reclaimable:0 [ 850.374159][ T9059] free:257320 free_pcp:20797 free_cma:0 [ 850.416393][ T9059] Node 0 active_anon:6488kB inactive_anon:540876kB active_file:17228kB inactive_file:251432kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108712kB dirty:52kB writeback:0kB shmem:8912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 331776kB writeback_tmp:0kB kernel_stack:5168kB pagetables:6236kB all_unreclaimable? no [ 850.448308][ T9059] Node 1 active_anon:84kB inactive_anon:1500kB active_file:236kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:4kB writeback:0kB shmem:1632kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:272kB pagetables:568kB all_unreclaimable? no [ 850.452237][ T6648] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 850.478191][ T9059] Node 0 DMA free:4096kB boost:0kB min:156kB low:192kB high:228kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 850.478492][ T9059] lowmem_reserve[]: 0 905 1218 1218 1218 [ 850.478672][ T9059] Node 0 DMA32 free:45504kB boost:0kB min:36008kB low:45008kB high:54008kB reserved_highatomic:0KB active_anon:592kB inactive_anon:478476kB active_file:936kB inactive_file:222360kB unevictable:0kB writepending:80kB present:3129332kB managed:932648kB mlocked:0kB bounce:0kB free_pcp:44088kB local_pcp:21920kB free_cma:0kB [ 850.478980][ T9059] lowmem_reserve[]: 0 0 312 312 312 [ 850.479155][ T9059] Node 0 Normal free:25776kB boost:10240kB min:22688kB low:25800kB high:28912kB reserved_highatomic:0KB active_anon:5896kB inactive_anon:62400kB active_file:16292kB inactive_file:29072kB unevictable:1536kB writepending:40kB present:1048576kB managed:320500kB mlocked:0kB bounce:0kB free_pcp:12388kB local_pcp:5920kB free_cma:0kB [ 850.479459][ T9059] lowmem_reserve[]: 0 0 0 0 0 [ 850.479629][ T9059] Node 1 Normal free:953904kB boost:0kB min:41492kB low:51864kB high:62236kB reserved_highatomic:0KB active_anon:84kB inactive_anon:1500kB active_file:236kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:1067996kB mlocked:0kB bounce:0kB free_pcp:26656kB local_pcp:14316kB free_cma:0kB [ 850.600507][ T3581] Bluetooth: hci6: command 0x0419 tx timeout [ 850.621010][ T9059] lowmem_reserve[]: 0 0 0 0 0 [ 850.621195][ T9059] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 850.621842][ T9059] Node 0 DMA32: 1254*4kB (UME) 373*8kB (ME) 340*16kB (UME) 168*32kB (UME) 91*64kB (ME) 19*128kB (UME) 10*256kB (UME) 5*512kB (UME) 13*1024kB (UME) 0*2048kB 0*4096kB = 45504kB [ 850.662906][ T9059] Node 0 Normal: 776*4kB (UME) 556*8kB (UME) 235*16kB (UME) 94*32kB (UME) 23*64kB (UME) 6*128kB (UME) 2*256kB (UM) 9*512kB (UME) 4*1024kB (UM) 0*2048kB 0*4096kB = 25776kB [ 850.681164][ T9059] Node 1 Normal: 6*4kB (UME) 5*8kB (UE) 7*16kB (ME) 20*32kB (UE) 8*64kB (UME) 2*128kB (U) 2*256kB (UE) 1*512kB (E) 1*1024kB (M) 2*2048kB (UM) 231*4096kB (M) = 953904kB [ 850.699141][ T9059] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 850.708919][ T9059] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 850.718442][ T9059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 850.728228][ T9059] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB 16:30:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x28, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 850.737750][ T9059] 14181 total pagecache pages [ 850.742611][ T9059] 0 pages in swap cache [ 850.746833][ T9059] Swap cache stats: add 0, delete 0, find 0/0 [ 850.753201][ T9059] Free swap = 0kB [ 850.757160][ T9059] Total swap = 0kB [ 850.760941][ T9059] 2097051 pages RAM [ 850.764934][ T9059] 0 pages HighMem/MovableOnly [ 850.769672][ T9059] 1515741 pages reserved [ 850.774091][ T9059] 0 pages cma reserved [ 850.882189][ T6648] usb 2-1: Using ep0 maxpacket: 32 16:30:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0x6c00000000000000, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15) [ 851.013267][ T6648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.024502][ T6648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59387, setting to 1024 [ 851.035961][ T6648] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 851.045210][ T6648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.204057][ T6648] usb 2-1: config 0 descriptor?? [ 851.226259][ T9033] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 851.281473][ T6648] hub 2-1:0.0: USB hub found 16:30:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) clock_gettime(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000001c0)=0x317f, 0x0, 0x4) clock_gettime(0x0, &(0x7f0000000000)) r3 = socket$unix(0x1, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x12) listen(r4, 0x8) syz_io_uring_setup(0x5531, &(0x7f0000000240)={0x0, 0x4d1c, 0x10, 0x2, 0x1c0}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000002c0)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440), 0x0, 0x0, 0x0, &(0x7f0000000580)={0x0}) clock_nanosleep(0x5, 0x0, &(0x7f00000003c0), &(0x7f0000000400)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000480)={0x0, 'bridge_slave_0\x00', {0x2}, 0x200}) io_setup(0x1ff, &(0x7f0000000640)) r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x7, 0x900) io_uring_enter(r6, 0x14ce, 0x7243, 0x1, &(0x7f0000000380)={[0x9]}, 0x8) 16:30:32 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r2, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000100)=""/248, 0xf8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) 16:30:32 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x7, &(0x7f0000000040), 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x130, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "1aab9eb0ba92138c3d495c76b1745891"}]}}}}}}}}, 0x0) perf_event_open(&(0x7f0000000a40)={0x5, 0x70, 0x7f, 0x27, 0x6, 0x5, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0xe18a, 0x7, 0xfff, 0x1, 0xc385, 0x2e9}, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x40100c9) r0 = syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1001000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0xfe}], 0x0, &(0x7f0000000340)=ANY=[]) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 16:30:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f000034e000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(0x0, &(0x7f0000724000/0x4000)=nil, 0x5000) r1 = shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$IPC_RMID(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x4, 0x10000000002) [ 851.452833][ T6648] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 851.467773][ T6648] usbhid 2-1:0.0: can't add hid device: -22 [ 851.474055][ T6648] usbhid: probe of 2-1:0.0 failed with error -22 16:30:32 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0xffffffffffffffff, 0x1ef04) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x6, 0x6, 0x1, 0x0, 0x3f, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0xffff, 0x0, 0x0, 0x6, 0x80000000, 0x1}, r1, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x2, 0x20, 0x0, 0x7e, 0x0, 0x9c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x16c31}, r1, 0xc, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 851.687125][ T6648] usb 2-1: USB disconnect, device number 12 16:30:33 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x128, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x4) [ 852.120478][ T9078] loop4: detected capacity change from 0 to 32776 16:30:33 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f172d96704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a16e9e184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd47d8576a3f7fdd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab554ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bcffc2cc788bee1b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f089537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e067345562942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b400000000cc0000fa47742f6c5b9c4b11262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed97116ee0c1fa9185bc68477b8521cb0c69a2f75409000000000000001d695c0359b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3b854b1c8c768c001496fa99ce5b5040be959096ea948cfa8e7194123e918914a71ad5a8521fb956d05000000719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bf8c2c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e54b7fc96d6a706008ed3e14a0c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000000000000000000000000000005333c6099c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bed1fc105cddd77ab929b837d54aa17fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df3108d5bb2f89049c5f6d63956995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2d0908be79314221a5472f1318a9dfbec5a759579caf47f5e07327df60b718a3793262129b14e99040b5d91398e17df85c25ccae973eecc7d187fd31c863d848d566cc175876410c02889ce1589aa50363510c40243fc0927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000000000000000000000000000fa80459bb5d3c2f325288c2cc2734810e7ef209f233ad097c30ba8c0f8555f8b304a1acff009a7f2ee0d0380a2f2a8795132af094a2751c35f807949973491c5b22ad1e9d89d21d7f30e51f686b176eb732565750250ebcc9a1ba6c909ec9293952e9ac5a81b9627c05dbd5228d6e28f88fda08e68d7318d27b2bc5c29eebca3727b168ce336813c6cf83956f1ddc7851142143f1ab078436f068f8e2819f21c5b3a74605a2d7420a2db49f7afa89f0b2b02b13fea020a6f100edadbf1d3a861174e87122b76f5cb7928bd85a93f5b68f5f76e1a08c19972040011ae3f69c9a5e09a8c2a806749da91d43fbeb6a39b8674aabdf02b16791862e49f78133cf4797a0e9c57abc2cc7b6d090551edaecede0fa95f5663e1cae31ab91ac276e43e646c7e851ede792791fa30266a9db99bf085d02bc1677af127f8c98a69d2981b9565b9e92fc6a94cdbf0adff901bbefc68a885182ee1d6df30f3365bbe5d712e6ac77362740a1799617a19d6d62443032e5f6c83c23292be45a18bcd8491247a7c82f6dbcf25c389b40e7ae274ff3bcf94a0c0627b7c0543a1e4a4b8155c07ee0c2bec840a8d3b7e05b31186d576790a29ca8b4a59bbf82f0854852b6124f7e940975febe546e6d775426165331537483d33057c613411e4dccbb59aae19b74962461ebd724c0000c75c91fceab73b5d5cff436fdffc18f958cb85317e7320109538121dff199063171ba606575351276dc3817d96462894b5aacef6be33960f047bbf557aac838ebd834b8a0d443642eaf749dda2930f40664e971a0e7c9c10712fe9b66291171f66f479612d56c70afba80000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000d00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="98010000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf250200000014000180080003000200000008000300000000002c0001801400020073797a6b616c6c657230000000000000140002007465616d5f736c6176655f30000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="740001801400020076657468315f746f5f62726964676500140002006361696630000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007767310000000000000000000000000008000300020000001400020069703665727370616e3000000000000008000300010000002400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300020000005400018008000100", @ANYRES32=0x0, @ANYBLOB="140002006c6f0000000000000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="a83a817e", @ANYRES32=0x0, @ANYBLOB="080003000300000014000200677265300000000000000000000000002c00018008000300030000000800030007000000080003000300000008000300030000000800030003000000"], 0x198}, 0x1, 0x0, 0x0, 0x8085}, 0x4000084) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCDFWD(r6, 0x40047452, 0x7fffffffefff) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000e00)=0x3, 0x4) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0xf000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 16:30:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f000034e000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(0x0, &(0x7f0000724000/0x4000)=nil, 0x5000) r1 = shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$IPC_RMID(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x4, 0x10000000002) [ 852.693332][ T9086] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 852.695584][ T9085] infiniband syz0: set active [ 852.707598][ T9085] infiniband syz0: added bridge_slave_1 16:30:33 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xf0, 0x0, 0x0, 0xf0, 0x0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 16:30:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_direct_IO_enter\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='@)}^^%\x00') dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) [ 853.055368][ T9085] RDS/IB: syz0: added [ 853.059496][ T9085] smc: adding ib device syz0 with port count 1 [ 853.066652][ T9085] smc: ib device syz0 port 1 has pnetid 16:30:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f000034e000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(0x0, &(0x7f0000724000/0x4000)=nil, 0x5000) r1 = shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$IPC_RMID(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x4, 0x10000000002) 16:30:34 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x9534b7b595f21bcc, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x100006, 0x0, 0x0, {r0}}, 0x20) 16:30:34 executing program 4: r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f00000001c0)='0', 0x1) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="6641db6e0551832d303744e57e897094e70400b1f14712d8ebca47f8b25e7717fd68a8378f362fbf30b8a40a525a7be87baeb12d8e440a49eb252ea2f7fc05d7e532e1a9c5abffff030000000000008bc3b53e32de099dfacfa185d9db0f28c68d7ca23f367c17e5acd738ce9402dd4e9ee9ff9f24c87f26a0eab2127582afac1db1fd4960508c0da3cb7bd821a0c392a71539f7ce60bcee999919c208a34addaf85731e35a5acfec4474eb8debd9e79475759294fd400c82f787dc153bba65c3468e5622d67c40afb76dd2cbba23fbe569884b8cd4c87fc654847119356a56acb7615e0ce233c2075f09e64ef0277", 0xef}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x78) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x4a}, 0x0) exit_group(0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000001540)='cpu&0&&!\t\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-i\xb6,\xc5\xb4\"7\"\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 16:30:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f000034e000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(0x0, &(0x7f0000724000/0x4000)=nil, 0x5000) r1 = shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$IPC_RMID(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x4, 0x10000000002) 16:30:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r3, r4) signalfd(0xffffffffffffffff, 0x0, 0x0) 16:30:35 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "d589e1", 0x8, 0x0, 0x0, @local, @local, {[@hopopts={0x21}]}}}}}, 0x0) [ 854.239444][ T9114] dccp_invalid_packet: pskb_may_pull failed 16:30:35 executing program 4: r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f00000001c0)='0', 0x1) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="6641db6e0551832d303744e57e897094e70400b1f14712d8ebca47f8b25e7717fd68a8378f362fbf30b8a40a525a7be87baeb12d8e440a49eb252ea2f7fc05d7e532e1a9c5abffff030000000000008bc3b53e32de099dfacfa185d9db0f28c68d7ca23f367c17e5acd738ce9402dd4e9ee9ff9f24c87f26a0eab2127582afac1db1fd4960508c0da3cb7bd821a0c392a71539f7ce60bcee999919c208a34addaf85731e35a5acfec4474eb8debd9e79475759294fd400c82f787dc153bba65c3468e5622d67c40afb76dd2cbba23fbe569884b8cd4c87fc654847119356a56acb7615e0ce233c2075f09e64ef0277", 0xef}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x78) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x4a}, 0x0) exit_group(0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000001540)='cpu&0&&!\t\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-i\xb6,\xc5\xb4\"7\"\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 855.049991][ T9113] not chained 3900000 origins [ 855.055092][ T9113] CPU: 0 PID: 9113 Comm: syz-executor.0 Not tainted 5.16.0-rc5-syzkaller #0 [ 855.063811][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 855.073921][ T9113] Call Trace: [ 855.077214][ T9113] [ 855.080159][ T9113] dump_stack_lvl+0x1ff/0x28e [ 855.084895][ T9113] dump_stack+0x25/0x28 [ 855.089093][ T9113] kmsan_internal_chain_origin+0x78/0x110 [ 855.094865][ T9113] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 855.100981][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 855.106137][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 855.111997][ T9113] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 855.117587][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 855.122747][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 855.128609][ T9113] ? should_fail+0x75/0x9c0 [ 855.133157][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 855.138318][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 855.144609][ T9113] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 855.150726][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 855.155884][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 855.161744][ T9113] __msan_chain_origin+0xbf/0x140 [ 855.166818][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 855.171989][ T9113] get_compat_msghdr+0x108/0x2c0 [ 855.177145][ T9113] ? __sys_recvmmsg+0x51c/0x6f0 [ 855.182045][ T9113] do_recvmmsg+0xd77/0x2120 [ 855.186612][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 855.191777][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 855.198071][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 855.203228][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 855.209523][ T9113] ? fput+0x82/0x320 [ 855.213459][ T9113] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 855.220012][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 855.224745][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 855.231126][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 855.236215][ T9113] do_fast_syscall_32+0x34/0x70 [ 855.241111][ T9113] do_SYSENTER_32+0x1b/0x20 [ 855.245656][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 855.252036][ T9113] RIP: 0023:0xf6e95549 [ 855.256124][ T9113] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 855.275809][ T9113] RSP: 002b:00000000f586e5bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 855.284259][ T9113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 855.292261][ T9113] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 855.300537][ T9113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 855.308539][ T9113] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 855.316536][ T9113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 855.324547][ T9113] [ 855.335136][ T9113] Uninit was stored to memory at: [ 855.340240][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 855.346442][ T9113] get_compat_msghdr+0x108/0x2c0 [ 855.351425][ T9113] do_recvmmsg+0xd77/0x2120 [ 855.356063][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 855.360782][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 855.367235][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 855.372397][ T9113] do_fast_syscall_32+0x34/0x70 [ 855.377292][ T9113] do_SYSENTER_32+0x1b/0x20 [ 855.381912][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 855.388300][ T9113] [ 855.390627][ T9113] Uninit was stored to memory at: [ 855.395781][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 855.400923][ T9113] get_compat_msghdr+0x108/0x2c0 [ 855.405985][ T9113] do_recvmmsg+0xd77/0x2120 [ 855.410526][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 855.415323][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 855.421690][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 855.426836][ T9113] do_fast_syscall_32+0x34/0x70 [ 855.431726][ T9113] do_SYSENTER_32+0x1b/0x20 [ 855.436346][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 855.442797][ T9113] [ 855.445122][ T9113] Uninit was stored to memory at: [ 855.450190][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 855.455420][ T9113] get_compat_msghdr+0x108/0x2c0 [ 855.460387][ T9113] do_recvmmsg+0xd77/0x2120 [ 855.465001][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 855.469716][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 855.476173][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 855.481253][ T9113] do_fast_syscall_32+0x34/0x70 [ 855.486220][ T9113] do_SYSENTER_32+0x1b/0x20 [ 855.490769][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 855.497252][ T9113] [ 855.499585][ T9113] Uninit was stored to memory at: [ 855.504748][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 855.509903][ T9113] get_compat_msghdr+0x108/0x2c0 [ 855.514951][ T9113] do_recvmmsg+0xd77/0x2120 [ 855.519491][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 855.524288][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 855.530655][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 855.535807][ T9113] do_fast_syscall_32+0x34/0x70 [ 855.540704][ T9113] do_SYSENTER_32+0x1b/0x20 [ 855.545328][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 855.551701][ T9113] [ 855.554116][ T9113] Uninit was stored to memory at: [ 855.559189][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 855.564414][ T9113] get_compat_msghdr+0x108/0x2c0 [ 855.569379][ T9113] do_recvmmsg+0xd77/0x2120 [ 855.574000][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 855.578718][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 855.585163][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 855.590238][ T9113] do_fast_syscall_32+0x34/0x70 [ 855.595207][ T9113] do_SYSENTER_32+0x1b/0x20 [ 855.599755][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 855.606205][ T9113] [ 855.608536][ T9113] Uninit was stored to memory at: [ 855.613687][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 855.618839][ T9113] get_compat_msghdr+0x108/0x2c0 [ 855.623899][ T9113] do_recvmmsg+0xd77/0x2120 [ 855.628451][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 855.633271][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 855.639652][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 855.644900][ T9113] do_fast_syscall_32+0x34/0x70 [ 855.649797][ T9113] do_SYSENTER_32+0x1b/0x20 [ 855.654436][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 855.660818][ T9113] [ 855.663238][ T9113] Uninit was stored to memory at: [ 855.668315][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 855.673554][ T9113] get_compat_msghdr+0x108/0x2c0 [ 855.678534][ T9113] do_recvmmsg+0xd77/0x2120 [ 855.683166][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 855.687896][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 855.694361][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 855.699438][ T9113] do_fast_syscall_32+0x34/0x70 [ 855.704423][ T9113] do_SYSENTER_32+0x1b/0x20 [ 855.708973][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 855.715523][ T9113] [ 855.717854][ T9113] Local variable msg_sys created at: [ 855.723320][ T9113] do_recvmmsg+0xbb/0x2120 [ 855.727780][ T9113] __sys_recvmmsg+0x51c/0x6f0 16:30:36 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4f, 0x67, 0x9e, 0x8, 0x2201, 0x12c, 0x313d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x8a, 0xe0}}]}}]}}, 0x0) 16:30:36 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x105042, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0xff, 0x3f, 0x0, 0x0, 0x100, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffff81, 0x2, @perf_config_ext={0x5, 0x7}, 0x5012, 0x3, 0x81, 0x3, 0x7fffffff, 0xfffffff8, 0x1, 0x0, 0x31b, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) 16:30:36 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x2, @sliced}) 16:30:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a76322000600"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xfff) r3 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a82c44242e50c9c7a228272a16b90aaccb5ee9"}) 16:30:37 executing program 4: r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f00000001c0)='0', 0x1) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="6641db6e0551832d303744e57e897094e70400b1f14712d8ebca47f8b25e7717fd68a8378f362fbf30b8a40a525a7be87baeb12d8e440a49eb252ea2f7fc05d7e532e1a9c5abffff030000000000008bc3b53e32de099dfacfa185d9db0f28c68d7ca23f367c17e5acd738ce9402dd4e9ee9ff9f24c87f26a0eab2127582afac1db1fd4960508c0da3cb7bd821a0c392a71539f7ce60bcee999919c208a34addaf85731e35a5acfec4474eb8debd9e79475759294fd400c82f787dc153bba65c3468e5622d67c40afb76dd2cbba23fbe569884b8cd4c87fc654847119356a56acb7615e0ce233c2075f09e64ef0277", 0xef}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x78) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x4a}, 0x0) exit_group(0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000001540)='cpu&0&&!\t\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-i\xb6,\xc5\xb4\"7\"\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 16:30:37 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0xcf, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0xffff0001, 0x0, {0x3, @sliced}}) [ 856.762229][ T3581] usb 3-1: new high-speed USB device number 19 using dummy_hcd 16:30:37 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x105042, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0xff, 0x3f, 0x0, 0x0, 0x100, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffff81, 0x2, @perf_config_ext={0x5, 0x7}, 0x5012, 0x3, 0x81, 0x3, 0x7fffffff, 0xfffffff8, 0x1, 0x0, 0x31b, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) 16:30:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a76322000600"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xfff) r3 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a82c44242e50c9c7a228272a16b90aaccb5ee9"}) 16:30:38 executing program 4: r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f00000001c0)='0', 0x1) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="6641db6e0551832d303744e57e897094e70400b1f14712d8ebca47f8b25e7717fd68a8378f362fbf30b8a40a525a7be87baeb12d8e440a49eb252ea2f7fc05d7e532e1a9c5abffff030000000000008bc3b53e32de099dfacfa185d9db0f28c68d7ca23f367c17e5acd738ce9402dd4e9ee9ff9f24c87f26a0eab2127582afac1db1fd4960508c0da3cb7bd821a0c392a71539f7ce60bcee999919c208a34addaf85731e35a5acfec4474eb8debd9e79475759294fd400c82f787dc153bba65c3468e5622d67c40afb76dd2cbba23fbe569884b8cd4c87fc654847119356a56acb7615e0ce233c2075f09e64ef0277", 0xef}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x78) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x4a}, 0x0) exit_group(0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000001540)='cpu&0&&!\t\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-i\xb6,\xc5\xb4\"7\"\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 857.022583][ T3581] usb 3-1: Using ep0 maxpacket: 8 [ 857.142553][ T3581] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=31.3d [ 857.152395][ T3581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.243175][ T3581] usb 3-1: config 0 descriptor?? [ 857.380983][ T3581] usb 3-1: probing VID:PID(2201:012C) [ 857.388976][ T3581] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 857.605900][ T3581] vub300: probe of 3-1:0.0 failed with error -22 [ 857.694740][ T9113] not chained 3910000 origins [ 857.699463][ T9113] CPU: 1 PID: 9113 Comm: syz-executor.0 Not tainted 5.16.0-rc5-syzkaller #0 [ 857.708178][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.718261][ T9113] Call Trace: [ 857.721562][ T9113] [ 857.724516][ T9113] dump_stack_lvl+0x1ff/0x28e [ 857.729256][ T9113] dump_stack+0x25/0x28 [ 857.733659][ T9113] kmsan_internal_chain_origin+0x78/0x110 [ 857.739432][ T9113] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 857.745551][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 857.750713][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 857.756575][ T9113] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 857.762164][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 857.762365][ T3581] usb 3-1: USB disconnect, device number 19 [ 857.767320][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 857.767388][ T9113] ? should_fail+0x75/0x9c0 [ 857.767442][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 857.767500][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 857.767562][ T9113] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 857.801181][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 857.806364][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 857.812219][ T9113] __msan_chain_origin+0xbf/0x140 [ 857.817297][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 857.822465][ T9113] get_compat_msghdr+0x108/0x2c0 [ 857.827446][ T9113] ? __sys_recvmmsg+0x51c/0x6f0 [ 857.832366][ T9113] do_recvmmsg+0xd77/0x2120 [ 857.836931][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 857.842106][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 857.848394][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 857.853549][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 857.859843][ T9113] ? fput+0x82/0x320 [ 857.863788][ T9113] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 857.870344][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 857.875080][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 857.881459][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 857.886534][ T9113] do_fast_syscall_32+0x34/0x70 [ 857.891435][ T9113] do_SYSENTER_32+0x1b/0x20 [ 857.895985][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 857.902362][ T9113] RIP: 0023:0xf6e95549 [ 857.906452][ T9113] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 857.926102][ T9113] RSP: 002b:00000000f586e5bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 857.934554][ T9113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 857.942555][ T9113] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 857.950551][ T9113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 857.958574][ T9113] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 857.966571][ T9113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 857.974582][ T9113] [ 857.979215][ T9113] Uninit was stored to memory at: [ 857.984508][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 857.989659][ T9113] get_compat_msghdr+0x108/0x2c0 [ 857.994745][ T9113] do_recvmmsg+0xd77/0x2120 [ 857.999300][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 858.004150][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 858.010534][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 858.015727][ T9113] do_fast_syscall_32+0x34/0x70 [ 858.020625][ T9113] do_SYSENTER_32+0x1b/0x20 [ 858.025298][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 858.031681][ T9113] [ 858.034138][ T9113] Uninit was stored to memory at: [ 858.039231][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 858.044510][ T9113] get_compat_msghdr+0x108/0x2c0 [ 858.049543][ T9113] do_recvmmsg+0xd77/0x2120 [ 858.054198][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 858.058929][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 858.065426][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 858.070605][ T9113] do_fast_syscall_32+0x34/0x70 [ 858.075722][ T9113] do_SYSENTER_32+0x1b/0x20 [ 858.080275][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 858.086791][ T9113] [ 858.089130][ T9113] Uninit was stored to memory at: [ 858.094352][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 858.099508][ T9113] get_compat_msghdr+0x108/0x2c0 [ 858.104617][ T9113] do_recvmmsg+0xd77/0x2120 [ 858.109181][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 858.114039][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 858.120416][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 858.125620][ T9113] do_fast_syscall_32+0x34/0x70 [ 858.130525][ T9113] do_SYSENTER_32+0x1b/0x20 [ 858.135277][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 858.141670][ T9113] [ 858.144183][ T9113] Uninit was stored to memory at: [ 858.149269][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 858.154602][ T9113] get_compat_msghdr+0x108/0x2c0 [ 858.159585][ T9113] do_recvmmsg+0xd77/0x2120 [ 858.164316][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 858.169059][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 858.175609][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 858.180690][ T9113] do_fast_syscall_32+0x34/0x70 [ 858.185761][ T9113] do_SYSENTER_32+0x1b/0x20 [ 858.190315][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 858.196867][ T9113] [ 858.199203][ T9113] Uninit was stored to memory at: [ 858.204467][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 858.209613][ T9113] get_compat_msghdr+0x108/0x2c0 [ 858.214767][ T9113] do_recvmmsg+0xd77/0x2120 [ 858.219320][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 858.224207][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 858.230592][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 858.235853][ T9113] do_fast_syscall_32+0x34/0x70 [ 858.240760][ T9113] do_SYSENTER_32+0x1b/0x20 [ 858.245489][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 858.251983][ T9113] [ 858.254318][ T9113] Uninit was stored to memory at: [ 858.259418][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 858.264747][ T9113] get_compat_msghdr+0x108/0x2c0 [ 858.269729][ T9113] do_recvmmsg+0xd77/0x2120 [ 858.274500][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 858.279230][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 858.285972][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 858.291051][ T9113] do_fast_syscall_32+0x34/0x70 [ 858.296141][ T9113] do_SYSENTER_32+0x1b/0x20 [ 858.300709][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 858.307304][ T9113] [ 858.309648][ T9113] Uninit was stored to memory at: [ 858.314930][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 858.320084][ T9113] get_compat_msghdr+0x108/0x2c0 [ 858.325299][ T9113] do_recvmmsg+0xd77/0x2120 [ 858.329891][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 858.334836][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 858.341267][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 858.346536][ T9113] do_fast_syscall_32+0x34/0x70 [ 858.351442][ T9113] do_SYSENTER_32+0x1b/0x20 [ 858.356192][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 858.362705][ T9113] [ 858.365047][ T9113] Local variable msg_sys created at: [ 858.370347][ T9113] do_recvmmsg+0xbb/0x2120 [ 858.374930][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 858.964069][ T9113] not chained 3920000 origins [ 858.970451][ T9113] CPU: 0 PID: 9113 Comm: syz-executor.0 Not tainted 5.16.0-rc5-syzkaller #0 [ 858.979186][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.989250][ T9113] Call Trace: [ 858.992533][ T9113] [ 858.995474][ T9113] dump_stack_lvl+0x1ff/0x28e [ 859.000192][ T9113] dump_stack+0x25/0x28 [ 859.004375][ T9113] kmsan_internal_chain_origin+0x78/0x110 [ 859.010167][ T9113] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 859.016268][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 859.021491][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 859.027332][ T9113] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 859.032932][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 859.038087][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 859.043935][ T9113] ? should_fail+0x75/0x9c0 [ 859.048747][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 859.053906][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 859.060177][ T9113] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 859.066358][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 859.071513][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 859.077349][ T9113] __msan_chain_origin+0xbf/0x140 [ 859.082403][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 859.087572][ T9113] get_compat_msghdr+0x108/0x2c0 [ 859.092551][ T9113] ? __sys_recvmmsg+0x51c/0x6f0 [ 859.097449][ T9113] do_recvmmsg+0xd77/0x2120 [ 859.102084][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 859.107252][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 859.113540][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 859.118672][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 859.124941][ T9113] ? fput+0x82/0x320 [ 859.128874][ T9113] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 859.135405][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 859.140119][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 859.146483][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 859.151559][ T9113] do_fast_syscall_32+0x34/0x70 [ 859.156435][ T9113] do_SYSENTER_32+0x1b/0x20 [ 859.160964][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 859.167323][ T9113] RIP: 0023:0xf6e95549 [ 859.171418][ T9113] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 859.191507][ T9113] RSP: 002b:00000000f586e5bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 859.199941][ T9113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 859.207924][ T9113] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 859.215918][ T9113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 859.223895][ T9113] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 859.231890][ T9113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 859.239894][ T9113] [ 859.244838][ T9113] Uninit was stored to memory at: [ 859.249928][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 859.255364][ T9113] get_compat_msghdr+0x108/0x2c0 [ 859.260434][ T9113] do_recvmmsg+0xd77/0x2120 [ 859.265085][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 859.269815][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 859.276285][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 859.281373][ T9113] do_fast_syscall_32+0x34/0x70 [ 859.286428][ T9113] do_SYSENTER_32+0x1b/0x20 [ 859.290982][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 859.297607][ T9113] [ 859.300032][ T9113] Uninit was stored to memory at: [ 859.305261][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 859.310408][ T9113] get_compat_msghdr+0x108/0x2c0 [ 859.315474][ T9113] do_recvmmsg+0xd77/0x2120 [ 859.320028][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 859.324900][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 859.331364][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 859.336524][ T9113] do_fast_syscall_32+0x34/0x70 [ 859.341420][ T9113] do_SYSENTER_32+0x1b/0x20 [ 859.346095][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 859.352564][ T9113] [ 859.354895][ T9113] Uninit was stored to memory at: [ 859.359948][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 859.365221][ T9113] get_compat_msghdr+0x108/0x2c0 [ 859.370195][ T9113] do_recvmmsg+0xd77/0x2120 [ 859.374873][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 859.379595][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 859.386097][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 859.391169][ T9113] do_fast_syscall_32+0x34/0x70 [ 859.396173][ T9113] do_SYSENTER_32+0x1b/0x20 [ 859.400722][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 859.407231][ T9113] [ 859.409563][ T9113] Uninit was stored to memory at: [ 859.414762][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 859.419917][ T9113] get_compat_msghdr+0x108/0x2c0 [ 859.425014][ T9113] do_recvmmsg+0xd77/0x2120 [ 859.429562][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 859.434459][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 859.440832][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 859.446027][ T9113] do_fast_syscall_32+0x34/0x70 [ 859.450922][ T9113] do_SYSENTER_32+0x1b/0x20 [ 859.455615][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 859.462103][ T9113] [ 859.464444][ T9113] Uninit was stored to memory at: [ 859.469582][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 859.474852][ T9113] get_compat_msghdr+0x108/0x2c0 [ 859.479833][ T9113] do_recvmmsg+0xd77/0x2120 [ 859.484517][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 859.489244][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 859.495730][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 859.500811][ T9113] do_fast_syscall_32+0x34/0x70 [ 859.505853][ T9113] do_SYSENTER_32+0x1b/0x20 [ 859.510494][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 859.516965][ T9113] [ 859.519298][ T9113] Uninit was stored to memory at: [ 859.524522][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 859.529666][ T9113] get_compat_msghdr+0x108/0x2c0 [ 859.534774][ T9113] do_recvmmsg+0xd77/0x2120 [ 859.539335][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 859.544209][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 859.550589][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 859.555836][ T9113] do_fast_syscall_32+0x34/0x70 [ 859.560733][ T9113] do_SYSENTER_32+0x1b/0x20 [ 859.565373][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 859.571839][ T9113] [ 859.574168][ T9113] Uninit was stored to memory at: [ 859.579235][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 859.584479][ T9113] get_compat_msghdr+0x108/0x2c0 [ 859.589458][ T9113] do_recvmmsg+0xd77/0x2120 [ 859.594127][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 859.598851][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 859.605340][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 859.610417][ T9113] do_fast_syscall_32+0x34/0x70 [ 859.615441][ T9113] do_SYSENTER_32+0x1b/0x20 [ 859.619987][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 859.626491][ T9113] [ 859.628822][ T9113] Local variable msg_sys created at: [ 859.634332][ T9113] do_recvmmsg+0xbb/0x2120 [ 859.638797][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 859.777074][ T9113] not chained 3930000 origins [ 859.781870][ T9113] CPU: 0 PID: 9113 Comm: syz-executor.0 Not tainted 5.16.0-rc5-syzkaller #0 [ 859.790585][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 859.800741][ T9113] Call Trace: [ 859.804112][ T9113] [ 859.807057][ T9113] dump_stack_lvl+0x1ff/0x28e [ 859.811802][ T9113] dump_stack+0x25/0x28 [ 859.815998][ T9113] kmsan_internal_chain_origin+0x78/0x110 [ 859.821747][ T9113] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 859.827870][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 859.833027][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 859.838863][ T9113] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 859.844435][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 859.849592][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 859.855450][ T9113] ? should_fail+0x75/0x9c0 [ 859.859974][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 859.865107][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 859.871398][ T9113] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 859.877490][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 859.882629][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 859.888538][ T9113] __msan_chain_origin+0xbf/0x140 [ 859.893612][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 859.898759][ T9113] get_compat_msghdr+0x108/0x2c0 [ 859.903724][ T9113] ? __sys_recvmmsg+0x51c/0x6f0 [ 859.908637][ T9113] do_recvmmsg+0xd77/0x2120 [ 859.913198][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 859.918343][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 859.924612][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 859.929771][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 859.936077][ T9113] ? fput+0x82/0x320 [ 859.940018][ T9113] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 859.946558][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 859.951295][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 859.957663][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 859.962727][ T9113] do_fast_syscall_32+0x34/0x70 [ 859.967635][ T9113] do_SYSENTER_32+0x1b/0x20 [ 859.972185][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 859.978629][ T9113] RIP: 0023:0xf6e95549 [ 859.982801][ T9113] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 860.002540][ T9113] RSP: 002b:00000000f586e5bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 860.011003][ T9113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 860.018991][ T9113] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 860.026996][ T9113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 860.034993][ T9113] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 860.042975][ T9113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 860.050984][ T9113] [ 860.057365][ T9113] Uninit was stored to memory at: [ 860.064785][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 860.069952][ T9113] get_compat_msghdr+0x108/0x2c0 [ 860.075023][ T9113] do_recvmmsg+0xd77/0x2120 [ 860.079579][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 860.084458][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 860.090837][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 860.096046][ T9113] do_fast_syscall_32+0x34/0x70 [ 860.100947][ T9113] do_SYSENTER_32+0x1b/0x20 [ 860.105584][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 860.112059][ T9113] [ 860.114401][ T9113] Uninit was stored to memory at: [ 860.119468][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 860.124705][ T9113] get_compat_msghdr+0x108/0x2c0 [ 860.129682][ T9113] do_recvmmsg+0xd77/0x2120 [ 860.134362][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 860.139087][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 860.145648][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 860.150724][ T9113] do_fast_syscall_32+0x34/0x70 [ 860.155756][ T9113] do_SYSENTER_32+0x1b/0x20 [ 860.160311][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 860.166782][ T9113] [ 860.169122][ T9113] Uninit was stored to memory at: [ 860.174331][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 860.179484][ T9113] get_compat_msghdr+0x108/0x2c0 [ 860.184574][ T9113] do_recvmmsg+0xd77/0x2120 [ 860.189125][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 860.193977][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 860.200353][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 860.205520][ T9113] do_fast_syscall_32+0x34/0x70 [ 860.210422][ T9113] do_SYSENTER_32+0x1b/0x20 [ 860.215108][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 860.221490][ T9113] [ 860.223923][ T9113] Uninit was stored to memory at: [ 860.228997][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 860.234277][ T9113] get_compat_msghdr+0x108/0x2c0 [ 860.239253][ T9113] do_recvmmsg+0xd77/0x2120 [ 860.243895][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 860.248622][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 860.255136][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 860.260211][ T9113] do_fast_syscall_32+0x34/0x70 [ 860.265224][ T9113] do_SYSENTER_32+0x1b/0x20 [ 860.269778][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 860.276312][ T9113] [ 860.278645][ T9113] Uninit was stored to memory at: [ 860.283866][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 860.289016][ T9113] get_compat_msghdr+0x108/0x2c0 [ 860.294140][ T9113] do_recvmmsg+0xd77/0x2120 [ 860.298704][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 860.303550][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 860.309929][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 860.315138][ T9113] do_fast_syscall_32+0x34/0x70 [ 860.320299][ T9113] do_SYSENTER_32+0x1b/0x20 [ 860.324943][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 860.331410][ T9113] [ 860.333888][ T9113] Uninit was stored to memory at: [ 860.338966][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 860.344207][ T9113] get_compat_msghdr+0x108/0x2c0 [ 860.349189][ T9113] do_recvmmsg+0xd77/0x2120 [ 860.353868][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 860.358595][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 860.365115][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 860.370188][ T9113] do_fast_syscall_32+0x34/0x70 [ 860.375224][ T9113] do_SYSENTER_32+0x1b/0x20 [ 860.379773][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 860.386243][ T9113] [ 860.388575][ T9113] Uninit was stored to memory at: [ 860.393787][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 860.398935][ T9113] get_compat_msghdr+0x108/0x2c0 [ 860.404020][ T9113] do_recvmmsg+0xd77/0x2120 [ 860.408573][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 860.413428][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 860.419802][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 860.424968][ T9113] do_fast_syscall_32+0x34/0x70 [ 860.429866][ T9113] do_SYSENTER_32+0x1b/0x20 [ 860.434549][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 860.440928][ T9113] [ 860.443392][ T9113] Local variable msg_sys created at: [ 860.448861][ T9113] do_recvmmsg+0xbb/0x2120 [ 860.453452][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 860.599438][ T9113] not chained 3940000 origins [ 860.604458][ T9113] CPU: 0 PID: 9113 Comm: syz-executor.0 Not tainted 5.16.0-rc5-syzkaller #0 [ 860.613160][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 860.623247][ T9113] Call Trace: [ 860.626529][ T9113] [ 860.629458][ T9113] dump_stack_lvl+0x1ff/0x28e [ 860.634173][ T9113] dump_stack+0x25/0x28 [ 860.638373][ T9113] kmsan_internal_chain_origin+0x78/0x110 [ 860.644118][ T9113] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 860.650212][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 860.655359][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 860.661219][ T9113] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 860.666790][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 860.671929][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 860.677787][ T9113] ? should_fail+0x75/0x9c0 [ 860.682319][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 860.687472][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 860.693752][ T9113] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 860.699967][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 860.705123][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 860.710960][ T9113] __msan_chain_origin+0xbf/0x140 [ 860.716014][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 860.721177][ T9113] get_compat_msghdr+0x108/0x2c0 [ 860.726137][ T9113] ? __sys_recvmmsg+0x51c/0x6f0 [ 860.731017][ T9113] do_recvmmsg+0xd77/0x2120 [ 860.735569][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 860.740731][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 860.746999][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 860.752140][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 860.758439][ T9113] ? fput+0x82/0x320 [ 860.762367][ T9113] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 860.768918][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 860.773636][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 860.780016][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 860.785068][ T9113] do_fast_syscall_32+0x34/0x70 [ 860.789945][ T9113] do_SYSENTER_32+0x1b/0x20 [ 860.794473][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 860.801033][ T9113] RIP: 0023:0xf6e95549 [ 860.805107][ T9113] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 860.824755][ T9113] RSP: 002b:00000000f586e5bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 860.833192][ T9113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 860.841194][ T9113] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 860.849177][ T9113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 860.857315][ T9113] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 860.865319][ T9113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 860.873322][ T9113] [ 860.878106][ T9113] Uninit was stored to memory at: [ 860.883543][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 860.888697][ T9113] get_compat_msghdr+0x108/0x2c0 [ 860.893776][ T9113] do_recvmmsg+0xd77/0x2120 [ 860.898330][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 860.903148][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 860.909527][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 860.914727][ T9113] do_fast_syscall_32+0x34/0x70 [ 860.919633][ T9113] do_SYSENTER_32+0x1b/0x20 [ 860.924334][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 860.930719][ T9113] [ 860.933188][ T9113] Uninit was stored to memory at: [ 860.938267][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 860.943538][ T9113] get_compat_msghdr+0x108/0x2c0 [ 860.948514][ T9113] do_recvmmsg+0xd77/0x2120 [ 860.953211][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 860.957939][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 860.964449][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 860.969520][ T9113] do_fast_syscall_32+0x34/0x70 [ 860.974547][ T9113] do_SYSENTER_32+0x1b/0x20 [ 860.979096][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 860.985592][ T9113] [ 860.987925][ T9113] Uninit was stored to memory at: [ 860.993137][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 860.998286][ T9113] get_compat_msghdr+0x108/0x2c0 [ 861.003389][ T9113] do_recvmmsg+0xd77/0x2120 [ 861.007940][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 861.012787][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 861.019160][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 861.024364][ T9113] do_fast_syscall_32+0x34/0x70 [ 861.029261][ T9113] do_SYSENTER_32+0x1b/0x20 [ 861.033937][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.040316][ T9113] [ 861.042776][ T9113] Uninit was stored to memory at: [ 861.047849][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 861.053122][ T9113] get_compat_msghdr+0x108/0x2c0 [ 861.058097][ T9113] do_recvmmsg+0xd77/0x2120 [ 861.062785][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 861.067508][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 861.074012][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 861.079084][ T9113] do_fast_syscall_32+0x34/0x70 [ 861.084104][ T9113] do_SYSENTER_32+0x1b/0x20 [ 861.088651][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.095155][ T9113] [ 861.097515][ T9113] Uninit was stored to memory at: [ 861.102720][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 861.107872][ T9113] get_compat_msghdr+0x108/0x2c0 [ 861.112989][ T9113] do_recvmmsg+0xd77/0x2120 [ 861.117542][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 861.122398][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 861.128770][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 861.133968][ T9113] do_fast_syscall_32+0x34/0x70 [ 861.138863][ T9113] do_SYSENTER_32+0x1b/0x20 [ 861.143729][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.150109][ T9113] [ 861.152563][ T9113] Uninit was stored to memory at: [ 861.157633][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 861.162890][ T9113] get_compat_msghdr+0x108/0x2c0 [ 861.167873][ T9113] do_recvmmsg+0xd77/0x2120 [ 861.172558][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 861.177283][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 861.183781][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 861.188853][ T9113] do_fast_syscall_32+0x34/0x70 [ 861.193876][ T9113] do_SYSENTER_32+0x1b/0x20 [ 861.198428][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.204926][ T9113] [ 861.207256][ T9113] Uninit was stored to memory at: [ 861.212442][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 861.217595][ T9113] get_compat_msghdr+0x108/0x2c0 [ 861.222718][ T9113] do_recvmmsg+0xd77/0x2120 [ 861.227271][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 861.232103][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 861.238477][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 861.243663][ T9113] do_fast_syscall_32+0x34/0x70 [ 861.248570][ T9113] do_SYSENTER_32+0x1b/0x20 [ 861.253286][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.260279][ T9113] [ 861.262746][ T9113] Local variable msg_sys created at: [ 861.268033][ T9113] do_recvmmsg+0xbb/0x2120 [ 861.272608][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 861.408467][ T9113] not chained 3950000 origins [ 861.413436][ T9113] CPU: 1 PID: 9113 Comm: syz-executor.0 Not tainted 5.16.0-rc5-syzkaller #0 [ 861.422239][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.432304][ T9113] Call Trace: [ 861.435583][ T9113] [ 861.438522][ T9113] dump_stack_lvl+0x1ff/0x28e [ 861.443234][ T9113] dump_stack+0x25/0x28 [ 861.447408][ T9113] kmsan_internal_chain_origin+0x78/0x110 [ 861.453154][ T9113] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 861.459246][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 861.464375][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 861.470251][ T9113] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 861.475818][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 861.480961][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 861.486794][ T9113] ? should_fail+0x75/0x9c0 [ 861.491321][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 861.496466][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 861.502841][ T9113] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 861.508958][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 861.514119][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 861.519949][ T9113] __msan_chain_origin+0xbf/0x140 [ 861.525084][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 861.530232][ T9113] get_compat_msghdr+0x108/0x2c0 [ 861.535200][ T9113] ? __sys_recvmmsg+0x51c/0x6f0 [ 861.540077][ T9113] do_recvmmsg+0xd77/0x2120 [ 861.544614][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 861.549757][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 861.556020][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 861.561151][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 861.567417][ T9113] ? fput+0x82/0x320 [ 861.571334][ T9113] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 861.577860][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 861.582572][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 861.588929][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 861.593979][ T9113] do_fast_syscall_32+0x34/0x70 [ 861.598849][ T9113] do_SYSENTER_32+0x1b/0x20 [ 861.603372][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.609725][ T9113] RIP: 0023:0xf6e95549 [ 861.613802][ T9113] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 861.633428][ T9113] RSP: 002b:00000000f586e5bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 861.641857][ T9113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 861.649835][ T9113] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 861.657811][ T9113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 861.665787][ T9113] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 861.673759][ T9113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 861.681744][ T9113] [ 861.686105][ T9113] Uninit was stored to memory at: [ 861.691198][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 861.696638][ T9113] get_compat_msghdr+0x108/0x2c0 [ 861.701616][ T9113] do_recvmmsg+0xd77/0x2120 [ 861.706284][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 861.711015][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 861.717509][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 861.722691][ T9113] do_fast_syscall_32+0x34/0x70 [ 861.727586][ T9113] do_SYSENTER_32+0x1b/0x20 [ 861.732242][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.738625][ T9113] [ 861.740954][ T9113] Uninit was stored to memory at: [ 861.746157][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 861.751305][ T9113] get_compat_msghdr+0x108/0x2c0 [ 861.756498][ T9113] do_recvmmsg+0xd77/0x2120 [ 861.761134][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 861.765966][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 861.772456][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 861.777528][ T9113] do_fast_syscall_32+0x34/0x70 [ 861.782563][ T9113] do_SYSENTER_32+0x1b/0x20 [ 861.787107][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.793587][ T9113] [ 861.795914][ T9113] Uninit was stored to memory at: [ 861.800981][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 861.806273][ T9113] get_compat_msghdr+0x108/0x2c0 [ 861.811256][ T9113] do_recvmmsg+0xd77/0x2120 [ 861.815956][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 861.820684][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 861.827163][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 861.832351][ T9113] do_fast_syscall_32+0x34/0x70 [ 861.837252][ T9113] do_SYSENTER_32+0x1b/0x20 [ 861.841962][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.848345][ T9113] [ 861.850662][ T9113] Uninit was stored to memory at: [ 861.855850][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 861.860994][ T9113] get_compat_msghdr+0x108/0x2c0 [ 861.866115][ T9113] do_recvmmsg+0xd77/0x2120 [ 861.870666][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 861.875531][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 861.882009][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 861.887083][ T9113] do_fast_syscall_32+0x34/0x70 [ 861.892133][ T9113] do_SYSENTER_32+0x1b/0x20 [ 861.896679][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.903226][ T9113] [ 861.905553][ T9113] Uninit was stored to memory at: [ 861.910606][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 861.915898][ T9113] get_compat_msghdr+0x108/0x2c0 [ 861.921017][ T9113] do_recvmmsg+0xd77/0x2120 [ 861.925736][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 861.930462][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 861.936939][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 861.942116][ T9113] do_fast_syscall_32+0x34/0x70 [ 861.947013][ T9113] do_SYSENTER_32+0x1b/0x20 [ 861.951559][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.958135][ T9113] [ 861.960464][ T9113] Uninit was stored to memory at: [ 861.965655][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 861.970801][ T9113] get_compat_msghdr+0x108/0x2c0 [ 861.975884][ T9113] do_recvmmsg+0xd77/0x2120 [ 861.980433][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 861.985268][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 861.991645][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 861.996823][ T9113] do_fast_syscall_32+0x34/0x70 [ 862.001718][ T9113] do_SYSENTER_32+0x1b/0x20 [ 862.006365][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 862.012849][ T9113] [ 862.015180][ T9113] Uninit was stored to memory at: [ 862.020253][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 862.025661][ T9113] get_compat_msghdr+0x108/0x2c0 [ 862.030642][ T9113] do_recvmmsg+0xd77/0x2120 [ 862.035368][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 862.040093][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 862.046640][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 862.051715][ T9113] do_fast_syscall_32+0x34/0x70 [ 862.056767][ T9113] do_SYSENTER_32+0x1b/0x20 [ 862.061315][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 862.067876][ T9113] [ 862.070212][ T9113] Local variable msg_sys created at: [ 862.075623][ T9113] do_recvmmsg+0xbb/0x2120 [ 862.080082][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 862.212578][ T9113] not chained 3960000 origins [ 862.217300][ T9113] CPU: 0 PID: 9113 Comm: syz-executor.0 Not tainted 5.16.0-rc5-syzkaller #0 [ 862.226009][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.236072][ T9113] Call Trace: [ 862.239356][ T9113] [ 862.242283][ T9113] dump_stack_lvl+0x1ff/0x28e [ 862.246996][ T9113] dump_stack+0x25/0x28 [ 862.251173][ T9113] kmsan_internal_chain_origin+0x78/0x110 [ 862.256936][ T9113] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 862.263051][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 862.268184][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 862.274027][ T9113] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 862.279760][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 862.284907][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 862.290746][ T9113] ? should_fail+0x75/0x9c0 [ 862.295272][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 862.300427][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 862.306815][ T9113] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 862.312935][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 862.318095][ T9113] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 862.323949][ T9113] __msan_chain_origin+0xbf/0x140 [ 862.328999][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 862.334154][ T9113] get_compat_msghdr+0x108/0x2c0 [ 862.339140][ T9113] ? __sys_recvmmsg+0x51c/0x6f0 [ 862.344023][ T9113] do_recvmmsg+0xd77/0x2120 [ 862.348568][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 862.353718][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 862.360015][ T9113] ? kmsan_get_metadata+0x33/0x220 [ 862.365157][ T9113] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 862.371465][ T9113] ? fput+0x82/0x320 [ 862.375389][ T9113] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 862.381948][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 862.386683][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 862.393045][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 862.398123][ T9113] do_fast_syscall_32+0x34/0x70 [ 862.403026][ T9113] do_SYSENTER_32+0x1b/0x20 [ 862.407554][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 862.413915][ T9113] RIP: 0023:0xf6e95549 [ 862.418004][ T9113] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 862.437649][ T9113] RSP: 002b:00000000f586e5bc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 862.446080][ T9113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 862.454067][ T9113] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 862.462068][ T9113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 862.470065][ T9113] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 862.478050][ T9113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 862.486046][ T9113] [ 862.490783][ T9113] Uninit was stored to memory at: [ 862.496281][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 862.501435][ T9113] get_compat_msghdr+0x108/0x2c0 [ 862.506502][ T9113] do_recvmmsg+0xd77/0x2120 [ 862.511050][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 862.515862][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 862.522438][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 862.527513][ T9113] do_fast_syscall_32+0x34/0x70 [ 862.532494][ T9113] do_SYSENTER_32+0x1b/0x20 [ 862.537037][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 862.543532][ T9113] [ 862.545861][ T9113] Uninit was stored to memory at: [ 862.550950][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 862.556247][ T9113] get_compat_msghdr+0x108/0x2c0 [ 862.561223][ T9113] do_recvmmsg+0xd77/0x2120 [ 862.565863][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 862.570580][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 862.577157][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 862.582325][ T9113] do_fast_syscall_32+0x34/0x70 [ 862.587282][ T9113] do_SYSENTER_32+0x1b/0x20 [ 862.592027][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 862.598406][ T9113] [ 862.600723][ T9113] Uninit was stored to memory at: [ 862.605904][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 862.611045][ T9113] get_compat_msghdr+0x108/0x2c0 [ 862.616151][ T9113] do_recvmmsg+0xd77/0x2120 [ 862.620704][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 862.625511][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 862.631962][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 862.637038][ T9113] do_fast_syscall_32+0x34/0x70 [ 862.642048][ T9113] do_SYSENTER_32+0x1b/0x20 [ 862.646689][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 862.653194][ T9113] [ 862.655529][ T9113] Uninit was stored to memory at: [ 862.660681][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 862.665910][ T9113] get_compat_msghdr+0x108/0x2c0 [ 862.670882][ T9113] do_recvmmsg+0xd77/0x2120 [ 862.675551][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 862.680447][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 862.686904][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 862.692240][ T9113] do_fast_syscall_32+0x34/0x70 [ 862.697135][ T9113] do_SYSENTER_32+0x1b/0x20 [ 862.701654][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 862.708112][ T9113] [ 862.710444][ T9113] Uninit was stored to memory at: [ 862.715657][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 862.720803][ T9113] get_compat_msghdr+0x108/0x2c0 [ 862.725864][ T9113] do_recvmmsg+0xd77/0x2120 [ 862.730411][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 862.735270][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 862.741640][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 862.746837][ T9113] do_fast_syscall_32+0x34/0x70 [ 862.752033][ T9113] do_SYSENTER_32+0x1b/0x20 [ 862.756590][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 862.763130][ T9113] [ 862.765464][ T9113] Uninit was stored to memory at: [ 862.770533][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 862.775812][ T9113] get_compat_msghdr+0x108/0x2c0 [ 862.780786][ T9113] do_recvmmsg+0xd77/0x2120 [ 862.785427][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 862.790149][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 862.796618][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 862.801691][ T9113] do_fast_syscall_32+0x34/0x70 [ 862.806697][ T9113] do_SYSENTER_32+0x1b/0x20 [ 862.811226][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 862.817694][ T9113] [ 862.820023][ T9113] Uninit was stored to memory at: [ 862.825198][ T9113] __get_compat_msghdr+0x6e1/0x9d0 [ 862.830343][ T9113] get_compat_msghdr+0x108/0x2c0 [ 862.835446][ T9113] do_recvmmsg+0xd77/0x2120 [ 862.839991][ T9113] __sys_recvmmsg+0x51c/0x6f0 [ 862.844798][ T9113] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 862.851170][ T9113] __do_fast_syscall_32+0x96/0xf0 [ 862.856404][ T9113] do_fast_syscall_32+0x34/0x70 [ 862.861302][ T9113] do_SYSENTER_32+0x1b/0x20 [ 862.865997][ T9113] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 862.872464][ T9113] [ 862.874807][ T9113] Local variable msg_sys created at: [ 862.880080][ T9113] do_recvmmsg+0xbb/0x2120 [ 862.884667][ T9113] __sys_recvmmsg+0x51c/0x6f0 16:30:44 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000070bf7d5a1c2f36e2186f7450fe16de30c7fb58493f52365607e2db66a8027e91d6ad9f12f0e9c1040082a6cec098bc8f79a9663d718210b57b0cad2ad4748f3b65131dbdcc7781c58e16865e0b9a55b3854f7c37ace2eea33de62b7c20a2b351fced1d73112de8aa53ca082e1a947c21bf2c5c7d58b08a43dcbd9c01fee3aaf3196b2e41b38789f241eb4b63f73cba97437d75ff87c3e0ddb5c626087f8490a479cd0b6503bf71cad182f49e4271f2c0eccf2fb69c631f100ef655adcf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0xc0189436, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) r3 = bpf$ITER_CREATE(0x22, &(0x7f00000003c0)={r2}, 0x8) ioctl$TUNSETSTEERINGEBPF(r3, 0x5451, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x1, &(0x7f0000000cc0)=ANY=[@ANYRESOCT], 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4}, 0x8, 0x10, &(0x7f0000000640)={0x3}, 0x10}, 0x78) 16:30:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a76322000600"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xfff) r3 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a82c44242e50c9c7a228272a16b90aaccb5ee9"}) 16:30:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a76322000600"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xfff) r3 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a82c44242e50c9c7a228272a16b90aaccb5ee9"}) 16:30:44 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x105042, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0xff, 0x3f, 0x0, 0x0, 0x100, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffff81, 0x2, @perf_config_ext={0x5, 0x7}, 0x5012, 0x3, 0x81, 0x3, 0x7fffffff, 0xfffffff8, 0x1, 0x0, 0x31b, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) 16:30:44 executing program 4: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x8000000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) setreuid(0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000010c0)='./file0\x00', 0x0, 0x4, &(0x7f0000001640)=[{0x0, 0x0, 0x2}, {0x0}, {&(0x7f0000001380), 0x0, 0x9}, {0x0}], 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="2c7363625f747970673dfbffffff0900000000000000e52c217916a594a6250408cf17adac9100", @ANYRESDEC]) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) 16:30:44 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x32}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 863.335198][ T9155] tmpfs: Unknown parameter '00000000000000000000' 16:30:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)={0x20, r2, 0xd1ddb52b447f67a9, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 16:30:44 executing program 4: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x60082, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x60082, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30}, 0x30) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3, 0x1, 0x20, 0x1, 0x0, 0x0, 0x5020c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd70}, 0x160a, 0x4, 0xfffffffe, 0x2, 0x0, 0x8, 0x8e27, 0x0, 0xd31, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x2) 16:30:44 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044d80)={0xfff, [], 0x0, "bf5d37cc160e95"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000046d80)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000046d80)) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000140)={r4, 0x6}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/14, 0xe}], 0x1) 16:30:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a76322000600"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xfff) r3 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a82c44242e50c9c7a228272a16b90aaccb5ee9"}) 16:30:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a76322000600"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xfff) r3 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a82c44242e50c9c7a228272a16b90aaccb5ee9"}) 16:30:45 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x105042, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0xff, 0x3f, 0x0, 0x0, 0x100, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffff81, 0x2, @perf_config_ext={0x5, 0x7}, 0x5012, 0x3, 0x81, 0x3, 0x7fffffff, 0xfffffff8, 0x1, 0x0, 0x31b, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) 16:30:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3081, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="8f", 0x1}, 0x0) io_uring_enter(r0, 0x2b27, 0xe4a0, 0x3, &(0x7f0000000180)={[0x7d19]}, 0x8) 16:30:45 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207e40802"], 0x10}}, 0x0) creat(&(0x7f0000002980)='./file0\x00', 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x9fe50100}]) 16:30:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3081, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="8f", 0x1}, 0x0) io_uring_enter(r0, 0x2b27, 0xe4a0, 0x3, &(0x7f0000000180)={[0x7d19]}, 0x8) [ 865.315871][ T9177] syz-executor.4 (9177): drop_caches: 2 16:30:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0}}, 0x5) 16:30:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a76322000600"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xfff) r3 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a82c44242e50c9c7a228272a16b90aaccb5ee9"}) 16:30:46 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0x80044323, &(0x7f0000000200)) 16:30:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x0) 16:30:47 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 16:30:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3081, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="8f", 0x1}, 0x0) io_uring_enter(r0, 0x2b27, 0xe4a0, 0x3, &(0x7f0000000180)={[0x7d19]}, 0x8) 16:30:47 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5000074, &(0x7f0000000080)={&(0x7f0000000240)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x100000000000000}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0) 16:30:47 executing program 4: syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000088c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x391}, 0x14}}, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000220000012cbd7000fddbdf250073f300008fcefa7a7dae13f074fbdaec476ce7780cad2b45cea65b2d576a99678e6d14bc2abbfa1d8561611ca8093504ecc373e3e3d4f2d30c597d274076e4de4722fc75302a0e54c659c80d7fc8f61767d05bdae319d030c71184b9087d4b12f2"], 0x14}}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 866.682831][ T9291] ===================================================== [ 866.689884][ T9291] BUG: KMSAN: kernel-infoleak in _copy_to_user+0x1c9/0x270 [ 866.697128][ T9291] _copy_to_user+0x1c9/0x270 [ 866.701762][ T9291] bpf_prog_test_run_raw_tp+0xb01/0xbb0 [ 866.707428][ T9291] bpf_prog_test_run+0x784/0x820 [ 866.712468][ T9291] __sys_bpf+0xada/0x1230 [ 866.716840][ T9291] __ia32_sys_bpf+0xe1/0x130 [ 866.721470][ T9291] __do_fast_syscall_32+0x96/0xf0 [ 866.726548][ T9291] do_fast_syscall_32+0x34/0x70 [ 866.731451][ T9291] do_SYSENTER_32+0x1b/0x20 [ 866.736003][ T9291] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.742393][ T9291] [ 866.744723][ T9291] Local variable info created at: [ 866.749752][ T9291] bpf_prog_test_run_raw_tp+0xf0/0xbb0 [ 866.755260][ T9291] bpf_prog_test_run+0x784/0x820 [ 866.760240][ T9291] [ 866.762569][ T9291] Bytes 0-3 of 4 are uninitialized [ 866.767689][ T9291] Memory access of size 4 starts at ffff8881531a3c80 [ 866.774386][ T9291] Data copied to user address 0000000020000644 [ 866.780553][ T9291] [ 866.782886][ T9291] CPU: 1 PID: 9291 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 866.791598][ T9291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 866.801678][ T9291] ===================================================== [ 866.808618][ T9291] Disabling lock debugging due to kernel taint [ 866.816688][ T9291] Kernel panic - not syncing: kmsan.panic set ... [ 866.823136][ T9291] CPU: 1 PID: 9291 Comm: syz-executor.3 Tainted: G B 5.16.0-rc5-syzkaller #0 [ 866.833239][ T9291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 866.843323][ T9291] Call Trace: [ 866.846623][ T9291] [ 866.849571][ T9291] dump_stack_lvl+0x1ff/0x28e [ 866.854306][ T9291] dump_stack+0x25/0x28 [ 866.858511][ T9291] panic+0x487/0xe1f [ 866.862457][ T9291] ? add_taint+0x181/0x210 [ 866.866903][ T9291] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 866.872748][ T9291] kmsan_report+0x2e6/0x2f0 [ 866.877310][ T9291] ? kmsan_get_metadata+0x33/0x220 [ 866.882469][ T9291] ? kmsan_internal_check_memory+0x479/0x540 [ 866.888488][ T9291] ? kmsan_copy_to_user+0xe1/0xf0 [ 866.893551][ T9291] ? _copy_to_user+0x1c9/0x270 [ 866.898344][ T9291] ? bpf_prog_test_run_raw_tp+0xb01/0xbb0 [ 866.904101][ T9291] ? bpf_prog_test_run+0x784/0x820 [ 866.909243][ T9291] ? __sys_bpf+0xada/0x1230 [ 866.913783][ T9291] ? __ia32_sys_bpf+0xe1/0x130 [ 866.918576][ T9291] ? __do_fast_syscall_32+0x96/0xf0 [ 866.923818][ T9291] ? do_fast_syscall_32+0x34/0x70 [ 866.928891][ T9291] ? do_SYSENTER_32+0x1b/0x20 [ 866.933605][ T9291] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.940150][ T9291] ? __default_send_IPI_dest_field+0x100/0x1e0 [ 866.946361][ T9291] ? flat_send_IPI_mask+0xc8/0x130 [ 866.951508][ T9291] ? default_send_IPI_single+0xcd/0xf0 [ 866.957010][ T9291] ? native_apic_mem_read+0x60/0x60 [ 866.962243][ T9291] ? default_send_IPI_mask_allbutself_phys+0x4a0/0x4a0 [ 866.969145][ T9291] ? native_send_call_func_single_ipi+0x67/0x80 [ 866.975436][ T9291] ? native_smp_send_reschedule+0x100/0x100 [ 866.981377][ T9291] ? send_call_function_single_ipi+0x2e9/0x340 [ 866.987567][ T9291] ? kmsan_get_metadata+0x33/0x220 [ 866.992716][ T9291] ? kmsan_get_metadata+0x33/0x220 [ 866.997869][ T9291] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 867.003725][ T9291] kmsan_internal_check_memory+0x479/0x540 [ 867.009592][ T9291] kmsan_copy_to_user+0xe1/0xf0 [ 867.014478][ T9291] ? should_fail_usercopy+0x39/0x40 [ 867.019716][ T9291] _copy_to_user+0x1c9/0x270 [ 867.024346][ T9291] bpf_prog_test_run_raw_tp+0xb01/0xbb0 [ 867.029949][ T9291] ? bpf_prog_test_run_tracing+0xb50/0xb50 [ 867.035792][ T9291] bpf_prog_test_run+0x784/0x820 [ 867.040777][ T9291] __sys_bpf+0xada/0x1230 [ 867.045146][ T9291] ? kmsan_get_metadata+0x33/0x220 [ 867.050309][ T9291] __ia32_sys_bpf+0xe1/0x130 [ 867.054937][ T9291] __do_fast_syscall_32+0x96/0xf0 [ 867.060007][ T9291] do_fast_syscall_32+0x34/0x70 [ 867.064900][ T9291] do_SYSENTER_32+0x1b/0x20 [ 867.069440][ T9291] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 867.075812][ T9291] RIP: 0023:0xf6eaf549 [ 867.079893][ T9291] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 867.099538][ T9291] RSP: 002b:00000000f58a95bc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 867.107977][ T9291] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000640 [ 867.115973][ T9291] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 867.123964][ T9291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 867.131952][ T9291] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 867.139938][ T9291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 867.147938][ T9291] [ 867.151228][ T9291] Kernel Offset: disabled [ 867.155555][ T9291] Rebooting in 86400 seconds..